You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/virtual-desktop/create-profile-container-adds.md
+24-67Lines changed: 24 additions & 67 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -15,47 +15,11 @@ manager: lizross
15
15
16
16
This article will show you how to create an FSLogix profile container with Azure Files and Azure Active Directory Domain Services (AD DS).
17
17
18
-
## Set up Azure AD DS
18
+
## Prerequisites
19
19
20
-
This section explains how to set up your Azure AD DS account and configure it to create FSLogix profile containers. If you already have your Azure AD DS account set up, skip ahead to [Add Azure AD DS admins](#add-azure-ad-ds-admins).
20
+
This article assumes you've already set up an Azure AD DS instance. If you don't have one yet, follow the instructions in [Create a basic managed domain](../active-directory-domain-services/tutorial-create-instance.md) first, then return here.
21
21
22
-
To configure your Azure AD DS account to create FSLogix profile containers:
23
-
24
-
1. Sign in to the Azure portal with an account that has contributor or administrator permissions.
25
-
26
-
2. Select **New**, then in the search bar, search for and select **Azure Active Directory Domain Services**.
27
-
28
-
3. When the Azure AD DS window opens, select **Create**.
29
-
30
-
4. In the **Basics** tab:
31
-
32
-
- Enter the DNS domain name.
33
-
- Select an active Azure subscription (if multiple subscriptions are available).
34
-
- Select an empty resource group or create a new one by selecting **Create new**.
35
-
- Select a location.
36
-
37
-

38
-
39
-
5. For the **Network** tab, configure a virtual network or select an existing one. We recommend you create a new one by selecting **Create new** and entering the following information:
40
-
41
-
- Visual network name
42
-
- Address space
43
-
- Subnet name
44
-
- Subnet address range
45
-
46
-

47
-
48
-
6. For the **Administrator group** tab, select the Azure AD users that will manage the Azure AD DS configuration.
49
-
50
-
7. For most deployments, you won't need to change any information in the **Synchronization** tab. Keep the default values unless told otherwise.
51
-
52
-
8. Finally, you'll see the **Summary** tab. Review the information to make sure you've selected the right settings. When you're done, select **OK** to start the deployment.
53
-
54
-

55
-
56
-
To check your deployment's progress, select the **Notifications** icon in the global controls bar.
57
-
58
-
9. When the deployment is done, go to **Azure AD DS** and confirm that Azure AD DS is running.
22
+
You'll also need a general-purpose v2 Azure Storage account in the Azure portal. To learn how to set up your account, check out [Create an Azure Storage account](../storage/common/storage-account-create.md).
59
23
60
24
## Add Azure AD DS admins
61
25
@@ -73,40 +37,25 @@ To add an admin:
73
37
74
38
5. In the left pane, select **Members**, then select **Add members** in the main pane. This will show a list of all users available in Azure AD. Select the name of the user profile you just created.
75
39
76
-
## Set up an Azure Files Storage account
40
+
## Set up an Azure Storage account
77
41
78
-
Now it's time to enable Azure AD DS authentication over Server Message Block (SMB). For more information about this process, see our [Azure Storage Documentation](../storage/common/storage-introduction.md).
42
+
Now it's time to enable Azure AD DS authentication over Server Message Block (SMB).
79
43
80
44
To enable authentication:
81
45
82
-
1. Go to the Azure portal, then select **All services**, and then select **Storage accounts**.
83
-
84
-
2. Select **Add** to create a storage account.
85
-
86
-
3. In the window that appears:
87
-
88
-
- Select **Subscription** (if applicable).
89
-
- Select an existing **Resource group** or select **Create new** to create a new one.
90
-
- Enter the **Storage account name**.
91
-
- Select the **Location**. (We recommend using the same location as the session host VMs.)
92
-
- Select the **Performance type**.
93
-
- For **Account type**, select a **StorageV2 (general purpose V2) account**.
46
+
1. If you haven't already, set up and deploy a general-purpose v2 Azure Storage account by following the instructions in [Create an Azure Storage account](../storage/common/storage-account-create.md).
94
47
95
-
4. