1. A method for moving an executing process from a first isolation scope to a second isolation scope, the method comprising: (a) determining that a process executing in a first isolation environment comprising a first application isolation layer and a user isolation layer is in a state suitable for moving; (b) monitoring whether the process is processing a request and queuing requests to the process; (c) suspending execution of the process in the first isolation environment; (d) changing, by a rules engine, an association of the process from a first application isolation scope provided by the first application isolation layer to a second application isolation scope provided by a second application isolation layer; (e) changing the association of the process from the first isolation scope to the second isolation scope in a file system filter driver. (f) loading, by the rules engine, at least one rule associated with the second application isolation scope; (g) moving the process into the second isolation scope; and (h) resuming execution of the process in the second isolation scope.