SID Directory SDDL (Microsoft FSLogix Group Policy)

What it does

NOTE: Once this policy is Enabled, only Disable will remove the registry value. Enabled to Not Configured will have NO EFFECT. SDDL string representing the ACLs to use when creating the SID container folder. Registry Entry: HKLM\SOFTWARE\FSLogix\Profiles\SIDDirSDDL Type: REG_SZ

What it writes

Hive: HKEY_LOCAL_MACHINE
Registry key: Software\FSLogix\Profiles

Options

Option	Type	Registry value	Allowed values
SID Directory SDDLRequired	Text	`SIDDirSDDL`	Up to 255 characters

Configure and deploy

Choose a state and the option values; the output below is generated from the template for exactly that.

Fix the highlighted options to generate output.

History 1 retained release

26.0827 Aug 2026
- Already present in the first release ChangeIntel keeps.

Template

Internal name: ProfilesSIDDirectorySDDL
Namespace: FSLogix.Policies
Template file: fslogix.admx
Release: Microsoft FSLogix 26.08 · file set d042c1d887a47461…

Definition, editor controls and support

Definition

<policy class="Machine" displayName="$(string.ProfilesSIDDirectorySDDL_Display)" explainText="$(string.ProfilesSIDDirectorySDDL_Explain)" key="Software\FSLogix\Profiles" name="ProfilesSIDDirectorySDDL" presentation="$(presentation.ProfilesSIDDirectorySDDL)" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
      <parentCategory ref="FSLogix.Policies:Profiles" />
      <supportedOn ref="FSLogix.Policies:v2105" />
      <elements>
        <text id="ProfilesSIDDirectorySDDL" key="Software\FSLogix\Profiles" required="true" valueName="SIDDirSDDL" />
      </elements>
    </policy>

Editor controls

<presentation id="ProfilesSIDDirectorySDDL" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
        <textBox refId="ProfilesSIDDirectorySDDL">
          <label>SID Directory SDDL</label>
        </textBox>
      </presentation>

Supported platforms and category

FSLogix.Policies:category:FSLogix
<category displayName="$(string.FSLogix_Category)" name="FSLogix" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions" />
FSLogix.Policies:category:Profiles
<category displayName="$(string.Profiles_Category)" name="Profiles" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
      <parentCategory ref="FSLogix.Policies:FSLogix" />
    </category>
FSLogix.Policies:definition:v2105
<definition displayName="$(string.v2105_Definition)" name="v2105" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions" />
FSLogix.Policies:category:FSLogix
<category displayName="$(string.FSLogix_Category)" name="FSLogix" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions" />
<strings><string id="FSLogix.Policies:FSLogix_Category">FSLogix</string></strings>
FSLogix.Policies:category:Profiles
<category displayName="$(string.Profiles_Category)" name="Profiles" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
      <parentCategory ref="FSLogix.Policies:FSLogix" />
    </category>
<strings><string id="FSLogix.Policies:Profiles_Category">Profile Containers</string></strings>
FSLogix.Policies:definition:v2105
<definition displayName="$(string.v2105_Definition)" name="v2105" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions" />
<strings><string id="FSLogix.Policies:v2105_Definition">v2105 or later</string></strings>