In this exercise you will configure a snapshot policy for your persistent virtual desktops and test restoring deleted files as an end user.
In Prism > Data Protection, click + Protection Domain > Async DR.
Specify a Name for the Protection Domain (e.g. Persistent-Desktops) and click Create.
Select all W10P-### VMs and click Protect Selected Entities > Next.
Click New Schedule and fill out the following fields:
Click Create Schedule > Close.
Log in to Citrix StoreFront again as USER2 and launch your Personal desktop. Create some new directories and files (e.g. downloading images, creating text documents, etc.) as shown below.
In Prism > Data Protection > Table, select the Persistent-Desktops Protection Domain.
Select the Local Snapshots tab and onserve that there is already 1 snapshot present that was taken when the Protection Domain was created. Rather than waiting 4 hours for another snapshot to be taken automatically, we will force a snapshot by clicking Take Snapshot.
As the snapshot isn’t being replicated to a remote site we don’t need to alter Replication Start Time. Select a Retention Time of 1 day and click Save.
There is now an additional local snapshot available.
In Prism > VM > Table, confirm that both Nutanix Guest Tools and Self Service Restore (SSR) are enabled for your Persistent desktops. This may require a restart of your VM if NGT has not yet been enabled.
Log in to Citrix StoreFront again as USER2 and launch your Personal desktop. Delete the files you had previously created.
Launch Nutanix SSR from the desktop.
Log in using your Windows credentials.
Note
In order to access Nutanix SSR, the user needs to be part of the local Administrators group. The following section covers how to create a Group Policy Object to add domain users to the local Administrators group of all Computers in an OU. Alternatively you can complete this exercise using the local Administrator credentials (e.g. LocalUser). The credentials used for Nutanix SSR do not need to be that of the currently logged in user.
Select the most recent snapshot prior to deleting your files.
Select Disk 0 and select Mount from the Disk Action drop down menu.
Note the drive letter used for the mounted snapshot.
In File Explorer, browse to the location of your files on the mounted snapshot drive.
Copy and paste the files back to their original location on the C: drive. Return to the Nutanix SSR console and select Mounted Snapshots from the navigation bar. Select Disk 0 and click Unmount.
In the DC VM console, launch Control Panel > Administrative Tools > Group Policy Management.
Right-click the PersistentDesktops OU and select Create a GPO in this domain, and Link it here…
Specify a Name (e.g. Local Admin GPO) and click OK.
Right-click on the GPO and select Edit…
Open Computer Configuration > Policies > Windows Settings > Security Settings. Right-click Restricted Groups > Add Group.
Specify Administrators and click OK.
Click Add… to the right of Members of this group.
Specify <DOMAIN>USER1; <DOMAIN>USER2 and click OK.
Click Add… to the right of This group is a member of.
Specify Administrators Security Group and click OK > OK.
This additional step maintains all current members of the Local Administrators group, rather than replacing them with only the PersistentUsers Security Group.
Close Group Policy Management Editor.
Right-click the GPO and select Enforced.
After enforcing the GPO, log off or restart your Persistent desktops.