Fslogix en OneDrive silent sign in

[erwin26]

Mijn vraag
Hoe kan ik met Fslogix en OneDrive silent sign in laten doen?

Relevante software en hardware die ik gebruik
Fslogix, OneDrive, Server 2019 (1 RDS server maar)

Wat ik al gevonden of geprobeerd heb
Heb nog niks gevonden dat het mogelijk moet zijn, maar wel als ik Fslogix uitzet. Dan werkt silent sign in prima, maar als ik Fslogix aanzet niet meer. Fslogix uitzetten geeft helaas weer andere foutmeldingen. Ik weet ook niet of het nuttig is om Fslogix te draaien voor 1 RDS server.

[Reacher]

Als het maar 1 server is, heeft profile management niet heel veel toegevoegde waarde.

Is je RDS server wel hybrid joined ?

[erwin26]

Klopt, dit is ingesteld voor een ex collega en twijfel om daar gewoon geheel van af te stappen in deze situatie.

De server is hybrid joined. Via GPO ingesteld dat silent sign in actief staat en dit werkt dus ook al ik geen FsLogix gebruik. Nu is het dus of Silent sign voor OneDrive maken met Fslogix of kijken om FsLogix niet meer te gebruiken en de andere problemen oplossen die nu naar boven komen als ik Fslogix tijdelijk uitzet.

[akimosan]

Welke policies staan er allemaal ingesteld voor fslogix en Onedrive?
Heb je bijvoorbeeld "Delete Local Profile When VHD Should Apply" enabled zodat er maar 1 profiel KAN zijn.
Inloggen met tijdelijk profiel en dergelijke ook disabled?

Maak je gebruik van aparte profile en office 365 containers?
Welke caches worden opgeslagen in je office container, welke in je profile?
Wat is de registerwaarde voor een ingelogde user bij
HKEY_CURRENT_USER\Software\Microsoft\OneDrive
Staat daar iets van EnableADAL met een waarde 0,1 of 2?

Ik deel hier even mijn FSlogix policy settings (FSlogix policy ADMX templates)

Computer Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the central store.
FSLogix
Policy Setting Comment 
Logging: Enabled Enabled  
 Enable All Logs 
 
Policy Setting Comment 
Logging: Log Directory Enabled  
Logging: Log Directory <path>
 
Policy Setting Comment 
Logging: Log Keeping Period Enabled  
Logging: Log Keeping Period 5 
 

FSLogix/Office 365 Containershide
Policy Setting Comment 
Enabled Enabled  
Enabled Enabled 
 
Policy Setting Comment 
Include OneDrive Enabled  
Include OneDrive Enabled 
 
Policy Setting Comment 
Include OneNote Enabled  
Include OneNote Enabled 
 
Policy Setting Comment 
Include OneNote UWP Enabled  
Include OneNote UWP Enabled 
 
Policy Setting Comment 
Include Outlook Enabled  
Include Outlook Enabled 
 
Policy Setting Comment 
Include Outlook Personalization Enabled  
Include Outlook Personalization Enabled 
 
Policy Setting Comment 
Include Sharepoint Enabled  
Include Sharepoint Enabled 
 
Policy Setting Comment 
Include Teams Enabled  
Include Teams Enabled 
 
Policy Setting Comment 
Roam Search Database Enabled  
 Multi-user Search 
 
Policy Setting Comment 
Size In MBs Enabled  
Size In MBs 20000 
 
Policy Setting Comment 
VHD Locations Enabled  
VHD Locations <Path>
 
Policy Setting Comment 
Volume Type (VHD or VHDX) Enabled  
 VHDX 
 

FSLogix/Office 365 Containers/Advancedhide
Policy Setting Comment 
Prevent Login With Failure Enabled  
Prevent Login With Failure Enabled 
 
Policy Setting Comment 
Prevent Login With Temp Profile Enabled  
Prevent Login With Temp Profile Enabled 
 
Policy Setting Comment 
Remove Orphaned OST Files On Logoff Enabled  
Remove Orphaned OST Files On Logoff Enabled 
 

FSLogix/Office 365 Containers/Container and Directory Naminghide
Policy Setting Comment 
Flip Flop Profile Directory Name Enabled  
Flip Flop Profile Directory Name Enabled 
 

FSLogix/Profile Containershide
Policy Setting Comment 
Delete Local Profile When VHD Should Apply Enabled  
Delete Local Profile When VHD Should Apply Enabled 
 
Policy Setting Comment 
Enabled Enabled  
Enabled Enabled 
 
Policy Setting Comment 
Size In MBs Enabled  
Size In MBs 5000 
 
Policy Setting Comment 
VHD Locations Enabled  
VHD Locations <>
 

FSLogix/Profile Containers/Advancedhide
Policy Setting Comment 
Prevent Login With Failure Enabled  
Prevent Login With Failure Enabled 
 
Policy Setting Comment 
Prevent Login With Temp Profile Enabled  
Prevent Login With Temp Profile Enabled 
 
Policy Setting Comment 
Redirection XML Source Folder Enabled  
Redirection XML Source Folder \\scn.dom\data$\fslogix\tst 
 
Policy Setting Comment 
Remove Orphaned OST Files On Logoff Enabled  
Remove Orphaned OST Files On Logoff Enabled 
 

FSLogix/Profile Containers/Container and Directory Naminghide
Policy Setting Comment 
Flip Flop Profile Directory Name Enabled  
Flip Flop Profile Directory Name Enabled 
 
Policy Setting Comment 
Volume Type (VHD or VHDX) Enabled  
 VHDX  

Extra Registry Settingshide
Display names for some settings cannot be found. You might be able to resolve this issue by updating the .ADM files used by Group Policy Management.

Setting State 
Software\Policies\FSLogix\ODFC\IncludeOfficeFileCache 1 

Onedrive For business policies

Policy Setting Comment 
 Allow users to contact Microsoft for feedback and support Disabled  
Allow syncing OneDrive accounts for only specific organizations Enabled  
Specify tenant ID 
In the Value field, enter the tenant ID you want to add to this list. 
 
Tenant ID:  
<tenantid>
 
 
Policy Setting Comment 
Convert synced team site files to online-only files Enabled  
Prevent users from moving their Windows known folders to OneDrive Enabled  
For users who have already moved their known folders, would you like to keep those folders redirected to OneDrive: Yes 
 
Policy Setting Comment 
Prevent users from redirecting their Windows known folders to their PC Enabled  
Set the maximum size of a user's OneDrive that can download automatically Enabled  
Specify the tenant ID and the maximum size of a user's OneDrive before the user is prompted to choose the folders they want to sync.  
In the Value name field, enter the tenant ID. In the Value field, enter the size. 
Valid values are from 0 to 4294967295 MB (inclusive). 
Max size:    
<tenantid> 10240 
 
 
Policy Setting Comment 
Set the sync app update ring Enabled  
Update ring: Deferred 
 
Policy Setting Comment 
Silently sign in users to the OneDrive sync app with their Windows credentials Enabled  
Use OneDrive Files On-Demand Enabled

[erwin26]

akimosan schreef op donderdag 16 februari 2023 @ 18:28:
Welke policies staan er allemaal ingesteld voor fslogix en Onedrive?
Heb je bijvoorbeeld "Delete Local Profile When VHD Should Apply" enabled zodat er maar 1 profiel KAN zijn.
Inloggen met tijdelijk profiel en dergelijke ook disabled?

Maak je gebruik van aparte profile en office 365 containers?
Welke caches worden opgeslagen in je office container, welke in je profile?
Wat is de registerwaarde voor een ingelogde user bij
HKEY_CURRENT_USER\Software\Microsoft\OneDrive
Staat daar iets van EnableADAL met een waarde 0,1 of 2?

Ik deel hier even mijn FSlogix policy settings (FSlogix policy ADMX templates)

Computer Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the central store.
FSLogix
Policy Setting Comment 
Logging: Enabled Enabled  
 Enable All Logs 
 
Policy Setting Comment 
Logging: Log Directory Enabled  
Logging: Log Directory <path>
 
Policy Setting Comment 
Logging: Log Keeping Period Enabled  
Logging: Log Keeping Period 5 
 

FSLogix/Office 365 Containershide
Policy Setting Comment 
Enabled Enabled  
Enabled Enabled 
 
Policy Setting Comment 
Include OneDrive Enabled  
Include OneDrive Enabled 
 
Policy Setting Comment 
Include OneNote Enabled  
Include OneNote Enabled 
 
Policy Setting Comment 
Include OneNote UWP Enabled  
Include OneNote UWP Enabled 
 
Policy Setting Comment 
Include Outlook Enabled  
Include Outlook Enabled 
 
Policy Setting Comment 
Include Outlook Personalization Enabled  
Include Outlook Personalization Enabled 
 
Policy Setting Comment 
Include Sharepoint Enabled  
Include Sharepoint Enabled 
 
Policy Setting Comment 
Include Teams Enabled  
Include Teams Enabled 
 
Policy Setting Comment 
Roam Search Database Enabled  
 Multi-user Search 
 
Policy Setting Comment 
Size In MBs Enabled  
Size In MBs 20000 
 
Policy Setting Comment 
VHD Locations Enabled  
VHD Locations <Path>
 
Policy Setting Comment 
Volume Type (VHD or VHDX) Enabled  
 VHDX 
 

FSLogix/Office 365 Containers/Advancedhide
Policy Setting Comment 
Prevent Login With Failure Enabled  
Prevent Login With Failure Enabled 
 
Policy Setting Comment 
Prevent Login With Temp Profile Enabled  
Prevent Login With Temp Profile Enabled 
 
Policy Setting Comment 
Remove Orphaned OST Files On Logoff Enabled  
Remove Orphaned OST Files On Logoff Enabled 
 

FSLogix/Office 365 Containers/Container and Directory Naminghide
Policy Setting Comment 
Flip Flop Profile Directory Name Enabled  
Flip Flop Profile Directory Name Enabled 
 

FSLogix/Profile Containershide
Policy Setting Comment 
Delete Local Profile When VHD Should Apply Enabled  
Delete Local Profile When VHD Should Apply Enabled 
 
Policy Setting Comment 
Enabled Enabled  
Enabled Enabled 
 
Policy Setting Comment 
Size In MBs Enabled  
Size In MBs 5000 
 
Policy Setting Comment 
VHD Locations Enabled  
VHD Locations <>
 

FSLogix/Profile Containers/Advancedhide
Policy Setting Comment 
Prevent Login With Failure Enabled  
Prevent Login With Failure Enabled 
 
Policy Setting Comment 
Prevent Login With Temp Profile Enabled  
Prevent Login With Temp Profile Enabled 
 
Policy Setting Comment 
Redirection XML Source Folder Enabled  
Redirection XML Source Folder \\scn.dom\data$\fslogix\tst 
 
Policy Setting Comment 
Remove Orphaned OST Files On Logoff Enabled  
Remove Orphaned OST Files On Logoff Enabled 
 

FSLogix/Profile Containers/Container and Directory Naminghide
Policy Setting Comment 
Flip Flop Profile Directory Name Enabled  
Flip Flop Profile Directory Name Enabled 
 
Policy Setting Comment 
Volume Type (VHD or VHDX) Enabled  
 VHDX  

Extra Registry Settingshide
Display names for some settings cannot be found. You might be able to resolve this issue by updating the .ADM files used by Group Policy Management.

Setting State 
Software\Policies\FSLogix\ODFC\IncludeOfficeFileCache 1 

Onedrive For business policies

Policy Setting Comment 
 Allow users to contact Microsoft for feedback and support Disabled  
Allow syncing OneDrive accounts for only specific organizations Enabled  
Specify tenant ID 
In the Value field, enter the tenant ID you want to add to this list. 
 
Tenant ID:  
<tenantid>
 
 
Policy Setting Comment 
Convert synced team site files to online-only files Enabled  
Prevent users from moving their Windows known folders to OneDrive Enabled  
For users who have already moved their known folders, would you like to keep those folders redirected to OneDrive: Yes 
 
Policy Setting Comment 
Prevent users from redirecting their Windows known folders to their PC Enabled  
Set the maximum size of a user's OneDrive that can download automatically Enabled  
Specify the tenant ID and the maximum size of a user's OneDrive before the user is prompted to choose the folders they want to sync.  
In the Value name field, enter the tenant ID. In the Value field, enter the size. 
Valid values are from 0 to 4294967295 MB (inclusive). 
Max size:    
<tenantid> 10240 
 
 
Policy Setting Comment 
Set the sync app update ring Enabled  
Update ring: Deferred 
 
Policy Setting Comment 
Silently sign in users to the OneDrive sync app with their Windows credentials Enabled  
Use OneDrive Files On-Demand Enabled

Voor OneDrive momenteel alleen silent sign in. Als dat al niet werkt met FsLogix dan houdt het op, vandaar alleen even die policy nog actief.

Voor FsLogix heb ik het volgende actief.

Computer Configuration (Enabled)
hide


Policies
hide


Administrative Templates
hide


Policy definitions (ADMX files) retrieved from the central store.

