FsLogix - Unclean logoff causing locked files until server reboot

Much R 101

Problem is described by M4deman under unclean-logoff-causing-locked-files-until-server-reboot

It seems to have something to do with the 2009 version.
The latest version of FSLogix is installed whats-new

Description

After a user logoff, the "System" Process (PID 4) locks the following folders:

C:\Users\local_username\AppData\Local\Microsoft\Credentials
C:\Users\local_username\AppData\Roaming\Microsoft\Credentials

The user is completely logged of, according to Task Manager.

In the FSLogix Profile Log file I can see the following:

[07:53:55.601][tid:00000c90.0000ce44][ERROR:00000020] Delete profile failed for sid S-1-5-21-3364776539-3721753400-1968955100-1179, Cleaning up manually. (Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.)
The last sentence means that the process cannot access the file, because another process already uses it.

Also the whole "local_username" folder cannot be deleted:

[08:23:15.479][tid:00000c90.0000bcc4][WARN: 00000005] Failed to delete C:\Users\local_usename (Access is denied)
Access Denied

Does someone have any info on this behaviour?

Anonymous

2021-01-14T03:03:58.32+00:00

Hello @Much R

Did you check affected user has full control and Owner over their FSLogix Folder and the VHDX files ?

Thanks
Karlie
Much R 101 Reputation points

2021-02-02T08:02:21.997+00:00

Hello,

Where is my answer from yesterday?
Why was this deleted?

How can I open a ticket at Microsoft now?

Thank you
Anonymous

2021-02-02T08:16:39.607+00:00

Hello @Much R

sorry I was going to delete my comment as it wasn't helpful, and your comment is below mine, so it seems they were deleted together. I want to restore but it doesn't has this option.

FSLogix is supported for use with versions of Windows and Office that are still included in the Microsoft Support Lifecycle.

How to open a FSLogix Support Request
https://social.msdn.microsoft.com/Forums/en-US/14ea5f6f-760b-4ad2-83cf-23c3cbc1bcc4/how-to-open-a-fslogix-support-request?forum=FSLogix

Best regards
Karlie
Germain 11 Reputation points

2021-02-19T11:44:10.117+00:00

We are currently experiencing the same issue. The user VHDX is locked by system and can only be unlocked by rebooting the server.
Has Microsoft acknowledged this issue?

Currently using: 2.9.7654.46150
Bracko Ewald 31 Reputation points

2021-02-19T12:10:09.137+00:00

Did you activate the registry value HKEY_LOCAL_MACHINE\SOFTWARE\FSLogix\Apps\CleanupInvalidSessions (REG_DWORD, 0x1)?
Do you use Cloud Cache or not?

Also, maybe you can check with the frx command line tool if there are still some redirects pointing to the use VHDX file. You can then use that tool to delete them manually and detach the VHDX files afterwards using diskpart.
Marius Neuhaus 1 Reputation point

2021-03-09T10:31:38.737+00:00

Hello,

we have the same problem.
We use on-premise terminalserver.:
Windows Server 2019
Citrix 1912 CU2 LTSR
FSLogix 2.9.7621.30127

I've tried the CleanupInvalidSessions RegKey, but it doesn't effect.
We don't use Cloud Cache.
FSLogix Configuration only local and not per gpo.
The frx command line tool dont show redirects pointing to the use VHDX file.
Permission are set correct. Users work correctly with the containers.
Luckily the problem occurs only randomly and not at every logoff.

In the FSLogix Configuration we include the group domain-users and exclude the domain-administrators.
Could it be a Problem?

Best Regards,
Marius
itsupport 1 Reputation point

2021-05-26T12:40:37.147+00:00

When this happens are you left with multiple <USERNAME>.original folders? I've seen it go as high as <USERNAME>.original11 before I just manually delete all the folders.
Guido Racamato 26 Reputation points

2021-09-28T17:39:34.337+00:00

Hello Everyone, For the Group Policy Access Denied, once you get an affected user, could you please modify the following registry? There's no reboot required.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileService\References\<SID affected user>
REG_BINARY: RefCount
Value: 0
Jon McLeod 1 Reputation point

