Setup Azure Virtual Desktop 'AVD' and FSLogix Complete Step by Step Guide and Demo

Complete step by step guide and demo showing Azure Virtual Desktop (AVD) how to setup, configure and implement from the start a fully working AVD solution using FSLogix profiles with Azure premium storage private endpoint with Active Directory integration. This will help you build a virtualized desktop infrastructure VDI solution at enterprise scale from start to finish.

👌 Contents of this video 👌

00:08 Intro
03:36 Create Azure storage account for FSLogix
05:42 Create a storage private endpoint
06:36 Create DNS zone for private endpoint
07:29 Create premium file share for performance IOPS
11:18 Azure storage Active Directory integration
13:58 Assign Azure and NTFS permissions on AVD FSLogix Share
17:00 FSLogix GPO Admin Template install
18:11 FSLogix standard config
21:03 Register resource providers
21:31 Create a Azure Virtual Desktop gold image and install apps
23:27 Install FSLogix and apps in gold image
24:09 Sysprep AVD gold image
24:36 Capture the AVD image in the image gallery (Azure compute galleries)
25:33 Creating a AVD host pool from the image gallery
30:00 Add users to access AVD
30:22 Install the Remote Desktop Client
30:43 Testing FSLogix user profiles permissions
31:47 Testing FSLogix user profiles between hosts
33:39 FSLogix Antivirus file and folder exclusions
33:55 Conditional Access policy targeting AVD
34:36 No computer password expire
35:02 Ending and finish up

Required FQDNs and endpoints for Azure Virtual Desktop

Set up FSLogix Profile Container with Azure Files and Active Directory Domain Services or Microsoft Entra Domain Services

Powershell to enable Active Directory authentication for Azure file shares

FSLogix Recommended ACL ans Storage Permissions

FSLogix Configuration examples

FSLogix AntiVirus file and folder exclusions

#virtualdesktop
#azurevirtualdesktop
#avd
#fslogix
#vdi
#daas
#azure
#microsoft
#virtualization
#remotework
#desktopvirtualization
#virtualdesktopinfrastructure
#workfromhome
#desktop

[thunderkit]

This is the most complete AVD's production environment tutorial I have ever seen. Thank you very much...truly appreciate your share

[tenzinnamgyel]

This is precisely what I've been searching for.

[asadmohd]

Excellent, AVD detail in half an hour :)👍

[PrinceJohn]

Excellent video. Thanks a lot for sharing! 👍

[yulaw]

super useful, keep going... thank you!

[crawler]

Im so thankful for your video since it answered almost all my questions! The only part im having problems with is the dns config of my private endpoint. Since im not aware of a seperate dns server in my company my endpoint is registered with a ".windows" fqdn. Is it neccessary to create a seperate dns server or is there a workaround? kind regards

[HarryQ-gt]

Thank you for this great video! May I ask is this tutorial for pure cloud environment?

[celestial_sphere]

Will fslogix profiles only apply to users in the ug-uks-wvd group, since it is tied to the Storage File Data SMB Share Contributor Role? Asking because I'd like to have fslogix only apply to only a subset of users first for testing purposes. Thanks for the video!

[WSFrazier]

Might have missed it in the video, but you didn't talk about enabling share-level permissions on the fileshare once the storage account is AD joined and before you start setting the ACL's in windows.

[BGS-IT]

Thanks for the video - Very concise and clear. However, when trying to mount the drive, I'm met with authentication failure - permission denied. Did anyone else have this and know a way around it?

[gonzalomarsilli]

subscribed! great content, will appreciate a lot if you can make chapters on your videos, thank you

[fbifido]

is it possible in 2024-OCT to have a 100% cloud only AVD with FSLogix ???

[lostinpa-dadenduro]

Is there any way to avoid the second login when connecting to the AVD windows 10 desktop ?

I have a project where we have a local AD and various servers that can’t go away. Those are being moved as is to azure virtual servers using the replication appliance. Users are all synced to Entra and what not.

They want the Azure windows 11 multisession virtual desktops to be domain joined to the “local” AD. And of course if I show them they have to login twice to get into a desktop session, they will get all salty on me.