book

Mastering Azure Virtual Desktop

by Ryan Mangan

March 2022

Intermediate to advanced

734 pages

13h 19m

English

Packt Publishing

Read now

Unlock full access

ForewordContributorsAbout the authorAbout the reviewers
Who this book is forWhat this book coversTo get the most out of this bookDownload the color imagesConventions usedGet in touchShare Your Thoughts
Desktop virtualizationAzure Virtual Desktop – what is it?Providing the best user experienceEnhanced securitySimplify managementManaging Azure Virtual Desktop performanceMulti-session Windows 10/11What licenses do I need?How does Azure Virtual Desktop work?What's managed by Microsoft and what you manageWhat Microsoft managesWhat does the customer manage?Summary
Assessing existing physical and Virtual Desktop environmentsAssessing Azure Virtual Desktop deploymentsUser personasApplication groupsAssessing the network capacity and speed requirements for Azure Virtual DesktopApplicationsDisplay resolutionsAzure Virtual Desktop experience estimatorRemote Desktop Protocol bandwidth requirementsEstimating bandwidth utilizationEstimating the bandwidth that's used by remote graphicsDynamic bandwidth allocationLimit network bandwidth use with throttle rate limitingReverse connect transportSession host communication channelClient connection sequenceConnection securityIdentifying an operating system for an Azure Virtual Desktop implementationSupported Azure OS imagesWhat is Windows 10 multi-session?Customizing the Windows 10 multi-session image for your organizationPlanning and configuring name resolution for Active Directory and Azure Active Directory Domain ServicesPlanning a host pools architectureApp groupsEnd usersRegistering the DesktopVirtualization resource providerRegistering the provider using Azure PowerShell (optional)Resource groups, subscriptions, and management groups limitsConfiguring the location for the Azure Virtual Desktop metadataCalculating and recommending a configuration for capacity and performance requirementsMulti-session recommendationsRecommendations on sizing VMsGeneral recommendations for VMsTesting workloadsSummaryQuestionsAnswersFurther reading
Selecting a licensing model for your Azure Virtual Desktop deploymentApplying the Azure Virtual Desktop licensing to VMsAzure Files tiersPlanning for user profiles User profilesChallenges with previous user profile technologiesAn introduction to FSLogix Profile ContainersAzure Files integration with Active Directory Domain ServicesPlanning for user identitiesPlanning for Azure Virtual Desktop client deploymentInstalling the Windows Desktop clientSubscribing to a workspaceAccess client logsConnecting to Azure Virtual Desktop using the Web ClientSetting up email discovery to subscribe to the Azure Virtual Desktop feedSummarizing the prerequisites for Azure Virtual DesktopSummaryQuestionsAnswers
Implementing Azure Virtual Network connectivityAzure Virtual NetworkAzure VNetsCommunication between Azure resourcesCommunication with on-premises networksFiltering and routing Azure network trafficUnderstanding what virtual network integration is for Azure servicesManaging connectivity to the internet and on-premises networksTypes of VPN available to youImplementing and managing network securityAzure network security overviewUnderstanding AVD network connectivityManaging AVD session hosts by using Azure BastionWhat is Azure Bastion?Setting up Azure BastionConnecting to a VM using Azure BastionMonitoring and troubleshooting network connectivityUsing Azure Monitor to diagnose network issuesConfirming all required URLs are not blockedSummaryQuestionsAnswers
Configuring storage for FSLogix componentsFSLogix Profile container storage optionsThe different Azure Files tiersBest practices for Azure Files with AVDConfigure storage accountsStep 1 – create a new storage accountStep 2 – configure the basicsStep 3 – configure advanced settingsStep 4 – configure networkingStep 5 – configure data protectionConfiguring file sharesConfiguring disksEphemeral OS disksCreating a VHD imageCreating a VMCreating a local imageDynamic disks versus fixed disksSummaryQuestionsAnswersFurther reading

