1. Plan and implement an Azure Virtual Desktop Infrastructure
-
AVD Architecture and Design: This section covers understanding AVD components, personal and pooled desktops, selecting appropriate host pool types, considering networking and storage requirements for AVD environments, and designing for user identities and profiles.
-
Infrastructure Deployment: Covers how to deploy AVD using the Azure portal, Azure CLI, Azure PowerShell, and Azure Resource Manager (ARM) templates, according to Learn Microsoft.
-
Host Pools and Session Hosts: Creating and configuring host pools and session hosts, customizing RDP properties, and managing session host images.
-
Networking and Storage: Implementing and managing networking (including VNETs, subnets, route tables, NSGs) and storage solutions (like Azure Files or Azure NetApp Files) for user data and profiles.
2. Plan and implement identity and security
-
Identity Management: Integrating with Azure Active Directory (AAD) or Active Directory Domain Services (AD DS) for user identities, implementing Azure roles and RBAC for AVD resources, and configuring Conditional Access policies.
-
Security Best Practices: Securing session host VMs, controlling user access, configuring device redirection, implementing multi-factor authentication (MFA), and using encryption for disks.
-
Monitoring and Compliance: Setting up Azure Security Center, collecting audit logs, and using Azure Monitor for security monitoring and compliance.
3. Plan and implement user environments and apps
-
User Profile Management with FSLogix: Implementing and managing FSLogix profile containers, configuring user experience settings, and managing application masks.
-
Application Management: Installing and configuring applications on session hosts, managing application groups, and implementing RemoteApp.
-
MSIX App Attach: Understanding and using MSIX app attach for dynamic application delivery.
-
Optimizing User Experience: Configuring RDP properties and settings to enhance the end-user experience.
4. Monitor and maintain an Azure Virtual Desktop Infrastructure
-
Monitoring and Diagnostics: Configuring log collection and analysis using Azure Monitor and Log Analytics, creating custom workbooks in Azure Monitor, and resolving Azure Advisor recommendations.
-
Automation and Management: Automating AVD management tasks using tools like PowerShell and ARM templates, configuring auto-scaling for session hosts, and implementing drain mode.
-
Business Continuity and Disaster Recovery: Planning and implementing backup and disaster recovery strategies for user profiles, AVD infrastructure, and images.
-
Maintenance and Troubleshooting: Patching session hosts, managing image updates, troubleshooting common issues related to the AVD agent, session connectivity, and performance.