I've deployed Azure Virtual Desktop with Cloud Kerberos and FSLogix, and everything is working properly. The session hosts are Microsoft Entra joined and managed through Intune. Since the hosts are pooled, I need the same Azure Files share to be mapped automatically whenever any user signs in. What's the recommended way to configure this for every user session?
3 Answers
You can configure the mapping through Intune’s administrative templates by importing the appropriate drive-mapping ADMX and ADML files. Assign the policy to the users who need the share and ensure it runs in the user context. This avoids relying on a particular pooled session host and applies the mapping consistently across the host pool.
A logon script or scheduled task triggered at user sign-in can also run `net use` against the Azure Files UNC path. For pooled hosts, triggering it at logon makes sure the drive is created for whichever user receives the session. Avoid embedding a storage account key in the script if possible; use identity-based authentication and assign the required Azure Files RBAC roles instead.
Because the session hosts are already Entra joined and Intune-managed, deploying the mapping through Intune is probably the cleanest approach. Use a PowerShell script or a drive-mapping policy that runs in the logged-on user’s context and maps the Azure Files UNC path, such as \storageaccount.file.core.windows.netshare. Since Cloud Kerberos is already working with FSLogix, users can authenticate with their Entra credentials, provided they have the appropriate Azure Files share and NTFS permissions.
That’s the part I’m trying to confirm—what’s the best way to make the mapping happen for every user who signs in, rather than configuring each account separately?