All Posts

Azure AD only joined hosts in Azure Virtual Desktop: Join and re-join hosts

Azure AD-only joined are getting more common in Azure Virtual Desktop. There are some challenges running AVD hosts as AAD-only. One challenge is that you can roll out a new...

Working interactively with user sessions in Azure Virtual Desktop

Handling user sessions in AVD could be more intuitive in the Azure Portal. Luckily, some tools (like WVDAdmin, Hydra, and others) are available to make it easier. I made a...

Sysprep and deploy Windows 11 22H2 in Azure with a custom image and a workaround

A common way to build virtual machines based on an image in Azure (e.g., as Session hosts for Azure Virtual Desktop) can be done by the "Golden Image" approach.

The challenge of having the correct language in the Edge browser with Azure Virtual Desktop in West Europe

If you run Azure Virtual Desktop in a data center in another country, you maybe know that the browsers are showing some websites in the data center location language. For...

Azure Virtual Desktop: Logging session host state to Log Analytics to show state and sessions over time

Update October 2022: Check out the following Workbook to use diagnostic logging to get and visualize the data

Azure Virtual Desktop Session Hosts with Azure Disk Encryption

Hydra for Azure Virtual Desktop and WVDAdmin are supporting ADE for AVD Session Hosts.

Automatically add or change Azure Active Directory computer objects on-demand

Hybrid joined AVD session hosts are great for working with conditional access, Intune (MEM), access to Azure files, and other AAD integrated services. [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12

Honey-Potting in Azure and Unfavorable Account Names

As everybody knows, running a Windows system in Azure unprotected is not a good idea. To get access to an Azure VM, Azure Bastion or VPN are recommended.

Securing an app service, a key vault, and a database with private endpoints

A typical Azure application uses an app service representing the front end, a database to store the data and configuration settings, and a key vault to keep secrets (like the...

Azure Trusted Launch and Custom Images - even for AVD

Trusted launch for Azure virtual machines is currently in public preview (https://docs.microsoft.com/en-us/azure/virtual-machines/trusted-launch). The trusted launch has some benefits, like:

WVDAdmin - Azure Windows Virtual Desktop Administration for CSP and Consulting Partners

Azure Windows Virtual Desktop Administration for CSP and Consulting Partners

Get alerted if Azure Virtual Desktop fails - AVD Monitoring and alerting with Loganalytics / Azure Monitor

Monitoring Azure Virtual Desktop is important to get insights into the performance and resource usage and alert if something generally goes wrong. Especially, getting alerted if something goes wrong is...