EP 15: AVD Configuration and Lab [Windows 365 Masterclass Series]

Summary

In Episode 15 of the Windows 365 Masterclass Series by A Guide To Cloud, viewers are taken through an extensive hands-on AVD (Azure Virtual Desktop) lab configuration. The episode dives into setting up a session host, application publishing using MSIX App Attach, and connecting to AVD on both Windows and Mac systems. It also covers profile management with FSLogix, different load balancing techniques, MFA configuration, and cost optimization strategies. Wrap up includes steps to optimize Microsoft Teams on AVD and leveraging Azure Monitor for insights into AVD activities.

Highlights

• Create and manage session hosts efficiently in Azure Virtual Desktop. 💻
• Deploy applications using MSIX App Attach for streamlined access. 🗂️
• Set up FSLogix to ensure seamless user profile management. 🌐
• Implement load balancing with depth-first and breadth-first strategies. ⚖️
• Secure your Azure Virtual Desktop with multi-factor authentication (MFA). 🔒
• Configure cost-saving measures by managing VM operations smartly. 💸
• Integrate optimized Microsoft Teams for Azure Virtual Desktop. 🎧
• Utilize Azure Monitor for detailed insights on AVD's performance. 🔍

Key Takeaways

• Master the deployment of Azure Virtual Desktop with thorough hands-on exercises! 🚀
• Learn to publish applications using MSIX App Attach seamlessly. 📲
• Configure robust user profile handling with FSLogix for optimal performance. 🔄
• Explore load balancing techniques to distribute sessions effectively. ⚖️
• Boost security with Multi-factor Authentication (MFA) configurations on Azure VD. 🔒
• Optimize costs with strategic management of Virtual Machines. 💰
• Enhance your AVD setup with Microsoft Teams media optimization. 🎥
• Utilize Azure Monitor for comprehensive insights and performance tracking. 📊

Overview

This episode is a comprehensive guide through the configuration of Azure Virtual Desktop, touching on all critical components that administrators face during deployment. It starts with creating session hosts and moves towards publishing applications with MSIX App Attach. Whether you're using Windows or Mac, connecting to AVD becomes a breeze.

Profile management takes the spotlight with FSLogix, ensuring user data is seamlessly handled across sessions. Various load balancing methods are explored to enhance user experience. Security remains paramount, with a deep dive into setting up multi-factor authentication for AVD users.

To cap it off, the episode delves into cost-optimization strategies and introduces Microsoft Teams media optimization for AVD users. Monitoring and insights via Azure Monitor make maintaining the system efficient and effective, rounding out this insightful masterclass.

Chapters

• 00:00 - 01:00: Introduction This chapter offers a comprehensive hands-on lab focusing on Azure Virtual Desktop deployment. It guides administrators through the various scenarios they may face, including creating a session host, publishing applications via start menu and MSIX app attach, and connecting to the Azure Virtual Desktop session host through both browser and app on Windows and Mac.
• 01:00 - 09:00: Lab 1: Creating AVD Host Pools In this chapter, titled 'Lab 1: Creating AVD Host Pools', the focus is on setting up and optimizing Azure Virtual Desktop (AVD) environments. The session begins with setting up FX logixs profiles within operating systems. It continues with an exploration of two types of load balancing strategies: breadth first and depth first. Students will then learn how to configure Multi-Factor Authentication (MFA) for Azure virtual desktops. The chapter concludes by providing tips on monitoring the Azure virtual desktop environment, optimizing costs, and includes a practical hands-on exercise aimed at reinforcing the topics covered.
• 09:00 - 16:00: Lab 2: Monitoring with Log Analytics In Chapter 'Lab 2: Monitoring with Log Analytics,' the focus is on configuring Microsoft Teams in an Azure Virtual Desktop environment. The chapter begins by introducing the process of creating a host pool using the 'getting started' wizard on the Azure portal. Users are guided to search for Azure Virtual Desktop in the portal and to use the create host method to establish their first host pool, which is essential for housing pooled desktop resources.
• 16:00 - 20:00: Lab 3: Application Groups The chapter discusses 'Lab 3: Application Groups', focusing on the deployment and configuration of pooled desktops. These desktops operate on an as-needed basis, providing non-persistent sessions where no user profile information is stored locally. FS Logix's profile containers are utilized to dynamically provide user profiles to the host, enabling organizations to maximize compute resources on a single host.
• 20:00 - 25:00: Lab 4: Accessing Published Applications via Browser The chapter discusses the deployment and utilization of Azure Active Directory Domain Services (Azure AD DS) within a company named Ktoo. It highlights the creation of a new resource group called ABD Resource Group and the deployment of Azure Active Directory Domain Services within it. Azure AD DS is used to provide identity and access management for applications.
• 25:00 - 30:00: Lab 5: Accessing Published Applications via Client In this chapter, the focus is on accessing published applications via a client in an Azure environment. Users are guided through the process of navigating back to the Azure home page and selecting Azure Virtual Desktop. They are instructed to ensure they have chosen the correct subscription before proceeding. When selecting the identity provider, they are advised to choose an existing Active Directory, utilizing Azure Active Directory Domain Services (AADDS) since it has already been deployed. The chapter provides step-by-step guidance on these configurations.
• 30:00 - 40:00: Lab 6: Setting up FSLogix In Lab 6: Setting up FSLogix, the focus is on selecting an Active Directory and configuring a Resource Group. The tutorial guides users through naming their Resource Group (e.g., "ABD host pool Resource Group") and selecting a geographical location that is closest to the user. The example provided demonstrates choosing 'West US' as the location where resources are hosted, suggesting the importance of location proximity to optimize performance.
• 40:00 - 49:00: Lab 7: Load Balancing Methods The chapter discusses setting up resources in Azure, specifically focusing on the West US region to centralize resources within a virtual network. It involves selecting a virtual network from a resource group that already has certain resources, like 'aads', configured. Additionally, it mentions the virtual network (vnet) being on the address space of 10.0.0.0.
• 49:00 - 59:00: Cost Optimization The chapter titled 'Cost Optimization' explores the creation and management of subnets. It begins with an overview of subnet basics, specifically discussing the ADS subnet and the session host subnet. The chapter guides readers through the process of adding and creating new subnets via the networking subnet page. For those needing more detailed guidance on Azure networking, a Hands-On lab is recommended, which offers clear explanations on subnet creation.
• 59:00 - 64:00: Lab 8: Enforcing MFA In Lab 8 titled 'Enforcing MFA', the focus is on setting up and managing multi-factor authentication (MFA) within a virtual network. The user begins by selecting the appropriate location, virtual network (vnet), and subnet, specifically choosing the session host subnet for hosting machines. They are prompted to provide admin username and password credentials for the domain administrator. The subsequent step involves navigating to the Virtual machines section to continue the setup.
