What is the equivalent to group policy in Azure AVD?

Question

Hi

I'm very familiar with Windows Servers, domain controllers and group policy.
But new to AVD.

What is the equivalent to group policy within AVD?

For example lets say i want to change the wallpaper for a group of users, or change Outlook cached mode settings, or setup login scripts etc

thanks

Answer 1

Hi,

In simple terms AVD is the front end for your Virtual Desktop, so each session host will have the same behavior as the Windows operating system.

That is, those hosts can be attached to your AD DS, and you can apply GPOs and all the policies of an AD DS to them.

If the Session Hosts cannot be attached to an AD DS, then you can create installation scripts on each host or apply additional settings through Intune.

I hope this helps!

Remember to accept the answer if it is helpful.

Answer 2

In Azure Virtual Desktop (AVD), the equivalent to Group Policy is the Administrative Template for Azure Virtual Desktop1. This template allows you to configure some features of Azure Virtual Desktop. You can use this template with:

• Intune: This enables you to centrally configure session hosts that are enrolled in Intune and joined to Microsoft Entra ID or Microsoft Entra hybrid joined1.
• Group Policy with Active Directory (AD): This enables you to centrally configure session hosts that are joined to an AD domain1.

You can also use group policy and device management tools like Intune and Microsoft Endpoint Configuration Manager to maintain a thorough security and compliance practice for your session hosts2.

The Administrative Template for Azure Virtual Desktop allows you to configure features such as graphics related data logging, RDP Shortpath for managed networks, screen capture protection, and watermarking1.

Before you can configure the template settings, you need to meet certain prerequisites. For example, for Intune device configuration profile, you need to be assigned the Policy and Profile manager built-in role-based access control (RBAC) role. For Group Policy in an Active Directory (AD) domain, you need to be a member of the Domain Admins security group1.