When using FSLogix Application Masking, the rule files (.fxr) and assignment files (.fxa) should be copied into C:\Program Files\FSLogix\Apps\Rules.
In a VDI environment you typically want the rule files and assignment files to be copied at logon from a central location. However an end-user does not have the permissions to write into the folder C:\Program Files\FSLogix\Apps\Rules.
Elevated Tasks from VMware User Environment Manager can help with this.
- Step 1:
- create a subfolder “FSLogix” on your netlogon share
- save the .fxr and .fxa files in this FSLogx folder
- create a batch file “Copy_FSLogix_AppMasking_Rules.bat” with the following content
- copy /Y \\<yourdomaincontroller>\netlogon\FSLogix\*.fx* C:\”Program Files”\FSLogix\Apps\Rules
- Step 2:
- In VMware Dynamic Environment Manager creat a Privilege Elevation setting from the type “Elevated task” where you elevate the “C:\Windows\System32\cmd.exe” with the argument “/c %logonserver%\netlogon\FSLogix\Copy_FSLogix_AppMasking_Rules.bat”
- Step 3:
- In VMware Dynamic Environment Manager create a logon task where you choose the privilege elevation setting created above as the elevated task to run (drop-down box) – ensure to ruin the logon task asynchronously
Now when
When an end-user now logs on the .fxr and .fxa files will be copied to the folder C:\Program Files\FSLogix\Apps\Rules
While this is a viable method for deploying the FSlogix rules files, I would just point out that simple AD group policy preferences can achieve the same thing without the need to use DEM privilege escalation. The method here is nice in that it allows you to keep all aspects of deployment of the FSLogix rules files managed within DEM but if that is not a concern for you then GPP is probably a better and more simple option.