FSLogix profiles for Azure AD joined VMs in AVD (Azure AD Kerberos for Azure files)

[@adnanbhatti1553]

Amazing Demo. Thank you so much for posting this video

[@vdibuzz]

Glad to know it helped you

[@ErrolCanedoPlusOne]

Thanks for the Video Demo! One question is the group added to Storage File Data SMB Share roles are Windows AD groups that is sync to Azure AD or a Cloud Only?

[@vdibuzz]

It's a windows group with hybrid users (synced from ad sync )...cloud only not supported yet

[@ramp79]

Thanks a lot for providing amazing content

[@vdibuzz]

It's my pleasure

[@SyedZubairHussaini]

Thanks for the clear explanation, however even if hybrid user it requires DC for VM sign in, it's working when DC is on and not when DC is off.

[@vdibuzz]

I believe if you enable password hash sync on ad connect/Azure AD then you don't have dependency on DC (only passthrough or ADFS will have dependency with DC or onprem)

[@tranlong7244]

Thank you very much, bro.

[@ivangomez4109]

Thanks so much! It's Amazing this new feature. A great challenge overcome for a lot of clients. But... in this new scenario, I imagine that all the policies GPOs need be applied with Intune integration o with registry keys xD it's ok?

[@vdibuzz]

Yes ..u can apply in 3 ways ...1 intune 2.local group policy on master image 3.using some script to push registry on all sessionnhosts

[@fbifido2]

- Can you Please re-do this video with one major change (remove the on-prem AD and replace it with Azure AD DS) ? 🤩🤩🤩😍😍😍😍

[@olivermartin2670]

Thanks for sharing this video

[@mountainsports1761]

Nice video thanks! However i cannot deploy with Intune Configuration Profiles, the FSLogix settings and the Kerberos settings.. the error says not applicable. I have tried with user and device groups.. Do you know it is supported?

[@chadogata1918]

Does anyone know why I can connect the file share when mapping through CMD, however, the file share does not show in file explorer. Within CMD I can navigate to the new file share and access the contents, but within file explorer I'm unable to see or connect to the share.

[@ivangomez4109]

It's weird, it followed all the steps (Azure AD join) and when connecting it indicates that the credentials are invalid. On the other hand, for the rest of the Hostpools (Active Directory Join) the access is correct

[@ivangomez4109]

It's OK! I need also apply the RBAC virtual machine user login role in the Resource Group.

[@olivermartin2670]

When I map the drive, it does not show under file explorer. from the CMD i can access Z: drive , but it is not showing on File Explorer.

[@olivermartin2670]

tested using the powershell connect script and i get the same, the network drive not showing on file explorer.

[@olivermartin2670]

I got a workaround: type the command from RUN. I ran CMD as admin, so maybe the maps are going to a different user env.

[@olivermartin2670]

now my domain doesn't show under location to verify the user group. it shows the storage account only.

[@fbifido2]

@21:02 - can the FSLogix user "fstets3" remove the HP-Demo-*.csv file from the FSLogix file share? why are they able to see files uploaded by another user (this been the global admin)? if another user in the "vdiusers" group should sign-in, would they be able to see the FSLogix folder for user "fstets3"?

[@vdibuzz]

In azure file users can see other users file/folder because access based enumeration is not available..however they can't view or modify because of ntfs permission on share