ProfileUnity Client Configuration File Tuning Reference – Liquidware Customer Support

LwL.ProfileUnity.Client.exe.config — Settings Reference & Tuning Guide

⚠️ Review with Liquidware Support Before Making Changes
All configuration changes to LwL.ProfileUnity.Client.exe.config should be reviewed with Liquidware Technical Support before being applied to production. Contact support.liquidware.com to open a case.

ℹ️ Advanced Configuration — For Experienced Administrators
The settings covered in this article are intended for experienced administrators working directly with ProfileUnity client configuration files. Most deployments will not require changes to these settings.

📄 Contents

› Overview
› Logging Settings
› Core Execution Settings
› Portability Settings
› Printer Settings
› Drive Mapping
› Postflight Settings
› Offline Detection Settings
› Shortcut Settings
› Registry Module Settings
› Application Restrictions Settings
› FlexApp Integration Settings
› Azure Blob Storage Settings
› Parallelism & Performance Settings
› Additional Timeout & Retry Settings
› Common Scenarios & Recommended Adjustments
› Quick Reference

Overview

LwL.ProfileUnity.Client.exe.config is the primary runtime configuration file for the ProfileUnity client executable — the most settings-rich configuration in the client stack, governing how ProfileUnity processes policy at logon and logoff.

Settings in this file control:

Logging behavior and verbosity
Profile portability (file and registry copy/save operations)
Printer mapping timeouts and retry behavior
Drive mapping timeouts
Offline detection for AD group filter evaluation
FlexApp VHD mounting and package file retries
Azure Blob Storage transfer tuning
Parallelism and performance levers
Postflight and shortcut processing
Registry module behavior
Application Restrictions notification behavior

The file is located in the ProfileUnity client installation directory and is structured as a standard .NET application configuration file containing a <userSettings> section and a <runtime> section.

ℹ️ <runtime> section
The <runtime> section contains assembly binding redirects and should never be edited manually. All tunable settings are in the <userSettings> section.

Logging Settings

Logging configuration is the first area to review when troubleshooting client behavior. These settings control log output verbosity, file naming, and per-module log separation.

Setting	Default	Options / Range	Notes
`LogLevel`	`Info`	Trace \| Debug \| Info \| Warn \| Error \| Fatal	Info is appropriate for production — captures module start/stop events and key actions without flooding. Raise to Debug when actively troubleshooting portability or module failures.
`LogPath`	(empty)	Any local path	Directory for log output. Empty = default location. Set to redirect logs to a specific volume or network share.
`LogName`	(empty)	Any filename	Log filename override. Empty = default name. Set when log aggregation tooling requires a specific filename.
`LogPerModule`	`True`	True \| False	When True, each ProfileUnity module writes to its own log file. Strongly recommended — makes isolating failures significantly easier. Set False only when aggregation tooling requires a single input file.
`OneLog`	`False`	True \| False	Collapses all log output into a single file regardless of LogPerModule. Use only when aggregation tooling has a hard single-file requirement. LogPerModule takes precedence over OneLog.

Core Execution Settings

Run Mode & INI File Control

These settings control how the client locates policy and executes modules.

Setting	Default	Notes
`Ini`	(empty)	Path to a specific ProfileUnity INI (policy) file. Empty = client locates the INI automatically. Set explicitly only when testing against a non-standard policy file.
`Mode`	(empty)	Execution mode override. Empty = standard logon mode. Typical values: `Logoff`, `PostFlight`. Normally passed via command-line argument, not set in the config file.
`FilterResults`	(empty)	Debug filter that limits module processing to items matching the specified value. For targeted troubleshooting only. Leave empty in production.
`ScriptName`	(empty)	Name of a specific script to run when ProfileUnity is invoked to run a single targeted script rather than full policy. Leave empty for normal operation.
`Module`	(empty)	Forces execution of a specific module only. Leave empty to run all modules defined in policy.
`PersistedIniPath`	(empty)	Path to a persisted or cached INI file for offline logon scenarios. Empty = not used. Set when offline logon support is required.

Behavior Flags

These flags control how the client presents itself to users and how it handles errors and elevated operations.

