How to resolve the FsLogix INetCache access denied issue

Issue #

You receive the following error in the FsLogix profile container log:

[ERROR:80070005]   SHSetKnownFolderPath failed with access denied. This can occur when the DisablePersonalDirChange group policy has been enabled, preventing FSLogix from changing the location of the INetCache. (Access is denied.)

The following locations in the registry of the Citrix VDA server or RDS session host server have the following value

DisablePersonalDirChange set to value = 1. This registry key is usually located under the following registry paths:

  • HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
  • HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
  • Computer\HKEY_USERS\[USERSID]\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Symptoms #

The FsLogix system cannot change and manage the INetCache folder in the user profile. This can have multiple side effects, including an error when trying to launch Outlook.

Outlook could not create the work file. Check the temp environment variable.

Other symptoms may include various Office files not being able to open, if they are reading from the INetCache location.

Resolution #

Ensure that you set the "User Configuration\Administrative Templates\Desktop\Prohibit User from manually redirecting Profile Folders" Group Policy to "Disabled". Otherwise the FsLogix system will not be able to change the path of the INetCache folder.

You can find more detailed guidance and step-by-step procedures for analyzing and troubleshooting Citrix Virtual Apps and Desktops organized by category in my Citrix Virtual Apps and Desktops Troubleshooting e-book.

Sources #

Powered by BetterDocs