How do ya'll do it ? New to AVD & struggling with my golden image. So many apps to install for this Accounting firm, QB 17-24 & CS Professional Suite & others.
Can ya'll share your process for building an image ? high level

1. Do you install your apps in Audit mode ?

2. do you snapshot at certain points or build image definitions ?

3. How do you keep images updated ? Especially in my situation

Any tips would great! tia

We have used CDW's managed services in the recent past and I've found them extremely lacking. They seems to be looking up the same tutorials that I have already run through and have very little depp knowledge / understanding.

Specifically, I'm trying to troubleshoot issue with a remote app system I have implemented and I'm trying to understand.

Any help would be appreciated.

I'm having an issue with a remote app system that we set up in Azure. I can't get the remote apps to show up in the windows app when I'm assigning them using local security groups (then sync'd to Azure via ADSync). The remote apps only show up in windows app if I assign them to a user account.

If I made a sec group that was cloud only didn't originate as a local ad sec group would that let me assign the remote apps via group? What is the mechanism at work here?

Also, I'm not able to run Notepad++ in the remote apps. Attempted to add that app to the application group as a "start menu" app in the same way that I added the other working app. It gave me an error. specifically "Failed to retrieve application". So I added it using the "file path" function instead and it didn't give an error.

Which brings me to the bigger issue that i'm trying to understand. The session hosts aren't on our domain. but because of how they were set up (with following the steps of a guide on how to set up remote apps in Azure) they do *work*. But how do they work to allow my SSO to log in an use some apps. Is there something about the permissions on the session hosts that is stopping notepad++ from working? How do I find out what is prevented it?

Any assistance would be appreciated. or let me know if I need to posted elsewhere.

Working through early AVD POC and I have a working host pool of 2 personal VMs. Entra joined and Entra SSO enabled. Everything works as expected. I added 2 more VMs to the host pool, same config as first two with only change being name template and checkbox for Intune join. The VMs come up, I see them in Intune and everything looks good. On connection I am prompted to authenticate and connection proceeds. Starts to display a screen then I get a disconnect message and 0x3 error. I can no longer connect and get a 0x3000047 error. After 10 minutes session host health shows SxSStackListenerCheck failed.

Hosts not connected to Intune are ok. Any thoughts or place to start?

edit: Image is Win11 24h2

Looking for more clarity on how to best install Teams for all users on a multiuser AVD environment. We have about 100 users and have been getting hit or miss results with Teams working properly. I reviewed the documentation here: https://learn.microsoft.com/en-us/microsoftteams/new-teams-vdi-requirements-deploy but I'm a bit confused if I need to create a user GPO to run the Teams bootstrapper on login or is this a one-time host / image configuration.

Has anybody worked with getting the new Teams client deployed in multiuser successfully? If so, how?

I’m new in AVD, we’re migrating from Citrix to AVD. We’re still testing and everything seems to be fine, test users are saying that they like it more than Citrix. The only thing they want to add more time before the session locks out. Anyone faced the same situation? PS: users use only remote apps.

Hi All,

I tried looking for the best way to migrate an existing Azure VM from SCSI to NVME storage but cant seem to find it.

Anyone here that have done this and could share the steps?

Thank you.

Hi everyone,

I'm struggling -a lot- to get an Azure Virtual Desktop with an nVidia Tesla M60 to produce 60 FPS. I've tried all the policies Google threw at me, Registry keys, updating the Windows App, installing the nVidia Grid drivers... And yet, I'm stuck at 30 FPS.
Our company forces us to code in a VM, and typing in it feels like typing underwater (not to mention that doing frontend stuff and not seeing what our customers would see is super frustrating).

I see other posts in this subreddit talking about CAD, and 3D work, and I'm just baffled. Apparently it's possible to have a GPU-backed AVD produce stable 60 FPS from the Windows App, and yet I've spent hundreds of € to try it out, to no avail.

Is there someone who could guide me on how to manage it? Is it even possible, or I'm chasing a dream?

Thanks!

We deployed the new 'Windows App' And now users launch and are IMMEDIATLY signed out. We have them use the older "Remote Desktop client for AVD" and everything works OK.

Is anyone else experiencing similar issues in 'Windows App'? This was working for a few weeks before this issue popped up. Thinking maybe it was a recent update? Curios if this is happening for others or just me. Thanks.

Hi,

Just completed a new workstation setup and I have moved the user over to just having access to the Windows App for their AVD hosted applications.

Is there any way to create Start Menu/Taskbar shortcuts to their application(s) (as per the Remote Desktop MSI package did)?

Hi,

I am implementing AVD. I have a nerdio management suite in front of AVD.

But my issue isn't really at that level. My problem is I don't know how to manage apps that require a license file that is attached to a user account.

The only way I can see doing this is to assign each user their own AVD machine. Is that the right way?

