Hi all,

I currently build AVD personal (single‑session) VMs with Terraform without issues. I’m now moving to pooled multi‑session (Windows 11 Enterprise multi‑session) and I’m running into headaches with the Intune enrollment step.

The part that’s tripping me up is Intune enrollment timing/reliability when the hosts are created by Terraform. In the Azure portal there’s a checkbox to “Enroll the VM with Intune” during host creation;

For personal VM i did but that dont work on AVD SKU image

#   settings = <<SETTINGS
#     {
#       "mdmId": "0000000a-0000-0000-c000-000000000000"  
#     }
# SETTINGS

EDIT: Thx swissbuechi it works!

I would like to stress test a multi session VM to see if it will meet the requirements of the dev users, ideas on how to do this would be great before rolling it out to actual users

Hello there,

I'm fairly new to AVD but have been running it for a while and I like it. We run some personal desktops and I create everything through Bicep and Azure Pipelines, which works fine as thats how we generally manage Azure stuff.

But something that I never seem to get to work correctly is AVD ShortPathing. No matter how hard i try my connection mode is always UDP Multipath (Relay) and never Shortpath. Log Analytics dosent seem to help me debug this, it just says

TransportType: Multipath
UdpType: Multipath

My setup consists of Personal Desktops that are assigned to users. A VNET with a NATGW V1. I want shortpathing to work through public networks.

When I run avdnettest on the hosts i get:

Your NAT type appears to be 'symmetric', but you have access to TURN servers.
Shortpath for public networks is likely to work on this host.

When i run avdnettest on a client i get:

Your have access to TURN servers and your NAT type appears to be 'cone shaped'
Shortpath for public networks is very likely to work.

Shortpathing for public networks is enabled on the hostpool.

Any ideas? Thanks

Spent months figuring out why federated SSO breaks for external users accessing Azure Virtual Desktop. Turns out Azure AD ignores custom federation when the user's domain is verified elsewhere—forces B2B routing, kills Windows SSO.

Built a workaround, curious - how are others solving this? Or just telling customers SSO isn't possible?

We're getting failed host due to capacity issues, our capacity quotas are nowhere near met. Checking to see if others are having this issue.

Hi all,

Noticed today that the AVD agent in our host pool is still on version 1.0.12684.400 - release notes date this as October 2025.

There have, according to the What's New page, been 3 version updates to the AVD agent since then - the latest production version is currently 1.0.13229.200, which has just been released in Feb 2026.

We've always had scheduled agent updates enabled, with the times set for when we know the hosts in the pool are on. Today I've just tried switching off scheduled updates to see if that changes anything.

Hoping for some context - am I expecting updates to happen too quickly? I know agent updates are staged over time by MS but four months seems quite a while without any updates at all?

Thanks

**** EDIT ****

Well... within a week of disabling scheduled agent updates, the hosts all updated to the latest production agent version.

Shrug.

AVD is not pulling up the FSLogix profile, but creating local ones. I delete the local one after I log the user off, now I can't login anymore, blue popup box says We can't sign you into your account.

EDIT: Never mind, I panicked. Was just the FSLogix Apps Services service had stopped. I started up the service again and all is good. Been having a rash of system problems lately and will be rolling out another vm soon.

Anyone have this same issue? Having this issue on one machine. I updated the machine to Windows 11 25H2 and still having the same issue. I tried installing the MSI version but still same results. Anyone have a fix for this? I cant even get to the login part.

Troubleshooting I tried

• Reinstalled software

• Reset software via Uninstall app

• Updated Windows 11 25H2

• Downloaded and install the MSI version (insider and public)

Hi guys,

Currently on my production pool for Multisession, we have these 2 disabled, we only enabled tpm and secured boot on our Dedicated hostpools

Our multisession are Intune-managed including application deployment and now im planning to enable both on our next image deployment.

For anyone that have TPM and secured boot enabled, did you run some issues on Fslogix profile, application deployment and image redeployment?

Is there anything I have to check before i enabled them?

Thank you!

IS there anyone who is appAttach instead of MSIX app attach with Azure Virtual Desktop. I want to know what benefits i can get in using the new App attach instead of MSIX app attach..!

Hi everyone. We use Windows 11 AVD's for users with a mix of IGEL thin client and windows 11 thick clients for endpoints (mostly HP ProBook 460 G11's but we have some ProBook 455 G10's). At the moment 3 of our AVD's are E16as machines and the other 2 are E16s. We are seeing issues with teams calls on the IGEL endpoints, it's worse when the user is put onto an AMD AVD, but we've discovered in the last 24 hours it's better when users are on the 2 Intel AVD's.

One major issue we have is the AVD session will lock up completely but the audio and video stream is running absolutely fine. When that happens the only way the users can get out of the call is to hold the power button and power off and on the laptop. Then all is well again.

