EnglishFrançaisDeutschEspañolItaliano日本語한국어NederlandsPortuguês (Brasil)中文 (简体)中文 (繁體, 台灣)
Skip to main content

July 24, 2026

Dynamic Environment Manager FlexEngine Advanced Settings in NoAD Mode

Use these advanced FlexEngine settings to configure Dynamic Environment Manager in specific scenarios.

SettingXML AttributeDescription
Symantec Endpoint Protection DirectFlex export fixDirectFlexExportFallback="1"Set the value to 1
DirectFlex compatibility fix for BeyondTrust and AvectoDirectFlexRenewHook="0"Set the value to 0
Allow processing ADMX-based settings, application blocking, privilege elevation and Horizon Smart Policies configuration during a sessionAllowAdmxInSession="1"Set the value to 1
Remove local profile at logoffRemoveLocalProfileAtLogoff="1" SkipRemoveLocalProfileAtLogoffForGroupsOfUsers="User GroupNames" SkipRemoveLocalProfileAtLogoffForGroupsOfDevices="Device GroupNames" SkipRemoveLocalProfileAtLogoffForAdminGroup="1"
Note: All settings and user data stored in the user profile are deleted.Set the value of RemoveLocalProfileAtLogoff to 1 to let Windows remove a local profile at logoff.
To skip removal of local profile at logoff for certain users or devices, specify a comma-separated list of group names. For example,
SkipRemoveLocalProfileAtLogoffForGroupsOfUsers="UserGroup1, UserGroup2"
SkipRemoveLocalProfileAtLogoffForGroupsOfDevices="DeviceGroup1, DeviceGroup2"Set the value of SkipRemoveLocalProfileAtLogoffForAdminGroup to 1 if you do not want to remove local profile at logoff for the members of the local administrators group.
Note: Enabling this feature can impact the logoff performance in some scenarios like multi-user (RDSH).
Disable DirectFlex - option 1DisableDirectFlex="1"
  • Set the value to 1 to Disable DirectFlex
  • Set the value to 2 to Disable DirectFlex and process DirectFlex config files during logon and logoff
Printer mapping - number of retries when mappingMapPrinterRetryCount="20"Set the value to any number (default 20) (decimal)
Printer mapping - number of retries when unmappingUnmapPrinterRetryCount="20"Set the value to any number (default 20) (decimal)
Printer mapping - number of retries for spooler-related mappingSpoolerRetryCount="5"Set the value to any number (default 5) (decimal)
Printer mapping - Delay (in ms) between spooler-related retriesSpoolerRetryWait="1000"Set the value to any number (default 1000) (decimal)
Special Drive Mapping LogicSpecialDriveMappingLogic="2"Set the value to 2
Disable DEM agent features - Disable during logon onlyUEMActionDriveMappingDuringLogon="0"Set the value to 0
Disable DEM agent features - Disable during logon onlyUEMActionFileTypeAssociationDuringLogon="0"Set the value to 0
Disable DEM agent features - Disable during logon onlyUEMActionPrinterMappingDuringLogon="0"Set the value to 0
Disable DEM agent features - Disable during logon onlyUEMActionShortCutDuringLogon="0"Set the value to 0
Disable DEM agent features - Disable completelyUEMActionPrivilegeElevation="0"Set the value to 0
Disable DEM agent features - Disable completelyUemActionAdmx="0"Set the value to 0
Disable DEM agent features - Disable completelyUEMActionApplicationBlocking="0"Set the value to 0
Disable DEM agent features - Disable completelyUEMActionDriveMapping="0"Set the value to 0
Disable DEM agent features - Disable completelyUEMActionEnvVar="0"Set the value to 0
Disable DEM agent features - Disable completelyUEMActionFileTypeAssociation="0"Set the value to 0
Disable DEM agent features - Disable completelyUEMActionFolderRedirection="0"Set the value to 0
Disable DEM agent features - Disable completelyUEMActionHorizonPolicy="0"Set the value to 0
Disable DEM agent features - Disable completelyUEMActionImport="0"Set the value to 0
Disable DEM agent features - Disable completelyUEMActionPrinterMapping="0"Set the value to 0
Disable DEM agent features - Disable completelyUEMActionShortcut="0"Set the value to 0
Disable DEM agent features - Disable completelyUEMActionTask="0"Set the value to 0
Disable DEM agent features - Disable completelyUemActionHideDrive="0"Set the value to 0
Disable DEM agent features - Disable completelyUemActionAppVolumes="0"Set the value to 0
Disable DEM agent features - Disable completelyDisablePersonalization="1"Set the value to 1
Disable DEM agent features - Disable completelyUemActionTriggeredTask="0"Set the value to 0
Disable DEM agent features - Disable completelyUemActionMigrate="0"Set the value to 0
Environment Variable prefixEnvVarPrefix="anyvalue"Set to any value to configure another prefix than 'UEM' for the environment variables %UEMSessionID%, %UEMConfigShare%, %UEMScripts%, %UEMProfileArchiveBackups%, %UEMProfileArchives%, and %UEMLogFile%.
Validate .REG fileValidateRegFile="1"Set the value to 1
Compatibility fix for Sophos EndPoint ProtectionDirectFlexFollowJMPHook="1"Set the value to 1
Compatibility fix for Horizon smartcard redirectionDirectFlexHookLoadLibrary="0"Set the value to 0
