Access to this page requires authorization. You can try signing in or changing directories . Access to this page requires authorization. You can try changing directories . An upcoming change to Windows, included in the April 2026 Windows Server update, the default Kerberos encryption type is changing from RC4 to AES-SHA1. File shares hosting FSLogix containers that aren't upgraded to AES-SHA1 might have access issues after this change is applied. To avoid disruption, complete the upgrade to AES-SHA1 before installing the update. Customers who have already upgraded to AES-SHA1 aren't affected. For more information, see the FSLogix blog: Action required: Windows Kerberos hardening (RC4) may affect FSLogix profiles on SMB storage . FSLogix enhances and enables a consistent experience for Windows user profiles in virtual desktop computing environments. FSLogix isn't limited to virtual desktop environments, but could be used on physical desktops where a more portable user experience is desired. Here are a few things that FSLogix provides: Roam user data between remote computing session hosts. Minimize sign in times for virtual desktop environments. Optimize file I/O between host/client and remote profile store. Provide a local profile experience, eliminating the need for roaming profiles. Simplify the management of applications and 'Gold Images'. FSLogix provides customers with both ease of configuration and various levels of flexibility. This can lead to limitless configuration options of which, can have unintended consequences. FSLogix can be a complex solution with various dependencies on other systems and infrastructure. We recommend that you engage with resources who have the following skill set or have these skills inherently: Identity and Authentication Storage design and architecture Active Directory, Azure Active Directory, or Azure Active Directory Domain Services

Windows Deployment (Server or Desktop) Application Compatibility FSLogix provides unique integration and advantages when used in an Azure Virtual Desktop environment. Key capabilities Redirect user profiles to a storage provider . Mounting and using the profile from a storage provider eliminates delays often associated with solutions that copy profiles to and from a network location. Redirect only the portion of the profile that contains Office 1 data by using an ODFC container . The ODFC container allows an organization already using an alternate profile solution 2 to enable Microsoft 365 applications in multi-session desktop environments. Applications use the user's profile as if it were on the local disk. FSLogix uses a filter driver to virtualize and redirect the profile at the file system level. Applications are unaware the profile is on the network. Obscuring the redirection is important because many applications can't work properly with a profile stored remotely. Profile containers used with Cloud Cache to provide high availability and disaster recovery profile solutions. Application Rule Sets manage access to an application, font, printer, or other items. Access can be controlled using users, groups, IP Addresses, and other criteria. Application Rule Sets significantly decrease the complexity of managing large numbers of gold images. 1 Office data includes, but is not limited to Microsoft 365 applications, OneDrive, Teams, SharePoint, and OneNote. 2 Under most circumstances, ODFC containers are not used with Profile containers simultaneously. FSLogix Prerequisites FSLogix Release Notes Was this page helpful? Need help with this topic? Want to try using Ask Learn to clarify or guide you through this topic? Additional resources Last updated on 2026-03-30