AZ-140 ep08 | Plan FSLogix Profiles

[@Cmart6444]

Hey KZbin guys, I have to let you know that I liked this video. Thanks Dean!

[@AzureAcademy]

👍👍

[@cloudpachehra1113]

Came back to refresh ... ur vodeos need couple watch to extract all the knowledge ...🥰🥰

[@AzureAcademy]

Thanks…I do pack a lot into a session but there are so many things to cover…I try to find a good balance

[@cloudpachehra1113]

@@AzureAcademy yeah balance is there for sure..... espicially the end when u concluded with best practise was awesome..

[@AzureAcademy]

Thanks!

[@yannara]

I would like to see demonstration about fslogics management in the Azure console live.

[@AzureAcademy]

As of today we can’t manage FSLogix in the Azure Portal…just GPO and windows registry Unless I am misunderstanding you?

[@yannara]

@@AzureAcademy Don't you have to manage it with store account and stuff? I though user profiles are then stored somewhere in Azure, right?

[@AzureAcademy]

correct your profiles are stored in an Azure Files account...but there isn't an FSLogix interface in Azure. and all the controls and settings are done in windows. Watch this for more info 👉 kzbin.info/www/bejne/nJe9i3qMib57fM0

[@HairCareTruth]

Hey Dean, regarding your point about creating a jumphost environment, Instead of providing VM access to users isn't it better to just publish the RDP app as remoteapp? And would that remoteApp need fslogix if its just for rdp app? Without fslogix won't it create a local profile for all users on all machines resulting in longer login time?

[@AzureAcademy]

Local windows profiles do not have longer login times then FSLogix profiles. As for remote app of RDP, it can work but a true jump host environment should only allow RDP, so I still recommend locking down everything

[@GermainPozo]

Thank you, a lot of good information!

[@AzureAcademy]

Happy to help!

[@roni44ify]

Hi Dean Question in the video is the have 2 Azure files share for user profile DR, should they be on different Resource group ?

[@AzureAcademy]

That depends on what kind of disaster you are protecting against. If it is a storage DR they can be in the same resource group, if it is an Azure platform Regional outage the you would want them in different regions. I cover this in more detail here -> kzbin.info/www/bejne/hXzEeYGrpJqomMksi=OMrIiFaEpwHnNHpk

[@amitkumarpanigrahi]

Great Video

[@AzureAcademy]

Thanks!

[@roboter98876]

Can you recommend a good Guide for migrating existing Roaming Profiles to FSLogix Disks?

[@AzureAcademy]

this script is how you can convert other profiles into FSLogix github.com/Deyda/Microsoft/blob/master/FSLogix/FSLogix-LocalProfileToProfileContainer.ps1

[@owaiskharni5997]

Thanks Dean, can we use profile container to redirect the Desktop, documents, download contents besides appdata. How can I do that bec I see end user VHD profile is loading but it is not saving the desktop content. if its Redirection.xml how can i define the path.

[@AzureAcademy]

The redirection.xml will tell FSLogix to NOT store the date in the profile but to put the data some other place. So that isn’t the right way to do this. May I ask WHY you want to do this… There is a feature in OneDrive that already does this as well…let me know what your reason is so we can talk about it

[@owaiskharni5997]

@@AzureAcademy okay, I was checking if there are options to redirect the user content to profile container besides using one drive.

[@AzureAcademy]

All user profile info is in FSLogix. Including OneDrive. The redirection.xml tells FSLogix to exclude things it would normally include.

[@kooloolimpah]

Great series!!!

[@AzureAcademy]

Thanks FM. please share it with everyone on social media!

[@maugamo9]

Hello Dean, thanks for doing all of this! I'm wondering if there's a guide on how to configure FSLogic for a given profile that I can follow. There's many things on the VM registry key that I'm not sure I understand fully. Thanks!

[@AzureAcademy]

There are several ways to do this so I need to know more about how you are thinking about it. 1. You can do this with a custom script extension when the VM is built. 2. You can edit the registry manually or scripted after the VM is built. 3. You can use AD Group Policy. let me know

[@MrJd2012]

Great video. I am trying to implement FSLogix in an existing environment. Can you please guide on how to migrate the existing user’s local profile to a file share (as vhd) in azure storage account?

[@AzureAcademy]

You would need to use a script or tool to take the local profile and package it as a vhd like this one - github.com/Deyda/Microsoft/blob/master/FSLogix/FSLogix-LocalProfileToProfileContainer.ps1

[@ehabgalal9181]

Hi, If I am not capture a reference, then I can deploy these settings using GPO

[@AzureAcademy]

Yes you can test and choose settings then use those as your reference to set up your GPO. But it won’t do it automatically.

[@ehabgalal9181]

@@AzureAcademy Do I need to deploy fslogix to all sessions hosts to have GPO Applied

[@AzureAcademy]

FSLogix is included in all the latest AVD images. But if you are using a custom image, then you need to install it. After it is installed the GPO that you applied with work

[@ehabgalal9181]

@@AzureAcademy I am using windows 10 image from the gallery but I am not seeing fslogix included. I am using personal pool by the way. Do I miss Something 🤔

[@AzureAcademy]

it is included in the Windows 10 Multi-Session Images. not Win 10 Enterprise. on Enterprise you still need to do the installation

[@itninja9503]

Great video, your content is really top notch. Where can I find more info on AV Best practices in regards to scanning VHDx?

[@AzureAcademy]

Try this doc - docs.microsoft.com/en-us/azure/architecture/example-scenario/wvd/windows-virtual-desktop-fslogix#antivirus-exclusions

[@itninja9503]

@@AzureAcademy Yes I saw that, but it too only talks about excisions. Not how to manage the scanning inside the VHD's from the file server.

