Where to execute an sfc check?
The best practice is to execute the SFC tool in the Gold Image, prior to creating your first OS Layer. This should ensure the future OS layers are free of Windows file corruption. When needed, a version can be removed and a new version created.
Other options are, in the OS layer, in an image with Elastic Layering disabled. In all of these cases our filter is disabled and only one volume in use.
Where not to execute an sfc check?
In an app, platform or User layer. In a image with Elastic Layering enabled, even if no layers are being attached. The sfc operation will not work correctly, due to there being more than one volume in use, as part of our filter operations. The volumes are not properly recognized by the utility and erroneous data can be produced.
The main concern is the usability of the desktops provisioned from the published image. Should there be any issues with a desktop(s)s a case should be open, and this utility or others may be recommended for use, as needed.