ProfileUnity Hot Fix List

Superseded by HF3, which is cumulative and includes every fix listed here.

Client HF2 (6.9.5.9721) — 9-1-26

• Updated 7-Zip to 26.2
• Updated .NET Core to 10.0.11
• Updated the FlexApp filter driver to the 2024 GA version for improved performance and stability
• Resolved an issue where new files and folders could not be created in a FlexApp package's protected directories even though the granted permissions were applied
• Resolved an issue where a failed AD group enumeration left an incomplete cache that persisted until the cache was cleared or a full enumeration succeeded
• Resolved an issue where a Drive Mapping rule failed before the credentials defined in the rule were applied when the user lacked access to the target path
• Resolved an issue where Application Restriction rules did not match folder names beginning with a dot
• Resolved an issue where Application Restriction policies were skipped when an installer candidate failed elevation
• Resolved an issue where Application Restriction candidates were re-hashed for every hash rule, delaying enforcement on large or UNC binaries; the candidate is now hashed once
• Resolved an issue where a user could open and edit their own Application Restriction policy (.pol) file
• Removed default whitelist hashes for legacy tools that are no longer shipped and updated the stale rsync.exe hash
• Resolved an issue where an upgrade run as SYSTEM reported success but did not install when an existing LwL.ProfileUnity.Client.Startup.Update.exe.config remained in C:\Windows\Temp

Superseded by HF2, which is cumulative and includes every fix listed here.

Client HF1 (6.9.5.9678) — 7-2-26

• Updated 7-Zip to 26.1
• Resolved an issue where SID-scoped cache tokens weren't matched by suffix at logoff, leaving FileCache token files uncleaned
• Resolved an issue where app modules called by triggers could run their logoff more than once
• Resolved an issue where an incomplete AD group list could be cached and used by Filters
• Resolved an issue where Application Restrictions generated spurious policy directory notifications during staging file promotion
• Resolved an issue where Application Restrictions policy mode incorrectly switched from blacklist to whitelist when the default whitelist rules were the only Allow rules present
• Resolved an issue where client failed to remove duplicate entries for Application Restriction policies with escaped special characters
• Resolved an issue where running startup/update exe as SYSTEM user wiped the C:\Windows\Temp folder
• Resolved an issue with FlexApp Shortcut Validation vs. CAP Playback timing
• Resolved an issue where CmdService stopped firing
• Resolved an issue where a license check was performed during engine deactivation of FlexApp One packages

Superseded by HF3, which is cumulative and includes every fix listed here.

Console HF2 (6.9.5.9721) — 8-14-26

• Updated 7-Zip to 26.0.2
• Updated MailKit, MimeKit and SharpCompress to address reported security vulnerabilities
• Updated Microsoft.OpenApi in the Console and License Server to address a reported security vulnerability
• Updated chart.js and moment.js to address reported security vulnerabilities
• Fixed an issue where Console logon failed for users with an alternate UPN suffix, including lookups across trusted forests
• Fixed an issue with logon resolution and domain stamping in large and multi-domain Active Directory environments
• Fixed an issue where AD domains were enumerated on every Console load; domains are now enumerated at service startup and served from a cached list, and the list still completes when a subdomain is unreachable
• Fixed an issue where adding a node to a cluster returned a 500 error on the added node's Console
• Fixed an issue where "Go to Stand-Alone" returned a node to standalone mode without removing it from the remaining cluster nodes
• Fixed an issue where Secure Banner text was displayed as plain text instead of HTML
• Fixed an issue where saving a Configuration with an App-V rule Action of "Remove All" returned an error and the Configuration was not saved
• Fixed an issue where ProcessUtil.RetryProcess task create process returned entries were not formatted correctly in the log

Superseded by HF2, which is cumulative and includes every fix listed here.

Console HF1 (6.9.5.9678) — 7-2-26

• Updated 7-Zip to 26.1
• Fixed an issue where CAC messages filled the ProU log when Debug is enabled
• Fixed an issue where Configuration PDF export was missing rule filter fields for User Defined Scripts
• Fixed an issue where Administrative Templates "Update ADM files" did not work
• Fixed an issue where larger configurations with retention would get a document size error

Superseded by 6.9.5.9750, which is cumulative and includes every fix listed here.

FlexApp (6.9.5.9721) — 9-1-26

• Resolved an issue where a FlexApp package written to a cloud location lost its .fa1 companion file — the child disk merge and cloud upload path stripped the .fa1 from the uploaded package, affecting the create, clone, import, and extend workflows

Superseded by 6.9.5.9721, which is cumulative and includes every fix listed here.

