[rush] RUSH_GLOBAL_FOLDER not ised

[kkazala]

Summary

I have a GPO policy that limits locations from where the scripts can be executed.
I want to make sure that alls scripts called by rush are executed from C:\Apps folder.

I set RUSH_GLOBAL_FOLDER and RUSH_PNPM_STORE_PATH environment variables. to ensure that all the packages are installed in C:\Apps folder

However, when I run rush update I see that the temporary files are still created in the default c:\users\ location:

I did restart the computer :)

We temporarirly made an exemption in GPO and rush update succeeded.
Then, when runing rush build, which in my case executes gulp bundle, I see another error.
The "D:\folderpath\projectName\NODE_MODULES\.BIN\GULP.CMD is blocked.

Repro steps

I need to build my project using rush.
It all worked before I moved to a managed computer with GPO

I want to make sure that rush only executes files in c:\apps folder

Expected result: rush update and rush build should succeed without creating exemptions in Group policies

Actual result:

After creating exception for C:\Users\YourName folder, I can run rush update but rush build returns

"Returned error code: 1, "spfx-utils" failed to build."

Standard questions

Please answer these questions to help us investigate your issue more quickly:

Question	Answer
@microsoft/rush globally installed version?	5.154.0
rushVersion from rush.json?	5.154.0
useWorkspaces from rush.json?	true
Operating system?	Windows
Would you consider contributing a PR?	No
Node.js version (node -v)?	22.16.0

[iclanton]

Can you provide a stacktrace for what's writing to the user profile folder? This code is what uses that env var:

rushstack/libraries/rush-lib/src/api/RushGlobalFolder.ts

Lines 42 to 45 in 8c312b2

	const rushGlobalFolderOverride: string | undefined =
	EnvironmentConfiguration._getRushGlobalFolderOverride(process.env);
	if (rushGlobalFolderOverride !== undefined) {
	this.path = rushGlobalFolderOverride;

WRT the D:\folderpath\projectName\NODE_MODULES\.BIN\GULP.CMD path. Is D:\folderpath\ the root of your Rush repo? rush install and rush update are always going to drop files inside <project folder>/node_modules becuase of the way the Node module resolution algorithm works, so that path is unavoidable.