• 64:00 - 71:00: Lab 9: Microsoft Teams Optimization The chapter titled 'Lab 9: Microsoft Teams Optimization' provides a detailed guide on configuring Microsoft Teams in a virtual environment. The first step involves deciding whether the setup will be for a single user or multiple users. The guide opts for a multi-user configuration. The next step is to define the type of image to be used, which in this case is selected from a 'Gallery'. The recommended choice is 'Windows 10 Enterprise multi session with Microsoft 365 apps', specifically the 'Windows 10 multi session 20 H2 with Microsoft 365 apps Gen 2' edition. This configuration is geared towards optimizing the Microsoft Teams experience in a multi-user setup.
• 71:00 - 98:00: Lab 10: MSIX App Attach In this chapter, the topic of configuring virtual machine sizes in a host pool is discussed. The process begins by selecting the default size D2 sv3, but then changes to a different configuration, specifically d4s V4, which offers 4 vCPUs and 16 GB of RAM. The instructions conclude with applying the new size setting to the host pool and specifying a name prefix.
• 98:00 - 110:00: Lab 11: Monitoring with Azure Monitor In this chapter, titled 'Lab 11: Monitoring with Azure Monitor', the focus is on setting up a session host with unique naming conventions within an Azure resource group. The chapter details the process of providing an initial number of virtual machines, with a specific mention of adding two in this case. There is an option to link to an Azure template if needed, but it is not utilized here. Additionally, the chapter addresses user management through assignments, touching upon the option to create test user accounts, which is bypassed in favor of assigning existing users or groups. The narrative leaves certain default settings in place for these assignments.
• 110:00 - 111:00: Conclusion The final chapter, 'Conclusion,' provides a step-by-step guide on how to initiate the deployment process. It begins with instructions to click on 'review and create' after filling in the necessary information, which triggers a validation process. Once validation is successful, the user clicks 'create' to start the deployment. The deployment process can be monitored through the notification tab or by staying on the same page, which offers detailed updates on each step. This process typically takes between 10 to 20 minutes, with each phase being clearly outlined for the user.

EP 15: AVD Configuration and Lab [Windows 365 Masterclass Series] Transcription

• 00:00 - 00:30 in this video we're going to go through anure virtual desktop complete Hands-On lab so we will go through all the possible scenarios you as an administrator will encounter in an aure virtual desktop desktop deployment this Hands-On lab exercise will teach you how to create a session host publish your application not only using start menu using msix App attach as well we will learn how to connect to aure Virtual desktop session host using browser and using an app on both Windows and Mac
• 00:30 - 01:00 operating systems we will set up the FX logixs profile and we will learn two different types of load balances one is breadth first and second one is depth first then we will learn about how you can configure MFA for your Azure virtual desktops we will finish off this practical exercise by giving you tips on monitoring your Azure virtual desktop environment how to cost optimize your environment and giving you Hands-On practical exercise on how you can can
• 01:00 - 01:30 configure your Microsoft teams on a Azure virtual desktop environment so without wasting any more time let's get into it in the first lab we are going to create host pool using getting started wizard so let's Jump Right In I'm on my Azure portal you can go to the global search box and type in asure Virtual desktop and select that so this is the getting started wizard you can use this create a host method to create your first host pool this is where your pulled desktop Toops are going to reside
• 01:30 - 02:00 pool desktop are a set of computer or host which operate on a as needed basis in a pooled configuration we will be hosting multiple non-persistent sessions with no user profile information stored locally this is where FS logic's profile containers provide the user profile to the host dynamically this provides the ability for an organization to fully utilize the compute resources on a single h host we are going to deploy
• 02:00 - 02:30 this avd host pool in an already deployed Azure active directory domain Services instance so what I have done I have created a new Resource Group called ABD Resource Group and within that I've already deployed something called Azure active directory domain services so let's assume a scenario where our company is known as ktoo and ktoo is already using Azure ad domain services and this Azure active directory domain services will provide identity and
• 02:30 - 03:00 authorization services so let's go back to home click on Azure virtual desktop or search for aure virtual desktop and click on getting started here click on start first if you have multiple subscription make sure you select the right one under the identity provider we going to select an existing active directory because we have already deployed Azure ready domain Services Under identity service because we have a a DS I'm going to select a aads or you
• 03:00 - 03:30 can select active directory as well under Resource Group give a name for your resource Group I'm going to call it ABD host pool Resource Group location this is where you would be ideally picking a closest location to your user or where they are using from if I go to another Tab and go to Resource Group let's click on the ABD Resource Group all of my resources are hosted in West us so what I'm going to do is I'm going to go back and change the location to
• 03:30 - 04:00 West us because I want all of my resources are there in the same region under virtual Network I'm going to select my aads virtual Network because when I created this aads so if I go back to my other Azure portal this Resource Group already have the resources things like a adds we have already have a vet created so the vnet is on the address space of 10.0.0.0
• 04:00 - 04:30 16 and we have a subnet one first Subnet is ADS subnet and then we created a new subnet for the host file so that is the session host subnet so you can add new subnets and create different subnets by going into this networking subnet page so if you have any questions related to the networking I have created another Hands-On lab on Azure networking so please do go and watch that so there I clearly explained how you you can create
• 04:30 - 05:00 your first wiet subnets Etc so let me go back to my other portal all right so we selected the location we selected the vnet and subnet under subnet I'm going to select the session host subnet because that's where I want all of my host machines to be available under aure admin username give the username and password for the user for the domain administrator and give the username and password the next step is to go to Virtual machines under virtual machine
• 05:00 - 05:30 the first step is to select whether do you want this instance for multiple user or a single user I'm going to select multiple user under image type expand this and select Gallery under image select I'm going to scroll down and select Windows 10 Enterprise multi session with Microsoft 365 apps so I'm going to select Windows 10 multi session 20 H2 with Microsoft 365 apps Gen 2 the
• 05:30 - 06:00 next option is to select the virtual machine size this is where you're going to configure what compute you want to allocate for your host machines so you can either go with the default D2 sv3 I'm going to click on change size I'm going to search for d4s V4 this would give me 4 with CPUs and 16 GB Ram so select that and click on select so our host pool virtual machine size is been changed the next step is to provide the name prefix for
• 06:00 - 06:30 your session Host this has to be a unique name within the resource Group so I'm going to call it ABD host pool one session host provide the number of virtual machines you want at the beginning so I'm going to add two if you want to link to an Azure template you can do that I'm going to uncheck it next click on assignments if you do want to create a test user account you can do that I'm going to uncheck it we don't want that and we do want to assign existing users or groups so I'm going to leave it at the default which is check
• 06:30 - 07:00 booxed and click on review and create this goes through a validation process after you get this validation passed message click on create this will kick off a deployment process so you can keep an eye on this notification tab or you can stay at this particular page which gives you very detailed information about what's happening in the background each of these items will be listed here like this so this would ideally take up to 10 to 20 minutes depending upon the
• 07:00 - 07:30 type of configuration what you have put in so I'm going to pause the video we will come back after completing the deployment all right so our deployment is completed so you can click on this notification tab this tells you the deployment is succeeded or not in case if your deployment fails at this stage all you have to do is go delete the resource Group you created and just follow the steps which I taught you in the first lab so we can either click on go to Resource from here or we can click
• 07:30 - 08:00 on go to Resource from here you can check all the deployment what happened in the back end by going into this particular page so when I started the deployment it was 9:30 p.m. now it is 10 so it took me around 30 minutes to complete the this whole deployment so let me go back to um go to Resource so I'm going to click on next steps and click on go to Resource here if you notice we can see that we have two virtual machines running these
• 08:00 - 08:30 two are the session host we created so let's click on this virtual machines you can see there are two session host we created these two are the virtual machines now if I go back apart from that what else is created so if you scroll down you would be able to see there is one application group so click on application group we have one application group created and we have one application as well so that is the session desktop so we will come to these topics later now in the next Lab what
• 08:30 - 09:00 we're going to do is we're going to do monitoring using log analytics so let's assume your company's interested in setting up an operation Center focused on monitoring the host pool user access and many more so to help achieve that goal you can create a log analytics workspace and map it to the avd environment using Azure insights let's go and create our log analytics workspace so go back to your aure portal I'm going to go back back to my home
• 09:00 - 09:30 page click on create a resource here search for log analytics workspace and select log analytics workspace within this page click on create again we will go through this setup visard make sure you select the right subscription so under Resource Group select avd host pool Resource Group we created to deploy the session host give a name for your instance I'm going to call it avd monitoring log Analytics and a random
• 09:30 - 10:00 number because it has to be unique and the region again you can pick any region but because for our lab all the resources are deployed in West us I'm going to select West us and simply click on review and create and this window helps you verify if the parameters be filled are correct and after you get the validation passed message click on create this will initiate the deployment this deployment wouldn't take more than 3 minutes so let's wait for this deployment to complete all right so deployment is completed click on go to
• 10:00 - 10:30 Resource to see the newly created log analytics workspace now that we have created our log analytics workspace the next task is to enable diagnostics for our workspace so let's go and do that so I'm going to go back to my Azure homepage click on Azure virtual desktop on the left hand side under monitoring click on insights so here let's select our subscription where our resources are placed um and the pick the host pool and
• 10:30 - 11:00 the time range because we just now created so the time range doesn't matter so I just going to leave it at 48 hours and if you scroll down you would be able to see open configuration workbook so click on open configuration workbook so in the check configuration page under resource diagnostic settings click on this drop- down box and select the avd monitoring workspace we created and again scroll down to the bottom of this page and click on configure host pool on
• 11:00 - 11:30 the deploy template the diagnosis setting for the host pool are automated using a template so you can go through these configuration categories workspace will be configured for management activities feeds connections errors checkpoints host registration and agent health status after reviewing click on deploy so right now the template is deploying the deployment is completed now I'm going to quickly ref refresh this page now on the same page you would
• 11:30 - 12:00 be able to see the settings applied to the host pool now to configure the workspace again scroll down to the bottom of the page and click on configure workspace so when you deploy this template the workspace is going to configure the management activities feeds errors and checkpoints so click on deploy all right so that is completed so I'm going to hit refresh one more time this time we will be able to see the following settings under the workspace so now on the check configuration page
• 12:00 - 12:30 this time click on session host data settings under workspace select the workspace we created and scroll down to the bottom and add the session host to the workspace so click on ADD host to workspace and you can read the message it says that as you will configure the host machines to send data to the selected workspace and click on deploy now the session host will be added to the log analytics workspace the deployment is in progress this is going
• 12:30 - 13:00 to take a little more time than the other deployments all right so that deployment is also completed I'm going to cancel this hit on refresh one more time you can see that the session host is added now it is asking for performance counter information do you want performance counters if you want you can configure these performance counters so I do want this information because this gives me information about the memory disk based CPU utilization
• 13:00 - 13:30 things like that it's very important for me so click on configure performance counter and apply configuration now this configuration is also added to the log analytics workspace so I'm going to quickly refresh one more time and let's go and select our workspace now if you scroll down you can see all the performance counters we just now configured U the data is been just gathered because we just now deployed we can come back to this page later to see the the metrics on how these performance
• 13:30 - 14:00 counters are being measured the next task is Windows even locks to configure that scroll down to the events page and uh on the right hand side you can see the types of event locks would be generated or created so right now I don't have that information so click on configure events to deploy this template to gather the windows event logs all right so now we will be able to gather the event logs from all of our session host now let's go back all of our
• 14:00 - 14:30 deployment for these log analytics is completed um you can just follow these steps by yourself to enable monitoring using log analytics for your aure virtual desktop environment so that completed the lab two which was monitoring using log analytics we will come back to the monitoring data after going through a few other steps in the third lab we are going to learn how to create application groups and assign them to users so let let's assume a scenario where your company want to
• 14:30 - 15:00 restrict the access to Applications used by different team in your organization so your company wants to create a separate application group and assign only a specific set of users to it so I'm going to show you an example of how you can help your company to configure and create an application group and add applications to it so let's go and create our application group let's go back to the Azure homepage click on aure
• 15:00 - 15:30 Virtual desktop and under manage click on application groups as you can see that there is an already an application group created when we created the session host in the first lab exercise this was created by default in this task what we are going to do is we're going to create a new application group this time the type would be remote app and we will publish two applications in it and also we are going to assign users to both the application groups so let's go and create our first group so select the
• 15:30 - 16:00 already created application group under manage click on assignments here on top of the page click on ADD here I'm searching for the user which I want to assign it to select the user and click on select so now we have added one additional user to this application Group which is the desktop uh application group now we are going to create a new application group called Remote App application group group so for that I'm going to go back to the
• 16:00 - 16:30 application group page go back to your aure virtual desktop under manage click on application groups on top of the page click on create select the right subscription under Resource Group we have to select the host pool Resource Group that's where we deployed everything so click on ABD host pool Resource Group under host pool I'm going to select the default host pool which is EB ABD host pool the location is grade out because everything is deployed in
• 16:30 - 17:00 West us so we won't be able to change it scroll down until you find application group type here instead of desktop we going to retain a remote app and give a name for your application group I'm going to call avd application group 01 and click next for applications this is where we would be able to add application to this application group if you forget to add application here or you decide to do application later you can always do this at the latest stage
• 17:00 - 17:30 by going into the Azure virtual desktop getting started page so click on add applications the application Source I'm going to retain start menu we will come back to msix package and file path later um under application I'm going to pick Excel because these are the application which is already available in my session host display name you can retain whatever you want I'm going to retain it as Excel itself application path and icon path are def fault so if you do
• 17:30 - 18:00 install your own application and then you can modify these values and after that click on Save now let's add one more application so click on ADD application this time I'm going to select scroll down until you find word so select word display name I'm going to leave it at default I'm not changing any other value hit on Save now we have two applications added next let's go to assignments so click on assignments by
• 18:00 - 18:30 default this is not added to any users so you can click on ADD aure ready users or groups in the real world scenario I would highly encourage you to add groups rather than users right now I'm going to assign it to myself so click on select and next let's go to workspace under workspaces tab click on register application group instead of no select yes and we are going to register to our existing application group we created go
• 18:30 - 19:00 to Advan tab if you do want to enable boot diagnostic settings we can enable that we are not going to do that because we have already set up the log analytics workspace for all monitoring so hit on review and create this goes through a validation process after you get the validation pass message click on create this would take about a minute to complete the deployment all right so our deployment is completed so click on go to Resource and uh what we have done is we created a couple of application
• 19:00 - 19:30 groups so click on applications here you can see the newly added two applications and if you want to see the assignments you can click on assignments you can see the user who you assigned this application groups and applications too so that's the end of lab three where we learned about creating application groups and assigning them to users in the lab four we going to learn about how to access the publish application and desktop using a browser scenario so
• 19:30 - 20:00 let's assume a scenario where your company wants their ABD environment to be flexible in terms of accessing the sessions by their employees so in this exercise I will help you understand how you can test and access the ABD session using a browser the first task what we're going to perform is we're going to access the published application so let's go and do that so the first step is we are going to go to another Tab and this time go to a portal called a ak. ms/ wvd arm web and hit enter because I
• 20:00 - 20:30 have logged into this portal using the same username and password I have already automatically logged in and I can see the published application for that particular user in your case if you are using a new browser without any log on session you would have to log in with the username and password to access the published application all you have to do is double click this will give you an option to allow any local resources so
• 20:30 - 21:00 if you want to use the clipboard microphone printer you can enable or disable that and click on allow for the first time it is going to ask you for the username and password for the user so I'm going to provide the username and password I don't want to save it and let me quickly minimize the size of the window I'm going to change it to 150 so right now what it is happening in the background is it is setting up our application for the first time so the first time it would take some time maybe
• 21:00 - 21:30 a few extra seconds to launch this application that is the word instance the second time onwards it is going to be super fast as you can see the word application is launched for me so uh to set up for that specific user I can click on sign in just like any other application provide the username and password click next and sign in all right so our application is set up for us to use so now I can open a new blank
• 21:30 - 22:00 document or an existing template after editing it I I have full control on what I can do by like saving it or printing the document so I'm going to quickly save this document on the local machine and click on Save and if I don't want to use it I can simply close it so all of this experience what you're seeing is via a web browser now let's go and do the second exercise the second exercise is to access the published desktop to
• 22:00 - 22:30 access the published desktop again you go to all resources and this time you double tap on this session desktop and click on allow again you have an option to select do you want to allow clipboard microphone or printer provide the username and password and click on submit now it is logging in into the session desktop so this is the desktop which is assigned to that particular user I can use it just just like any other device so I can go to my start
• 22:30 - 23:00 page go to my file explorer and click on documents this is the document we saved via the browser experience I can just launch it this time instead of launching via web browser we are using the fat client itself so this is a regular Windows Word Edition and I am using it within a Windows 10 virtual machine so this is the document we edited and I'm going to modify the file and I'm going to close close it and save that file so
• 23:00 - 23:30 that's a quick example on how you can use it so while this is happening let me quickly go back to the Azure portal and let's go back to home click on Azure virtual desktop on the left hand side under manage this time click on users so we haven't used this box to search for a specific user so I'm going to provide the user name so this is the user we want to test so I'm going to click on the username and this is where you would be able to find information for that user related to as your virtual desktop
• 23:30 - 24:00 so you can click on individual assignments to see where all this user is assigned to there is an application group and a desktop group U group assignments what we are interested in is to go and click on sessions here you can see the active session for that users so you as an administrator if you want to log off this user for whatever reason or if the user is facing an issue you can do it by yourself as well also select the active virtual machine which user is
• 24:00 - 24:30 signed in and I'm going to click on log off so click on log off or you can do a disconnect as well and click okay so right now this is logging of this user so if I go back to the remote desktop page we will soon see this user will be logged off from this session it's not refreshed so my window is stuck so basically I am logged off so I can't even use any of this so it's just a static page so if I hit refresh it says
• 24:30 - 25:00 that okay I'm not able to connect it because it is session is been logged off for me now if we go back to the aure portal and click on refresh or even without refreshing you can see that the session is been disconnected for that user so that's the end of lab four so we learned about how to publish application and desktop using browser in lab five we're going to learn how to access the published application and desktop using a ABD desktop client so let's go and
• 25:00 - 25:30 start our first exercise which is accessing the published application using the ABD desktop client so let me quickly show you two different scenarios in the first exercise I'm going to download this avd client on a Windows desktop and in the second exercise we are going to download this client on a Mac desktop and we are going to use it we going to see two different scenarios so first download this client on a Windows device so I'm going to go to the download page and I'm going to download it for a Windows device so click on
• 25:30 - 26:00 download Windows 64 bit and let's install it so as you can see that in the background I'm using a Windows 11 virtual machine so what we are doing right now is to install the Microsoft Remote Desktop tool so click next install it just for me and just follow the stepbystep process of installing this application all right so the application is installed so if you can't find this application all you have to do is just I'm going to close this go to
• 26:00 - 26:30 your start menu and this is the recently installed application which is remote desktop so I'm going to pin it to my taskar so we can access it any time we want and click on it and launch the application use this application for accessing the published application and the published desktop so first step is to click on subscribe so provide the username and the password and click on sign in all right so it is automatically signed in now I can see all the
• 26:30 - 27:00 published application for that user this app lets you categorize this by a tile version or a list view you can click on settings to change the look and feel of the application use the light mode or a dark mode I choose the light mode so it's easier for you to see first let's try to connect it on a Windows machine so I'm going to sign in with the username and the password to Launch the session desktop all you have to do is
• 27:00 - 27:30 double tap and provide your password and that will let you log to your session desktop so as you can see this is a Windows 10 machine I used a Windows 11 so my local machine is Windows 11 within that I can seamlessly access a Windows 10 virtual machine so that's how simple it is now let me quickly show you how you can access on a Mac device so let's go to your app store in your Mac device and install this remote desktop app and after installing click on open just like
• 27:30 - 28:00 Windows click on subscribe to subscribe to this workspace and double tap provide the password and click on connect and this is how you will launch the desktop or a remote desktop session host on a Mac device now I am accessing the Windows 10 session host or session desktop on my Mac computer in lab 6 we are going to set up FS logixs as your virtual Desktop Service recommends FS Logics profile containers as a user profile solution FS Logix is designed to
