Basic policy settings
The Basic settings section contains policy settings relating to the basic configuration of Profile management.
Active write back
This setting enables modified files and folders (but not registry settings) to be synchronized to the user store during a session, before logoff.
By default, synchronization to the user store during a session is disabled.
If this setting is not configured here, the value from the .ini file is used.
If this setting is not configured here or in the .ini file, it is enabled.
Enable Profile management
This setting enables Profile management to process logons and logoffs.
By default, this is setting is disabled to facilitate deployment.
Important: Citrix recommends enabling Profile management only after carrying out all other setup tasks and testing how Citrix user profiles perform in your environment.
If this setting is not configured here, the value from the .ini file is used.
If this setting is not configured here or in the .ini file, Profile management does not process Windows user profiles in any way.
Excluded groups
This setting specifies which computer local groups and domain groups (local, global, and universal) are excluded from Profile management processing.
When enabled, Profile management does not process members of the specified user groups.
By default, this setting is disabled and members of all user groups are processed.
Specify domain groups in the form <DOMAIN NAME>\<GROUP NAME>.
If this setting is not configured here, the value from the .ini file is used .
If this setting is not configured here or in the .ini file, members of all user groups are processed.
Offline profile support
This setting enables offline profile support, allowing profiles to synchronize with the user store at the earliest opportunity after a network disconnection.
By default, support for offline profiles is disabled.
This setting is applicable to laptop or mobile users who roam. When a network disconnection occurs, profiles remain intact on the laptop or device even after restarting or hibernating. As mobile users work, their profiles are updated locally and are synchronized with the user store when the network connection is re-established.
If this setting is not configured here, the value from the .ini file is used.
If this setting is not configured here or in the .ini file, support for offline profiles is disabled.
Path to user store
This setting specifies the path to the directory (user store) in which user settings, such as registry settings and synchronized files, are saved.
By default, the Windows directory on the home drive is used.
If this setting is disabled, user settings are saved in the Windows subdirectory of the home directory.
The path can be:
- A relative path.This must be relative to the home directory, typically configured as the #homeDirectory# attribute for a user in Active Directory.
- An absolute UNC path. This typically specifies a server share or a DFS namespace.
- Disabled or unconfigured. In this case, a value of #homeDirectory#\Windows is assumed.
Use the following types of variables when configuring this policy setting:
- System environment variables enclosed in percent signs (for example, %ProfVer%). Note that system environment variables generally require additional setup.
- Attributes of the Active Directory user object enclosed in hashes (for example, #sAMAccountName#).
- Profile management variables. For more information, see the Profile management documentation.
You can also use the %username% and %userdomain% user environment variables and create custom attributes to fully define organizational variables such as location or users. Attributes are case-sensitive.
Examples:
- \\server\share#sAMAccountName# stores the user settings to the UNC path \\server\share\JohnSmith (if #sAMAccountName# resolves to JohnSmith for the current user)
- \\server\profiles$\%USERNAME%.%USERDOMAIN%\!CTX_PROFILEVER!!CTX_OSBITNESS! might expand to \\server\profiles$\JohnSmith.DOMAINCONTROLLER1\v2x64
Important: Whichever attributes or variables you use, check that this setting expands to the folder one level higher than the folder containing NTUSER.DAT. For example, if this file is contained in \\server\profiles$\JohnSmith.Finance\v2x64\UPM_Profile, set the path to the user store as \\server\profiles$\JohnSmith.Finance\v2x64, not the \UPM_Profile subfolder.
If this setting is not configured here, the value from the .ini file is used.
If this setting is not configured here or in the .ini file, the Windows directory on the home drive is used.
Process logons of local administrators
This setting specifies whether or not logons of members of the BUILTIN\Administrators group are processed. This allows domain users with local administrator rights, typically users with assigned virtual desktops, to bypass processing, log on, and troubleshoot a desktop experiencing problems with Profile management.
If this setting is disabled or not configured on server operating systems, Profile management assumes that logons by domain users, but not local administrators, must be processed. On desktop operating systems, local administrator logons are processed.
By default this setting is disabled, and local administrator logons are not processed.
If this setting is not configured here, the value from the .ini file is used.
If this setting is not configured here or in the .ini file, local administrator logons are not processed.
Processed groups
This setting specifies which computer local groups and domain groups (local, global, and universal) are included in Profile management processing.
When enabled, Profile management processes only members of the specified user groups.
By default, this setting is disabled and members of all user groups are processed.
Specify domain groups in the form <DOMAIN NAME><GROUP NAME>.
If this setting is not configured here, the value from the .ini file is used.
If this setting is not configured here or in the .ini file, members of all user groups are processed.