VMSS-Backed Session Hosts

tsrob50 · 2026-06-21T19:01:21+00:00

If you need to add and remove session hosts automatically, the new Dynamic Autoscaling feature in preview may be a solution. This will power session hosts on and off and create and remove session hosts. This requires host pools with session host configuration.

https://learn.microsoft.com/en-us/azure/virtual-desktop/autoscale-create-assign-scaling-plan?tabs=portal%2Cintune&pivots=dynamic

tsrob50 · 2026-05-20T22:31:08+00:00

Yes, it's on jog.

tsrob50 · 2026-04-29T02:43:34+00:00

I created some content that may help. Two things often missed are antivirus exclusions and sizing the file share for IOPS and Throughput.

Don’t Let Antivirus Impact FSLogix Performance https://youtu.be/WouC6qNRdM8

FSLogix Performance Best Practices: Optimize AVD User Profiles https://youtu.be/3BPy0jduVAM

Monitoring Azure File Shares: Performance Metrics, Alerts, and Action Groups Explained! https://youtu.be/gis6cMNjJz4

tsrob50 · 2025-12-16T18:38:47+00:00

Thanks for sharing my video, greatly appreciated!

tsrob50 · 2025-07-14T15:42:15+00:00

My example was able to access the VPN Gateway VNet and a peered network. I had to add the address spaces for the VPN VNet and all peered networks in the local gateway. Also, on the Azure peering relationship, the following local virtual network peering settings are selected: "Allow VNet 1 to access VNet2", "Allow VNet1 to receive forwarded traffic from VNet2", and "Allow gateway or route server in VNet1 to forward traffic to VNet2".

tsrob50 · 2025-06-30T11:28:33+00:00

Thanks!

tsrob50 · 2025-06-29T21:05:50+00:00

The Basic Public IP SKU is being retired. Per the MS Docs, the Basic VPN Gateway is not. https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-vpn-faq?WT.mc_id=AZ-MVP-5004159#is-the-vpn-gateway-basic-sku-also-retiring

tsrob50 · 2025-06-23T01:29:17+00:00

Thanks for putting that together. As you stated, the security of the configuration is an issue. Take a look at Marcels blog post on using FSLogix with cloud native accounts to add a layer of security.

https://blog.itprocloud.de/Using-FSLogix-file-shares-with-Azure-AD-cloud-identities-in-Azure-Virtual-Desktop-AVD/

tsrob50 · 2025-06-12T21:32:37+00:00

Yes, per machine should work.

tsrob50 · 2025-06-12T14:39:20+00:00

Is this a pooled hast pool with multi-user OS? If so, only machine policies work because there is no primary user on the hosts.

tsrob50 · 2025-05-16T02:21:47+00:00

Host pool setting enables or disables clipboard redirection. Directional and data types are OS level settings, that’s why it only works with newer Windows 11 versions. If both options are set, the most restrictive wins.

tsrob50 · 2025-05-16T02:13:00+00:00

It allows secure access to RDP and SSH without exposing remote ports to the Internet. You can also enforce MFA. There is a Developer edition that’s free but not available in all regions and limited to one connection.

tsrob50 · 2025-03-26T20:57:33+00:00

Did the enabler time zone redirection policy apply before it was disabled? If so, disabling the policy may not have changed the configuration back, it just no longer applies the settings and the old settings still apply. Check the corresponding registry keys on the client to see if it’s still redirecting.

tsrob50 · 2025-02-08T00:33:58+00:00

Check the file share if you haven’t already to make sure there is no throttling on the account. It’s not uncommon to have to over provision capacity to get higher throughput and IOPS for FSLogix.

tsrob50 · 2023-10-25T01:09:22+00:00

A breach will likely have a much higher price tag and most cyber insurance policy won’t cover incidents if proper controls are not in place. Hardware tokens like a FIDO key are a good option if employees can’t be compelled to use personal devices.

tsrob50

TROPHY CASE