Azure virtual Desktop

Question

Hello everyone,

I have a problem understanding Azure virtual desktop.

https://learn.microsoft.com/en-us/training/modules/describe-azure-compute-networking-services/4-virtual-desktop

================================================

It says here towards the end -

"with Azure Virtual Desktop, the data and apps are separated from local hardware." That's Clear!

But it says:

"...the actual desktop and apps are running in the cloud, meaning the risk of confidential data being left on a personal device is reduced"...

1. I thought that the actual desktop was referring to the desktop on the local PC. Am I right? Or is it the virtual desktop and apps running in the cloud, while the actual desktop is on the PC? I am confused!

"Additionally, user sessions are isolated in both single and multi session environments."-

2. Does this mean that users are using the virtual environment from front end to login to their accounts and do their work on the virtual machines which are basically a virtual replica of say, microsoft word, 365 or something like that etc. ?
3. When we say multi-session environments on Azure, does it mean multiple VMs or multiple logins? This is confusing.
4. And finally, do we use RBACS to do multi-session environments?

Kindly, please explain.

Thanks for all you help!

Regards

Marouf

Answer 1

Hi Marouf Ali,
Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.
Based upon your query here below is the explanation

When people mention "the actual desktop" in the context of Azure, they're usually referring to the virtual desktop environment provided by Azure Virtual Desktop. This is a cloud-based service that lets you access your desktop and applications remotely. It’s different from the local desktop on your personal computer, which is the operating system running directly on your machine.

So, when your customer is wondering about "the actual desktop," it means the virtual desktop in the cloud, not the local setup on their PC. For more details, they can check out the official Azure documentation on Azure Virtual Desktop,

Single session: - In a single-session environment, each user has their own dedicated virtual machine, much like having a personal computer. This means they have complete control over their space, with applications like Microsoft Word installed directly on their VM. Since each VM is dedicated to one user, their data and activities remain entirely separate from anyone else’s.

Multi Session: - On the other hand, a multi-session environment allows multiple users to share a single VM. This setup is more efficient and cost-effective because it maximizes resource use. With Azure Virtual Desktop supporting Windows 10 and 11 multi-sessions, several users can log into the same VM at the same time. Even though they are sharing a machine, each user session is independent, ensuring that their data, applications, and settings remain separate and private.
Please refer this document on Session

In Azure Virtual Desktop, Role-Based Access Control (RBAC) plays a key role in managing access to the virtual desktop infrastructure. It allows you to define who can access the system and what actions they can take. For instance, you can specify which users can manage session hosts, application groups, and other resources. This ensures that each user has the appropriate level of access based on their role, helping to maintain security and organization within the environment
Please refer this document on RBAC

If you found this information helpful, please click an accepting the answer and "Upvote" on my post for other community members reference