All Posts
Automatically remove a computer object from AD while removing a session host in AVD
With my tools WVDAdmin and Hydra for Azure Virtual Desktop, you can easily manage Azure Virtual Desktop. It also includes the deletion of session hosts and VMs with a single...
Azure AD only joined hosts in Azure Virtual Desktop: Join and re-join hosts
Azure AD-only joined are getting more common in Azure Virtual Desktop. There are some challenges running AVD hosts as AAD-only. One challenge is that you can roll out a new...
Working interactively with user sessions in Azure Virtual Desktop
Handling user sessions in AVD could be more intuitive in the Azure Portal. Luckily, some tools (like WVDAdmin, Hydra, and others) are available to make it easier. I made a...
Sysprep and deploy Windows 11 22H2 in Azure with a custom image and a workaround
A common way to build virtual machines based on an image in Azure (e.g., as Session hosts for Azure Virtual Desktop) can be done by the "Golden Image" approach.
The challenge of having the correct language in the Edge browser with Azure Virtual Desktop in West Europe
If you run Azure Virtual Desktop in a data center in another country, you maybe know that the browsers are showing some websites in the data center location language. For...
Azure Virtual Desktop: Logging session host state to Log Analytics to show state and sessions over time
Update October 2022: Check out the following Workbook to use diagnostic logging to get and visualize the data
Azure Virtual Desktop Session Hosts with Azure Disk Encryption
Hydra for Azure Virtual Desktop and WVDAdmin are supporting ADE for AVD Session Hosts.
Automatically add or change Azure Active Directory computer objects on-demand
Hybrid joined AVD session hosts are great for working with conditional access, Intune (MEM), access to Azure files, and other AAD integrated services. [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
Honey-Potting in Azure and Unfavorable Account Names
As everybody knows, running a Windows system in Azure unprotected is not a good idea. To get access to an Azure VM, Azure Bastion or VPN are recommended.
Securing an app service, a key vault, and a database with private endpoints
A typical Azure application uses an app service representing the front end, a database to store the data and configuration settings, and a key vault to keep secrets (like the...
Azure Trusted Launch and Custom Images - even for AVD
Trusted launch for Azure virtual machines is currently in public preview (https://docs.microsoft.com/en-us/azure/virtual-machines/trusted-launch). The trusted launch has some benefits, like:
