Flex Profiles are especially handy in a Terminal Services / Citrix environment in that they provide the best of both roaming and mandatory profiles. Flex Profiles are based upon a mandatory profile, but personal registry settings are saved to a compressed file which is read when a user logs on. For more information, check out Joe Kelly’s video demo on the power of the Flex Profile Kit.

Today, we’re just going to go over the steps on how to configure Flex Profiles to save IE Password/Autocomplete/Certificate settings:

1. Edit the Framework.ini file, and set ENABLE_PASSWORDS and ENABLE_CERTIFICATES to 1

2. Open regedt32, and navigate to:

HKLM\Software\Microsoft\Windows NT\Currentversion\Profilelist

Assign the “Set Value” right to the Authenticated Users group.

This tricks the server into identifying your mandatory flex profile as a roaming profile during logon as only Roaming and Local profiles are allowed to save certificate information.

3. Verify the following registry keys are saved within your Profile Settings INI:

HKCU\Software\Microsoft\Protected Storage System Provider
HKCU\Software\Microsoft\Internet Explorer\IntelliForms
HKCU\Software\Microsoft\Internet Explorer\Main

That should do it. I’ll double-check myself later…. 🙂