Hey everyone, I've recently started a new job after working as a Citrix administrator. We have an Azure Virtual Desktop (AVD) setup that's non-persistent, using a golden image for session hosts with Nerdio. I've noticed that after deploying the golden image, both Edge and Chrome auto-update on their own. When we reboot each week, the session hosts revert to the versions in the golden image, but afterwards, the browsers update again. Some users have reported seeing a blank screen in Edge and Chrome, and they can't browse unless we clear their app data. I suspect this mismatch between app versions and user data might be the cause. In my past experience with Citrix, we always made sure to disable auto-update services. Is that still the best approach? Should we continue using Group Policy for this? Also, what happens to the scheduled tasks for auto updates? I'd love to hear your thoughts!
2 Answers
I’d recommend setting up weekly Image Builder pipelines to add updates to your golden image regularly. This way, you won’t deploy outdated images. It's also wise to disable OS level updates and let Azure Update Manager take control. Critical security updates can happen nightly, but everything else should wait for your next image build.
Just a heads up, Windows 11 isn’t officially supported by Azure Update Manager. But if you create a custom image, it could work. Keep that in mind!
We've disabled all auto updates on our session hosts and manage updates through deployments or scripts on top of the image. It keeps everything running smoothly without the hassle of unexpected updates.
I haven’t done that before, is that part of Nerdio? What if a user logs in right after a reboot?