FSLogix
hide


Policy

Setting

Comment

Enable search roaming Disabled

FSLogix/Office 365 Containers
hide


Policy

Setting

Comment

Dynamic VHD(X) allocation Enabled

Dynamic VHD(X) allocation Enabled


Policy

Setting

Comment

Enabled Enabled

Enabled Enabled


Policy

Setting

Comment

Include Office activation data in container Enabled

Include Office activation data in container Enabled


Policy

Setting

Comment

Include OneDrive data in container Enabled

Include OneDrive data in container Enabled


Policy

Setting

Comment

Include OneNote data in container Enabled

Include OneNote data in container Enabled


Policy

Setting

Comment

Include OneNote UWP notebook data in container Enabled

Include OneNote UWP notebook data in container Enabled


Policy

Setting

Comment

Include Outlook data in container Enabled

Include Outlook data in container Enabled


Policy

Setting

Comment

Include Outlook personalization data in container Enabled

Include Outlook personalization data in container Enabled


Policy

Setting

Comment

Include Sharepoint data in container Enabled

Include Sharepoint data in container Enabled


Policy

Setting

Comment

Include Skype data in container Enabled

Include Skype data in container Enabled


Policy

Setting

Comment

Include Teams data in container Enabled

Include Teams data in container Enabled


Policy

Setting

Comment

Size in MBs Enabled

Size in MBs 100000


Policy

Setting

Comment

Store search database in Office 365 container Disabled
Sync OST to VHD Enabled

Move OST to VHD


Policy

Setting

Comment

VHD access type Enabled

Direct access


Policy

Setting

Comment

VHD location Enabled

VHD location \\server\share


Policy

Setting

Comment

Virtual disk type Enabled

VHDX


FSLogix/Office 365 Containers/Advanced
hide


Policy

Setting

Comment

Locked VHD retry count Enabled

Locked VHD retry count 300


Policy

Setting

Comment

Locked VHD retry interval Enabled

Locked VHD retry interval 5


Policy

Setting

Comment

Number of milliseconds to wait for volume arrival Enabled

Number of milliseconds to wait for volume arrival 10000


Policy

Setting

Comment

Prevent login with failure Enabled

Prevent login with failure Enabled


Policy

Setting

Comment

Prevent login with temporary profile Enabled

Prevent login with temporary profile Enabled


Policy

Setting

Comment

Refresh User Policy Enabled

Refresh User Policy Enabled


Policy

Setting

Comment

Remove Orphaned OST Files On Logoff Enabled

Remove Orphaned OST Files On Logoff Enabled


Policy

Setting

Comment

Volume re-attach retry count Enabled

Volume re-attach retry count 300


Policy

Setting

Comment

Volume re-attach retry interval Enabled

Volume re-attach retry interval 5


FSLogix/Office 365 Containers/Container and Directory Naming
hide


Policy

Setting

Comment

Swap directory name components Enabled

Swap directory name components Enabled


FSLogix/Profile Containers
hide


Policy

Setting

Comment

Delete local profile when FSLogix Profile should apply Enabled

Delete local profile when FSLogix Profile should apply Enabled


Policy

Setting

Comment

Dynamic VHD(X) allocation Enabled

Dynamic VHD(X) allocation Enabled


Policy

Setting

Comment

Enabled Enabled

Enabled Enabled


Policy

Setting

Comment

Profile type Enabled

Normal direct-access profile


Policy

Setting

Comment

Size in MBs Enabled

Size in MBs 100000


Policy

Setting

Comment

Store search database in profile container Disabled
VHD location Enabled

VHD location \\"servername"\share


FSLogix/Profile Containers/Advanced
hide


Policy

Setting

Comment

Locked VHD retry count Enabled

Locked VHD retry count 300


Policy

Setting

Comment

Locked VHD retry interval Enabled

Locked VHD retry interval 5


Policy

Setting

Comment

Number of milliseconds to wait for volume arrival Enabled

Number of milliseconds to wait for volume arrival 10000


Policy

Setting

Comment

Prevent login with failure Enabled

Prevent login with failure Enabled


Policy

Setting

Comment

Prevent login with temporary profile Enabled

Prevent login with temporary profile Enabled


Policy

Setting

Comment

Redirect temporary file folders to local computer Enabled

Redirect TEMP, TMP and INetCache to local drive


Policy

Setting

Comment

Remove Orphaned OST Files On Logoff Enabled

Remove Orphaned OST Files On Logoff Enabled


Policy

Setting

Comment

Volume re-attach retry count Enabled

Volume re-attach retry count 300


Policy

Setting

Comment

Volume re-attach retry interval Enabled

Volume re-attach retry interval 5


FSLogix/Profile Containers/Container and Directory Naming
hide


Policy

Setting

Comment

Swap directory name components Enabled

Swap directory name components Enabled


Policy

Setting

Comment

Virtual disk type Enabled

VHDX


HKEY_CURRENT_USER\Software\Microsoft\OneDrive
Staat daar iets van EnableADAL met een waarde 0,1 of 2? << Had ik actief, maar las in MS artikel dat dit overbodig is als je via GPO de silent login aanzet. Dus de regkey weer laten verwijderen via GPO bij gebruikers.

En profile en Office profile worden apart opgeslagen op de FSL locatie

[Zwelgje]

ga eens terug naar FSLogix 2201 ipv 2210. er zijn wat SSO issues in de laatste build namelijk

[erwin26]

Zwelgje schreef op zondag 19 februari 2023 @ 09:26:
ga eens terug naar FSLogix 2201 ipv 2210. er zijn wat SSO issues in de laatste build namelijk

Thanks ga ik gelijk even proberen


Edit: Ik heb de versie aangepast naar 2201, maar helaas zelfde effect. OneDrive meld nog niet aan automatisch.

[Voor 19% gewijzigd door erwin26 op 20-02-2023 10:08]