• 28:00 - 28:30 roam profiles in remote Computing environments such as Ash virtual desktop it stores a complete user profile in a single container and at the login the container is dynamically attached to the Computing environment using natively supported virtual hard disk and hyperv virtual hard disk the user profile is immediately available and appear in the system exactly like a native user profile so let me quickly show you how you can set up the whole process in the
• 28:30 - 29:00 first exercise we going to create storage account and file share so let's go and do that to do that let's go to our Ana portal let's go to the homepage this time on the global search box search for storage accounts and select that we do have couple of storage accounts but we are going to create a brand new one so click on create retain the default subscription you've been using I'm going to keep the resource Group as the one we create created for the host pool the next step is very
• 29:00 - 29:30 important giving a unique storage account name so I'm going to call it FS logixs profile storage and a number under region I'm going to pick bestest us because that's where all of our resources are if you go back to any of the resources we have used West us as our resource so I'm going to retain that performance I'm going to retain standard replication GRS click on Advanced we're going to leave all of these values to default and click next to networking in
• 29:30 - 30:00 the networking tab we're going to enable Public Access for selected virtual Network and IP addresses and scroll down under virtual Network select your handson lab virtual Network under virtual Network we're going to select our a a DDS vnet scroll down under subnet select the session host subnet and leave the rest of the values to the default make sure you select the right end points and click on review and create this will go to a validation
• 30:00 - 30:30 process after that click on create storage account creation will ID take about a minute or so yep our deployment is complete so click on go to Resource to go to newly created storage account under the storage account on the left hand navigation plane scroll down to data storage under that click on file shares and under file share click on active directory not configured here we have to select Azure active
• 30:30 - 31:00 directory domain Services click on setup to enable this click on this checkbox which will enable aure active directory domain services for this file share and after that click on Save please note that setting this property implicitly domain joins the storage account with the associated Azure ad domain Services deployment Azure ad domain Services authentication over SMB is then enabled for all new and existing file shares in the storage account so wait for this
• 31:00 - 31:30 deployment to complete yeah looks like the deployment is completed now let's go back to the storage account go to Resource click on file shares within the file share because we don't have any so click on create a new file share here provide a username I'm going to put it as user profile under the tier select the transaction optimize tier and click on create all right so that process created our first file share for our SM SMB drive for the user profile in the
• 31:30 - 32:00 next task we going to learn how to configure our file share so let's go and do that so in this task we are going to give storage file data SMB share contributor permission to FS logixs container group so let's go back to your Azure portal go to your homepage this time go to the global search box and type in Azure active directory and select your Azure active directory within your Azure active directory on the left and navigation pane click on
• 32:00 - 32:30 groups under group we going to create a new group so click on new group group type is security group name is permission for FS logixs container under membership type just retain as assigned not Dynamic and click on create so our group is successfully created so after that hit on refresh so you would be able to see it over here all right so our new group is visible so select the newly created group group within the group page under manage click on members so we
• 32:30 - 33:00 don't have any members at the moment so click on ADD members under the add members tab you have to search for a user in my case I'm going to select myself and click on select after that hit on refresh this would take about 30 to 40 seconds so we can see this user now that has been completed now let's go back to the storage container so go back to the homepage click on storage accounts and select the storage account you created for the fs logic so that is
• 33:00 - 33:30 FS logixs profile storage on the left and navigation pan under data storage click on file share and select the user profile within the user profile click on access control I am and right on the top click on ADD within add select add rooll assignment under rooll assignment you have to search for storage under roll assignment search for store storage file SMB share contributor so select that the
• 33:30 - 34:00 first one is the SMB share contributor and click on next please note that here you can find three different share level permissions for these users and these three are asure built-in roles for granting share level permission to users so after making the first selection click on next and retain assign access to user group and service principle and click on select members and add the group so if
• 34:00 - 34:30 you remember we created a group called permission FS Logics container so select that search for it select that and click on select button and after making these changes click on review and assign and click on review plus assign so this will add the role assignment for that group now that exercise is completed in the next exercise we're going to configure the session host so let's go and do that so let's go back to our Azure home homepage this time instead of storage
• 34:30 - 35:00 account click on Virtual machines so within the virtual machine we can see three virtual machine we are only going to concentrate on these two the session host one and session host two so first let's select the first session host which is sh0 on the session host page on the left hand navigation pane scroll down under operations click on run command so select that within that select run Powershell script so select run Powershell script so I have to run
• 35:00 - 35:30 this script one modification I have to do is to find the name of the storage account so let's go back to our other Azure portal let's go to the storage account and Fs logixs profile so this is the name I'm going to quickly copy and go back to the other portal and replace this with my storage account name so this script is going to install the fs logixs profile container application and configure the required Registries and
• 35:30 - 36:00 set the profile container location to the as of file share we created the only modification what we have done is to change the name of the storage account so you would be able to go to the Microsoft documentation and find the appropriate scripts and I will make sure to put the link and these scripts details on my blog as well now after making the necessary changes you can click on run you can see that the script execution is in Pro progress while that is happening I just copied the same
• 36:00 - 36:30 command and I'm going to go to another aure portal and we have to execute this in the session host one as well so I'm going to go to portal. a.com login with the same admin username and password click on Virtual machines this time it is session host one scroll down under operations we're going to select run command within run command we going to select run Powershell script I'm going to paste the command this time I copied
• 36:30 - 37:00 from the other file so the storage account name is intact and I'm going to hit on run all right so let's go back to the first portal and let's wait for this execution to finish so we are waiting for the output the output we should get as script executed successfully it would take around 5 to 10 minutes for this script to execute completely all right so in the first session host which is sh0 we got the output has script executed successfully now let's go to
• 37:00 - 37:30 the second virtual machine I'm going to go to the other portal so let's see if we can see any execution nothing so far as you can see after the end of this script we provided a variable providing after completing all this scripts we should get a return value as script executed successfully so let's wait for this output on this session host one as well all right so our script is executed successfully on both the session host now let's go back to the Azure portal
• 37:30 - 38:00 let's click on Azure homepage this time go to Azure virtual desktop under manage click on users and let's sign off from any logged in session for this particular user so I'm going to click on this user go to sessions and uh select this user and click on log off so I'm going to log off again from other workspace I'm going to select this user and click on log off so that when we do
• 38:00 - 38:30 this the next time when we sign in with the same user this user should automatically pick up the profile from FS Logics instead of the default one the other one was the default one so that's why we are logging of this user before signing into the session now let's go to the Windows machine and log to the session host first I'm going to launch the remote desktop and click on subscribe provide the username password and click on sign in and let's double tap the session host desktop provide the
