How to set time limit for Azure Virtual Desktop Users ?

R-Admin228 0

I want to allocate a time limit for Azure Virtual Desktop (AVD) users by the number of hours they can use AVD in each month.

For example, I want to set User A only able to use Azure Virtual Desktop for total of 10 hours each month.

Is there a way to accomplish this?

Sina Salam 3,886 Reputation points

2024-04-28T15:27:14.1+00:00
Hi IESRAdmin-2238,

It's possible but what would you like to use:

Azure solution in existing Infrastructure?

Third-Party Solutions?

Custom Application Development?

Integration with Billing Systems?

Manual Monitoring and Enforcement?

All of the above are possible to solve the issues, could your provide a single solution among all.

Hope to read from you.

Regards,

Just a comment:

The solution from @Dillon Silzer about net user command and my number 1 on the lists are both solutions have their merits and limitations, so the "best" solution depends on your specific requirements and constraints.

The first solution you provided, using Parental Controls or the "net user" command in Windows, is simpler to implement and doesn't require additional services or scripting.

However, it offers limited functionality and may not fully meet the needs of managing access to Azure Virtual Desktop instances, especially for more complex time-based restrictions.

The second solution, leveraging Azure AD Conditional Access policies along with Azure Policy or Azure Automation, offers more flexibility and control over access management. It allows you to enforce policies based on various conditions, including time restrictions, although direct time limits based on hours per month aren't natively supported.

This solution requires more setup and scripting skills, but it provides greater customization and scalability for managing access to Azure Virtual Desktop resources.

For more clarity

Solution 1: Using Parental Controls or "net user" command

Pros:

Simplicity: Implementation is straightforward and doesn't require additional services or scripting.

Native Integration: Built-in features of Windows operating system, readily available for use.

Ease of Use: Familiar interface for users and administrators.

Cons:

Limited Functionality: Offers basic time restrictions but lacks flexibility for more complex access control requirements.

Manual Management: Changes to access restrictions may require manual intervention, potentially leading to administrative overhead.

Scalability: Might not scale well for large numbers of users or more intricate access policies.

Solution 2: Leveraging Azure AD Conditional Access with Azure Policy or Azure Automation

Pros:

Flexibility: Offers extensive customization options, allowing for complex access control policies based on various conditions.

Scalability: Scales well to accommodate large numbers of users and diverse access requirements.

Automation: Can automate access management tasks, reducing manual effort and ensuring consistency.

Integration: Seamlessly integrates with Azure services for comprehensive access management within the cloud environment.

Cons:

Complexity: Requires more setup and configuration compared to native Windows features, potentially requiring scripting and automation skills.

Learning Curve: Administrators may need to familiarise themselves with Azure services and policy configurations.

Dependency on Azure: Relies on Azure services, which may incur additional costs and require ongoing maintenance.

Potential Overhead: Managing and troubleshooting policies and scripts may add overhead to administrative tasks.

In summary, if your time-based access requirements are straightforward and you prefer a simpler setup, the first solution may suffice. However, if you need more advanced time-based access controls and are willing to invest time in setting up and managing Azure services and scripts, the second solution offers greater flexibility and scalability within Azure.

1 answer

Dillon Silzer 54,731 Reputation points

2024-04-28T16:16:32.92+00:00

Hello,

There is no such solution that is native to AVD that will do this for you. The only thing you can do with Windows is restrict the time for users using Parental Controls or restrict using cmd prompt.

Parental Controls

Navigate to Start, then go to Settings followed by Accounts. In the Accounts section, select Family & other users to begin customizing parental controls.

net user command

net user user.account /time:M-F,9AM-5PM

(User can only login Monday to Friday from 9AM to 5 PM)

You will likely need to look for a third party solution that will add a software layer to your Azure Virtual Desktop instances.

If this is helpful please accept answer.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment