FSlogix Deleting C: files/folders

Brookus, Tony 26 Reputation points
2021-01-27T19:08:47.947+00:00

Hoping someone can assist here. In December, we updated our Serve 2016 Citrix (CVAD 1912) to the FSLogix 2.9.7621.30127. Since that time, we've seen random days where the frxsvc.exe process will delete files and folders from the C: drive. Based on what's deleted, I suspect it's actually trying to delete everything but can't do the stuff that's in use. For example, it will delete the C:\bootmgr file. I know it's the frxsvc.exe process as I set up auditing on the files/folders that were being removed to see what was doing it.

This past weekend, I updated to FSLogix 2.9.7654.46150, but the problem persists. I'm going to try to uninstall and downgrade back to 2.9.7349.30108, but I'm a bit concerned if the problem continues after that.

The deletion does not appear tied to a login or logoff process of a user and I don't see anything in the FSLogix logs about what it's doing at the time.

Is there a way to open a support ticket with Microsoft if you don't have software assurance? We own RDS licenses obviously and O365 licenses, but don't have a support agreement.

Thanks,
Tony

FSLogix
FSLogix
A set of solutions that enhance, enable, and simplify non-persistent Windows computing environments and may also be used to create more portable computing sessions when using physical devices.
495 questions
{count} votes

Accepted answer
  1. Karlie Weng 18,531 Reputation points Microsoft Vendor
    2021-01-28T03:40:35.283+00:00

    Hello@Brookus, Tony

    If you want to open a support ticket with Microsoft , you can first refer to this link.
    FSLogix is supported for use with versions of Windows and Office that are still included in the Microsoft Support Lifecycle.

    FSLogix Agent Service (frxsvc.exe) ,communicates with the Command Line(frx.exe) and Drivers (frxdrv.sys and frxdrvvt.sys), as well as monitors the rules directory for changes.The service starts automatically when the computer starts and remains running while the computer is powered on.

    For more information about frxsvc.exe, you can first enable FSLogix Agent Service logging under HKLM\SOFTWARE\FSLogix\Logging, and find the logs under folder %ProgramData%\FSLogix\Logs\Service

    Logging and diagnostics
    https://video2.skills-academy.com/en-us/fslogix/logging-diagnostics-reference

    Best Regards
    Karlie

    ----------

    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

7 additional answers

Sort by: Most helpful
  1. Dlo 96 Reputation points
    2021-02-04T12:26:33.273+00:00

    We been chasing a few random folders / files being deleted off our servers as well for awhile now.
    We are enabling logging to see if this is the same case with us. We have not been able to pinpoint it and never thought about FSLogix doing this. We will update this thread once we find out.


  2. Chris Gould 1 Reputation point
    2021-02-05T09:22:05.1+00:00

    Hey,

    We've got the same problem in our RDSH 2016 environment. We've just jumped from ver 2.9.7621.30127 to 2.9.7654.46150

    Just logged with Microsoft support, but not a good sign when they haven't heard of FSLogix, and logged it as ss logics!!

    Hopefully one of us will get an answer :)

    Cheers


  3. Dlo 96 Reputation points
    2021-02-12T12:10:46.533+00:00

    We spoke with Microsoft on this as well and they are aware of this issue and working on it.
    For a quick fix I am removing Delete rights from the SYSTEM account on the folders it keeps deleting randomly as a temp fix.

    0 comments No comments

  4. Brookus, Tony 26 Reputation points
    2021-02-12T13:05:59.683+00:00

    That's good to hear. Thanks for letting us know that MS is aware of it.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.