Schedule image update Azure Virtual Desktop host pool

• Sander Rozemuller
• Date : December 1, 2022
• Categories : Azure
• Tags :

Recently Microsoft announced a new feature called AVD hostpool image update. In this blog, I explain how to configure this new feature in an automated way.

Why use a (golden) image?

First, let’s talk about images. Because why should you use an image. Well, I could be short in that, you don’t want trouble. Often I see AVD environments without the back of the Azure Compute Gallery or managed images. If I ask why not using images, I got answers like there are just a few hosts, it is a cost thing, or too complex.

Route own Intune data to Log Analytics using custom logs

• Sander Rozemuller
• Date : November 30, 2022
• Categories : Log analytics ,Microsoft intune
• Tags : Azure ,Log analytics ,Microsoft intune ,Power shell ,Rest API

I often write blogs about getting data with the Graph API and using it for monitoring. A while ago I was thinking about how to get my own data into Log Analytics.
In this blog post, I show how to ingest custom MEM data into a Log Analytics table. I also show how to configure all components in an automated way.

Update deallocated AVD session hosts with scheduled agents updates feature

• Sander Rozemuller
• Date : November 30, 2022
• Categories : Avd
• Tags : Log analytics ,Azure functions ,Virtual machines ,Power shell

Recently, a question passed my screen if the AVD scheduled agent feature supports deallocated machines. The answer is short, no. Also when not enabling the feature, Microsoft does not start deallocated machines. So, how do we make sure when a new agent becomes available also deallocated machines are updated?

The Endpoint Security Train - Introduction

• Sander Rozemuller
• Date : November 20, 2022
• Categories : Endpoint ,Security
• Tags : Endpoint ,Zero trust ,The endpoint security train ,Microsoft intune ,Azure ,Entra ID

The IT landscape is changing. Private becomes public, local resources are moving to the public cloud. More and more workloads return to the local endpoint. Cloud endpoints (AVD, W365) are mostly used to run legacy software. With all those movements, it could be challenging to keep the herd in the pasture. Devices are everywhere and what about security?

Disable user tenant creation

• Sander Rozemuller
• Date : November 17, 2022
• Categories : Entra ID ,Security
• Tags : Azure ,Entra ID

It looks like Microsoft has added a new option that allows users to create tenants. Some people have seen the Tenant Creation option in the regular Azure portal but was removed fast. For now, the option is still available in the Preview Azure Portal (https://preview.portal.azure.com/)

Deploy Azure Bastion host in AVD environment automated

• Sander Rozemuller
• Date : November 11, 2022
• Categories : Azure virtual desktop ,Security
• Tags : Azure bastion ,Virtual machines ,Power shell ,The endpoint security train

The IT landscape is changing. Hardware takes place for serverless and resources are moving to public cloud platforms. With that, also the IT processes are changing. In this blog post, I show how to make one of the most common processes more secure in the public cloud. Manage a client endpoint with remote control.