Need advice on moving/removing old UEM/DEM Profiles and folders

[GTO455]

Hello,

Our VDI environment is over 3 years old now and we need to perform some housekeeping.

We have instances where some users logged into VDI once when it was first brought online, and haven't used VDI since, so they have a fairly old and stale profile in UEM/DEM. Company policy states profiles 6 months or older can be removed if they haven't been used. Also, some of these older profiles have artifacts that can cause issues (registry settings, old certs, etc.) with our newer, updated images.

We would like to clean up/delete these profiles, (including redirected folders and FSLogix profiles), perhaps moving them to another inaccessible area for a period of time before deleting them permanently (after backup).

My initial thought was to create some type of PowerShell script to peruse through the UEM Profiles folder for all users, and based on the date of the "logs" file in the users profile folder, move it to another location. Then, based on this information, move the corresponding redirected and FSLogix folders as well.

Does this sound like a good strategy? Have others performed a similar cleanup? How did you approach it?

[jhol5]

We have a PS Script that is executes by a logon task, which writes a timestamp inside the file and stores it in the archive folder. 

A separate script running on a server scans the directory and imports these files, then goes through each to compare the timestamp to see how old it is. If it's old enough it will move it to another network share with an updated timestamp. A second phase of the script cleans up the second network share.

[GTO455]

Thanks, this is almost exactly what I am looking for.