Global excludesGlobalExcludesConfigFile="filename.INI"Use this setting to apply global exclusions across all Flex config files. Specify the absolute or relative path to your global excludes Flex config file here. If a relative path is specified, it is resolved against the General folder.
Diagnostics: Collect performance logPerformanceLogFilename="perflog.blg"
PerformanceCounter1="..."
PerformanceCounter2="..."
...
PerformanceCounter10="..."
Enable this setting to collect a binary performance log while DEM is performing a path-based import. This log can be subsequently viewed and analyzed in Windows Performance Monitor. If only the performance log filename is configured, the following performance counters are collected.
  • \Processor(_Total)\% Processor Time
  • \System\Context Switches/sec
  • \System\Processor Queue Length
  • \PhysicalDisk(_Total)\Avg. Disk Queue Length
  • \PhysicalDisk(_Total)\Disk Reads/sec
  • \PhysicalDisk(_Total)\Disk Writes/sec
  • \PhysicalDisk(_Total)\Avg. Disk sec/Transfer
  • \Memory\% Committed Bytes In Use
  • \Memory\Page Faults/sec
If performance counters are configured, only the configured counters are collected.
Diagnostics: Log CPU and I/O statistics at logon and logoffLogProcessStatsAtLogonAndLogoff="1"Set the value to 1 to log CPU and I/O statistics at logon and logoff
Diagnostics: Log CPU and I/O statistics for registry importLogProcessStatsForRegistryImport="1"Set the value to 1 to log CPU and I/O statistics for registry import
Diagnostics: Log CPU consumptionCpuConsumptionLimit="threshold"Enable this setting to log CPU consumption of other processes that were running while DEM performed a path-based import or export. CPU usage is logged for each process that consumed more CPU than the configured threshold (in milliseconds)
Diagnostics: Log slow callsCallTimeLimit="threshold"Enable this setting to configure how long certain calls can take (in milliseconds) before a warning is logged
Diagnostics: Enable verbose logging for ADMX-based settings, application blocking, privilege elevation and Horizon Smart PoliciesAdmxLogging="1"Set the value to 1
Prevent export for failed importSkipExportForFailedImport="1"Set the value to 1 to prevent exports for profile archives that failed to import.
This solves the issue where a transient failure during import causes settings to be lost on export. However, if a profile archive is corrupted, the archive must be manually reset or restored to ensure that subsequent import and export actions are completed successfully.
DFS namespace support for application blocking ApplicationBlockingSupportDFSPath="1"Set the value to 1
Disable undo at logoff FolderRedirectionUndo="0"Set the value to 0
Folder redirection - Disable folder name localization FolderRedirectionLocalization="0"Set the value to 0
Multiple concurrent sessions - Perform single import and exportMultiSession="0"Set the value to 0
Multiple concurrent sessions - Apply Horizon Smart Policies in every sessionHorizonSmartPoliciesMultiSession="0"Set the value to 0
Only perform path-based export ExportOnly="1"Set the value to 1
Override existing user policy registry settings AllowAdmxOverride="1"Set the value to 1
Silo-specific Flex config filesSiloIniFilePath="path"Specify the absolute path with silo-specific configuration files
Silo-specific suffixSiloSuffix="suffix"Specify silo suffix to use. It defaults to last component of silo-specific Flex config files path
Process environment variable settings before folder redirectionProcessEnvVarBeforeFolderRedirection="1"Set the value to 1 to process DEM environment variables settings before folder redirection settings
Override previously hidden drive lettersOverrideHideDrives="1"Set the value to 1 to override the existing Hide Drives Settings.
Custom Commands
Custom command to run before path-based importPreExecutionCommand="command"Specify the command to run
Custom command to run after path-based import PostLogonCommand="command"Specify the command to run
Custom command to run before path-based export PreLogoffCommand="command"Specify the command to run
Custom command to run after path-based export PostLogoffCommand="command"Specify the command to run
Expand environment variables in custom command settings ExpandCustomCommands="1"Set the value to 1
Custom commands as SYSTEM (requires DEM 2303 or later)
Custom command to run before path-based import (requires DEM 2303 or later) PreLogonCommandAsSystem="command"Specify the command to run. This command is executed before its PreExecutionCommand user counterpart.
Custom command to run after path-based import (requires DEM 2303 or later)PostLogonCommandAsSystem="command"Specify the command to run. This command is executed after its PostLogonCommand user counterpart.
Custom command to run before path-based export (requires DEM 2303 or later)PreLogoffCommandAsSystem="command"Specify the command to run. This command is executed before its PreLogoffCommand user counterpart.