FlexApp (6.9.5.9678) — 7-2-26

• Resolved an issue where a license check was performed during the deactivation of FlexApp One engines

Client Tools — Updated 9-18-25

client-tools_687-r2-hf4.zip  |  README.txt

R2 Client HF4 (6.8.7.9390) — 9-18-25

• .NET Core updated to 8.0.20; 7-Zip updated to 25.01
• Adds support for Windows 11 25H2 (10-07-25)
• Resolves an issue where ProfileDisk users may receive a temporary profile on persistent machines that are not regularly rebooted

R2 Client HF3 (6.8.7.9343) — 7-31-25

• .NET Core updated to 8.0.18; 7-Zip updated to 25.00
• Added configurable retries to FlexApp module when attempting to read remote package XML files

R2 Client HF2 (6.8.7.9309) — 6-27-25

• .NET Core updated to 8.0.17
• Added support for Omnissa Horizon 8 2412 (8.14) and 2503 ESB (8.15)
• Added support in FlexApp for capturing Black Ice ColorPlus and other printers with multiple, custom port names
• Resolved an issue with hung login.microsoftonline.com calls
• Resolved an issue in R2-HF1 with the default value for OfflineTestDnsEntry, now set to %LOGONSERVER%
• Resolved an issue with AD group Filter and offline logins caching incomplete AD group token
• Resolved an issue with AppData entries for on-boot, cloaked FlexApp assignments only replaying for the first user to login
• Resolved an issue reversing some FlexApp packages with Fonts that was preventing subsequent playbacks in persistent scenarios

R2 Client HF1 (6.8.7.9256) — 5-5-25

• .NET Core updated to 8.0.16; Updated FlexApp Filter Drivers (2024)
• Updated AppStream 2.0 Pre-warm Manifest for early EBS volume block hydration
• Resolved an issue where anti-virus scanning FlexApp paths can cause excess memory usage
• Resolved an issue relating to multi-threading FlexApp playbacks
• Resolved an issue bulk mounting FlexApp packages now allowing for faster mount times
• Resolved an issue handling malformed Entra ID Filter information that prevented Client from running
• Resolved an issue where Windows only returns a subset of an AD user's group memberships if the machine is offline and rebooted
• Added VirtFsService.dll.config FlexApp setting ProcessShortPaths — set to False to disable legacy 8.3 DOS paths for improved I/O efficiency

ProfileUnity Console — Updated 9-18-25

ProfileUnityConsole_6.8.7R2-HF2.zip  |  README.txt

R2 Console HF2 (6.8.7.9390) — 9-18-25

• Updates ProfileUnity Management Console to 6.8.7.9390 (9-16-25)
• Updated 7-Zip to 25.01
• Adds new ProfileUnity.Host.exe.config option GetForestChildren — when false, disables gathering child Domain information from other AD Forests. Enable if not seeing all Domains.

ProfileUnityConsole_6.8.7R2-HF1.zip  |  README.txt

R2 Console HF1 (6.8.7.9320) — 7-8-25

• Improves reliability of Active Directory-related communications
• Resolves an issue in 6.8.7.9216 (R2) preventing AVD App Attach sync process from completing

Client Tools — Updated 01-15-25

client-tools_687-hf3.zip  |  README.txt

R1 Client HF3 (6.8.7.9146) — 01-15-25

• Resolves an issue in 6.8.7 affecting the execution of Shortcut Cleanup and AppV Module
• .NET Core updated to 8.0.12

R1 Client HF2 (6.8.7.9138)

• Resolves an issue with certain combinations of filter conditions

R1 Client HF1 (6.8.7.9106)

• .NET Core updated to 8.0.11
• Resolves an issue processing Entra ID group filters — Also requires ProfileUnity Console 6.8.7 R1 HF1 or later

ProfileUnity Console — Updated 01-07-25

ProfileUnityConsole_6.8.7-HF1.zip  |  README.txt

R1 Console HF1 (6.8.7.9112) — 01-07-25

• Resolves an issue logging into 6.8.7 with certain complex passwords
• Resolves an issue preventing the mixing of Entra ID group filters with different Tenant IDs in a single Configuration Module
• Resolves an issue creating new Entra ID group filters

Client Tools — Updated 5-24-24

client-tools_686r1-hf3.zip  |  README.txt

HF3 (6.8.6.8906) — 5-20-24

• Resolves an issue with missing FlexApps during simultaneous user logons with matching assignments
• Updates .NET Core Hosting Bundle and Desktop Runtimes to 6.0.30

HF2 (6.8.6.8872) — 4-22-24

• Resolves an issue where an RDS/AVD user may not see any FlexApp shortcuts
• Resolves an issue where some FlexApp Ones, on the second logon, cause Winlogon to hang, instantly sign out, or ask to start the LW Container Service

HF1 (6.8.6.8838) — 3-15-24

• Resolves an issue with Azure Security Group lookup failures causing delays
• Resolves an issue in 6.8.6 R1 processing INI paths containing environment variables
• Resolves an issue in 6.8.6 R1 reading prior versions' Azure Security Group info from INI
• Resolves an issue in 6.8.6 R1 affecting offline processing of previously-cached INI files

Client Tools — Updated 8-15-23

client-tools_685r1-hf7.zip  |  README.txt  — HF7 through HF1 fixes on file; refer to the archived README for full details.

Version history covered: 6.8.4 R2, 6.8.4 G4/R1, 6.8.3 R2/R1, 6.8.2.