Profile Management policies
This article describes important aspects of the policies in the .adm and .admx files.
Profile Management variables
In this version of Profile Management, the following variables are available for use in both Group Policy and the .ini file.
For policies that define files and registry entries, the following variables expand as follows:
| Variable |
Expansion for Version 1 profiles |
Expansion for Version 2 profiles |
!ctx_localsettings! |
Local Settings\Application Data |
AppData\Local |
!ctx_roamingappdata! |
Application Data |
AppData\Roaming |
!ctx_startmenu! |
Start Menu |
AppData\Roaming\Microsoft\Windows\Start menu |
!ctx_internetcache! |
Local Settings\Temporary Internet Files |
AppData\Local\Microsoft\Windows\Temporary Internet Files |
!ctx_localappdata! |
Local Settings\Application Data |
AppData\Local |
For policies that are used to build paths, the !ctx_osbitness! variable expands to x86 or x64 depending on the operating system. The following variables also expand:
-
!ctx_osname! expands to the short name as follows depending on the operating system.
-
!ctx_profilever! expands to the profile version as follows depending on the operating system.
The long name is written to the log files when the Profile Management Service starts.
| Long Name |
Short Name |
Profile Version |
Windows 11 |
Win11 |
v6 |
Windows 10 Redstone 6 |
Win10RS6 |
v6 |
Windows 10 Redstone 5 |
Win10RS5 |
v6 |
Windows 10 Redstone 4 |
Win10RS4 |
v6 |
Windows 10 Redstone 3 |
Win10RS3 |
v6 |
Windows 10 Redstone 2 |
Win10RS2 |
v6 |
Windows 10 Redstone 1 |
Win10RS1 |
v6 |
Windows 10 |
Win10 |
v5 |
Windows 8.1 |
Win8.1 |
v4 or v2 |
Windows 8 |
Win8 |
v3 or v2 |
Windows 7 |
Win7 |
v2 |
Windows Server 2022 |
Win2022 |
v6 |
Windows Server 2019 |
Win2019 |
v6 |
Windows Server 2016 |
Win2016 |
v6 |
Windows Server 2012 R2 |
Win2012R2 |
v4 or v2 |
Windows Server 2012 |
Win2012 |
v3 or v2 |
Windows Server 2008 R2 |
Win2008 |
v1 |
Windows Server 2008 |
Win2008 |
v1 |
Note:
For Windows 10 starting with 20H1, the long name is Windows10 <postfix>, and the corresponding short name is Win10_<postfix>. The <postfix> value is obtained from two specific registry entries:
- Entry: HKLM\Software\Microsoft\Windows NT\CurrentVersion > Value Name: DisplayVersion
- Entry: HKLM\Software\Microsoft\Windows NT\CurrentVersion > Value Name: ReleaseId
If the first registry entry contains a value, it is used as the <postfix>. Otherwise, the value from the second registry entry is used.
For Windows 8, Windows 8.1, Windows Server 2012, and Windows Server 2012R2, the actual profile version might change depending on the setting of the UseProfilePathExtensionVersion registry key under HLKM\System\CurrentControlset\Services\ProfSvc\Parameters:
- If it’s set to 1, the profile version is v3 or v4 depending on the operating system.
- If it’s not set or set to 0, the profile version is v2.
Policies by version
As an aid to migration, the following tables show the policies that are available in different versions of Profile Management, the location of each policy in the .adm (or .admx) file and in the .ini file, and the feature each policy is designed for (or whether it is part of the base configuration of all deployments).
The location in the .adm or .admx file is relative to Citrix > Profile Management.
