Close Menu
Peter Klapwijk – In The Cloud 24-7Peter Klapwijk – In The Cloud 24-7
    Facebook X (Twitter) Instagram
    Peter Klapwijk – In The Cloud 24-7Peter Klapwijk – In The Cloud 24-7
    • Home
    • Intune
    • Windows
      • Modern Workplace
    • macOS
    • Android
    • iOS
    • Automation
      • Logic Apps
      • Intune Monitoring
      • GitHub
    • Security
      • Passwordless
      • Security
    • Speaking
    • About me
    Peter Klapwijk – In The Cloud 24-7Peter Klapwijk – In The Cloud 24-7
    Home»Windows»Windows 10 1803 is roaming Local and LocalLow [updated]
    Windows

    Windows 10 1803 is roaming Local and LocalLow [updated]

    Peter KlapwijkBy Peter KlapwijkJune 19, 2018Updated:December 3, 201953 Mins Read

    Today just a short article about a bug I found in the latest Windows 10 version, Windows 10 1803 (Windows 10 April 2018 update), which I wanted to share with you (even it has nothing to do with cloud products).

    I`m working at a customer who is still using roaming profiles on the Windows desktops to save user settings on a central place as many companies did and still do. We noticed at some users not only the AppData\Roaming folder is written to the profile share, but also the folders AppData\Local and AppData\LocalLow are written to the  profile share. We did some testing with windows 10 1709 and 1803 and concluded on Windows 10 1709 everything with roaming profile is working is expected. When a user did logon on a Windows 10 1709 device and after that uses a Windows 10 1803 device, everything is working fine. The issue only exists when a user without an existing profile on the profile share logs on to a Windows 10 1803, at that time when the user logs off the Local and LocalLow folders are written to the profile share.
    In the registry of Windows 10 in the String value ExcludeProfileDirs located under HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon some folders are written to be excluded from roaming as you can see below.

    In Windows 10 1803 that value in the registry is missing which results in roaming of the folders Local and LocalLow.

    At the customer this causes some issues with applications because of folder that are written back from the profile share to the local disk so we created a workaround with a Group Policy Preference settings which creates the ExcludeProfileDirs value for every logged on user.

    This solved the issue for us, but we also created a case with Microsoft support to be informed this is just happening to us, or at more customers. Microsoft advised us to use the workaround with the regkey at this time and did escalate our ticket because more customers did see the issue. This week I received a private fix from Microsoft for this issue which I have already tested at a few test devices. Now we have to wait until Microsoft will release the fix in a hotfix or in a cumulative update in the future.

    Keep you posted!

    Update July 3th

    The Microsoft engineer I`m working with on the case confirmed Microsoft will release a fix for this issue in the 4th week of July.

    Update July 25th

    The update which fixes this issue is released see this article.

    Windows 10
    Share. Facebook Twitter LinkedIn Email WhatsApp
    Peter Klapwijk
    • Website
    • X (Twitter)
    • LinkedIn

    Peter is a Security (Intune) MVP since 2020 and is working as Modern Workplace Engineer at Wortell in The Netherlands. He has more than 15 years of experience in IT, with a strong focus on Microsoft technologies like Microsoft Intune, Windows, and (low-code) automation.

    Related Posts

    Enable Self Service Password Reset feature on the Windows logon screen

    November 9, 2017

    Skype for Business PSTN Calling General Available in The Netherlands and Ireland!

    July 6, 2017

    Multi-Factor Authentication

    November 10, 2016
    View 5 Comments

    5 Comments

    1. James Rankin on July 19, 2018 21:26

      Hi Peter, wish I’d stumbled on your post before I spent all day today rebuilding Windows 10 machines frantically 🙂 I’m assuming a GPP to replace the errant value would suffice to sort it out?

      Reply
      • Peter on July 19, 2018 22:07

        Hi James,

        Yes the GPP is enough to solve the issue. We are using that workaround for a couple of weeks now.
        But next week a fix should be released to solve the issue and problably the next CU would solve it.
        I will update this article as soon as I have more info.

        Reply
      • Peter on July 25, 2018 09:02

        Hi James,

        The update which fixes the issue is released: https://support.microsoft.com/en-sg/help/4340917/windows-10-update-kb4340917

        Regards,

        Peter

        Reply
    2. Peter on July 31, 2018 08:59

      Hi Peter, great article which is just what I was looking for. One question, once installed do we need to delete the existing profiles in both locations?

      Reply
      • Peter on August 2, 2018 14:47

        We have just applied the fix and not cleaned up any profile.
        We already used the workaround with the reg key which removed the Local and LocalLow folder from the folder. After applying the fix we removed the workaround (regkey) and everything is running fine.

        Reply
    Leave A Reply Cancel Reply

    Peter Klapwijk

    Hi! Welcome to my blog post.
    I hope you enjoy reading my articles.

    Hit the About Me button to get in contact with me or leave a comment.

    Awards
    Sponsor
    Latest Posts

    Create deployment ring groups for Microsoft Intune

    June 27, 2025

    Update Windows Defender during Windows Autopilot enrollments

    May 16, 2025

    Hide the “Turn on an ad privacy feature” pop-up in Chrome with Microsoft Intune

    April 19, 2025

    How to set Google as default search provider with Microsoft Intune

    April 18, 2025
    follow me
    • Twitter 4.8K
    • LinkedIn 6.1K
    • YouTube
    • Bluesky 1.5K
    Tags
    Administrative Templates Android Automation Autopilot Azure Azure AD Browser Conditional Access Edge EMS Exchange Online Feitian FIDO2 Flow Google Chrome Graph Graph API Identity Management Intune Intune Monitoring iOS KIOSK Logic Apps macOS MEM MEMMonitoring Microsoft 365 Microsoft Edge Microsoft Endpoint Manager Modern Workplace Office 365 OneDrive for Business Outlook Passwordless PowerApps Power Automate Security SharePoint Online Teams Windows Windows 10 Windows10 Windows 11 Windows Autopilot Windows Update
    Copy right

    This information is provided “AS IS” with no warranties, confers no rights and is not supported by the authors, or In The Cloud 24-7.

     

    Copyright © 2025 by In The Cloud 24-7/ Peter Klapwijk. All rights reserved, No part of the information on this web site may be reproduced or posted in any form or by any means without the prior written permission of the publisher.

    Shorthand; Don’t pass off my work as yours, it’s not nice.

    Recent Comments
    • Parth Savjadiya on Using Visual Studio with Microsoft Endpoint Privilege Management, some notes
    • Chris Johnson on Assign Deny Local Log On user right to an (Azure) AD group by using Microsoft Intune
    • Northernsky on Automatically wipe a Windows 10 device after a number of authentication failures
    • Henrik on Intune Driver update for Windows – Get applicable devices
    • Adam on Get notified on expiring Azure App Registration client secrets
    most popular

    Application installation issues; Download pending

    October 1, 2024

    Restrict which users can logon into a Windows 10 device with Microsoft Intune

    April 11, 2020

    How to change the Windows 11 language with Intune

    November 11, 2022

    Update Microsoft Edge during Windows Autopilot enrollments

    July 9, 2024
    Peter Klapwijk – In The Cloud 24-7
    X (Twitter) LinkedIn YouTube RSS Bluesky
    © 2025 ThemeSphere. Designed by ThemeSphere.

    Type above and press Enter to search. Press Esc to cancel.

    Manage Cookie Consent
    To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
    Functional Always active
    The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
    Preferences
    The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
    Statistics
    The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
    Marketing
    The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
    Manage options Manage services Manage {vendor_count} vendors Read more about these purposes
    View preferences
    {title} {title} {title}