• 38:30 - 39:00 password and click okay here ideally we should see as you can see now it is saying please wait for the fs Logics app services to be created so this is setting up the fs Logics for this user for the first time so this is an indication that the fs Logics is going to be managing the user profile for this user now it is applying all the windows settings and while that is happening let me take you to the aure portal and and quickly show you how you can verify the user profile stored in the file share so
• 39:00 - 39:30 on your Azure portal go to your aure homepage click on storage accounts select the storage account for the user profile on the left hand navigation pane first click on networking within the networking tab select enable all Network this will enable access to your storage account on the public network so that you can see the user profile stored in the file share so after making the change make sure to click on Save now again go
• 39:30 - 40:00 back to your storage account this time on the left hand side under data storage click on file shares and select the user profile here this is where you would be able to see the user folder created in the file share so if you open this folder so double click you will be able to see the user profile data stored in the file share in a do vhd format so if you don't see it immediately don't worry it might take some time for the user profile folder to appear in the file share so that's the end of lab six which
• 40:00 - 40:30 was all about setting up your FS Logics now let's start with lab 7 lab 7 is load balancing methods as your virtual desktop support two load balancing methods each method determines which session host will host a user session when they connect to a resource in the host pool when configuring the host pool we can select the load balancing method there are two types one is breath first and depth first breath first load
• 40:30 - 41:00 balancing distribute new user sessions across all available session host in the host pool depth first load balancing distribute new user session to the available session host with the highest number of connection but has not reached its maximum session limit threshold so on the first exercise we're going to add new users to Azure active directory let's go and do that go back to your aure homepage on the search box select Azure active directory or type in Azure
• 41:00 - 41:30 active directory and select Azure active directory under manage click on users and we going to create a new user so click on new user under create user page create a new user I'm going to call it ABD user one give a name for the user I'm going to provide the same as ABD user one and domain we are going to retain our existing domain and let's click on create now we going to create
• 41:30 - 42:00 another user this time we're going to create avd user to so provide the same provide the name as ABD user 2 and the username is also ABD user 2 and click on create now we have this user created let's quickly go and make sure we have this details so I'm going to quickly copy this username so I don't have to type it let's go and find the usernames first so newly created us users so click on users click on ABD user one I'm going
• 42:00 - 42:30 to quickly copy the username and the other user is just user to so I'm just going to modify it and change the value to user to so now I have a copy of these two usernames now for this user we have not added any membership so let's go to this user and on the left hand side click on groups and click on ADD membership here we're going to add permission select the permission FS logic container and click on select do the same for user 2 as well so I'm going
• 42:30 - 43:00 to so I'm going to go back to the user tab select user two go under groups add membership type in permission FS Logics container and select and click on refresh now let's quickly verify if this membership is visible for all these users so I'm going to uncheck and let's go to user one go to groups yeah we can see the membership added to the user one let's go back to the users Tab and check this go to user two select the user two
• 43:00 - 43:30 and go to groups yep we can see that the membership is added now let's go back to the homepage this time go to aure Virtual desktop under manage click on application groups you can see that there are two application groups listed here so I'm going to select the desktop application group now so select that within that application group on manage click on assignments and click on ADD here I'm going to type in I'm going to select ABD user 1 and ABD user 2 and
• 43:30 - 44:00 click on select now that we have added the users and I have and I have updated the password for these users in the next exercise we're going to change and experience load balancing methods so let's go and do that when we created the first host pool we selected the bread first now let's go and log to the desktop with both user at the same time and see how the user distribution looks like so I'm going to go to akms wbd arm web and I'm going to sign in as the first user the first user is ABD user
• 44:00 - 44:30 one click next provide the password and click on sign in here we should be able to see the published desktop for the user and I'm going to double tap and click on allow and I'm going to provide the password one more time and click on submit now it is logging into the session desktop using the avd user one user profile all right so now we signed in as user one you can see that I have logged into this Windows device as user
• 44:30 - 45:00 one I'm going to launch another browser while that is in the background I'm going to go to aka.ms wbd arm web and launch this this time I'm going to try to sign in as user 2 so login as ABD user 2 click next provide the password for the user click on sign in so in the background I used another browser to log in as user one this time I'm using a different browser to log in as user to I'm going to launch the session desktop
• 45:00 - 45:30 click on allow provide the password one more time and hit submit all right so I signed into the desktop for the user to so to verify that I'm going to click on start go to this user account as you can see this is a user two desktop and the other one if I click on it this is a user One desktop so now we have signed in to the session desktop using two different browser to as two different user profiles now let's go back to our
• 45:30 - 46:00 Azure portal I'm going to quickly minimize this and within the ash portal go to your Asha virtual desktop click on host pools select your desktop host pool on the left and navigation plane scroll down under manage click on session host under session host you can see both are available what we are interested is to look at these numbers this shows that how users are distributed among different session host under breath first load balancing method so the
• 46:00 - 46:30 breath first method first query session host that allows new connection and the method then select a session host randomly from half the set of session host with the least number of sessions now let's go and test the depth first so before that we have to log off these users from these sessions so I'm going to click on these sessions so first click on the first session click on users and select the the user and click on log off users and click okay
• 46:30 - 47:00 similarly I'm going to go back to the second session host click on the session host click on users under users select the user and on the top click on log off users click okay and now if you go back to the session host page after some time hit refresh you can now see that the active sessions change to zero uh now to change the load balancing to depth first what we going to do is go back to your Azure virtual desktop select your host
• 47:00 - 47:30 pool on the left hand side scroll down until you find settings under settings click on properties so select properties under properties on the right hand side scroll down until you find the load balancing algorithm so by default it is set to breadth first now we are going to change it to depth first after making this change click on Save now we are going to log to this ABD user one and ABD user 2 one more time to see if all
• 47:30 - 48:00 the changes are reflecting in the depth first algorithm so first I'm going to go back to my first browser which I used to log in as ABD user one I'm going to cancel it and double tap click allow and I'm going to log in as ABD user one while that is happening I'm going to go to another session which is anywhere disconnected because we logged off this user click on reconnect allow provide the password hit on submit so now both of these session desktops are logged in one with user 2 and another one with
• 48:00 - 48:30 user one so now let's go back to our Azure portal within the Azure portal I'm going to go back to my Azure virtual desktop click on host pools select the host pool and click on Virtual machines here you can see both of these session host and under active sessions you can see session host one have two active sessions now in the depth first method this query is the session host that allow new connection and haven't gone over their maximum session limits this
• 48:30 - 49:00 method then select the session host with the highest number of sessions if there is a tie this method selects the first session host in the query again to log off these users you know the process select the session host and click on users select both of these users and click on log off users click okay all right so that's the end of lab 7 we learned about load balancing methods we learned about breadth first and depth first algorithms in this lab exercise