Setting	Default	Notes
`Silent`	`False`	Suppresses all user-visible UI including progress dialogs and splash screens. Set True in fully silent VDI deployments.
`SuppressErrors`	`True`	Suppresses error dialogs from appearing on screen. Recommended True in production VDI. When False, error dialogs surface to users.
`DisplaySuppressedErrors`	`True`	Even when SuppressErrors is True, this setting writes suppressed errors to the log for administrator review. Leave True to maintain visibility without surfacing errors to users.
`CleanupPostflight`	`False`	Cleans up postflight data files after postflight processing completes. Enable if postflight data accumulation is causing disk pressure.
`Elevate`	`False`	Runs the client process with elevated privileges. Typically False — elevation is handled by the Liquidware elevation service. Set True only on engineering direction.
`Cache`	`False`	Enables INI file caching. Set True if policy downloads are adding logon latency and the INI source supports caching.
`Splash`	`False`	Shows the ProfileUnity splash screen during logon processing. Enable only when user feedback during long logon operations is desired.
`InitialLogon`	`False`	Signals that this is the user's first logon. Typically set automatically by the client. Override only on engineering direction.
`AsyncModule`	`False`	Experimental. Allows modules to execute asynchronously. Leave False unless directed by Liquidware engineering.
`SyncModule`	`False`	Forces synchronous module execution. Leave False for normal parallel processing.
`ProfileDiskHealthCheck`	`False`	Enables a health check on the profile disk before use. Enable if profile disk corruption is a recurring issue in the environment.
`FileAssociationBackup`	`True`	Backs up file associations as part of profile portability. Disable only if file association backup is confirmed to cause conflicts or excessive logon time.
`SkipAdUserFieldPreload`	`True`	Skips pre-loading of Active Directory user attribute fields. True improves logon speed. Set False only if AD attribute lookups are required early in module processing.
`DisableSplash_DontHandleDelayedDesktopSwitchTimeout`	`False`	Disables the delayed desktop switch timeout handler in the splash screen. Set True if the splash is causing desktop transition delays.
`PortabilityDeelevate`	`False`	De-elevates the portability process after it acquires necessary permissions. Advanced setting. Leave False unless directed by Liquidware engineering.

Process Priority

These settings boost the CPU scheduling priority of specific operations to reduce logon time under load.

⚠️ Test before deploying to production
Priority boost settings should be tested and vetted in isolation from production first. Avoid setting High priority in shared RDSH environments as it can starve other processes.

Setting	Default	Notes
`BoostProcessPriority_InitialLogon`	`AboveNormal`	Priority class for the client process on initial logon. AboveNormal helps the client compete for CPU during the busy logon window. Options: Normal, AboveNormal, High. Avoid High in shared RDSH environments as it can starve other processes.
`BoostProcessPriority_7z`	`AboveNormal`	Priority class for 7-zip operations used during portability. AboveNormal accelerates archive operations. Same caution applies for High in dense multi-user environments.

Portability Settings

Portability settings control how the client copies and saves profile data (files, registry, and custom items) between the endpoint and the profile store. This is the largest and most impactful settings group in the configuration file.

⚠️ Caution — Performance and Data Integrity Implications
Many portability settings have direct performance and data integrity implications. Review all changes with Liquidware Support before deploying to production. Force flags (PortabilityForceBackup, PortabilityForceRestore) must never remain enabled in production.

Buffer & Block Sizes

Setting	Default	Notes
`PortabilityCopyBufferSize`	`1048576 (1 MB)`	I/O buffer size in bytes for file copy operations. 1 MB is appropriate for most environments. Increase for high-bandwidth network paths (e.g., 4 MB to 8 MB); decrease for low-memory endpoints.
`PortabilityBlockSize`	`1048576 (1 MB)`	Block size in bytes for reading/writing portability archive files. Matches CopyBufferSize by default. Tune together when adjusting copy throughput.

