AVD architecture with two onpremise environments

Question

Hello,

Currently there are two on-premises environments that have each different domain. Similar to the below.
https://learn.microsoft.com/en-us/azure/architecture/example-scenario/wvd/multi-forest-azure-managed#architecture

1, For the above link case, user@companyA.com can access to Hostpool B and Hostpool AB as well if use "Forest Trust"?

2, In terms of minimizing the number of domains per user, only options is to merge AD(companyA.com and companyB.com), and then, companyA.com domain in Local environment is changed to newcompanyAB.com?

3, In terms of architecture of AVD, is there any better option other than the one in the above link?

Answer 1

Hi Taka,

From my point of view:

1. the permission to AVD are managed by Groups AVD Users CompanyA, AVD Users CompanyB and AVD Users CompanyAB so even you setup trust user@companyA.com must be member of AVD Users CompanyB and AVD Users CompanyAB in order to get access to both Host Pools.
2. There is a few options to merge AD and it depends of your scenario, but based on the link you provided users will be able to use their logins without merge as well "Users sign in by using either the Azure Virtual Desktop application or the web client, with a UPN in a format such as john@companyA.com, jane@companyB.com, or joe@newcompanyAB.com, depending on their configured UPN suffix."
   If you decide to merge local environment users from CompanyA and Company B will have one AD and one login NewCompanyAB to local and AVD environment.
3. I don't have another idea.