Use PowerShell to Create a Snapshot Based Image of an Azure Virtual Machine

PowerShell Image Snapshot

This video goes of using the SnapImage.ps1 PowerShell script.  This script automates the process of creating an image from an Azure VM without destroying it during the capture process.  At a high-level, the following steps are taken:

Continue reading “Use PowerShell to Create a Snapshot Based Image of an Azure Virtual Machine”

Private Endpoints and DNS Part Deux: Azure Private DNS Zones

This is a second video on Azure Private Endpoints and DNS.  Previously, we reviewed options for DNS name resolution with Private Endpoint that included a forward lookup zone for the privatelink.file.windows.core.net zone. However, that option required manually adding hosts to the DNS zone.  This video reviews a hub-and-spoke configuration leveraging a forwarder server in Azure and conditional forwarding in Windows DNS.  Although slightly more complicated, this option does not require manually adding hosts to the DNS lookup zone.

Continue reading “Private Endpoints and DNS Part Deux: Azure Private DNS Zones”

Private Endpoints with Azure Storage File Shares

Azure services are publicly available over the internet by default.  That works for many services, but sometimes we need to limit access to internal networks only.  Private Endpoints provide a local, internal connection to resources in Azure.  It does this by adding a virtual NIC to a subnet.  From there, the NIC gets a private IP address where it can be accessed from the internal network.  This video goes over the configuration options to create a new storage account with an Azure File Share Private Endpoint as well as update an existing storage account with a private endpoint.

Links

Zero to Hero with Azure Virtual Desktop
Hybrid Identity with Windows AD and Azure AD
Private Endpoints and DNS in Azure

Autoscale with Azure Virtual Desktop (AVD) Scaling Plans

AVD

Azure Virtual Desktop (AVD) now has an integrated session host scaling solution built into the portal.  This video goes over how to configure the custom role required for autoscale, then create a scaling plan and schedule and assign it to a host pool.

Continue reading “Autoscale with Azure Virtual Desktop (AVD) Scaling Plans”

High Performance at a Low Price for WVD

In this post and accompanying video, we go over the benefits and considerations of using ephemeral disks with Azure Windows Virtual Desktop Session Hosts.  We review the performance improvements as well as limitations that come with ephemeral disks, including the inability to deallocate Session Hosts.  Next, we examine Azure Reserved Instances and how they can be used to keep the cost of Session Hosts down without using an auto scale solution.

Continue reading “High Performance at a Low Price for WVD”

Enable MFA for WVD ARM

WVD

In this video, we go over enabling Multi-factor Authentication, or MFA, for Windows Virtual Desktop (WVD) Spring Update, or ARM.  We use an Azure AD Conditional Access Policy to enforce MFA on a group of users.  We also set an MFA Trusted IP address to exclude a public IP source from the MFA Policy.

Continue reading “Enable MFA for WVD ARM”