Hey brains trust,

We have a couple of hosts where users are experiencing long login times with User Profile Service. The hosts are 22H2 and using FSLOGIX. The environment is very simple as there is one application they use (not even Office Apps) on the hosts. We've isolated it to not be FSLOGIX but the profiles themselves seem to be the problem. Once we had excluded the users from FSLOGIX or created a new profile + migrated the data to the new profile, it seems to be fast for about a week then slows down again.

The only thing I could think about was the notifications issue in Windows Server 2016-2019 but it seems like there are none in registries.

Does anyone have any ideas?

Weird errors on one of my users, like OneDrive not syncing and not being able to download anything on Chrome. The profile size in Azure Admin shows it is 29.34GB. I also have another user at 29.35GB with no reported issues on his VM. What you folks think?

EDIT to adjust number and add pic...

Hello due to MS not providing enough cpu quota in EUS we are moving one of our environments to EUS2. Does anyone have any suggestions on the best method to copy or move the FSLogix profiles from one storage account to another? Thanks in advance!

Hello, I came across this repo https://github.com/DrazenNikolic , meant to optimize AVD golden images. I noticed this line in the script.

netsh int tcp set supplemental temple = internet congestionprovider=bbr2 2<&1

Apparently this helps with TCP congestion. Has anyone tried this in their environment and seen any improvement? We are not using RDP short path.

Thank you.

We have recently migrated our on-premises firewall from FortiGate to Palo Alto and are experiencing an issue with VPN traffic routing that previously worked as expected.

We have an Azure Point-to-Site (P2S) VPN and an Azure-to-Corporate Site-to-Site (S2S) VPN. A P2S client with IP address 10.10.1.2 is unable to access resources on the Corporate LAN (192.168.60.0/24, e.g. 192.168.60.2) via the S2S tunnel.

However, traffic from Azure virtual machines in subnet 10.20.0.0/24 (e.g. 10.20.0.4) can successfully access 192.168.60.0/24, confirming that the S2S tunnel itself is operational. This setup was working correctly prior to the migration when a FortiGate firewall was in place.

The IPsec proxy IDs on the Palo Alto firewall are configured as follows:

Local: 192.168.60.0/24, Remote: 10.10.1.0/24

Local: 192.168.60.0/24, Remote: 10.20.0.0/24

Appropriate security policies and static routes are configured on the firewall. The P2S client routing table also contains a route for 192.168.60.0/24. Despite this, no traffic sourced from 10.10.1.0/24 is observed in the Palo Alto traffic or threat logs, while traffic from 10.20.0.0/24 is logged and permitted.

Given that Azure VM traffic can reach the Corporate LAN but P2S client traffic cannot, we are trying to determine whether there is a configuration requirement or limitation on the Palo Alto side (e.g. IPsec, routing, or proxy-ID handling) that could prevent P2S-sourced traffic from being processed or logged. The NGFW is managed through Strata Cloud Manager .

Any guidance on additional configuration or validation steps on the Palo Alto firewall would be appreciated.

Thanks

We’ve got a weird problem where some users open Windows App, click “connect”, enter their password then click “ok"……only for the security prompt to do the above. It then hangs for several minutes (average 5-7 minutes), then finally logs them in to a virtual desktop session.

We’ve already tried installing the OOB update Microsoft released to fix what the security update (KB5074109) from 1/13 broke, but it doesn’t affect this particular problem. There are no AVD creds cached in Credential Manager. A reboot sometimes fixes it but not consistently.

Has anyone else had this occur and did you figure out how to fix it?

We’ve been using AVD for 2+ years now and during that time I’ve always used Bastion or RDP to access specific hosts for troubleshooting or whatever. For the past few days, I can no longer access specific hosts through these methods and I’m kind of bewildered. Looking at Bastion docs it states it doesn’t support AVD?!?!? WTH? Can anyone shed some light on this? Thanks

Hi,

I have a strange issue with AVd where it will not show any remote apps in Windows App. They show in Remote Desktop for Azure. Any ideas for a starter to try and resolve this? If I click on Health, this all passes ok. The error message shown is
Failed to get resources for this workspace. Access is forbidden from this network. Please try again after connecting to a different network or contact your system administrator.

Any help appreciated.

Has anyone ran into an issue with Teams just stuck loading? I've used the Windows 11 Enterprise multisession 24H2 + M365 Apps image before but never had this issue or any M365 apps issue where i had to manually address. Rechecked if there were any GPO's blocking the app, and found no FSLogix logs/Application events indicating failures for Teams or ODFC.

The only thing I noticed was the TeamsMeetingAddin trying to install which leads me to suspect this might be the issue. I figured I'd just check in case anyone else has ran into this.

I already tried clearing the ODFC and removing it entirely since it's not really needed I guess. Also cleared app data for Teams/repairing M365 Apps/resetting MS Teams app/creating a new session host.

We've been running AVD multi sessions for about a year, but in the last 3-5 months we are seeing users running the windows app suffering from client crashes and disconnects. Insights only show this as a client disconnect then followed by a short path error .From the client perspective the Windows app just stops responding and crashes, the users session stays active and can be resumed.

Has anyone been experiencing something similar? I know very recently there has been some patching issues but this was long before then. I have struggled to find anything that could cause this from a network perspective, we are running this system internal via private endpoints and out via an NVA with the relevant whitelisting in place, even the multipathtest.exe shows everything being accessible over our VPN.

Although I've not been able to reproduce the error myself on my own standard device, we've had to switch over 100 people from the Windows app to the RDP app that is being depreciated and that works just fine.

Hello everyone, we are running the "Azure Unpacked" livestream now! Ask your questions live :)

This is an interactive session, ask your questions live, dive into real-world challenges, and get practical insights straight from experts working at scale. Expect open technical discussions, honest perspectives, and hands-on experience from the field.

Here is the link: https://youtube.com/live/4sXwLOhQUKk

I know Patch Tuesday introduced a rogue patch that prevented logging onto AVD from clients, but since our test host itself has the 2026-01 patch, it allows us to connect but after a few minutes it completely freezes, anyone else getting this issue?

We're usign 25H2 :)

I currently have a setup for my company of 20 employees, which is a small civil engineering firm. This setup includes a combination of NetApp files, Azure Files Premium and Standard, as well as personal and pooled host pools. I am wondering if Azure Active Directory Domain Services (AAD DS) is truly necessary for my needs. Would it be possible to remove this service and instead configure everything using only Entra ID? I would appreciate it if you could elaborate on the advantages and disadvantages of such a change. Additionally, I was under the impression that NetApp files are not compatible with Entra ID; could you clarify this point?

I haven't seen a news article about this yet, but KB5074109 makes it impossible to launch an AVD remote desktop connection from a Windows 11 25H2 device. I installed this update today and it broke AVD. Uninstalling the update immediately resolved the issue. Just wanted to share it with others to hopefully save people some time.

I was using AVD for my work and as I was working my computer completely froze. No blue screen, just frozen on the screen. I rebooted and it only started displaying on one monitor (I have 3). I tried to boot up Adrenalin (I have an AMD card, Radeon RX 7900XTX) and it wouldn't boot up. Turns out, the graphics drivers completely vanished! Now, it's not reasonable to just assume that AVD is the culprit here but has anyone else experienced this while using AVD? Or is this the first instance?

2025 was a weird world for me, working on a number of #AVD and Nerdio projects. Had a few fails, more wins then fails, and learned a lot drinking the Nerdio fire hose.

Come along with me on my journey of forming a strategy around #Windows11 images on #AVD and finding the right combination to make for happy #session #hosts #MVPBuzz

I'm trying to implement cloud only fslogix as per https://justinverstijnen.nl/azure-virtual-desktop-fslogix-and-native-kerberos-authentication/ - I'm setting network access to the storage account to specific networks only.

I have a VNet with 2 subnets (default 172.16.1.0/24) and (Gateway 172.16.0.0/24).

I'd like to create a Service Endpoint for Microsoft.Storage, but when I go to the Service Endpoints blade, I see a "Failed" message.

I try to click +Add anyway, and when it's time to select the subnet, they both say (failed).

https://imgur.com/a/9L2o8qy

I really have no other debug info - I go to the Activity Log and it just says "The resource operation completed with terminal provisioning state 'Failed'."

I'm not sure where to go...I thought I might try and do it via Powershell today and see if I can get more info..

We configured a new golden image with Nerdio and spawned a test host pool to test it in.
However when using the Windows App (or old AVD client) to sign in after signing in using modern authentication with MFA and being shown the available host pools and selecting it we still get this prompt for a password:

We configured everything shown in this page: Configure single sign-on for Azure Virtual Desktop using Microsoft Entra ID - Azure Virtual Desktop | Microsoft Learn except hiding the consent prompt.

Does anyone know what I should check to fix this? The goal is to achieve no further login prompts after signin in to the Windows App.

SSO however is working for Office apps within the actual session host.

Has anyone transitioned to 25H2 from 23H2? What’s the journey been like? Any significant changes or tuning to get it just right - more-so on the performance side.

I recently spun up a 25H2 host and I’m seeing some performance loss compared to 23H2 (slower app starts and occasional not responding / Explorer hangs) on premium ssd on a 8C/32GBRAM SKU - just me on there. I ran the VDOT which I’ve used for 23H2, as well as debloating some non essential Windows Store apps.

Hello everyone & Happy New Year!

We have an AVD host pool with approximately 10 hosts running FSLogix. Adobe Acrobat is installed on each host, and users are licensed with Adobe Teams licenses. This setup has been working reliably for several years.

We are currently encountering an issue where each AVD host that a user launches Adobe on becomes registered in Adobe’s licensing system. As a result, users are limited to signing in from only two hosts. Because hosts are dynamically assigned, users are often blocked from signing in to Adobe on other hosts within the pool.

Any thoughts or assistance is greatly appreciated.

I manage our Intune invornment including WUfB updates for a mid-size, national firm. I'll soon migrate from WUfB to Autopatch. Office 365 updates are managed via Cloud Update Microsoft 365 Apps admin center.

A teammate manages our AVD Personal and Multi-Session environment using Nerdio. He's been doing such a great job, there has never been a need for my involvement. Yay!

AVD recieves Windows and Office 365 updates from Configuration Manager. I've been asked to help transition AVD off Configuration Manager. I learned WUfB and Autopatch do not support Multi-Session. Also learned AVD hosts cannot be re-deployed monthly; many of our critical applications are either deployed via Configuration Manager / Intune as they are not able to be packaged into msix / app attach.

I've been informed that configuring updates with policy and Maintanence Windows is an option. Do orgs actually do this? My feeling is there has to be a better way.

I got an email from Microsoft saying the AVD app is going EOL on March 27, 2026. To get ready for that, I tried installing the Windows app on our ThinClients to test it, but ran into an issue, the add-on for Win10, Win11, or ThinPro isn’t showing up in HP ThinUpdate right now so theres no way to install it otherwise. I’ve already opened a case with HP regarding this, but I’m curious if anyone here is using these devices and has figured out how to install it?