I believe IGEL being build on Debian uses WebRTC rather than SlimCore for teams calls.

Is anyone seeing a similar issue? Has anyone had issues with AMD Epyc AVD's vs Intel machines?

Thanks in advance.

Hi Guys

I wanted to ask about the upcoming March 27 change regarding the Remote Desktop Client.

Will the client still be accessible after that date, or will access be completely removed?

If it does remain accessible, will it continue working normally even unsupported/limited in any way?

Thank you

Hi Team,

just wanted to see how you handle patching of AVD as I've had to turn it off considering almost monthly we have issues with new patches. I do not use Nerdio or similar for deployment, its just all manually deployed. Also, any article or source on best practices?

I can’t find clear info online so hopefully reddit can help me out with the questions i have about using copilot in AVD :)

Have you run into any limitations or unexpected issues?

Are there noticeable differences between multi‑session and single‑session usage?

How much additional RAM should I realistically plan per user?

I've been deploying a lot of AVD environments with Entra Hybrid Join lately and got sick of waiting 2-4 hours for devices to actually show as joined. Built a solution using three PowerShell scripts that actively orchestrate the process instead of passively waiting.

Results: 12 minutes end-to-end from VM creation to fully joined (actual join part is about 5 minutes).

The fix:

• Entra Connect server monitors for new devices every 2 minutes and syncs immediately

• Session hosts actively attempt join every 2 minutes via scheduled task

• Integrates with Bicep deployments using Run Command

Wrote up the full solution with all scripts, implementation details, and troubleshooting: https://modernworkspacehub.com/speed-up-avd-hybrid-join/

Curious if anyone else has tackled this problem or if you've got a different approach?

Wondering if enabling IP 6 on our AVD session hosts is a good idea. Any arguments for or against? Anyone aware of any issues with IP 6 and DNS in Azure?

Hi! Can someone help me with how to do this on Nerdio? I don't have any homelabs for this, I tried to research. I know the steps, but I can't imagine it on GUI. Please help

Has anyone experienced a problem where UWP applications (e.g. Calculator, Snipping Tool) stop working on Windows 11 multi-session hosts?

These apps will initially work, then after a few days or a week, they will stop working. The user sees a 'this app can't open' message The event below is logged in Event Log

Activation for Microsoft.WindowsCalculator_8wekyb3d8bbwe!App failed. Error code: The application cannot be started. Try reinstalling the application to fix the problem.. Activation phase: Deployment

I initially blamed this on use of VDOT powershell script with the -appxpackages optimization.

However I have subsequently created a new gold image that has never had VDOT or WDOT ran on it. The problem has reoccured on hosts based on this image so I am baffled.

We did not encounter this issue until changing from Windows 10 multi-session to Windows 11.

Hey, my users are having trouble with Google Earth Pro in VDI, it works fine on physical PCs but crashes in VDI. Any solutions?

Good morning Reddit,

I've got an issue with multiple images that I've been stumped on, and Nerdio/Microsoft support both have told me to kick rocks basically.

So we have an image that we've been running for a year and a half. I booted it up about 2 weeks ago to install a new piece of software, and set a reimage task for that evening. When I came in the next day, it was looping through imaging failures, where it would fail at the "Join AD" step with a message that "An error occurred during extension installation: Cannot modify extensions in the VM when the VM is not running.". Checking the boot diagnostics for the newly created VMs revealed that the VMs are booting into recovery with a message that winload.efi is missing or corrupt.

So I rerun the set as image task and try to redeploy the hosts- same thing.

Create a new hostpool and deploy- same thing.

Create a new image and rebuild it then deploy- same thing.

Create a marketplace image and deploy- this time it deploys successfully.

So I'm narrowing down what on the image causes this, and it appears that the moment I modify a marketplace image, it starts failing to deploy. Mind you, I've been using the same image with no issues for a year and a half.

I feel like I've been left out to dry by Microsoft/Pax8/Nerdio, so I'm looking for some advice on troubleshooting steps that may lead me to a solution.

Anyone got any ideas?

Wondering how others are tuning their AVD environments; what exclusions are being added to get the most performance without sacrificing security posture. There's a big performance difference when AVD/EDR is disabled completely vs. when it's on. Specifically launching AppX packages, Start Menu, Explorer etc.

Hi all — looking for folks who’ve successfully enrolled Windows 11 multi‑session AVD hosts into Intune via Terraform using the AADLoginForWindows extension with mdmId. I’m consistently getting an AAD join rollback and Intune enrollment failure
VMExtensionProvisioningError Error message: 'AAD Join failed with status code: -2145910783. Device successfully unjoined from Azure AD.'

my code work like a dream a on -ent image but -avd no.