Custom command to run after path-based export (requires DEM 2303 or later)PostLogoffCommandAsSystem="command"Specify the command to run. This command is executed after its PostLogoffCommand user counterpart.
Expand environment variables in custom command settings ran as SYSTEM (requires DEM 2303 or later)ExpandCustomCommandsAsSystem="1"Set the value to 1
Use built-in registry parser EnableRegParser="1" Set the value to 1 to use the built-in registry parser instead of regedit.exe or reg.exe to import registry settings.
License location LicenseLocation="path to FlexEngine.lic"Set the value to the fully-qualified absolute path of the license file, to override the default location where the DEM agent expects to find its license. For example, LicenseLocation="C:\Users\test\Desktop\License.xml" By default, the DEM agent finds its license in the General\FlexRepository\AgentConfiguration\License.xml file on the config share.
Disable import and export DisableImportExportForGroupsOfUsers="UserGroupNames" DisableImportExportForGroupsOfDevices="DeviceGroupNames" Specify a comma-separated list of group names to disable import and export for certain users or devices. For example, DisableImportExportForGroupsOfUsers="UserGroup1,UserGroup2" DisableImportExportForGroupsOfDevices="DeviceGroup1,DeviceGroup2,DeviceGroup3"
Secondary logging on Horizon (requires DEM 2312 or later)MaximumHorizonLogFileSize="1024" Enable this setting to specify a different maximum size for secondary logging on Horizon.By default, the secondary log files are recreated when they reach a size of 512 KB. To disable creating secondary log files, set the maximum size to 0.
Delegate pending DirectFlex exports to child process (requires DEM 2312 or later)DelegatePendingExports="0" PendingExportsTimeout="timeout" If a DirectFlex import for an App-V 5 application has taken place during the session, logoff processing of pending DirectFlex exports is delegated to a child process by default. This prevents issues that sometimes occur when performing an App-V 5 export during logoff.
  • Setting DelegatePendingExports to 0 - never delegates pending DirectFlex exports (this might cause pending App-V 5 exports to fail).
  • Setting DelegatePendingExports to 1 - always delegates pending DirectFlex exports, regardless of whether an App-V 5 import was performed during the session.
By default, the overall DEM logoff processing will wait for 120 seconds for the delegated export to complete. This timeout can be modified by configuring PendingExportsTimeout="timeout".
Ignore computer name for run-once flag files (requires DEM 2412 or later) RunOnceIsComputerAgnostic="1" This setting is applicable only when the Run Once option is enabled for the user environment settings.
When you enable this setting, the DEM agent checks if any flag file exists for a user environment setting, regardless of the computer name. If the flag file already exists for the user, a "fallback" flag file will not be created.
Note: This setting has a similar behaviour compared to the existing runOnceSpecial="1" attribute. However, if you are using the runOnceSpecial attribute, it creates a "fallback" flag file based on the computer name.
Ignore computer name for run-once flag files (requires DEM 2412 or later) RunOnceIsComputerAgnostic="1" This setting is applicable only when the Run Once option is enabled for the user environment settings.
When you enable this setting, the DEM agent checks if any flag file exists for a user environment setting, regardless of the computer name. If the flag file already exists for the user, a "fallback" flag file will not be created.
Note: This setting has a similar behaviour compared to the existing runOnceSpecial="1" attribute. However, if you are using the runOnceSpecial attribute, it creates a "fallback" flag file based on the computer name.
DirectFlex compatibility fix: Change process exit logic (requires DEM 2412 or later) DirectFlexHookProcessExit="0" In certain cases, DirectFlex logic might interfere with the exit of DirectFlex-enabled UWP apps. As a result, no DirectFlex export is performed at that time, as the process does not fully exit.
Set this value to 0 to change the process exit logic.
Use workaround for default applications and file type associations (requires DEM 2503 or later) UseUCPDWorkaround="0" Previously, a separate configuration for the UCPD.sys workaround was required to correctly process default application settings and file type associations. Starting with Dynamic Environment Manager 2503, the workaround logic is incorporated into the product to provide a seamless and reliable solution for managing default browser and PDF FTA settings on Windows systems. By default, this feature is enabled.

Configure UseUCPDWorkaround="0" to revert to the original behaviour.

Was this page helpful?

Provide feedback for this topic

Was this topic helpful?

Please do not include any personal or confidential information.

Generating link…