Welcome

by

Hello and welcome to my blog. I will try to publish somtimes that I have created or other news. I am always happy about feedback. There are several channels for this, all of which can be found in the section “About me”.

AVD Host Pools at a Glance: Which Ones Are Validation Host Pools?

by

When working with Azure Virtual Desktop (AVD), it is important to quickly identify which Host Pools are configured as Validation Host Pools and which do not receive Validation Agents. This distinction is especially relevant when it comes to deploying new AVD agent versions, as Microsoft initially rolls them out to Validation Host Pools before making … Weiterlesen …

Hiding the Privacy Settings over Scripted Action for Windows 11 24H2 (OOBE)

by

Last week, I used the Windows 11 24H2 Multi-Session Image from the Microsoft Gallery for the first time while working for a new client. Initially, I didn’t notice anything unusual since I only tested the login via Azure Virtual Desktop. However, when I had to log in locally as an administrator, the privacy settings screen … Weiterlesen …

Redundancy for storage account of user profiles

by

Azure Storage Accounts are a vital component in many Azure environments, serving as a versatile solution for various needs – from storing log files to providing data for applications. In my daily work, however, I primarily use them for a very specific purpose: storing user profiles with FSLogix. These profiles play a crucial role in … Weiterlesen …

Configuring the Session Lock Behavior

by

Since it became possible to log in to AVD Session Hosts with Single Sign-On (SSO), there has been an issue where the session disconnects upon session lock. This problem arises because the lock screen does not offer modern options for unlocking the session. For security reasons, the session was disconnected, assuming that re-authentication would be … Weiterlesen …

Deployment of custom scripts via a storage account with user-assigned managed identity

by

For the provisioning of session hosts, it can be useful to copy files from a storage account that are required during provisioning or operation. However, these files should not be publicly available and a storage access key should not be used. I can create a short-term shared access signature (SAS) so that a file can … Weiterlesen …

Azure Virtual Desktop, Windows Server 2022 and Microsoft Entra ID Only

by

Introduction The customer needs Windows Server 2022 as a session host. I explained that he needed RDS User CALs for this (I always used User CALs). The customer then ordered 2000 User CALs on my recommendation. The customer’s IT department then created a Windows Server 2022 RDS license server and added the existing domain. However, … Weiterlesen …

Delete Old FSLogix Profiles with Nerdio

by

Nerdio provides an Azure Runbook as a Scripted Action, which deletes profiles on a storage account if they are older than a defined number of days. The following parameters are required for execution: I took a closer look and saw the potential for improvement. Authorizations With a Nerdio Manager for Enterprise, I usually also provide … Weiterlesen …

SSO for Azure Virtual Desktop with AD users

by

I have now activated SSO for Active Directory users in my lab. I already had a configuration that allowed users to log in. The users and the session hosts are already hybrid. Now, the users can log in without entering an additional password. To realize this, I followed the Microsoft documentation: Configure single sign-on for … Weiterlesen …