2021-11-19T14:56:08.267+00:00

This is the answer. Thank you.
Farooq 5 Reputation points

2024-02-14T12:02:36.9533333+00:00

We are having the same issue. We have an RDS environment and time to time users get logged in with Temporary profile, when I check the FSlogix logs I am seeing the following error - Failed to open virtual disk: \server\Profiles\S-1-5-21-26711-2174_user\Profile_user.vhd (The process cannot access the file because it is being used by another process.)
What we done to try resolve this or at least try find the cause and reduce downtime is, we have removed AV from all RDS host, we have created a script which logs out all users at midnight but issue is still occurring. We have a case opened with Microsoft but unfortunately there has been no resolution. Another issue we had is where users could not sign into their Outlook, teams, Office profile on the host. Has anyone else experiencing this issue and has anyone managed to resolve this? Any help or suggestion would be much appreciated.

107 answers

CitrixMember 6 Reputation points

2021-07-26T20:56:31.29+00:00

We did solve the problem we experienced with the preview version of 2105 version. Prod version of the 2105 havent been implemented yet. So for no problems since middle of June. We did also from a earlier point implement the frxrobocopy solution and excluded all fslogix services from Antivirus realtime scan.

We're planning to go from preview version 2.9.7802.10873 to prod version 2.9.7838.44263 after summer.
Was this answer helpful?

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Андрей Михалевский 3,476 Reputation points

2021-07-23T09:45:07.973+00:00
Guys !!! I think I solved the problem.
1. Installing all updates on windows server 2019
2. updating FSLogix to the latest version.
3. disabling the DiagTrack service.
4. Copy C:\Windows\System32\Robocopy.exe to C:\Program Files\FSLogix\Apps\frxrobocopy.exe
5. Excluding C:\Program Files\FSLogix* from the antivirus.
6. I added a registry key for all users: AutoEndTasks (https://www.tenforums.com/tutorials/97821-turn-autoendtasks-restart-shut-down-sign-out-windows-10-a.html)
I don't know which of these helped, but the problem is gone for 3 days, before that it was every day.

In the dump I saw that the folder C:\Users\local_username\AppData\Local\Microsoft \Credentials was hanging in the application C:\Windows\System32\Robocopy.exe

Maybe point 4 solved the problem.
- So in the latest version I encountered a new problem. Sometimes local profiles are created instead of FSlogix.
Was this answer helpful?
SMB Solutions Cloud Services Pty Ltd 31 Reputation points

2021-07-25T23:39:12.053+00:00

Hi

The step 4 process of copying the robocopy.exe to frxrobocopy.exe - why did you come up with this step as there doesn't seem to be an existing frxrobocopy.exe in the target folder that gets replaced in this step?

I am still getting occasional profile locks so I am trying your suggested process and I wanted to understand how yo got to these specific steps.

Андрей Михалевский 3,476 Reputation points

2021-07-26T07:22:52.877+00:00

Hi. https://learn.microsoft.com/en-us/fslogix/fslogix-installed-components-functions-reference

frxrobocopy.exe
Frxrobocopy is used to exclude the file copy, done by the FSLogix agent, from Anti-virus scanners.

Since the FSLogix agent only copies files that have already been scanned by the AV product, the admin can use this feature to bypass scanning of the files to improve system performance.

To enable this frxrobocopy:

Copy robocopy.exe to the %Program Files%\FSLogix\Apps folder as frxrobocopy.exe
Add an exclusion for the anti-virus product for %Program Files%\FSLogix\Apps\frxrobocopy.exe
If frxrobocopy.exe exists in the FSLogix\Apps folder, it will be used and the AV product will not scan the file copying activity.

Андрей Михалевский 3,476 Reputation points

2021-07-26T07:29:08.367+00:00

I also forgot to mention that I added a registry key for all users: AutoEndTasks (https://www.tenforums.com/tutorials/97821-turn-autoendtasks-restart-shut-down-sign-out-windows-10-a.html)

I'm sure some of it definitely helped me. It's been one week and there are no problems.

CitrixMember 6 Reputation points

2021-07-26T20:57:46.573+00:00

Probabaly you havent configured the gpo setting for local profile in fslogix gpo.?