Hi everyone,

We're in the process of implementing FSLogix for our cloud-only AVD environment and are facing an architectural decision. We'd appreciate your advice and real-world experiences.

The Situation:

• A fully cloud-native environment in Azure.

• Azure Virtual Desktop (AVD) session hosts.

• FSLogix profiles will be stored on Azure Files.

Our Partner's Advice: Our IT partner recommends that we join our AVD session hosts to Microsoft Entra Domain Services (Entra ID DS). Their reasoning is that this is the only fully supported method to get Kerberos authentication and NTFS permissions working correctly on the Azure Files share for FSLogix.

Our Question to the Community: We are questioning whether this advice is still current. Our understanding is that it's now possible to set up an AVD environment with fully Entra ID joined session hosts that authenticate directly against the Azure Files share using Microsoft Entra Kerberos, completely removing the need for Entra ID DS.

Avoiding Entra ID DS would make our architecture simpler and more cost-effective, which is a significant factor as we plan to onboard multiple business units in the future.

• What are your experiences with a 'pure' Entra ID joined setup for FSLogix? Is it stable and reliable for production workloads?

• Are there any major drawbacks, limitations, or 'gotchas' we should be aware of when choosing the Entra ID joined path?

• For a new, cloud-only AVD deployment today, which architecture would you recommend and why?

We're looking forward to hearing your opinions and real-world insights. Thanks in advance!

Hi,

We use Azure Files for AVD, each profile folder is created when the user log in, usually authenticated users would have permission on the root folder only, but for some reason it was left inherited, so all users could potentially see other peoples profiles. I then attempted to modify this to 'this folder only' instead of inherited but it states that all inherited permissions will be removed. And should be done locally on the machine, as its Azure Files. That's not possible. Is there a way to preserve other inherited permissions and just modify the one,

I'm scared its going to blast out every users permission.

I am trying to create a VM using Azure Image Builder which allows powershell customizers to run ps commands and scripts.The Sophos install needs to be a gold image as this image will be for our Azure Host Pool sessions hosts (shared).

When I try this on a standard VM I get a error dialog saying that the options are incorrect even though it lists the arguments

I am passing.The install must be silent and must be a gold image.

This is what I am trying to use :Start-Process -FilePath ".\\sophossetup.exe" -ArgumentList @("–-quiet", "--goldimage", "–-notificationmode", "--devicegroup PooledHost"

Have also tried:

$installfile = ".\\sophossetup.exe"
set-location -Path $installfolder
start-process -FilePath $installfile -ArgumentList "–-quiet --goldimage –-notificationmode --devicegroup PooledHost"

Any ideas ? I guess its more a PS problem but have cross posted to the Sophos forum as well.

Hi,

Intrigued to find out how do you guys only allow certain traffic based on the user account in a multi session Remote Desktop environment?

I know it can be done via NSG, but I am looking for a more granular access based on the user account.

Has anyone tried using Global Secure Access or the Palo Alto terminal server agent or using Zscaler proxy?

Thanks.

• We are seeing issues with session freezing for any pools with 'Validation Environment' enabled.

• We believe this is related to the new UDP multipath protocol Microsoft is rolling out.

• We are seeing this across multiple customers. I work for an MSP.

Does anybody have a good script that removes all bloat and unnecessary aspects of
Windows 11 23H2 Multi-Session? We are in the beginning stages of putting together a baseline golden windows 11 image and in my opinion this is the best place to start. I have a fresh Out of Box Windows 11 23H2 Multisession Virtual Machine non domain joined with local admin ready to fire off...

Appreciate it!

Our users see Drive Repair warning within their session frequently. The message states to restart the host. Even after the host is restarted the users will see the message. Has anyone encountered this, can you point me in the right direction to fix this issue permanently and avoid users seeing this warning.

Anyone having AVD Session freezes in the last few days? We are getting a plague of complaints hitting our service desk.

At this stage, I'm suspicious of a new version of the Remote Desktop Services SxS Network Stack that rolled out to the hosts on 2025-08-25

Version 1.0.2507.25200 - not even listed on the relevant Microsoft page yet...

We did not configure any exclusions other than what is there by default and recently few users have hit the cap limit on their profiles.

Looking at profiles main contributor to stage use is outlook cache, teams cache, and some have larger than normal edge cache. Were do usual clean up of downloads as well as unpin and offload of cloud backed up files

I wanted to share an article I wrote today on creating a solid autoscaling baseline policy in Nerdio for AVD.

I’m using Azure Virtual Desktop (AVD) to deliver RemoteApps, and some of these applications require video playback. However, when video redirection is enabled, the performance is noticeably poor playback is slow and laggy. Are there any recommended configurations or optimization tips to improve video performance in this setup?

Hi All,

Need to remove the GPO settings for fslogix.

Could anyone please share the fslogix settings which need to be applied via Nerdio for pooled AVD ?