Profile Migration: Citrix UPM to FSLogix¶

# Mount the share
net use Z: \\stavdprofiles.file.core.windows.net\profiles

# Set NTFS permissions for FSLogix
# Creator/Owner: Full Control (subfolders and files only)
# Users group: Modify (this folder only)
# Admins: Full Control (this folder, subfolders, files)

icacls Z:\ /grant "CREATOR OWNER:(OI)(CI)(F)" /T
icacls Z:\ /grant "Users:(M)" /T
icacls Z:\ /grant "Administrators:(OI)(CI)(F)" /T
# Remove inheritance from parent
icacls Z:\ /inheritance:r

# Core Profile Container settings
$profilesKey = "HKLM:\SOFTWARE\FSLogix\Profiles"

# Enable Profile Container
Set-ItemProperty -Path $profilesKey -Name "Enabled" -Value 1 -Type DWord

# VHD location (Azure Files share)
Set-ItemProperty -Path $profilesKey -Name "VHDLocations" -Value "\\stavdprofiles.file.core.windows.net\profiles" -Type String

# Delete local profile when VHD should apply
Set-ItemProperty -Path $profilesKey -Name "DeleteLocalProfileWhenVHDShouldApply" -Value 1 -Type DWord

# Use the username_SID folder naming convention
Set-ItemProperty -Path $profilesKey -Name "FlipFlopProfileDirectoryName" -Value 1 -Type DWord

# Maximum VHD size (30 GB dynamic)
Set-ItemProperty -Path $profilesKey -Name "SizeInMBs" -Value 30000 -Type DWord

# Use VHDx format (more resilient than VHD)
Set-ItemProperty -Path $profilesKey -Name "VolumeType" -Value "VHDX" -Type String

# Dynamic disk (grows as needed up to SizeInMBs)
Set-ItemProperty -Path $profilesKey -Name "IsDynamic" -Value 1 -Type DWord

# Lock retry settings (for concurrent access handling)
Set-ItemProperty -Path $profilesKey -Name "LockedRetryCount" -Value 3 -Type DWord
Set-ItemProperty -Path $profilesKey -Name "LockedRetryInterval" -Value 15 -Type DWord

# Redirect temp data to local disk (reduces VHD I/O)
Set-ItemProperty -Path $profilesKey -Name "RedirXMLSourceFolder" -Value "C:\FSLogix\Redirections" -Type String

$odfcKey = "HKLM:\SOFTWARE\Policies\FSLogix\ODFC"
New-Item -Path $odfcKey -Force

Set-ItemProperty -Path $odfcKey -Name "Enabled" -Value 1 -Type DWord
Set-ItemProperty -Path $odfcKey -Name "VHDLocations" -Value "\\stavdprofiles.file.core.windows.net\odfc" -Type String
Set-ItemProperty -Path $odfcKey -Name "VolumeType" -Value "VHDX" -Type String
Set-ItemProperty -Path $odfcKey -Name "IsDynamic" -Value 1 -Type DWord
Set-ItemProperty -Path $odfcKey -Name "SizeInMBs" -Value 15000 -Type DWord

# Include Outlook data in Office Container
Set-ItemProperty -Path $odfcKey -Name "IncludeOutlookPersonalization" -Value 1 -Type DWord

# Include Teams data
Set-ItemProperty -Path $odfcKey -Name "IncludeTeams" -Value 1 -Type DWord

# Include OneDrive data
Set-ItemProperty -Path $odfcKey -Name "IncludeOneDrive" -Value 1 -Type DWord

# Replace VHDLocations with CCDLocations for Cloud Cache
$profilesKey = "HKLM:\SOFTWARE\FSLogix\Profiles"

# Remove VHDLocations (Cloud Cache uses CCDLocations instead)
Remove-ItemProperty -Path $profilesKey -Name "VHDLocations" -ErrorAction SilentlyContinue

# Configure Cloud Cache with two locations
# Azure Files (primary) + Azure NetApp Files (secondary)
Set-ItemProperty -Path $profilesKey -Name "CCDLocations" -Value `
  "type=smb,connectionString=\\stavdprofiles.file.core.windows.net\profiles;type=smb,connectionString=\\anfvol.anfaccount.file.core.windows.net\profiles-dr" `
  -Type String

# Enable Cloud Cache
Set-ItemProperty -Path $profilesKey -Name "CloudCacheEnabled" -Value 1 -Type DWord

# Migrate a single user profile from UPM share to FSLogix VHDx
frx copy-profile `
  -filename "\\stavdprofiles.file.core.windows.net\profiles\%username%_%usersid%\Profile_%username%.vhdx" `
  -sid S-1-5-21-xxxx-xxxx-xxxx-1234 `
  -username jsmith `
  -dynamic 1 `
  -size-mbs 30000 `
  -src "\\citrixprofileserver\profiles$\jsmith"

# Batch migrate UPM profiles to FSLogix
param(
    [string]$UPMShare = "\\citrixprofileserver\profiles$",
    [string]$FSLogixShare = "\\stavdprofiles.file.core.windows.net\profiles",
    [int]$SizeMB = 30000
)

$users = Get-ChildItem -Path $UPMShare -Directory

foreach ($user in $users) {
    $username = $user.Name
    Write-Host "Migrating profile for: $username"

    # Get user SID
    try {
        $userObj = New-Object System.Security.Principal.NTAccount($username)
        $sid = $userObj.Translate([System.Security.Principal.SecurityIdentifier]).Value
    } catch {
        Write-Warning "Cannot resolve SID for $username - skipping"
        continue
    }

    # Create VHDx path
    $vhdxPath = Join-Path $FSLogixShare "${username}_${sid}" "Profile_${username}.vhdx"
    $vhdxDir = Split-Path $vhdxPath -Parent

    # Create directory
    if (-not (Test-Path $vhdxDir)) {
        New-Item -Path $vhdxDir -ItemType Directory -Force
    }

    # Run migration
    & frx copy-profile `
        -filename $vhdxPath `
        -sid $sid `
        -username $username `
        -dynamic 1 `
        -size-mbs $SizeMB `
        -src $user.FullName

    if ($LASTEXITCODE -eq 0) {
        Write-Host "  SUCCESS: $username" -ForegroundColor Green
    } else {
        Write-Warning "  FAILED: $username (exit code: $LASTEXITCODE)"
    }
}

# Configure KFM via Intune or GPO
# HKLM\SOFTWARE\Policies\Microsoft\OneDrive
Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\OneDrive" `
  -Name "KFMSilentOptIn" -Value "<TenantID>" -Type String
Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\OneDrive" `
  -Name "KFMSilentOptInWithNotification" -Value 1 -Type DWord

# Check FSLogix status
& "C:\Program Files\FSLogix\Apps\frx.exe" list

# Expected output:
# User: jsmith
# Profile VHD: \\stavdprofiles.file.core.windows.net\profiles\jsmith_S-1-5-21...\Profile_jsmith.vhdx
# Status: Attached
# Type: VHDX (Dynamic)