SMB Solutions Cloud Services Pty Ltd 31 Reputation points

2021-07-26T22:08:57.167+00:00

Which gpo setting are you specifically referring to - I was under the impression we have all these settings specified correctly

Андрей Михалевский 3,476 Reputation points

2021-07-27T04:57:59.827+00:00

Yes, for remove.

CitrixMember 6 Reputation points

2021-07-28T11:01:42.953+00:00

""Delete Local Profile when Fslogix should apply"

For upgrade to 2105 version we did uninstall fslogix from target device, and removed all fslogix reg entries.
Make sure also you dont have the replace on include groups if created with gpo.

See if your DNS client as well are running after startup, in some instances I have seen fslogix unable to find host fileshare.
Solved with update of local hosts file.

Assuming the 2105 primary did solve the problem in our scenario
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Much R 101 Reputation points

2021-07-23T06:49:15.903+00:00

Hi guys,

unfortunately the problem is not solved even with the latest version of FSLogix.

It also seems that Microsoft doesn't want to solve the problem ...
Microsoft has other problems too :-)

Regards
Was this answer helpful?
Robert Berggren 1 Reputation point

2021-07-23T07:54:26.637+00:00

That was bad news! Then I guess we will stick to daily reboots of our session host then, since that at least hide the problem some.

You noticed any other problems with latest version?
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Dlo 96 Reputation points

2021-07-16T14:23:45.413+00:00

From what remember its part of the windows search issue so it will be resolved in normal windows monthly updates but no time frame on when.
Was this answer helpful?
Андрей Михалевский 3,476 Reputation points

2021-07-16T14:45:36.833+00:00

This service is not running for us and the problem remains.

What does the search service have to do with it? This problem is over a year old.

I see that the problem is robocopy.

</modulelist>
</process>
<process>
<ProcessIndex>12614</ProcessIndex>
<ProcessId>55748</ProcessId
<ParentProcessId>4820</ParentProcessId>
<ParentProcessIndex>11122</ParentProcessIndex>
<AuthenticationId>00000000:000003e7</AuthenticationId>
<CreateTime>132708998376181524</CreateTime>
<FinishTime>132708998377180819</FinishTime>
<IsVirtualized>0</IsVirtualized>
<Is64bit>1</Is64bit>
<Integrity>Legal tag\Legal system level</Integrity>
<Owner>NT AUTHORITY\SYSTEM</Owner>
<ProcessName>robocopy.exe</ProcessName>
<ImagePath>C:\Windows\system32\robocopy.exe</ImagePath>
<CommandLine>C:\Windows\system32\robocopy.exe "C:\Users\s.kuznetsova\AppData\Roaming\Microsoft\Credentials" "C:\Users\local_s. kuznetsova1\AppData\Roaming\Microsoft\Credentials" /B /MT /R:5 /W:1 /XJD /COPYALL /IT /DCOPY:DAT /MIR</CommandLine>
<CompanyName>Microsoft Corporation</CompanyName>
<Version>10.0.17763.1490 (WinBuild.160101.0800)</Version>
<Description>Microsoft Robocopy</Description>.
<modulelist>

Translated with www.DeepL.com/Translator (free version)

Dlo 96 Reputation points

2021-07-16T14:48:02.817+00:00

Honestly I am not sure. We have this issue and we also have the issue with folders not being deleted.
My case was put on hold as its related to windows search. If you arent using windows search then not sure.

If you do not use windows search is your outlook searches slow and wrong? Outlook needs windows indexing / search for its search features other wise its normally pretty slow.

Daniel Viklund 22 Reputation points

2021-07-16T15:29:50.203+00:00

We are not using Windows Search either, and search is fast, its using online search. Windows Search is disabled for us.
No issue with Outlook, We had to run search for Windows 2016 servers, but not for 2019 servers.

Who told you it will be fixed with monthly update?

Dlo 96 Reputation points

2021-07-16T15:49:34.893+00:00

Interesting about the search I may have to try that then. I mean search works without indexing and windows search but its way better with it on.
My case with Microsoft on my issues that are similar to this is on hold due to it being fixed with windows search for a monthly update.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Daniel Viklund 22 Reputation points

2021-07-16T14:01:00.283+00:00

Looks like this problem still exist with the latest version 2.9.7838.44263
Was this answer helpful?

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

FsLogix - Unclean logoff causing locked files until server reboot

107 answers

Your answer