Policies available from Version 2311
| Policy in .adm or .admx file |
Location in .adm or .admx file |
Policy in .ini file |
Feature |
| SelectBestPerfUS |
\AdvancedSettings |
SelectBestPerfUS |
User store selection method |
| SharedStoreProfileContainerFileSizeLimit |
\FileDeduplication |
SharedStoreProfileContainerFileSizeLimit |
File Deduplication |
| PreventLoginWhenProfileContainerMountFailed |
\ProfileContainerSettings |
PreventLoginWhenProfileContainerMountFailed |
Log off users when profile container is not available during logon |
| GroupsToAccessProfileContainer |
\ProfileContainerSettings |
GroupsToAccessProfileContainer |
Users and groups to access profile container |
Policies available from Version 2308
| Policy in .adm or .admx file |
Location in .adm or .admx file |
Policy in .ini file |
Feature |
| AutoExtend |
\ProfileContainerSettings |
AutoExtend |
Enable VHD auto-expansion for profile container |
| AutoExtendThreshold |
\AdvancedSettings |
AutoExtendThreshold |
Profile container auto-expansion threshold |
| AutoExtendSize |
\AdvancedSettings |
AutoExtendSize |
Profile container auto-expansion increment |
| AutoExtendLimit |
\AdvancedSettings |
AutoExtendLimit |
Profile container auto-expansion limit |
| VhdCapacity |
\AdvancedSettings |
VhdCapacity |
Default capacity of VHD containers |
| DisableConcurrentAccessToProfileContainer |
\ProfileContainerSettings |
DisableConcurrentAccessToProfileContainer |
Enable exclusive access to VHD containers |
| DisableConcurrentAccessToOneDriveContainer |
\ProfileContainerSettings |
DisableConcurrentAccessToOneDriveContainer |
Enable exclusive access to VHD containers |
| EnableUwpAppsRoaming |
\AdvancedSettings |
EnableUwpAppsRoaming |
UWP app roaming |
Policies available from Version 2305
| Policy in .adm or .admx file |
Location in .adm or .admx file |
Policy in .ini file |
Feature |
| UserGroupLevelConfigEnabled |
\AdvancedSettings |
UserGroupLevelConfigEnabled |
Enable user-level policy settings |
| OrderedGroups |
\AdvancedSettings |
OrderedGroups |
Set priority order for user groups |
Policies available from Version 2303
| Policy in .adm or .admx file |
Location in .adm or .admx file |
Policy in .ini file |
Feature |
| PSMidSessionWriteBackSessionLock |
\BasicSettings |
PSMidSessionWriteBackSessionLock |
Enable active write-back on session lock and disconnection |
| AppAccessControl |
\AppAccessControl |
AppAccessControl |
Enable app access control |
| EnableVHDDiskCompaction |
\ProfileContainerSettings |
EnableVHDDiskCompaction |
Enable VHD disk compaction |
| FreeRatio4Compaction |
\AdvancedSettings |
FreeRatio4Compaction |
Free space ratio to trigger VHD disk compaction |
| NLogoffs4Compaction |
\AdvancedSettings |
NLogoffs4Compaction |
Number of logoffs to trigger VHD disk compaction |
| NDefrag4Compaction |
\AdvancedSettings |
NDefrag4Compaction |
Disable defragmentation for VHD disk compaction |
Policies available from Version 2209
| Policy in .adm or .admx file |
Location in .adm or .admx file |
Policy in .ini file |
Feature |
| SharedStoreFileInclusionList |
\File deduplication |
SharedStoreFileInclusionList |
Files to include in the shared store for deduplication |
| SharedStoreFileExclusionList |
\File deduplication |
SharedStoreFileExclusionList |
Files to exclude from the shared store |
Policies available from Version 2206
| Policy in .adm or .admx file |
Location in .adm or .admx file |
Policy in .ini file |
Feature |
| SyncGpoStateEnabled |
\AdvancedSettings |
SyncGpoStateEnabled |
Enable asynchronous processing for user Group Policy on logon |
| OneDriveContainer |
\AdvancedSettings |
OneDriveContainer |
Enable the roaming OneDrive folders |
| OutlookSearchRoamingConcurrentSessionEnabled |
\AdvancedSettings |
OutlookSearchRoamingConcurrentSessionEnabled |
Enable Outlook search data roaming in concurrent sessions |
| PSForPendingAreaEnabled |
\Streamed user profiles |
PSForPendingAreaEnabled |
Enable profile streaming for pending area |
Policies available from Version 2203
| Policy in .adm or .admx file |
Location in .adm or .admx file |
Policy in .ini file |
Feature |
| EnableVolumeReattach |
\AdvancedSettings |
EnableVolumeReattach |
Automatically reattach VHDX disks in sessions |
Policies available from Version 2112
| Policy in .adm or .admx file |
Location in .adm or .admx file |
Policy in .ini file |
Feature |
| ProfileContainerExclusionListFile |
Profile container settings |
ProfileContainerExclusionListFile |
Exclude files from the profile container |
