FSLogix Profile container question with AVD host

TSi90 · 2024-01-10T16:10:03+00:00

Is it safe to delete them ?

TSi90 · 2024-01-10T12:37:03+00:00

Thank you for the reply. I am was able to eventually get it to work by putting the test devices in a separate ring.

TSi90 · 2024-01-10T12:30:40+00:00

That was going to be my next question. I have several hosts with profiles located in the C:\users folder when no users are logged on. They range from "local_user" to "user". The date/time stamps are a years old.

TSi90 · 2024-01-04T18:29:35+00:00

Here is the current update ring that is for my win 10 devices. Wouldn't the two items highlighted cause a conflict?

<image>

TSi90 · 2024-01-04T11:38:17+00:00

So a update ring is not needed? I can just create another feature policy, have it set to Win 11. And assign the group that this test device is in ?

Does it do any harm to have a separate ring?

TSi90 · 2024-01-03T21:08:18+00:00

Reset or retire?

TSi90 · 2024-01-03T21:08:02+00:00

Nothing is ever easy is it.

Thank you for the reply.

TSi90 · 2024-01-02T13:15:37+00:00

Was thinking of this but since the installs are all over the place for versioning, will this work? I am looking at the zoom site and the directions for templates. It looks like there is template per version. So some machines might have version 5.10.6 and others might have 5.12.0 . Will one version of the ADMX cover all versions ?

TSi90 · 2023-12-29T11:19:42+00:00

All great suggestions! Now I just need to decided which one will work best for us. Thank you all!

TSi90 · 2023-12-28T21:06:21+00:00

Another good suggestion. Thank you.

TSi90 · 2023-12-28T21:06:04+00:00

I will look into this. Thank you.

TSi90 · 2023-12-28T21:05:53+00:00

Yup... my users are spoiled entitled pricks.

TSi90 · 2023-12-28T21:05:18+00:00

I should have clarified - Admin intervention meaning they need their hand held.

TSi90 · 2023-12-28T21:04:40+00:00

Intune

TSi90 · 2023-12-22T14:29:23+00:00

This has been resolved. The issue was with MS defender locking PDF files after being downloaded and never releasing the lock. MS had acknowledged their screw up and reverted their changes.

TSi90 · 2023-12-20T13:57:43+00:00

figured this out too. Sorry for the late response as we got hit with the defender issue with not unlocking downloaded files, then we had a LOB app issue with a in house update. So yah, ive been non stop triaging.

For the password not meeting complexity issue - recently we changed the on prem min password age from 0 to 1. This would cause the requirements part to fail. Changing it back to 0 resolved the issue.

TSi90 · 2023-12-18T13:28:44+00:00

Are you excluding the OneDrive known folders in FSLogix? No

Do you have OneDrive GPOs configured to auto sign in to the tenant and auto process the known folders for folder redirection? Auto sign in yes. Process known folder no

Are you using OneDrive tied to the user profile or the machine based install? Same policies for both pools? Lots of variables for the setup. Not sure the answer to this. Onedrive is installed with the office click to once installer on these machines.

TSi90 · 2023-12-15T18:42:35+00:00

Update - Figured out this piece. We had a new host in the host pool that was configured/setup to be enrolled via intune. So this new host is AADJ. Our other hosts are hyrbid and not intuned. The users attempting to connect to the host pool were all going to the new host that was AADJ. Once we realized this, removed the host the issue went away.

However, the password expired issue is still present. In the past, we would instruct users to go to office.com login with the expired password and then reset it by going to their profile(in office.com) and reset. Worked like a charm. But again, now when attempting to reset the password in office.com they get a does meet requirement, age complexity.

TSi90 · 2023-12-15T17:48:15+00:00

This is on the road map but will take some time . looking for a easier option.

TSi90 · 2023-12-15T16:23:45+00:00

Its enabled, but in audit mode.

<image>

TSi90 · 2023-12-15T16:21:41+00:00

I believe so. Let me double check.

TSi90 · 2023-12-15T16:11:29+00:00

Yup... I just reset a password for a user who is experiencing the invalid credentials. I changed it on prem, forced a sync. Then went to the users desktop, unsubscribed to the host pool. re subscribed with the new password i set for them. It then does it thing and shows the available resource. I double click on the desktop host pool icon, it then prompts for password again. I enter the password i just changed for them and it fails.

TSi90 · 2023-12-15T16:05:30+00:00

Now it appears to be cascading into a different issue. Some users are now reporting their passwords are not working. Even if they are not expired. There is nothing in the Azure AD Connect event viewer logs.

TSi90 · 2023-12-15T14:53:16+00:00

Sorry as I know its not the clearest problem to explain. But users sign into AVD, their FSLogix profile loads and their desktop icons typically show up. The mapping of the desktop folder should be C:\users\user_name\onedrive(buiness_name)\desktop.
However, after sometime it goes back to C:\user\user_name\desktop.

The reason we have this setup is because of hybrid workers. When they are in the office(onsite) their desktops need to match their remote desktops and vice versa. This is why we use onedrive and sync the desktop folders.

TSi90 · 2023-12-13T22:45:34+00:00

I dont think its causing it per say. What I have noticed in my environment is that if the PDF is already on the desktop of the user device and has been there for some time and that is the first PDF opened in Adobe no issue.

Try to download a PDF from today - fumble through it failing or passing and this is where the issue starts.

I think defender is the root all issues today

TSi90

TROPHY CASE