• 49:00 - 49:30 we're going to learn about cost optimization for Azure virtual desktop so the first exercise is we're going to enable start virtual machine on connect so let's go and do that I'm on my Azure portal go to the global search box and type in subscription and select subscriptions and select your subscription within the subscription page click on access control I am and on the top of the page click on ADD click on add custom role give a name for your
• 49:30 - 50:00 role I'm going to name it as start VM on connect and make sure you select start from scratch and click next under permissions add permissions here search for virtual machines so virtual machines are found under Microsoft compute so scroll down until you find Microsoft compute and select that from the list of permission under Microsoft compute scroll down till you find Microsoft compute virtual machines so I'm just scrolling down all right so I found
• 50:00 - 50:30 Microsoft compute virtual machines within that select read get virtual machine and other start virtual machines these are the two options we need to select and click on ADD then click on next available scope is our subscription and simply click on review and create and click on create click okay now let's go back to I am click on ADD select add Ro assignment here search for the one which we just now created which was
• 50:30 - 51:00 start VM so I'm going to just search for the rule we just custom rule we just created the one we created is start VM on connect select that and click on next under add members tab click on assign to user access and click on select members here on the search box search for Windows Virtual desktop and select that and click on select after that click on review and assign and click on review assign so that's how we need to enable
• 51:00 - 51:30 start virtual machine on connect next is configure start VM on connect feature so let's go and do that let's go back to the Azure homepage click on Azure virtual desktop on the left hand side under manage click on host pools select your host pool on the left hand side under settings click on properties on the properties page scroll down until you find start VM on connect by default it will be no so turn on by selecting yes and click on Save now that we have
• 51:30 - 52:00 configured the start VM on connect feature in this exercise which is the last one let us go and experience the VM start on connect first let's go and turn off or shut down the session host so I'm going to go back to my homepage go to Virtual machines and select both of these session host and click on stop so this operation will stop all virtual machines selected below so we are going to stop both of these virtual machines so click here yes now if you notice the status of this virtual machine is
• 52:00 - 52:30 running and we will wait till this turn to stop before proceeding further let's quickly do a refresh all right so both of the status is changed from running to deating and this will now change to delocated while that is happening I'm going to go back to one of the portal and uh this time I'm going to quickly reconnect so I'm going to connect to the session host and because our session host is turned off this would take time but the idea over here is the cost optimization so you can keep your
• 52:30 - 53:00 session host on a turned off State and when a user try to connect to a session host that time the session host will start so if I move this aside or let's quickly minimize or change the size of this window and let's go and hit on refresh here so ideally we should see our session host one of the session host will turn to running and another one will be stopped and delocated so that's what we are waiting to see you can see
• 53:00 - 53:30 that our session host is still not turned on the first experience is not that great but in terms of cost saving yes definitely there is an advantage of cost saving while that is happening I just logged into another portal and this time I initiated from Azure virtual desktop user to as well so now we are trying to connect to this session host from two different users and probably we need to wait for another few more minutes for this to kick in all right so now my virtual machines are asking for
• 53:30 - 54:00 password that means the virtual machines or the session host in the back end is started so as soon as you provide the password you would be able to log in to your session host as you can see that definitely there was a time delay between getting this virtual machine to get going because the session host was in a turned off status so now you can see one of the virtual machine is running hopefully soon the other one will kick on as well all right so that's the end of cost optimization lab
• 54:00 - 54:30 exercise in the next Lab we going to use mem to enforce MFA while using Azure virtual desktop so in this lab we will enable multiactor authentication and multiactor authentication is a process where a user is prompted during the sign-in process for an additional form of identification which increases the level of security the first exercise is setup multiactor authentication so let's go and do that to set up multifactor authentication let's go to aka. ms/
• 54:30 - 55:00 prooof up hit enter sign in with your user account and here I'm going to select authenticator app and I'm going to select receive notification for verification and click on setup and I do have the authenticator app installed on my phone so I'm going to launch it and click on add a new user account and scan the QR code so I'm going to quickly scan the QR code all right QR code is entered so now click next and I'm going to click next I'm I'm receiving an approval
• 55:00 - 55:30 symbol so I'm going to click yes to approve the login process and the second method I'm going to give the phone number and verify preferred so I have to verify it one more time and hit verify all right so now we set up MFA or the proof of MFA for this particular user now let's go back to the Azure portal go back to the Azure homepage and click on Azure active directory on the azure your active directory page on the left hand side scroll down until you find
• 55:30 - 56:00 properties and scroll down on the properties page towards the bottom under access management for Azure resources click on manage security defaults and make sure you select no if it is turned on yes so and after that go back to your Azure adid this time instead of properties click on security and under security click on conditional access under conditional access click on new policy create new policy give a name I'm
• 56:00 - 56:30 going to call it avd MFA under assignments click on user or assignments click on select users and group and click on user or group here select the user account which is your user account and click on select next click on cloud apps or actions select apps here search for asure virtual desktop select that and click select scroll down under condition click on conditions click on
• 56:30 - 57:00 client apps and select yes click on done and again scroll down click on access controls under Access Control click on Grant make sure you select require multifactor authentication and select and on the bottom enable policy click on own and click on create this is how you would create a conditional access policy to turn on MFA for a user now let me go back to my local machine let's go to
• 57:00 - 57:30 Azure virtual desktop session host connection page provide the user name and password for the user and click on sign in this time it is asking for MFA to connect to your Azure session host sorry as your virtual desktop workspace so I have to provide the onetime code so I'm going to provide 3 4 3 2 9 sorry 2 49 and I'm going to hit verify and click yes all right right so that's how you would be able to connect your workspace
• 57:30 - 58:00 using MFA so that's the end of that lab now the next Lab is Microsoft teams optimized experience in this lab we will be implementing Microsoft teams for Azure virtual desktop with media optimization so this supports the calling and meeting functionality with media optimization for teams the remote desktop client handles audio and video locally for teams calls and meetings so let's go and set that up so the first exercise is we're going to configure session host for implementing Ms teams
• 58:00 - 58:30 to do that let's go to aure homepage here click on Virtual machines let's select our first session host which is sh0 make sure your status is running and uh on the left hand side under operations click on run command here we're going to select run Powershell script and I'm going to run a command and click on run so so please note that this script is going to download the web RTC and Ms teams which are specifically
• 58:30 - 59:00 meant for aure virtual desktop so I'm going to do the same step on session host 2 as well you can see that the operation completed successfully and the script executed successfully on the first session host so let's go to session host one click on run command run Powershell script ideally you would have to install this on your second session host as well but unfortunately my second virtual machine is not starting it's I think it's a backend
• 59:00 - 59:30 issue because it's a lab environment I'm not too bothered about it in the second virtual machine also you would go to the Run command run the Powershell script I'm not able to open it because the power state is non- deterministic because the backend virtual machine is not running I would have to contact Microsoft support team to fix it I'm not going to do that but you get the point right so you run this command or you manually install the Microsoft teams client for Azure virtual desktop on your session host now after that step let's
• 59:30 - 60:00 go back to your Azure homepage go to your Azure virtual desktop click on host pools select your host pool under settings this is the important setting so go to your RDP properties click on device redirection and here make sure you enable audio enable audio capture from local device and redirection to an audio application so that's the option you have to select the first one second audio output location make sure you
• 60:00 - 60:30 select play sounds on the local computer and the third one is camera redirection here instead of not configured click on redirect cameras after that click on Save next go to your application groups select the application groups under manage click on applications and click on ADD from the start menu I'm going to select Microsoft teams and click on Save now if you go back to your workspace and
• 60:30 - 61:00 uh either you have to unsubscribe or I'm going to quickly refresh I should be able to see Ms teams along with other application so now you would be able to launch it and when you launch it you will get an option in the settings to redirect your cameras audio video and everything to your local device rather than the session host so that's how you set up this in this lab we're going to learn about how to set up msix app attach so we will be implementing msix
• 61:00 - 61:30 app attach for an virtual desktop msix app attach is a way to deliver msix application to both physical and virtual machines however the MS app attach is different from the regular msix because it's made especially for aure virtual desktop msix removes the need for repackaging when delivering applications Dynam dynamically so you can go and read about this if you want to know more about it so first let's go and learn how
• 61:30 - 62:00 to configure Azure virtual desktop for msix app attach so I'm going to go back to my Azure homepage so click on Azure virtual desktop oh in before that let's go to Asha homepage click on your storage accounts select the storage account we created and under that let's go to file shares so we created a file share for user profile this time we we going to create a file share for msix app attach so click on new file share
• 62:00 - 62:30 and name it msix file transaction optimized and click on create it creates immediately it won't take much time and click on msix file and click on upload click on upload file I have made sure that I have uploaded a file for this lab exercise so I'm going to go to lab files I'm going to open the msix package for 7even zip so click on upload so let's click one more this time click 7zip open and click
• 62:30 - 63:00 on upload now we created a file share for msix and uploaded two files now on the access control I am click on ADD click on rooll assignment add rooll assignment under the RO assignment search for storage file data share contributor select that click next under user click on ADD member and we're going to select a user and click okay and
• 63:00 - 63:30 click on review and assign and click on review and assign now let's go back to the homepage click on storage account again and search for the storage account which one we used just now go to file shares and select the msix file and click on connect here make sure you select the storage account key and let's copy this file to the clipboard now go back to the as homepage click on virtual machine let's go to our session host
• 63:30 - 64:00 zero which is our first session host scroll down under operations click on run command and run Powershell script and paste looks like it's not copied completely so let's go back and copy it again I'm going to go back to the storage account file share msix file click on connect storage account key and click on copy to the clipboard go back to the other ASO portal and paste it all
• 64:00 - 64:30 right and after that hit on run now we are waiting for the output the output should be the folder msix should attach to this local computer as a z drive again we should be ideally doing this on session host one as well unfortunately our session host one is not running all right so as you can see that this command is successfully executed so it is mapped this folder to the local folder now let's go back to the storage account one more time I'm going to go to
• 64:30 - 65:00 the other portal this time close this go back to your storage account select the storage account where you created the msix select the file share select the msix file and click on the msix CT and select this file URL and click on copy to the clipboard and now let's go back to the virtual machine I'm going to go back to the first run command here select this delete and paste the new paste the new command and hit on run now
• 65:00 - 65:30 this script should idly install the certificate for aure virtual desktop session host one all right so we do have to make some more changes in the file so let's go to notepad all right so we have to run this second command so first I have to copy this so I have to replace this certificate path with the certificate we just copied I'm going to paste this and copy this entire command go back to your Azure portal this time
• 65:30 - 66:00 go back to the Run command delete this and execute this command so this will make sure the required certificate for this msix app will be installed on this session host we will have to repeat this on session host one as well if you have multiple session host so in our case we are only going to execute in one of these virtual machine all right so now we have configured our avd for msix app attach in the next exercise we're going to create msix package in avd
• 66:00 - 66:30 environment to do that let's go to your Azure environment let's go to your homepage go back to your Azure virtual desktop click on host pools select your workspace scroll down under manage click on msix packages click on ADD and provide the URL or UNCC path for your msix app and click on ADD let's go and find the p math one more time click on this 7 zip let's copy the storage
• 66:30 - 67:00 account name properly all right so click on add all right so it worked so last time the storage account name was not correct so click on ADD so this is how you would add an msis app so to make it active you have to select it under State make sure you click on active and click on Save again now go back to application groups select the application group ABD a01 click on applications click on ADD
• 67:00 - 67:30 here under application Source select msix package and select the package give a name so I'm going to call 7zip and click on Save now that we have added this let's go and test it so I'm going to quickly log in to the session host session desktop I mean and click on allow provide the username and password and log to your session host and go to start and search for 7zip all right so it's still not available so if you don't
• 67:30 - 68:00 see that app I will show you a quick shortcut on how you can find it so let's click on start click on settings or go to search and type in control panel select the control panel go under view Network status and task click on change Advan sharing settings click on turn on network discovery and click on Save changes now I'm going to quickly restart the session desktop and click on restart
• 68:00 - 68:30 click on restart anyway double tap click on allow all right so you're logging into your session host ideally you should be able to see the 7even Sip file now because it's a lab environment I'm doing it really fast all of these things so click on yeah click on the start menu you are able to see the 7even zip file manager so so we have not installed it it's actually streaming from your Azure if I go back to the control panel and if I click on uninstall a program you will
• 68:30 - 69:00 not be able to see 7even siip installed here but you can see that the 7 sip application is running in your local machine so you can pin it to the task or pin it to the start menu and you can use that app to see that how the msix app attach is working I can quickly show you you can go to computer management and click on computer management under storage click on Disk Management here you can see that the seven sip is mounted as a vhd similarly you can see the profile dis is also mounted as a vhd
• 69:00 - 69:30 so that's the end of this lab now let's go to the last lab the last lab is monitoring using Azure monitor for ABD all right so to monitor the Azure insights all you have to do is go to Azure virtual desktop and click on insights here you would be able to see different insight for your aure virtual desktop to view the session host desktop health status you can expand the session host here you can see there are two
• 69:30 - 70:00 session host and one is available another one is not available you can see all of these insights here another Insight is you can click on these users and you can provide a value for a user so I selected a user and select a user based on the user you choose you would be able to see different metrics like feed refresh by client version Connection by client and version key usage numbers time to connect there are a lot of metrics here these are all
• 70:00 - 70:30 really important information for an administrator other cool information you can get is the client information here you can get information based on how a user is connecting are they using a browser or are they using a remote client application again these are all really good insights or meaningful insight for a administrator in your company all right so that's the end of this lab exercise I hope hope you found the information provided in this lab helpful I will see you on the next one until then take care