I'm currently working on setting up Azure Virtual Desktop (AVD) for my users, and while everything is running smoothly with Microsoft login through Entra ID, I'm having trouble integrating FSLogix for profile management. I've created two security groups, one for admins and another for users, and users can log in using their Microsoft accounts via the Remote Desktop client or Windows app.
The issue I'm encountering is that FSLogix isn't functioning properly for profile redirection of AppData, Documents, and user folders. I've read the documentation and attempted to use a workaround that involves linking to the profile container location, but the VHD/VHDX files aren't mounting during the login process. I believe this may be due to FSLogix expecting a domain-based authentication method, whereas my setup only utilizes Entra ID without a traditional AD join.
Here's a brief overview of my current configuration:
- Session hosts: Azure VMs (Windows 11 multi-session)
- Join type: Azure AD Join (not hybrid)
- Login type: Microsoft account (M365/Entra ID)
- Groups: "AVD Admins" and "AVD Users"
- Goal: Utilize FSLogix for proper profile redirection
- Problem: FSLogix container fails to attach at login
I'm contemplating a switch to AD domain join or Azure AD Domain Services (AD DS), but I'm unsure about a few things:
1. Would there be a reliable workaround for using FSLogix solely with Entra ID?
2. If I transition to an AD domain join, how would the login process differ for users?
3. What exact steps should I follow for setup, including permissions for VHD containers and connecting multiple VMs for profile redirection along with Cloud Cache capability?
Any real-world advice that could help would be greatly appreciated!
4 Answers
Check out the AVD-Accelerator GitHub repository. It offers a complete Microsoft deployment guide for Azure Virtual Desktop. Also, ensure that you're working with a domain-joined storage account since FSLogix requires hybrid identities to function effectively.
It all depends on your use case for AVDs. What's your user-to-AVD ratio? For instance, if you've got a Windows 11 template with 1 AVD and 2 VMs, serving around 25 users, that might influence your setup decisions. Keeping that in mind may help streamline your configuration.
If the workaround isn't cutting it, I'd recommend setting up a supported environment where FSLogix can function properly. You might also consider using Azure AD Domain Services (AD DS) as an alternative.
I suggest looking into Entra AD Domain Services for your setup. It’s designed to help manage identities in environments like yours. Plus, you might find some tutorials that will guide you through keeping your existing user profiles seamless in the transition.
Related Questions
How To Get Your Domain Unblocked From Facebook
How To Find A String In a Directory of Files Using Linux