Contact Sales and Support: (678) 871-9647 | This email address is being protected from spambots. You need JavaScript enabled to view it.

Contact Sales and Support: (678) 871-9647
This email address is being protected from spambots. You need JavaScript enabled to view it.

How to implement PolicyPak and FSLogix Profile Containers

The following walkthrough provides a very detailed explanation about how to implement PolicyPak and FSLogix together to put your End-User environment on steroids!

First download the trial software through the following link:

For existing customers - download the software directly from your own personal PolicyPak Customer Portal


Download the latest PolicyPak software


Save the files somewhere that is accessible from your management server or domain controller and Virtual Desktop master image(s).

Note: The Admin Console doesn’t have to be installed on a Domain Controller. It’s just that I use mine for this article. You can install the Admin Console on every server you want within your network.

Install the Admin Console


Walk through the simple next, next finished installation


Agree with the terms – Click next


Click on Next


The Admin installation is now finished

Switching over to the client – Virtual Desktop side


Please start the Group Policy Management Console of Windows when the installation is finished successfully to see if the PolicyPak plugins are loaded.

Create a new Group Policy Object



Name it whatever you want and Edit the Policy.

Create multiple policies for your environment and define which Organizational Unit needs to be assigned.


As you can see,all PolicyPak features are now visible within Group Policy Management.

This is the place where we need to define all the future User and Computer settings within PolicyPak.


You’ll need to import the trial or permanent license before you can start with the Policy Configuration of PolicyPak.

Right click on PolicyPak in the GPMC Editor Console


Click on Import and search for your license file.

Need  additional help regarding the license file? Please check out this video.


You can start with the Configuration of all the advanced PolicyPak settings for your End-User environment!

We now need to install the Client-Side software of PolicyPak on our End-User – Virtual Desktop master image – or persistent Terminal / RDS server environment.

Install the Client-Side Extension software in your Virtual Desktop Master image.


Click on Next


Agree with the license term. Click on next


Click on Next


The setup on the Virtual Desktop side is now finished.


We’re finished with the PolicyPak installation and we can now continue with the FSLogix Profile Container installation and configuration process.

Firstly, we’ll need to have a SMB file share with the following random name.


Be sure to share the Container folder.

Assign everyone Full Control.

(we take care of the rights on the NTFS file system level.)


Define the following NTFS right on the Container folder.

Note: You can remove all the inheritance rights as well if you want. 


Set at least the minimum rights as named in the above table. Please see the screenshot

below for the most import special permission settings at the user level.


Download the FSLogix Apps Software – request a trial here


Configure the following Group Policy settings and assign them to the Organizational Unit of your Virtual Desktop environment.

Note: The ADMX files are included in the root of the FSLogix Apps software. I’m using a XenApp – Multi-User environment for this article. So, for this reason I activated Multi Session support.


Make sure that at least the following FSLogix Profile Container - Policy Settings are activated within PolicyPak and assigned to the Organization Unit of your Virtual Desktop environment. 


Start the FSLogixAppsSetup.exe 


Put in your FSLogix License key.

Accept the license terms and Click Install.


The installation is finished.


You are now ready to use FSLogix Profile Containers and PolicyPak together – Get ready to put your Digital Workspace on steroids!

What did we solve together?

After you implement FSLogix Profile Containers and PolicyPak together your end-user environment will offer an improved user  experience and you’ve also created limitless Application and user configuration possibilities within your Active Directory environment.

See below for the outcome of Citrix Director of an Citrix XenApp environment implemented with FSLogix Profile Containers and PolicyPak. The average log-on duration is 10 seconds or less, as opposed to the previous time of 60 seconds - which is awesome!


The second benefit of using FSLogix Profile Containers is the Outlook startup time. Once your implementation is complete, you will see that the Outlook Startup process is faster than ever before, including searching inside your email because the Windows Search Database is working in your VDI environment! 


Bringing the end-user native local experience back to where it belongs – to the end-user.

See it for yourself in the expression video below.

With PolicyPak now, you can dynamically and flexibly deliver application settings alongside Group Policy (or your own systems management utility). So when the application is installed, the correct settings, for the correct user or computer collection – are also automatically installed.

Let’s have a look at the Advanced Configuration items which are now available within PolicyPak.

Admin Template Manager

Consolidate existing Group Policy settings; deploy user side Group Policy settings to computers.


Application Settings Manager

Configure and lockdown thousands of user settings on hundreds of commonly-used applications, including Firefox, Java, Flash, IE and Adobe products. Manage computers using your existing GP and/or SCCM setup, and also manage  roaming computers and non-domain joined machines.


File Type Associations Manager

Quickly map which application to open with which file type. Associate the application’s file extensions with the correct application, and keep those associations applying, even if the user changes them, or the computer goes offline.


Least Privilege Manager

Kill admin rights on your Windows machines. Elevate only the applications you need and/or bypass UAC prompts with Standard User rights.


Least Privilege Manager - SecureRun

Stop Ransomware and other unknown zero day attacks with PolicyPak SecureRun(TM). Block


Windows 10 VDI – Start Screen Manager

PolicyPak Start Screen & Taskbar Manager easily lets you place Desktop, Windows Universal and Edge tiles into your desired Start Screen groups; and keeps those groups locked so users cannot work around them.


Do you still need to be convinced to use PolicyPak?  Check out this article  to learn even more benefits to using PolicyPak alongside our FSLogix Profile Container solution together!

Get started now!