Hi Everyone, I'm trying to build AVD for our Org. Right now Domain controller is in On prem, Just Users profiles(Hybrid) are in sync with azure(Azure AD connect). I have created AVD environment with just One Session host(Windows 11 multi session). I could launch the desktop with local profile. I have to work on Fslogix Profile configuration now. I followed below steps, Created storage account and file share I enabled Azure AD kerberos and granted "admin consent for default directory" for storage account. Assigned SMB Access Control for storage account Granted NFTS permission for the share Configured Azure Ad kerberos registry on the session host to retrieve Kerberos ticket "I dont have access to my file share from my Session host" I have to configure FSlogix. Win 11 Multisession have Fslogix preinstalled. So i just added two reg key (VHD locations, enabled) in HKLM\SOFTWARE\FSLOGIX\PROFILES in session host. Do i have to add any other settings in Fslogix? Since my session hosts are in Azure Ad only joined, I'm unsure how to configure Fslogix without GPO. Appreciate your assistance

Azure Virtual Desktop- Fslogix, GPO configuration for Azure AD Session host(DC is in On prem)

Ruby Bala 0

Hi Everyone,

I'm trying to build AVD for our Org.

Right now Domain controller is in On prem, Just Users profiles(Hybrid) are in sync with azure(Azure AD connect). I have created AVD environment with just One Session host(Windows 11 multi session).

I could launch the desktop with local profile.

I have to work on Fslogix Profile configuration now.

I followed below steps,

Created storage account and file share
I enabled Azure AD kerberos and granted "admin consent for default directory" for storage account.
Assigned SMB Access Control for storage account
Granted NFTS permission for the share
Configured Azure Ad kerberos registry on the session host to retrieve Kerberos ticket
"I dont have access to my file share from my Session host"
I have to configure FSlogix.

Win 11 Multisession have Fslogix preinstalled. So i just added two reg key (VHD locations, enabled) in HKLM\SOFTWARE\FSLOGIX\PROFILES in session host. Do i have to add any other settings in Fslogix? Since my session hosts are in Azure Ad only joined, I'm unsure how to configure Fslogix without GPO.

Appreciate your assistance

Prrudram-MSFT 25,881 Reputation points

2023-12-08T17:16:29.3133333+00:00

@Ruby Bala

Did you follow microsoft documents? Is the user able to map the file share manually from the session host?
Do they login with a hybrid user or a local user?

Without GPOs, FSlogix can be configured via registry or Intune.

Also, once logged in with the user, can you send the output of klist from a command prompt? Also, if you have MFA policies enabled, make sure you remove the storage account from the CA policy.
you can send an email with the requested ID and link to this thread to AzCommunity@microsoft.com with subject line as "ATTN: Priyanka"

1 answer

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more

Share via

Azure Virtual Desktop- Fslogix, GPO configuration for Azure AD Session host(DC is in On prem)

1 answer

Your answer