[@AzureAcademy]

Ok I misunderstood. You want to know HOW to scan the vhdx files since we use the exclusions. That depends on your antivirus software. Some scan inside the vhdx files just like there would scan inside a zip. Others need to mount them first then scan.

[@Uplink64]

Awesome video my dude! is there a way to prevent the user assigned to a machine on a private host pool from automatically becoming a local admin?

[@AzureAcademy]

By default users are NOT local admins in AVD…problem solved 💯

[@Uplink64]

Sweet! U R D Man @@AzureAcademy

[@AzureAcademy]

👍👍

[@satishd8326]

Hello Dean, Firstly, Thank you very much for the WVD/AVD Series which made me to deploy An AVD for my users without prior experience on and Remote Desktop tools....... Secondly, my question is about user session auto disconnect after few minutes of idle, when user got disconnected from his desktop session by various reasons (Could be a network issue, might closed the session with X mark or might mistakenly refresh the web browser ), he is not able to get the same session nor not redirecting to the another host with same fslogix profile. Eerror message user is receiving that profile has been used by another user....I have gone thru so many articles and could not find any resolution for it.....Could you help me with that, do I need to created or update any registery keys

[@AzureAcademy]

I think the issue may be on your configuration of FSLofix and group policy. Can you share which FSLofix settings you are using?

[@fisontech]

Great video!

[@AzureAcademy]

Thanks for the visit Please pass it on!

[@cloudpachehra1113]

Ma Man ...u r amazing

[@AzureAcademy]

LOL ☺️thanks!

[@ronald0122]

I need a redirections.xml Can you share?

[@AzureAcademy]

Here is the example from the docs docs.microsoft.com/en-us/fslogix/manage-profile-content-cncpt#structure-of-redirectionsxml-file

[@robb1267]

Can you explain a bit more about why each host pool should have it's own storage account to house FSLogix profiles? Is it just about IOPS? Wouldn't that just encourage huge storage account sprawl as more host pools are created? I'm in a situation where I've created half a dozen host pools (each with

[@AzureAcademy]

A host pool is a collection of identical windows VM‘s that are created to do a specific set of jobs which means that the user profiles for those host pools are also associated to those same users and type of jobs...They may even be managed by different groups. And to make sure that the data and storage performance usage capacity etc. do not impact other host pools and workloads you should separate them into different file shares Ultimately it’s your environment but that’s why this is a best practice. let me know if that helps

[@muhammadawais9966]

Can we redirect the folder if it is placed on "C" root?

[@AzureAcademy]

yes you can...this is in the FSLogix docs...but it is not normally recommended. in DevOps / Cloud thinking we want to work smarter not harder. having multiple disks and additional settings are management overhead that will cost the same or more then simply increasing the size of your C:\ drive if you need to...but up to you 😁

[@muhammadawais9966]

@@AzureAcademy thanks, actually our application download the some cache file to C root to give the faster response to user. Please advise how we can address this use case?

[@AzureAcademy]

Not sure I am following...when you say application download the some cache file to C root? Are you talking about office profiles?

[@muhammadawais9966]

@@AzureAcademy 3rd party application download some DB files on root C:\ and it will help to fetch the data quickly, can we redirect this DB file to share location (using fxlogix)

[@AzureAcademy]

You would need to change where the file downloaded, and IF you want the download to be in your profile you would have to know that path a head of time You can’t have the C:\ redirected to FSLogix.

[@radomirradisic8342]

My question is a little out of the scope of this topic, but how can i scan the file shares with antivirus like defender? Also, thank you for the awesome content!!

[@AzureAcademy]

Thanks Rodomir! You would use another server in your environment. Have it scan the share by the UNC path or map the drive if you need to. Scan all the files, with no exclusions.

[@BuggageandGlitchage]

@@AzureAcademy it would be great to see a video on how to do this on an enterprise scale.

[@AzureAcademy]

you mean a video on AV Scanning Profiles at enterprise scale?

[@BuggageandGlitchage]

@@AzureAcademyyes, that’s what I meant. However I believe that defender for storage has a new feature that now scans file uploads automatically, although I believe this may only be for blobs and not files, but I could be wrong.

[@AzureAcademy]

Yeah I think for blobs only

[@tabaniz]

Love it

[@AzureAcademy]

Thanks...please pass it on 👍👍

[@juanjosenocedalaguilera2556]

Hi! Great videos and content, all have helped to get deep in this WVD world. One question. In my environment I have FSLogix set for my session hosts but I have seen that in User Profiles for W10 are local sessions/profiles that should be exclusively on the shared disk. Do you know why this could be happening that some users are stored locally (some with 30GB) and sometimes are working on the FSLogix disk?

[@AzureAcademy]

Permissions. The users who are not granted permissions in the FSLogix share can’t use it. Also check the local computer groups. There are 2 groups for FSLogix include and exclude. Make sure the users are in the right place. If permissions are all correct then my guess is that you have a host or 2 that does not have FSLogix installed.

[@adamyounguk83]

A good reason I can think of for implementing the Office container is so that in the event of corruption of your outlook/office profile you can delete the user's office VHD while still keeping the rest of the user profile intact. this way the user only has to re-configure personalized office settings, not windows in general at next login. Also, I believe there is a GPO/registry setting to allow you to contain the teams data within the Profile container so you can apply those all-important exclusions for the Teams cache.

[@AzureAcademy]

That is a good point... but not a scenario I have seen cause the entire profile to become damaged very often. When it does, I restore from last nights backup, and do a repair in outlook. There is a redirection.xml file you can set up to keep things out of your profile, like teams cache. I showed this in one of the other videos on FSLogix.