Hi guys Having a torrid time with Auth for different scenarios Regarding AVD, entra joined machines with cloud only identities... Same pool of machines with hybrid identities Should the above scenario work or do we need sep pool with hybrid joined machines?...we are getting a login loop for hybrid identities trying to login here What are the supported scenarios Secondly, azure files with kerberos auth on same machines ...with both cloud only and hybrid identities, which one would work best as having issues with ad da auth as computer accounts are not syncing etc Thanks

Hi, Is anyone knows how to get AVD disconnections reports for all hostpools ? I am using below KQL query but it is not giving 100% accurate data.I observed few users has disconnections when I see from Insights but not found same user in Log Analytics with below query.. AVD insights has only top 20 disconnections, no helpfull.. If any one already worked on this that would be great help to me let user_failed_connections= WVDConnections //| where TimeGenerated > ago(2d) | where State =~ "Started" and Type =~"WVDConnections" | extend Multi=split(_ResourceId, "/") | extend CState=iff(SessionHostOSVersion=="<>","Failure","Success") | where CState=~"Failure"; let error_message= WVDErrors | where ServiceError == "false" | where ActivityType == "Connection" | summarize UserCount = dcount(UserName) by CodeSymbolic, Message, UserName; user_failed_connections | join ( error_message ) on UserName | project TimeStamp=TimeGenerated, UserName, Message, CState, ResourceGroup=Multi[4], HostPool=Multi[8],ResourceAlias, AVD_SessionName=SessionHostName, ClientOS=ClientOS, ClientWvdVersion=ClientVersion | order by TimeStamp desc;

Running a small pilot group in avd. These are persistent vdi and I have two questions. I can run PS against individual hosts. How do I run against multiple avd hosts simultaneously in the admin portal? Also, management does not want to use fslogix. I feel there will be a lot of administration overhead running this type of configuration. Are there any other concerns I should be aware of? Coming from citrix daas where I use fslogix.

Crosspost with #CKBVDG48H but hoping someone here may be able to help: I'm attempting to use this method of mounting Azure Files for a native Entra based AVD host pool. (https://nmmhelp.getnerdio.com/hc/en-us/community/posts/15704855452045-How-to-Use-Azure-Files-with-Entra-ID-AADJ-Method-for-AVD) I've set "access network as computer account". But FSLogix will not use the share and reports [ERROR:00000035] LoadProfile failed. Version: 3.25.401.15305 SessionId: 2. FrxStatus: 31 (The network path was not found.). As the user I can easily browse the path of the Azure files and create/delete folder despite no custom credentials. I'm succesfully creating the SAS key in credential manager which appears to work fine. If I remove the "access network as computer account" I do see the FSlogix logs report invalid name or password so it appears to be trying as computer when configured properly. Anyone seen this? I'm stumped as everything but FSlogix seems quite happy to use the share. I can even create drive mappings etc. I also tried the similar config from https://blog.itprocloud.de/Using-FSLogix-file-shares-with-Azure-AD-cloud-identities-in-Azure-Virtual-Desktop-AVD/ without any success. - same behaviour. I also rolled back to an older FSLogix version but no luck either.

So I fired up a test AVD Host Pool and a host.. i believe it was a D4_v4.. which is 4 cpu 16gb memory. I only had two users on it joined to a google meeting within the session and it started to stutter, etc. I'm looking to replace on prem RDS farm with AVD (i think) for the main reason of being able to have things like Zoom (phone and meetings), teams, etc be done within their AVD sessions and not have it be a separate environment. i.e. right now if they want to make a zoom phone call or have a meeting, they have to minimize RDS session and fire up zoom, etc locally. but with only 2 users and showing that kind of performance... yuck 😞

Hi, can you recommend some scripts I can use to create documentation for an AVD environment?

Which machine type do people use. We are using Standard E4as v5 (4 vcpus, 32 GiB memory) but maybe there are better alternatives?

Does anyone know which license a guest user needs to be able to access a remote app on AVD on Azure Local?

Persistent vdi. Windows 11 avd. New teams installed with bootstrapper. Doesn't seem to be installing the plugin for outlook. I'm seeing a lot of problems on the web for this any suggestions?

Update... https://euc.loginvsi.com/hydra-by-login-vsi?&amp;

Great tool MicrosoftDocs/mcp

I wanted to set up a host pool with session host configuration, but I'm not able to select Microsoft Entra ID for directory. Docs says it's supported, anyone been able to select this?

What would be the best way recommended to update (mostly applications) on persistent personal AVD hosts? AppAttach, 3rd party, Intune, etc?