Creating a host pool by using the Azure portalHost pool creationWorkspace informationAutomating the creation of AVD hosts and host pools Setting up PowerShell for AVDCreating an AVD host pool with PowerShellSummaryQuestionsAnswers
Windows Server session host licensingConfiguring host pool settingsCustomizing RDP propertiesUsing PowerShell to customize RDP propertiesMethods for configuring Azure Virtual Desktop load balancingUsing PowerShell to configure load balancing methodsAssigning users to host poolsAssigning users to host pools via PowerShellConfiguring automatic assignmentConfiguring direct assignment using PowerShellApplying OS and application updates on an Azure Virtual Desktop hostConfiguring a validation pool Applying security and compliance settings to session hostsSummaryQuestionsAnswers
PrerequisitesDeploying an Azure AD-joined host poolEnabling user accessConnect to Azure AD-joined session hosts using the Remote Desktop clientConfiguring local admin accessSummaryQuestionsAnswers
Creating a gold imageCreating a VMConnecting to the VMModifying a Session Host imageDisabling automatic updatesInstalling language packs in Azure Virtual DesktopOptimizing an imageCapturing an image templateCreating and using an Azure Compute Gallery (ACG)Creating your first Azure Compute GalleryCapturing an image in an Azure Compute GalleryCreating an image definition from the Shared Image GalleryCreating an image versionTroubleshooting OS issues related to Azure Virtual DesktopVMs are not joined to the domainAzure Desktop Agent and Virtual Desktop Bootloader are not installedAzure Virtual Desktop Agent is not registering with the Azure Virtual Desktop serviceBasic performance troubleshooting in Azure Virtual DesktopNetworking troubleshootingSummaryQuestionsAnswers
Introduction to Azure RBACPlanning and implementing Azure roles and RBAC for AVDThe delegated access modelAssigning RBAC roles to IT adminsThe PowerShell way to assign role assignmentsCreating a custom role using the Azure portalManaging local roles, groups, and rights assignments on AVD session hostsConfiguring user restrictions by using Azure Active Directory Domain Service group policiesSummaryQuestionsAnswers
Introduction to MFAHow does Azure MFA work?Security defaultsConditional AccessPlanning and implementing MFACreating a conditional access policy for MFAManaging security by using Microsoft Defender for CloudSecuring AVD using Microsoft Defender for CloudUsing Microsoft Defender for Cloud and AVDEnabling enhanced security for AVDConfiguring Microsoft Defender Antivirus for session hostsWhat is the difference between Microsoft Defender Antivirus and Microsoft Defender for Endpoint?Getting the latest updatesSetting the scheduled task to run the PowerShell scriptManually downloading and unpackingConfiguring quick scansSuppressing notificationsEnabling headless UI modeSummaryQuestionsAnswers
Installing and configuring FSLogixLicense requirements for FSLogix profile containersFSLogix key capabilitiesFSLogix installation and configurationConfiguring antivirus exclusionsConfiguring exclusions using PowerShellConfiguring profile containers Configuring Cloud CacheConfiguring Cloud CacheMicrosoft Teams exclusionsFSLogix profile container best practicesSummaryQuestionsAnswers
Configuring Universal PrintPrerequisites for Universal PrintUniversal Print administrator roles Setting up Universal Print Registering printers using the Universal Print connectorAssigning permissions and sharing printersAdding a Universal Print printer to a Windows deviceConfiguring user settings using Microsoft Endpoint ManagerStart Virtual Machine on ConnectConfiguring with the Azure portalEnabling screen capture protection for Azure Virtual DesktopTroubleshooting FSLogix profilesTroubleshooting Azure Virtual Desktop clientsTesting connectivity Resetting the Remote Desktop ClientRemote Desktop Client is showing no resourcesSummaryFurther readingQuestionsAnswers
Configuring dynamic application delivery by using MSIX app attachWhat is MSIX? What does it look like inside MSIX?What is MSIX app attach?MSIX app attach terminologyAn overview on how MSIX app attach worksPrerequisitesCreating an MSIX packagePackaging a simple application in an MSIX containerCreating an MSIX imageConfiguring Azure Files for MSIX app attachImporting the code-signed certificateUploading MSIX images to Azure FilesConfiguring MSIX app attach Publishing an MSIX app to a RemoteAppTroubleshootingPublished MSIX app attach applications not showing in the Start menuSummaryFurther readingQuestionsAnswers
Application MaskingRule types availableDeploying an application as a RemoteAppImplementing and managing OneDrive for Business for a multi-session environmentImplementing and managing Microsoft Teams AV redirectionImplementing and managing multimedia redirectionManaging internet access for Azure Virtual Desktop sessionsSummaryQuestionsAnswers
Designing a backup strategy for Azure Virtual DesktopPlanning and implementing a disaster recovery plan for Azure Virtual DesktopVirtual networkVirtual machinesManaging user identitiesConfiguring user and app dataDisaster recovery considerations for MSIX app attachApplication dependenciesConfiguring backup and restore for FSLogix user profiles, personal virtual desktop infrastructures (VDIs), and golden imagesVirtual machine backup and restoreZone-redundant storageAzure file backup and restoreReplicating virtual machine images between regionsSummaryQuestionsAnswers
Creating an automation account for Azure Virtual DesktopAutomating the management of host pools, session hosts, and user sessions using PowerShell Implementing autoscaling for host poolsAutoscale – scaling plansSummaryQuestionsAnswers
Configuring Azure Monitor for AVDCreating a Log Analytics workspaceConfiguring the monitoring of AVDConfiguring performance countersConfiguring eventsUsing AVD InsightsSetting up alerts using alert rulesIntroduction to KustoConnecting Log Analytics to Kusto ExplorerCreating queries for AVD using Kusto ExplorerUsing Azure Advisor for AVDSummaryQuestionsAnswers
How the Getting started feature worksPrerequisitesUsing the Getting started feature with Azure AD DS and AD DSUsing the Getting started feature without an identity providerPost-deployment cleanupTroubleshooting the Getting started featureSummaryQuestionsAnswers
Azure Virtual Desktop Community shout-outs!Cool vendorsOther resources written by Ryan ManganSummary
QuestionsAnswers
Other Books You May EnjoyPackt is searching for authors like youShare Your Thoughts

Content preview from Mastering Azure Virtual Desktop

Section 2: Planning an Azure Virtual Desktop Architecture

This section takes a look at the planning and design of Azure Virtual Desktop's architecture, which covers both the core architecture and the design of user identities and profiles.

This part of the book comprises the following chapters: