Migrate MSIX packages from MSIX app attach to app attach

Grein
03/04/2024

App attach improves the administrative and user experiences over MSIX app attach. If you use MSIX app attach, you can migrate your MSIX packages to app attach using a PowerShell script.

The migration script can perform the following actions:

Creates a new app attach package object and can delete the original MSIX package object, if necessary.
Copy permissions from application groups associated with the host pool and MSIX package.
Copy the location and resource group of the host pool and MSIX package.
Log migration activity.

Prerequisites

To use the migration script, you need:

A host pool configured as a validation environment, with at least one MSIX package added with MSIX app attach.
An Azure account with the Desktop Virtualization Contributor Azure role-based access control (RBAC) role assigned on the host pool.
A local device with PowerShell. Make sure you have the latest versions of Az PowerShell and Microsoft Graph PowerShell SDK installed. Specifically, the following modules are required:
- Az.DesktopVirtualization
- Az.Accounts
- Az.Resources
- Microsoft.Graph.Authentication

Parameters

Here are the parameters you can use with the migration script:

Parameter	Description
`MsixPackage`	The MSIX package object to migrate to an app attach object. This value can be passed in via pipeline.
`PermissionSource`	Where to get permissions from for the new app attach object. Defaults to no permissions granted. The options are: `DAG`: the desktop application group associated with the host pool and MSIX package `RAG`: one or more RemoteApp application groups associated with the host pool and MSIX package Both options grant permission to all users and groups with any permission that is scoped specifically to the application group.
`HostPoolsForNewPackage`	Resource IDs of host pools to associate new app attach object with. Defaults to no host pools. Host pools must be in the same location as the app attach packages they're associated with.
`TargetResourceGroupName`	Resource group to store the new app attach object. Defaults to resource group of host pool that the MSIX package is associated with.
`Location`	Azure region to create new app attach object in. Defaults to location of host pool that the MSIX package is associated with. App attach packages have to be in the same location as the host pool they're associated with.
`DeleteOrigin`	Delete source MSIX package after migration.
`IsActive`	Enables the new app attach object.
`DeactivateOrigin`	Disables source MSIX package object after migration.
`PassThru`	Passes new app attach object through. `Passthru` returns the object for the created package. Use this value if you want to inspect it or pass it to another PowerShell command.
`LogInJSON`	Write to the log file in JSON Format.
`LogFilePath`	Path of the log file, defaults to `MsixMigration[Timestamp].log` in a temp folder, such as `C:\Users\%USERNAME%\AppData\Local\Temp\MsixMigration<DATETIME>.log`. The path for logging is written to the console when the script is run.

Download and run the migration script

Here's how to migrate MSIX packages from MSIX app attach to app attach.

Important

In the following examples, you'll need to change the <placeholder> values for your own.

Open a PowerShell prompt on your local device.

Download the PowerShell script Migrate-MsixPackagesToAppAttach.ps1 and unblock it by running the following commands:

$url = "https://raw.githubusercontent.com/Azure/RDS-Templates/master/msix-app-attach/MigrationScript/Migrate-MsixPackagesToAppAttach.ps1"
$filename = $url.Split('/')[-1]

Invoke-WebRequest -Uri $url -OutFile $filename | Unblock-File

Import the required modules by running the following commands:

Import-Module Az.DesktopVirtualization
Import-Module Az.Accounts
Import-Module Az.Resources
Import-Module Microsoft.Graph.Authentication

Connect to Azure by running the following command and following the prompts to sign in to your Azure account:
```
Connect-AzAccount
```
Connect to Microsoft Graph by running the following command:
```
Connect-MgGraph -Scopes "Group.Read.All"
```

The following subsections contain some examples of how to use the migration script. Refer to the parameters section for all the available parameters and a description of each parameter.

Tip

If you don't pass any parameters to the migration script, it has the following default behavior:

No permissions are granted to the new app attach package.
The new app attach package isn't associated with any host pools and is inactive.
The new app attach package is created in the same resource group and location as the host pool.
The original MSIX package is still active isn't disable or deleted.
Log information is written to the default file path.

Migrate a specific MSIX package added to a host pool and application group

Here's an example to migrate a specific MSIX package added to a host pool from MSIX app attach to app attach. This example:

Migrates the MSIX package to the same resource group and location as the host pool.
Assigns the MSIX package in app attach to the same host pool and the same users as the RemoteApp application group source.
Leaves the existing MSIX package configuration in MSIX app attach active on the host pool. If you want to disable the MSIX package immediately, use the -DeactivateOrigin parameter.
Sets the new MSIX package configuration in app attach inactive. If you want to enable the MSIX package immediately, use the -IsActive parameter.
Writes log information to the default file path and format.

From the same PowerShell prompt, get a list of MSIX packages added to a host pool by running the following commands:

$parameters = @{
    HostPoolName = '<HostPoolName>'
    ResourceGroupName = '<ResourceGroupName>'
}

Get-AzWvdMsixPackage @parameters | Select-Object DisplayName, Name

The output is similar to the following output:

DisplayName Name
----------- ----
MyApp       hp01/MyApp_1.0.0.0_neutral__abcdef123ghij

Find the MSIX package you want to migrate and use the value from the Name parameter in the previous output:

$parameters = @{
    HostPoolName = '<HostPoolName>'
    ResourceGroupName = '<ResourceGroupName>'
}

$msixPackage = Get-AzWvdMsixPackage @parameters | ? Name -Match '<MSIXPackageName>'
$hostPoolId = (Get-AzWvdHostPool @parameters).Id

Migrate the MSIX package by running the following commands:

$parameters = @{
    PermissionSource = 'RAG'
    HostPoolsForNewPackage = $hostPoolId
    PassThru = $true
}

$msixPackage | .\Migrate-MsixPackagesToAppAttach.ps1 @parameters

Migrate all MSIX packages added to a host pool

Here's an example to migrate all MSIX packages added to a host pool from MSIX app attach to app attach. This example:

Migrates MSIX packages to the same resource group and location.
Adds the new app attach packages to the same host pool.
Sets all app attach packages to active.
Sets all MSIX packages to inactive.
Copies permissions from the associated desktop application group.
Writes log information to a custom file path at C:\MsixToAppAttach.log in JSON format.

From the same PowerShell prompt, get all MSIX packages added to a host pool and store them in a variable by running the following commands:

$parameters = @{
    HostPoolName = '<HostPoolName>'
    ResourceGroupName = '<ResourceGroupName>'
}

$msixPackages = Get-AzWvdMsixPackage @parameters
$hostPoolId = (Get-AzWvdHostPool @parameters).Id