1 Azure Setting You Should Change NOW!!!

Azure Virtual Desktop Private Link enables customers to access Azure PaaS Services a private endpoint in their virtual network. This gives you more control over routing, security and access to your AVD environment.

▬▬▬▬▬▬ C H A P T E R S 📲 ▬▬▬▬▬▬
0:00 Secure Azure Virtual Desktop with Private Endpoints
1:06 AVD Private Endpoints Explained
2:43 Private Session Host Scenario
5:40 Fully Private Scenario
6:50 Virtual Desktop Global Endpoint
8:00 Virtual Desktop Connectivity
8:29 Wrap Up

▬▬▬▬▬▬ R E S O U R C E S 📡 ▬▬▬▬▬▬

▬▬▬▬▬▬ S U P P O R T 💰 ▬▬▬▬▬▬

#TheAzureAcademy #AzureVirtualDesktop #AVDSecurity

[Timmy-Hi]

"IF YOU LIKE ME" 😁🤣😂 NOBODY CAN BE LIKE YOU ... SUPER FUNNY, SUPER TECHY FAST TRACK SUPERMAN 🤩😁

[martinyang]

Since AVD private link has gone GA, any chance we can get an updated video with more demo? Pls!

[stephenzzz]

Thanks Dean. Could you do overview of upcoming CBA. Is it a possibility to ditch onprem adfs?

[marktyler]

Watched 4 times now Dean and head feels like its been through a mulcher LOL, so many questions!! My understanding is that RDP shortpath works over express route so as my session hosts are in a spoke vnet they should connect back to on prem clients via expressroute so no need for private endpoint - is that correct? As i have clients both externally and internally it would be better to create two workspaces, one for internal and one external but this global sub resource thing is worrying me so going to research that more. Also how do internal clients resolve the rdweb.wvd...feed discovery url internally? is some dns magic required to point it to one of the private endpoints?

[eudeliobenitezgonzalez]

Amazing video. Thanks a lots, but after watched the video lots of times I still have douts with PEP in global sense. Example: I have couples of networks, each one with 2 more subnets (one for pool and other for pep). In RG1 I have VNET1 one hostpool and workspace. In other hand, I have RG2 with VNET2 one hostpool and 1 workspace. In RG2 I've configured pep type connection, pep feed and pep Global in RG2. If I understood the video, I can delete the pep Global or the hostpool or the workspace in RG2 because the VNET1 and VNET2 are in different networks and not peered and rest of workspaces and polls still working. I'm right? What happen in case I already setup a global pep in a workspace and I don't need it any more? Must I recreate rest of workspaces? Thanks a lost in advance.

[Alexwilcox]

Hi, are you able to expand on what the exact security benefits are? From what I can tell without this enabled session hosts will talk to the AVD gateways over the 'public' network but never actually leave Microsoft's network.
Latency/performance improvements I can absolutely believe and maybe it's cheaper to send RDP data over a private endpoint than out via a firewall but I'm just not seeing what makes it more secure.

Apologies if I'm missing something obvious! And thanks for the video, very useful.

[richardsilver]

Outstanding video with great presentation. As always, David, you are amazing. I love it. This is very helpful information you have shared with us. Thanks a lot.

[otakuguild]

Thanks a lot for making such great videos, Just one question with VPN setup do i need to configure DNS forwarders ?

[jlou]

Thanks for that video Dean ! Already tested with an Azure VPN P2S client :)

[ctxshekhar]

As always, you are very friendly. Thank you for sharing the video.

[AhmadKhan-cwe]

Sir What host entry we need to add in our pc if we are using P2s vpn to connect amd access Avd . Because m able to access from machine in the same subnet but not able to access from my machine vpn is also conneted looks like i need to add hostfile entry please advise which entry we have to add ip and fqdn also please advise Thanks in advance

[iamquark]

Much appreciated content, as always. Thanks Dean!

[Axiizix]

In the Fully Private Scenario, you need a VPN on your client to reach the gateway if you are outside your company. But In the Private Session Host Scenario, do you need a VPN on the client ?
Is it possible for the client to use the private ExpressRoute connection when at the office, and then switch to using the internet when outside, without requiring an additional VPN connection?