Compression

Setting	Default	Notes
`PortabilityCompression`	(empty)	Compression algorithm for portability archives. Empty = no compression (fastest). Options: `lzo` (fast, moderate compression), `zip`, `7z` (slowest, highest compression). Select based on the network bandwidth vs. CPU tradeoff in your environment.
`PortabilityCompressionLevel`	(empty)	Compression level for the selected algorithm (e.g., 1–9 for 7z). Empty = algorithm default. Higher levels reduce file size but increase CPU time at logon and logoff.
`PortabilityFormat`	(empty)	Archive format for portability data. Empty = default format. Set only when migrating between format versions.
`PortabilityRegFormat`	(empty)	Archive format override for registry portability specifically. Empty = same as PortabilityFormat. Set when registry data must use a different format than file data.
`PortabilitySupportLegacyFormat`	`False`	Enables reading portability archives from older ProfileUnity format versions. Enable when upgrading an environment with existing portability data from a prior version.

Force Flags

⚠️ Troubleshooting use only
Force flags are intended for troubleshooting and one-time operations only. Do not leave PortabilityForceBackup or PortabilityForceRestore set to True in a production environment. Doing so adds unnecessary time to every logon and logoff.

Setting	Default	Notes
`PortabilityForceBackup`	`False`	⚠️ Forces a portability save even if the client determines one is not needed. Use only for targeted troubleshooting or a one-time forced sync. Do not leave True in production.
`PortabilityForceRestore`	`False`	⚠️ Forces a portability restore even if no newer data is detected. Same restrictions as PortabilityForceBackup. Do not leave True in production.
`PortabilitySaveDespiteErrors`	`False`	Saves portability data even if errors occurred during the run. Useful when partial data saves are preferable to losing the session's changes entirely.

Parallelism

Setting	Default	Notes
`PortabilityLogonParallelRules`	`True`	Processes portability rules in parallel at logon. Leave True. Parallel processing significantly reduces logon time for users with many portability rules.
`PortabilityLogoffParallelRules`	`True`	Processes portability rules in parallel at logoff. Leave True for the same reason as logon.
`PortabilityParallelRegAndFile`	`False`	Processes registry and file portability simultaneously. False = registry first, then files. Enabling may reduce logon time but can increase I/O contention on slow storage. Test in a non-production environment before enabling.

Hashing & Debugging

Setting	Default	Notes
`PortabilityDisableHashing`	(empty)	When set to True, disables file hashing used to detect changed files. Speeds up portability at the cost of always treating all files as changed. Use only when hashing is confirmed to be a performance bottleneck.
`PortabilityHashFilesForDebugging`	`False`	Writes file hash values to the log for debugging. Generates high log volume. Enable only when diagnosing hashing-related portability failures.
`PortabilityUid`	(empty)	Unique identifier for portability tracking. Set by the client at runtime. Do not manually configure this value.

Error Handling & Event Log

Setting	Default	Notes
`PortabilityPerArchiveErrorHandling`	`True`	Applies error handling per archive so each portability rule's archive is handled independently. When False, a single error aborts all portability processing. Leave True.
`PortabilityPostToEventLogOnFailure`	`True`	Writes a Windows Event Log entry when portability fails. Leave True. Essential for monitoring and alerting on portability failures in large environments.
`PortabilityPostToEventLogOnSuccess`	`False`	Writes a Windows Event Log entry on successful portability. Disabled by default to avoid Event Log noise. Enable for compliance environments requiring success logging.

File Unlocking

Setting	Default	Notes
`PortabilityUnlockFilesEnabled`	`False`	Enables automatic unlocking of files locked by other processes during portability save. Enable when portability failures are caused by locked files such as browser profile databases or Outlook OST files.
`PortabilityUnlockFiles`	`(XML array, empty)`	List of specific file patterns to unlock during portability. Populated when PortabilityUnlockFilesEnabled is True. Manage via the ProfileUnity console — do not hand-edit the XML array.

Archive Optimization

Setting	Default	Notes
`PortabilitySkipFileArchiveCreationIfEmpty`	`True`	When True, skips creation of a portability archive file if no files are captured for that rule during logoff. Avoids writing unnecessary empty archive files to the profile store, reducing storage I/O in environments with many portability rules where some rules may capture no data for certain users. Leave True in most deployments.

Printer Settings

These settings control how ProfileUnity connects printers at logon, including timeout durations and retry behavior.

Setting	Default	Notes
`PrintersConnectTimeoutInMs`	`60000 (60 sec)`	Timeout in milliseconds for connecting a printer at logon. Increase for printers on slow print servers. Decrease to fail faster on unreachable print servers.
`PrintersMaxAttemptsToAdd`	`20`	Maximum number of retries when adding a printer fails. Reduce where failures should be detected quickly; increase where print server availability is intermittent.
`PrintersWaitBetweenRetriesInMs`	`1000 (1 sec)`	Delay in milliseconds between printer connection retry attempts. Increase if the print server needs additional time to respond between attempts.
`PrintersDisablePostflight`	`False`	Disables the printer postflight processing step. Postflight handles delayed printer connection after the desktop is visible. Disable only if postflight is causing UI delays or conflicts.

Drive Mapping

Setting	Default	Notes
`DriveMappingMapTimeoutInMs`	`60000 (60 sec)`	Timeout in milliseconds for mapping a network drive. Increase for slow or high-latency file servers. Decrease to fail fast on unreachable paths.

Postflight Settings

Postflight processing runs after the desktop is visible to the user. It handles deferred tasks such as certain printers, shortcuts, and registry items that cannot complete before the desktop loads.

Setting	Default	Notes
`PostflightEarlyViaKix`	`False`	Triggers postflight processing early via KiXtart. Enable in environments that use KiXtart as the logon script engine and require postflight to run earlier in the session.
`PostflightDelayInMs`	`0`	Milliseconds to delay before postflight begins. 0 = immediate. Add a delay if postflight tasks require the desktop or other session components to be fully initialized before they run.

Offline Detection Settings

These settings control how the ProfileUnity client determines whether an endpoint is online or offline when evaluating AD group-based filters. At logon, the client performs a DNS resolution test against a configurable entry to make this determination before processing filter conditions.

ℹ️ Laptop and VPN Deployments
For endpoints that roam off-network (laptops, home users connecting via VPN), set OfflineTestDnsEntry to a DNS name that is only resolvable when connected to the corporate network or VPN, such as a specific domain controller FQDN. This ensures offline detection fires correctly when users are disconnected.

ℹ️ Version History
These settings were introduced in ProfileUnity 6.8.7 R2 HF1. The default value for OfflineTestDnsEntry was corrected to %LOGONSERVER% in 6.8.7 R2 HF2. Support for %VARIABLE% environment variable substitution was added in 6.9.5.

Setting	Default	Options / Range	Notes
`OfflineTestDnsEntry`	`%LOGONSERVER%`	Any DNS name or `%VARIABLE%`	DNS name the client attempts to resolve to determine whether the endpoint is online. Defaults to `%LOGONSERVER%` (the authenticating domain controller). For roaming endpoints, replace with a DNS name resolvable only on the corporate network or VPN, such as a specific DC FQDN. Environment variable substitution supported in 6.9.5 and later.
`OfflineTestTimeoutMs`	`3000 (3 sec)`	Milliseconds	Timeout in milliseconds for the DNS resolution test. If the query does not return within this window, the endpoint is treated as offline. Increase in high-latency environments where false offline detections occur at logon. Decrease to fail faster where offline detection speed is critical.

Shortcut Settings

Setting	Default	Notes
`ShortcutPostFlightWaitMs`	`30000 (30 sec)`	Milliseconds to wait during shortcut postflight before timing out. Increase if shortcut creation is taking longer than expected in the postflight window.
`ShortcutModuleVersion`	`2`	Controls which shortcut processing engine is used. Do not change. This value is managed by the ProfileUnity version and should not be manually modified.

Registry Module Settings

Setting	Default	Notes
`RegistryLocalBackupRestoreForRegModule`	`False`	Enables local backup/restore for the registry portability module. When True, the client maintains a local copy of registry data as a fallback. Enable in environments where the profile store is occasionally unavailable.
`RegistryLocalBackupRestoreForAdmxModule`	`False`	Same local backup/restore behavior scoped to the ADMX/GPO registry module. Enable under the same conditions as the registry portability module.

Application Restrictions Settings

These settings control user-facing notification behavior for the Application Restrictions module.

Setting	Default	Notes
`HideAppRestrictNotify`	`False`	When True, suppresses the popup notification shown to users when an application is blocked by an Application Restrictions rule. Set True in environments where security policy requires silent blocking without user notification, or where the notification dialog causes user confusion. Introduced in ProfileUnity 6.9.5.

FlexApp Integration Settings

These settings control FlexApp VHD mount behavior and replay performance at logon.

Setting	Default	Notes
`FlexAppVhdMountTimeoutMs`	`10000 (10 sec)`	Timeout in milliseconds for mounting a FlexApp VHD at logon. Increase if VHD mounts are timing out on slow storage or high-load hosts. Typical adjustment range: 15000–30000 ms for slow storage environments.
`FlexAppNonJitCutReplayInBulk`	`False`	Replays non-JIT FlexApp cuts in bulk (batched) rather than individually. Bulk replay may improve performance when many FlexApp packages mount at logon. Test before enabling.
`FlexAppNonJitCutReplayInParallel`	`False`	Specifies the behavior for playback execution of non-JIT FlexApps. Actual playback is still performed in parallel.
`FlexAppBulkMountMaxGroupSize`	`1`	Maximum FlexApp packages in a single bulk mount group. 1 = no grouping (each package mounts independently). Increase only if bulk mount grouping is confirmed to improve performance for your storage.

Azure Blob Storage Settings

These settings tune Azure Blob Storage transfer behavior when portability data is stored in Azure. Relevant only in Azure-backed deployments.

Setting	Default	Notes
`AzureMaximumConcurrency`	`64`	Maximum concurrent Azure transfer operations. Reduce if Azure throttling or constrained endpoint bandwidth is observed. Increase only if Azure and the local network can sustain higher parallelism.
`AzureInitialTransferSizeMb`	`1`	Initial block size in MB for Azure transfers. Increase for large profile archives on high-bandwidth connections to improve throughput.
`AzureMaximumTransferSizeMb`	`1`	Maximum block size in MB per Azure transfer operation. Tune together with AzureInitialTransferSizeMb based on observed transfer performance.
`AzureGetGroupMaxTries`	`3`	Maximum number of retry attempts when fetching Entra ID or Azure AD security group memberships via Microsoft Graph. Increase in environments with intermittent Graph API connectivity or frequent throttling. Tune together with `AzureGetGroupTimeoutSeconds`.
`AzureGetGroupTimeoutSeconds`	`5`	Timeout in seconds per attempt when fetching Entra ID or Azure AD security group memberships. Increase if Graph API responses are slow due to network latency or throttling. Note: large values combined with a high `AzureGetGroupMaxTries` can add measurable logon latency when Azure is degraded.

Parallelism & Performance Settings

Setting	Default	Notes
`FilterParallelEvaluation`	`False`	Evaluates ProfileUnity filters (targeting conditions) in parallel. Can reduce logon time when many filter rules are configured. Test before enabling — parallel evaluation may expose timing issues in complex filter chains.
`LayeredAppParallelEvaluation`	`False`	Evaluates layered app assignments in parallel. Similar benefit and caution as FilterParallelEvaluation.
`LayeredAppAsyncExecution`	`True`	Executes layered app assignments asynchronously. Leave True. Allows logon to continue while app assignments are resolved in the background.
`S3ReadWriteTimeoutMs`	(empty)	S3 read/write timeout override in milliseconds. Empty = use default. Set for endpoints with high-latency S3 access.
`S3TimeoutMs`	(empty)	S3 connection timeout override in milliseconds. Empty = use default.
`ProfileUnityRelativePath`	`Program Files\ProfileUnity`	Relative path from drive root to the ProfileUnity installation directory. Adjust only if ProfileUnity is installed to a non-default location.

Additional Timeout & Retry Settings

These settings control timeout durations and retry behavior for specific client operations not covered in other sections, including WMI detection, PowerShell filter evaluation, and FlexApp package file retrieval.

WMI & PowerShell Filter Timeouts

Setting	Default	Notes
`TimeoutMsForIsRDSWmi`	`5000 (5 sec)`	Timeout in milliseconds for the WMI query used to detect whether the endpoint is an RDS or terminal server host. Increase in environments where WMI is slow to respond. Note: as of 6.9.5, the client license service no longer relies on WMI for its core operations; this setting has reduced impact on current versions but may still affect environments running pre-6.9.5 clients.
`PowershellScriptFilterTimeoutMs`	`120000 (120 sec)`	Timeout in milliseconds for PowerShell script-based filter evaluation. If a PowerShell filter script does not return within this window, the evaluation times out. Increase for complex scripts that require additional time. Decrease to fail faster on scripts that hang, reducing logon delays from problematic filter scripts.

FlexApp Package File Retries

ℹ️ Version Note
Configurable retry logic for FlexApp XML and ICO file retrieval was introduced in 6.8.7 R2 HF3 and extended in 6.9.5. These settings apply to non-cached, non-CTL FlexApp assignments and are most relevant in environments with intermittent SMB or network connectivity to the FlexApp package share.

Setting	Default	Notes
`FlexAppMaxTries`	`10`	Maximum number of retry attempts when reading remote FlexApp package XML or ICO files. Increase in environments where file server or network connectivity is intermittent and assignment failures occur at logon. Decrease to reduce total wait time on reliably available shares. Tune together with `FlexAppSleepBetweenTriesMs`.
`FlexAppSleepBetweenTriesMs`	`2000 (2 sec)`	Delay in milliseconds between FlexApp XML and ICO file read retry attempts. Increase if the file server needs additional recovery time between attempts. Maximum total wait is approximately `FlexAppMaxTries × FlexAppSleepBetweenTriesMs`. Tune together with `FlexAppMaxTries`.

Common Scenarios & Recommended Adjustments

⚠️ Reminder
All configuration changes should be reviewed with Liquidware Technical Support before deployment. The adjustments below are starting-point recommendations, not universal prescriptions.

▸ Portability Taking Too Long at Logon

Verify PortabilityLogonParallelRules = True.
If compression is enabled, try PortabilityCompression = lzo (fastest) or set to empty (no compression).
Increase PortabilityCopyBufferSize to 4 MB (4194304) or 8 MB (8388608) for high-bandwidth network paths.
If hashing is confirmed as a bottleneck, evaluate PortabilityDisableHashing = True with caution and in coordination with Liquidware Support.

▸ Printers Failing to Connect at Logon

Increase PrintersConnectTimeoutInMs (e.g., 90000) for slow print servers.
Increase PrintersMaxAttemptsToAdd if intermittent print server availability is the root cause.

▸ FlexApp Packages Taking Too Long to Mount

Increase FlexAppVhdMountTimeoutMs to 20000–30000 ms.
Verify FlexAppNonJitCutReplayInParallel = True.

▸ Portability Errors Not Appearing in Event Log

Verify PortabilityPostToEventLogOnFailure = True.
Confirm the client process has write access to the Windows Event Log.

▸ Drive Mapping Failures on Slow File Servers

Increase DriveMappingMapTimeoutInMs (e.g., 120000 for 2 minutes).

▸ AD Group Filters Failing or Behaving Incorrectly Offline

Confirm OfflineTestDnsEntry resolves only when the endpoint is on the corporate network or VPN. If it resolves off-network, the client will not correctly detect the offline state.
For laptop users, replace %LOGONSERVER% with a specific DC FQDN that is only resolvable on the internal network or over VPN.
If the DNS query is timing out in high-latency environments, increase OfflineTestTimeoutMs (e.g., 5000–8000 ms).

▸ FlexApp Assignments Failing on Intermittent File Servers

Increase FlexAppMaxTries (e.g., 15–20) to give the client more attempts when reading package XML or ICO files.
Increase FlexAppSleepBetweenTriesMs (e.g., 3000–5000 ms) if the file server needs additional recovery time between attempts.

