Great videos , i regularly watch your videos and it is really helping in design,build and support of AVD. Many thanks. Request your expert advise for one of my security requirement, " I have windows 10 24 H2 Multisession AVD's, i want to restrict clipboard only to allowed specific user group and it needs to denied for rest of users", I tried with group policy security filtering but it did not work as Hostpool configuration overriding. Please help , if this can be achieved or not
Thanks for watching! ☺️ I believe this isn’t working for you because of windows 10 Read this: learn.microsoft.com/en-us/azure/virtual-desktop/clipboard-transfer-direction-data-types?tabs=intune#prerequisites
Thanks for quick reply, even with new feature it can be done either uni directional or bi directional My question, how to allow clipboard only to one specific group(VIP) and restrict to everyone
We are in the process of migrating from Citrix to AVD and with this comes a new base W11 Mutlisession image. My current plan is to use the custom image template to make our base image and then open it up to install roughly 10 other apps used in our org and use FSLogix rules. Alternatively, I could script those installs out and have it as part of the custom image template but idk if I trust that process fully. I could also use app attach but I feel that it adds a lot of complexity with certs and storage. In your opinion, what process do you think would be best between those options? I'm most comfortable with opening the image and manually doing things since that's sort of how we do our Citrix image but I'm open to suggestions. Thanks in advance!
It depends on the apps and your time to deploy new hosts. I like to Automate everything for the big and complex apps: I’d install them in the custom image template , then app attach for the others Watch thus 3 part mini series to make app attach simpler too ruclips.net/video/NtzRiZAJAHw/видео.htmlsi=J_uAfnZ1EBwTP4kd
@@AzureAcademy Ya I've watched most of your videos so far. Great content. Thanks! I plan to automate as much as I can over time... but we have limited time and I am starting with ZERO Azure/AVD knowledge so it's been... fun.
in that case I'd just get AVD running as fast as possible...so you can start learning it. Then start on the custom image template for your next task, which you can update from your existing image. then app attach
@@AzureAcademy Ya I've been in our sandbox environment for a couple weeks playing around. Have a working template/image for test some stuff. Production tentant is coming soon so I'll have to start actually building a real image here soon. Your vidoes have been very helpful!
With Outlook the slow performance is normally from your Exchange mode, if not cached and you don’t have OST files then everything you do communicated back to the server. If you change those items Outlook performance gets A LOT better.
Enable Software Restriction via group policy, set default setting to block all apps\exe's etc then whitelist what you need.
👍☺️👍
Great video, yet again. Thanks!
Glad you liked it, what other topics are you interested in?
Great videos , i regularly watch your videos and it is really helping in design,build and support of AVD. Many thanks.
Request your expert advise for one of my security requirement, " I have windows 10 24 H2 Multisession AVD's, i want to restrict clipboard only to allowed specific user group and it needs to denied for rest of users", I tried with group policy security filtering but it did not work as Hostpool configuration overriding.
Please help , if this can be achieved or not
Thanks for watching! ☺️
I believe this isn’t working for you because of windows 10
Read this:
learn.microsoft.com/en-us/azure/virtual-desktop/clipboard-transfer-direction-data-types?tabs=intune#prerequisites
Thanks for quick reply, even with new feature it can be done either uni directional or bi directional My question, how to allow clipboard only to one specific group(VIP) and restrict to everyone
To do ANYTHING beyond what the RDP pro properties say you need Windows 11
We are in the process of migrating from Citrix to AVD and with this comes a new base W11 Mutlisession image. My current plan is to use the custom image template to make our base image and then open it up to install roughly 10 other apps used in our org and use FSLogix rules. Alternatively, I could script those installs out and have it as part of the custom image template but idk if I trust that process fully. I could also use app attach but I feel that it adds a lot of complexity with certs and storage. In your opinion, what process do you think would be best between those options? I'm most comfortable with opening the image and manually doing things since that's sort of how we do our Citrix image but I'm open to suggestions. Thanks in advance!
It depends on the apps and your time to deploy new hosts. I like to Automate everything
for the big and complex apps:
I’d install them in the custom image template , then app attach for the others
Watch thus 3 part mini series to make app attach simpler too
ruclips.net/video/NtzRiZAJAHw/видео.htmlsi=J_uAfnZ1EBwTP4kd
@@AzureAcademy Ya I've watched most of your videos so far. Great content. Thanks! I plan to automate as much as I can over time... but we have limited time and I am starting with ZERO Azure/AVD knowledge so it's been... fun.
in that case I'd just get AVD running as fast as possible...so you can start learning it. Then start on the custom image template for your next task, which you can update from your existing image. then app attach
@@AzureAcademy Ya I've been in our sandbox environment for a couple weeks playing around. Have a working template/image for test some stuff. Production tentant is coming soon so I'll have to start actually building a real image here soon. Your vidoes have been very helpful!
Great to hear! If you need any help as you go, ask questions here ☺️
My only problem with published apps is that they take forever to get into the like of Outlook etc. For me it's super laggy.
With Outlook the slow performance is normally from your Exchange mode, if not cached and you don’t have OST files then everything you do communicated back to the server. If you change those items Outlook performance gets A LOT better.
We have been moving AVD to Azure only joined so no more Group Policies.
Cool, you can manage them with Intune, watch this 👉 ruclips.net/video/qhZKxJf-ImU/видео.htmlsi=wG0FlI9Zuvgbmf7g