Is there a way to exclude users from using roaming profiles?

FB4 IMI 11 Reputation points
2023-03-15T13:35:47.1+00:00

Hi,

i'd like to test FSLogix profiles with a small subset of my users (gathered in an AD security group) while all other users shall still use roaming profiles on my Windows 10 client computers.

However, since

Computer Configuration->Policies->Administrative Templates->System->User Profiles

is a Computer GPO, i don't know how to do so.

The only idea i have so far is to simply deny access to the profile file share to the security group, however this approach seems to be 'brute force'.

Is there any way to do this?

Thanks in advance...

Windows 10
Windows 10
A Microsoft operating system that runs on personal computers and tablets.
11,438 questions
Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
5,272 questions
FSLogix
FSLogix
A set of solutions that enhance, enable, and simplify non-persistent Windows computing environments and may also be used to create more portable computing sessions when using physical devices.
488 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Jason Parker 1 Reputation point Microsoft Employee
    2023-03-16T00:24:46.87+00:00

    When installed, FSLogix creates local security groups:

    • FSLogix Profile Include List
    • FSLogix Profile Exclude List
    • FSLogix ODFC Include List
    • FSLogix ODFC Exclude List

    By default, the 'Everyone' group is a member of the include list. If you remove the 'Everyone' group and add your domain-based group, then only the users in that group will be processed by FSLogix.

    Be sure the FSLogix is enabled and configured using the registry or GPO templates.

    HTH,

    Jason Parker

    0 comments
  2. FB4 IMI 11 Reputation points
    2023-03-16T07:02:27.0866667+00:00

    Hi Jason,

    thanks, but that's not my problem: i think my local security groups are configured correctly, and i can see this in the FSLogix log file on the Windows 10 client: a user which logs on and is not in the FSLogix Profile Include list is ignored and get's his roaming profile, a user which is in the list is processed and get's his FSLogix VHD.

    My problem is: the user which is in the FSLogix Profile Include list also get's a roaming profile, which is clearly not what i want for this test. That's why i asked for a way to exclude a user group from roaming profiles.

    Best Seb

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.