Quick Reference

The table below summarizes the most frequently tuned settings. All changes should be coordinated with Liquidware Technical Support.

Setting	Default	Change When...
`LogLevel`	`Info`	Raise to Debug during active troubleshooting — revert to Info after.
`LogPerModule`	`True`	Leave True. Set False only when aggregation tooling requires a single input file.
`SuppressErrors`	`True`	Set False during testing to surface errors visually on-screen.
`DisplaySuppressedErrors`	`True`	Leave True to maintain log visibility of suppressed errors.
`PortabilityCopyBufferSize`	`1 MB`	Increase for high-bandwidth networks; decrease for low-memory endpoints.
`PortabilityCompression`	(empty)	Set lzo, zip, or 7z when network bandwidth is the bottleneck.
`PortabilitySkipFileArchiveCreationIfEmpty`	`True`	Leave True. Disabling causes empty archive writes for rules with no captured data.
`PortabilityLogonParallelRules`	`True`	Leave True. Disable only under specific engineering guidance.
`PortabilityParallelRegAndFile`	`False`	Enable only after testing on the specific storage platform in use.
`PortabilityForceBackup / ForceRestore`	`False`	Troubleshooting use only — never leave True in production.
`PortabilitySaveDespiteErrors`	`False`	Enable when partial saves are preferred over session data loss.
`PortabilityUnlockFilesEnabled`	`False`	Enable when locked files are causing portability save failures.
`PortabilityPostToEventLogOnFailure`	`True`	Leave True. Disabling removes visibility into portability failures.
`OfflineTestDnsEntry`	`%LOGONSERVER%`	Change to a DC FQDN only resolvable on-network for laptop and VPN deployments.
`OfflineTestTimeoutMs`	`3000`	Increase in high-latency environments if false offline detections occur.
`PrintersConnectTimeoutInMs`	`60000`	Increase for slow print servers or high-latency network paths.
`PrintersMaxAttemptsToAdd`	`20`	Tune based on print server reliability characteristics.
`DriveMappingMapTimeoutInMs`	`60000`	Increase for slow or high-latency file servers.
`FlexAppVhdMountTimeoutMs`	`10000`	Increase for slow storage or high-load host environments.
`FlexAppNonJitCutReplayInParallel`	`True`	Leave True. Disabling serializes mount operations and adds logon time.
`FlexAppMaxTries`	`10`	Increase for intermittent file server connectivity affecting FlexApp XML/ICO reads.
`FlexAppSleepBetweenTriesMs`	`2000`	Tune together with FlexAppMaxTries based on file server recovery characteristics.
`AzureMaximumConcurrency`	`64`	Reduce if Azure throttling or constrained bandwidth is observed.
`AzureGetGroupMaxTries`	`3`	Increase for intermittent Azure/Entra ID Graph API connectivity.
`AzureGetGroupTimeoutSeconds`	`5`	Increase for slow Azure Graph API responses due to latency or throttling.
`FilterParallelEvaluation`	`False`	Enable only after testing in complex filter environments.
`LayeredAppAsyncExecution`	`True`	Leave True. Disabling blocks logon during app assignment resolution.
`PowershellScriptFilterTimeoutMs`	`120000`	Increase for complex PS filter scripts; decrease to fail faster on hanging scripts.
`TimeoutMsForIsRDSWmi`	`5000`	Increase where WMI is slow. Reduced impact on 6.9.5+ clients.
`HideAppRestrictNotify`	`False`	Set True to suppress the blocked-application popup. 6.9.5 and later only.
`S3ReadWriteTimeoutMs / S3TimeoutMs`	(empty)	Set for environments with high-latency S3 endpoints.
`ProfileUnityRelativePath`	`Program Files\ProfileUnity`	Adjust only if ProfileUnity is installed to a non-default path.

Need Assistance?
If you have questions about any setting or need help evaluating a configuration change, contact Liquidware Technical Support at support.liquidware.com.

Product	Liquidware ProfileUnity
Component	LwL.ProfileUnity.Client.exe.config
Applies To	ProfileUnity 6.x and later
Updated	June 18, 2026