Are you guys going with Trusted Launch VMs in azure or standard when vuilding cvad machines in azure?

Depends on the type of resource it is. For persistent VDI, we went with trusted launch. For non persistent shared desktops, just standard.

What would you do with persistent shared desktop? Only time its wiped is after an OS or software update and is pushed back out with mcs

For W11, we're using Trusted Launch from the gallery.

Depends on what you are trying to protect. Id probably just roll with trusted launch