I've set up Azure Virtual Desktop with Cloud Kerberos and FSLogix, and everything is working properly. The session hosts are Microsoft Entra joined and managed through Intune. I now need to map an Azure Files share as a drive for every user who signs in to the pooled session hosts. What's the recommended way to deploy this consistently for all user sessions?
2 Answers
An Intune policy using the Drive Maps administrative templates is another option. Upload the required ADMX and ADML files to Intune, then configure the network drive mapping for the target users. A logon script or scheduled task triggered at sign-in can also work, but make sure it runs in the user context and uses Entra authentication rather than embedding a storage account key in the script.
Since the session hosts are already Entra joined and Intune-managed, deploying the mapping through Intune is probably the cleanest approach. You can use a PowerShell script that runs in the logged-on user’s context and maps the Azure Files UNC path, such as \storageaccount.file.core.windows.netshare. Assign it to the appropriate user group and enable the option to run it using the logged-on credentials. Because Cloud Kerberos is already working for FSLogix, users should be able to authenticate with their existing Entra credentials, provided they have the required Azure Files share and storage RBAC permissions.

Related Questions
How To Get Your Domain Unblocked From Facebook
How To Find A String In a Directory of Files Using Linux