Does anyone have definitive information on whether the screen capture protection feature works for local clients running Windows 10 in an AVD environment? According to Microsoft, it seems to be supported, but both Copilot and Perplexity suggest otherwise. The link below indicates that for RemoteApp, the feature is only supported on Windows 11, but it doesn’t specify anything about full desktop scenarios. Based on that, I’m assuming full desktop sessions on Windows 10 are supported. i can't test b/c i don't have a lab environment yet. https://learn.microsoft.com/en-us/azure/virtual-desktop/screen-capture-protection?tabs=intune#prerequisites

Hi, what custom roles do you usually configure for an AVD environment? Just found those on Marcels blog and they still look pretty good: Least privileges with custom roles for Azure Windows Virtual Desktop (WVD) | ITProCloud Blog

Hello all, in my session host I have the notification greyed out. I check the GPO and nothing related to block this. Look the registry HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications ToastEnabled =1. but still greyed. Do you have any clues for that ?

hello all do you know if it's possible to have the enveloppe indication on outlook new from avd ? by default i have this and when receive email i would like to have this enveloppe indication

Hi all, can someone check this in your side? I was troubleshooting some RDPShortPath Cases and i saw the following: On the client side it tells me that I'm on UDP (Relay): When i search this Session on my LAW, i can see 2 entries 1. with State "Started" 2. with State "Connected" But it tells me it's on TCP Websocket: When Disconnect and Reconnect the Session, I see an entry with "Completed" and after it again with "Started" and "Connected" but only the "Completed" Sessions tells me I'm on UDP Relay. This would be quite confusing. The client keeps telling me that I'm on UDP

does anyone know of a way to get the originating IP address in an AVD session or is the reverse nat going to pretty much hide all that?

Hi all! AVD 24H2, Hybrid Joined, SSO with Entra Credentials active, Fslogix Roam Identity disabled. Outgoing internet access (NAT GW) excluded from CA Policies for MFA. We randomly get this in Teams (need to sign in again) and in Office applications. I found this Disabling DMA SSO compliance to fix the Continue to Sign in but should you really need to do this?

Hi all! Is there a way to configure auto-launch of an AVD published App or Desktop when using the Windows App? With Remote Deskop app, you were able to take the shortcuts from Start Menu and put them into shell:startup but the Windows App does not create any shortcuts. The only way I found would be to create a direct launch URL but that only seems to work with HTML5 client and not the full client.

I’m gathering insights on this topic: What’s stopping you from using a smartphone as your primary VDI client? I mean fully replacing your desk device and connecting wirelessly to a mouse, keyboard, and monitor (I know many of you don’t yet have AirPlay or Miracast available). I’m especially interested in hearing about the weak points in the current experience — areas that need improvement, features that should be enhanced, or pain points that make this setup impractical today.

Screen size, typing speed, Microsoft Apps which with VDI are not made for touch screens. In a pinch you can do it but you are not putting in hours. Now a phone docked that Samsung DEX tried maybe but the phone integrations for phone things would need to be there. Its fun but not practical for normal office workers from what I have seen and even with Doctors who wanted it since 2008 still just use it a bit but then on a iPad is another story and works for them perfectly depending on their VDI more than the formfactor.

Hey everyone, as Microsoft is retiring default outbound Internet access for new Azure VMs after Sept 30, 2025 (see https://azure.microsoft.com/en-us/updates/?id=default-outbound-access-for-vms-in-azure-will-be-retired-updates-and-more-information ). we are looking for the best solution to solve that. I know the official options ( https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/default-outbound-access ) → NAT Gateway, Standard Load Balancer with outbound rules, or Public IP. Public IP is not an option for us. What’s the simplest and most cost-effective approach you guys are using? NAT Gateway or LB outbound rules? And why? Thanks!

If deploying session hosts from a golden image on a monthly basis, what do you do with defender definition updates? Just update once a month?

Does anyone else have HP thin clients and having issues with Teams crashing on meetings with large attendance?

Did anyone else see AVD Hosts with status "Needs Assistence" lately? Since yesterday I saw at 2 customers, that the URL westeurope-qos.prod.warm.ingest.monitor.core.windows.net is not reachable

Anyone got any information on when the Session Host Configuration feature will go GA?

Hello all, do you have any concern about this oragne triangle ? I,ve create the host pool with the preview configuration so I can't reinstall agent (I can't generate new key). So i try to schedule update (log analytic show me a succed) but still the same ... orange triangle (can see anyinformation of this warning). can someon help me ?

Anyone using App Attach successfully? I packaged a bunch of applications, uploaded them to a storage account, assigned them to hostpools and the user groups.. I can see that the apps are being staged successfully but its not registering on user login. Not seeing any errors. I tested the share permissions with psexec and the cert looks good