| ProfileContainerInclusionListFile |
Profile container settings |
ProfileContainerInclusionListFile |
Include files in the profile container |
| VhdStorePath |
AdvancedSettings |
PathToVhdStore |
Specify a network storage location for VHDX files |
Policies available from Version 2109
| Policy in .adm or .admx file |
Location in .adm or .admx file |
Policy in .ini file |
Feature |
| CredBasedAccessEnabled |
AdvancedSettings |
CredBasedAccessEnabled |
Enable credential-based access to user stores |
Policies available from Version 2106
| Policy in .adm or .admx file |
Location in .adm or .admx file |
Policy in .ini file |
Feature |
| AccelerateFolderMirroring |
\FileSystemSettings\FSSynchronization |
AccelerateFolderMirroring |
Accelerate folder mirroring |
| CredBasedAccessEnabled |
AdvancedSettings |
CredBasedAccessEnabled |
Enable credential-based access to user store |
| MultiSiteReplication |
AdvancedSettings |
MultiSiteReplication |
Replicate user stores |
Policies available from Version 2103
| Policy in .adm or .admx file |
Location in .adm or .admx file |
Policy in .ini file |
Feature |
| PSForFoldersEnabled |
\PsSettings |
PSForFoldersEnabled |
Profile streaming for folders |
| ProfileContainerLocalCache |
\ProfileContainerSettings |
ProfileContainerLocalCache |
Local caching for profile containers |
Policies available from Version 2009
| Policy in .adm or .admx file |
Location in .adm or .admx file |
Policy in .ini file |
Feature |
| ProfileContainerExclusionListDir |
\ProfileContainerSettings |
ProfileContainerExclusionListDir |
Profile container |
| ProfileContainerInclusionListDir |
\ProfileContainerSettings |
ProfileContainerInclusionListDir |
Profile container |
Policy available from Version 2003
| Policy in .adm or .admx file |
Location in .adm or .admx file |
Policy in .ini file |
Feature |
| FSLogixProfileContainerSupport |
\AdvancedSettings |
FSLogixProfileContainerSupport |
Before Version 2103: Enable multi-session write-back for FSLogix Profile Container Version 2103 and later: Enable multi-session write-back for Profile Containers |
Policies available from Version 1909
| Policy in .adm or .admx file |
Location in .adm or .admx file |
Policy in .ini file |
Feature |
| MigrateUserStore |
\ |
MigrateUserStore |
Migrate UserStore |
| OutlookEdbBackupEnabled |
\AdvancedSettings |
OutlookEdbBackupEnabled |
Outlook search index database - backup and restore |
| ApplicationProfilesAutoMigration |
\AdvancedSettings |
ApplicationProfilesAutoMigration |
Automatic migration of existing application profiles |
Policy available from Version 1903
| Policy in .adm or .admx file |
Location in .adm or .admx file |
Policy in .ini file |
Feature |
| ProfileContainer |
Before Version 2009: \FileSystemSettings\FSSynchronization Version 2009 and later: \ProfileContainer |
ProfileContainer |
Profile Container |
Policy available from Version 7.18
| Policy in .adm or .admx file |
Location in .adm or .admx file |
Policy in .ini file |
Feature |
| OutlookSearchRoamingEnabled |
\AdvancedSettings |
OutlookSearchRoamingEnabled |
Outlook search roaming |
Policies available from Version 7.16
| Policy in .adm or .admx file |
Location in .adm or .admx file |
Policy in .ini file |
Feature |
| XenAppOptimizationSettings |
\XenAppOptimizationSettings |
XenAppOptimizationSettings |
Citrix Virtual Apps and Desktops application optimization |
| XenAppOptimizationDefinitionPath |
\XenAppOptimizationSettings |
XenAppOptimizationDefinitionPath |
Citrix Virtual Apps and Desktops application optimization |
| LargeFileHandlingList |
\FileSystemSettings |
LargeFileHandlingList |
Large file handling |
Policy available from Version 7.15
| Policy in .adm or .admx file |
Location in .adm or .admx file |
Policy in .ini file |
Feature |
| LogonExclusionCheck |
\FileSystemSettings |
LogonExclusionCheck |
Logon exclusion check |
Policy available from Version 5.8
| Policy in .adm or .admx file |
Location in .adm or .admx file |
Policy in .ini file |
Feature |
| StreamingExclusionList |
\PsSettings |
StreamingExclusionList |
Profile streaming exclusion list |
Policies available from Version 5.6
| Policy in .adm or .admx file |
Location in .adm or .admx file |
Policy in .ini file |
Feature |
CEIPEnabled |
\AdvancedSettings |
CEIPEnabled |
CEIP |
| PSMidSessionWriteBackReg |
\ |
PSMidSessionWriteBackReg |
Active write back registry |
Policies available from Version 5.5
| Policy in .adm or .admx file |
Location in .adm or .admx file |
Policy in .ini file |
Feature |
| Default Exclusion list |
\Registry |
DefaultExclusionListRegistry |
Base |
| NTUSER.DAT |
\Registry |
LastKnownGoodRegistry |
Backup NTUSER.DAT |
| Default Exclusion list - directories |
\File system |
DefaultSyncExclusionListDir |
Base |
Policies available from Version 5.0–5.4
| Policy in .adm or .admx file |
Location in .adm or .admx file |
Policy in .ini file |
Feature |
| Excluded groups |
\ |
ExcludedGroups |
Excluded Groups |
| Disable automatic configuration |
\Advanced Settings |
DisableDynamicConfig |
Automatic Configuration |
Redirect the AppData (Roaming) folder, Redirect the Desktop folder, … |
\Folder Redirection (in User Configuration) |
Note: Not applicable |
Integration with XenDesktop |
| Delay before deleting cached profiles |
\Profile handling |
ProfileDeleteDelay |
Base |
Policies available from Version 4.x
| Policy in .adm or .admx file |
Location in .adm or .admx file |
Policy in .ini file |
Feature |
| Cross-platform settings user groups |
\Cross-platform settings |
CPUserGroupList |
Cross-platform settings |
| Enable cross-platform settings |
\Cross-platform settings |
CPEnabled |
Cross-platform settings |
| Source for creating cross-platform settings |
\Cross-platform settings |
CPMigrationFromBaseProfileToCPStore |
Cross-platform settings |
| Path to cross-platform definitions |
\Cross-platform settings |
CPSchemaPath |
Cross-platform settings |
| Path to cross-platform settings store |
\Cross-platform settings |
CPPath |
Cross-platform settings |
| Offline profile support |
\Cross-platform settings |
OfflineSupport |
Offline profiles |
| Log off user if a problem is encountered |
\Advanced Settings |
LogoffRatherThanTempProfile |
Improved Troubleshooting |
Policies available from Version 3.x
| Policy in .adm or .admx file |
Location in .adm or .admx file |
Policy in .ini file |
Feature |
| Active write back |
\ |
PSMidSessionWriteBack |
Active profile writeback (in Version 4.0, renamed Active write back) |
| Folders to mirror (available from Version 3.1) |
\File system\Synchronization |
MirrorFoldersList |
Folder mirroring |
| Process Internet cookie files on logoff (available from Version 3.1) |
\Advanced settings |
ProcessCookieFiles |
Folder mirroring |
| Delete Redirected Folders (available in Versions 3.2, 3.2.2, and 4.0) |
\Advanced settings |
DeleteRedirectedFolders |
Support for folder redirection |
| Always cache |
\Streamed user profiles |
PSAlwaysCache |
Streamed user profiles |
| Profile streaming |
\Streamed user profiles |
PSEnabled |
Streamed user profiles |
| Timeout for pending area lock files |
\Streamed user profiles |
PSPendingLockTimeout |
Streamed user profiles |
| Streamed user profile groups |
\Streamed user profiles |
PSUserGroupsList |
Streamed user profiles |
Policies available from Version 2.x
| Policy in .adm or .admx file |
Location in .adm or .admx file |
Policy in .ini file |
Feature |
| Path to user store |
\ |
PathToUserStore |
Base |
| Processed groups |
\ |
ProcessedGroups |
Base |
| Local profile conflict handling |
\Profile handling |
LocalProfileConflictHandling |
Base |
| Migration of existing profiles |
\Profile handling |
MigrateWindowsProfilesToUserStore |
Base |
| Template profile |
\Profile handling |
TemplateProfilePath, TemplateProfileOverridesRoamingProfile, TemplateProfileOverridesLocalProfile |
Base |
| Delete locally cached profiles on logoff |
\Profile handling |
DeleteCachedProfilesOnLogoff |
Base |
| Directory of the MFT cache file (removed in Version 5.0) |
\Advanced settings |
USNDBPath |
Base |
| Directories to synchronize |
\File system\Synchronization |
SyncDirList |
Base |
| Exclusion list |
\Registry |
ExclusionListRegistry |
Base |
| Files to synchronize |
\File system\Synchronization |
SyncFileList |
Base |
| Inclusion list |
\Registry |
InclusionListRegistry |
Base |
| Exclusion list - directories |
\File system |
SyncExclusionListDir |
Base |
| Exclusion list - files |
\File system |
SyncExclusionListFiles |
Base |
| Number of retries when accessing locked files |
\Advanced settings |
LoadRetries |
Base |
| Process logons of local administrators |
\ |
ProcessAdmin |
Base |
| Enable Profile Management |
\ |
ServiceActive |
Base |
| Enable logging |
\Log settings |
LoggingEnabled |
Logging |
| Log settings |
\Log settings |
LogLevel |
Logging |
| Maximum size of the log file |
\Log settings |
MaxLogSize |
Logging |
| Path to log file (available from Version 2.1) |
\Log settings |
PathToLogFile |
Logging |
The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.
