Problem:
How to migrate users from ProfileUnity VDI profiles to Laptop local profiles.
Symptoms:
The environment is build with users using redirection of shell folders including items like Desktop, My Documents to home directory on file server, and Application Data and Local Application Data are redirected to user profile directory located on mounted VHD's. Once the users will be migrated to laptop ProfileUnity will be uninstalled. Also not all users will be migrated some will stay to continue using VDI.
Possible Resolution(s):
The summary of the process to migrate the users is:
Copy/capture user profile data including redirected folders with portability rules to the server than restore all the data from those *.7z files back to the laptop when user logs in and at the same time ensuring that folder redirection will not take place.
The outline of the migration:
-
Add users to PU-Pre-Migration security group
-
The user should log in and log off (to the VDI)
-
The Filter 1 will apply and portability rule will apply to capture data to *.7z files to file server
-
Add user to PU-Post-Migration group (Do not remove from PU-Pre-Migration)
-
The user should log in (to the laptop)
-
The Filter 1 will apply and portability rule will restore the user data from *.7z files to local profile
-
The Filter 2 will apply and folder redirection will NOT apply
-
User can be removed from "ProfileUnity" security group so ProfileUnity will no longer run at logon
-
ProfileUnity can be uninstalled manually or using GPO by executing "uninstall.vbs" (..netlogon\ProfileUnity\uninstall.vbs)
Preparation:
Step 1) Create two security groups in AD:
- Pre-MigrationUsers
- Post-MigrationUsers
Step 2) Create two filters inside ProfileUnity
Filter 1 - Will define all users who will receive new "Portability Rules" and "Rulesets"
- Filter Name: Pre-MigrationUsers
- Filter Rules: Group Membership Is (Exactly) Pre-MigrationUsers
Filter 2 - Will define ALL users who are not part of "Post-MigrationUsers"
- Filter Name: No-Redirection-For-Migration
- Filter Rules: Group Membership is Not Post-MigrationUsers
- Operating System: (single choice here, for all your non-migrating users if you are using multiple OS filters)
Example:
Note: This filter will return "True" (apply) for All Win 7 users in your environment except the individuals who are part of "Post-MigrationUsers" group.
ProfileUnity Configuration:
Note: Please make a copy of your original configuration before making changes. And test on test users before migrating actual users.
Step 1) Capturing user data.(After we add user to "Pre-MigrationUsers" AD security group)
Create a create one portability ruleset, and portability rule for each folder redirection rule you have.
Example 1
If I am redirecting Desktop than:
A) Create desktop "Ruleset" :
Open "Portability Management", Select "Create"
- Name: Desktop
- Operation: Merge
- Folder: Desktop
Select "Add" and "Save"
B) And create "Desktop" Portability Rule:
Go to "Configuration Management" Edit Configuration, Select "Portability Settings", "Add Portability Setting Rule"
- Filter: Pre-MigrationUsers
- Actions: Save & Restore
- Ruleset: Desktop
- Apply Registry Rules (Not selected)
- Apply Filesystem Rules (Selected)
- Only Apply to Local Shell Folders (Selected)
- Save Path: \\servername\Servershare\%username%\Portability
- UID: Desktop
"Save" and "Update"
Example 2
If I am redirecting Local Application Data than:
A) Create Local AppData "Ruleset" (if it is not present) :
Open "Portability Management", Select "Create"
- Name: Local AppData
- Operation: Merge
- Folder: Local Application Data
Select "Add" and "Save"
B) And create "Local Application Data" Portability Rule:
Go to "Configuration Management" Edit Configuration, Select "Portability Settings", "Add Portability Setting Rule"
- Filter: Pre-MigrationUsers
- Actions: Save & Restore
- Ruleset: Local AppData
- Apply Registry Rules (Not selected)
- Apply Filesystem Rules (Selected)
- Only Apply to Local Shell Folders (Selected)
- Save Path: \\servername\Servershare\%username%\Portability
- UID: LocalAppData
"Save" and "Update"
This process needs to be repeated for all of "Folder Redirection" Rules in active ProfileUnity configuration.
Note: There could be a small side effect (User might see text file opening if he/she logs in 2nd time to VDI environment while being member of "Pre-MigrationUsers" Security group. Please ignore. Its because the folders are redirected and portable at the same time. (not common practice)
Step 2) Playing back user data to local user profile - Laptop.(After we add user to "Post-MigrationUsers" AD security group)
Playing back user data is automatic because current "Save" and "Restore" settings of Portability rules assigned to "Pre-MigrationUsers" filter. So there are no changes needed to ProfileUnity configuration for this process to take place.
Step 3) Preventing "Folder Redirection" for the users who are logging in to laptops. The "Folder Redirection" should be disabled.
For this it is necessary to modify EVERY "Folder Redirection" rule and set it's filter to "No-Redirection-For-Migration"
- Go to "Configuration Management" Edit Configuration, Select "Folder Redirection"
- Change every active Folder Redirection rule to "No-Redirection-For-Migration" filter
Example:
Save and Update
Note: This filter will redirect folders for all the users. But it will stop redirecting when it will detect (return value "False") that the user is part of the "Post-MigrationUsers" security group.
Download "Default.ini" to netlogon\ProfileUnity directory.
Follow the steps in "The outline of the migration steps" at the beginning of this document. If there are any issues please open a case @ liquidwarelabs.zenedsk.com or e-mail support@liquidwarelabs.com
Product: ProfileUnity
Product Version: ALL