DIESER DIENST KANN ÜBERSETZUNGEN ENTHALTEN, DIE VON GOOGLE BEREITGESTELLT WERDEN. GOOGLE LEHNT JEDE AUSDRÜCKLICHE ODER STILLSCHWEIGENDE GEWÄHRLEISTUNG IN BEZUG AUF DIE ÜBERSETZUNGEN AB, EINSCHLIESSLICH JEGLICHER GEWÄHRLEISTUNG DER GENAUIGKEIT, ZUVERLÄSSIGKEIT UND JEGLICHER STILLSCHWEIGENDEN GEWÄHRLEISTUNG DER MARKTGÄNGIGKEIT, DER EIGNUNG FÜR EINEN BESTIMMTEN ZWECK UND DER NICHTVERLETZUNG VON RECHTEN DRITTER.
CE SERVICE PEUT CONTENIR DES TRADUCTIONS FOURNIES PAR GOOGLE. GOOGLE EXCLUT TOUTE GARANTIE RELATIVE AUX TRADUCTIONS, EXPRESSE OU IMPLICITE, Y COMPRIS TOUTE GARANTIE D'EXACTITUDE, DE FIABILITÉ ET TOUTE GARANTIE IMPLICITE DE QUALITÉ MARCHANDE, D'ADÉQUATION À UN USAGE PARTICULIER ET D'ABSENCE DE CONTREFAÇON.
ESTE SERVICIO PUEDE CONTENER TRADUCCIONES CON TECNOLOGÍA DE GOOGLE. GOOGLE RENUNCIA A TODAS LAS GARANTÍAS RELACIONADAS CON LAS TRADUCCIONES, TANTO IMPLÍCITAS COMO EXPLÍCITAS, INCLUIDAS LAS GARANTÍAS DE EXACTITUD, FIABILIDAD Y OTRAS GARANTÍAS IMPLÍCITAS DE COMERCIABILIDAD, IDONEIDAD PARA UN FIN EN PARTICULAR Y AUSENCIA DE INFRACCIÓN DE DERECHOS.
本服务可能包含由 Google 提供技术支持的翻译。Google 对这些翻译内容不做任何明示或暗示的保证，包括对准确性、可靠性的任何保证以及对适销性、特定用途的适用性和非侵权性的任何暗示保证。
このサービスには、Google が提供する翻訳が含まれている可能性があります。Google は翻訳について、明示的か黙示的かを問わず、精度と信頼性に関するあらゆる保証、および商品性、特定目的への適合性、第三者の権利を侵害しないことに関するあらゆる黙示的保証を含め、一切保証しません。
ESTE SERVIÇO PODE CONTER TRADUÇÕES FORNECIDAS PELO GOOGLE. O GOOGLE SE EXIME DE TODAS AS GARANTIAS RELACIONADAS COM AS TRADUÇÕES, EXPRESSAS OU IMPLÍCITAS, INCLUINDO QUALQUER GARANTIA DE PRECISÃO, CONFIABILIDADE E QUALQUER GARANTIA IMPLÍCITA DE COMERCIALIZAÇÃO, ADEQUAÇÃO A UM PROPÓSITO ESPECÍFICO E NÃO INFRAÇÃO.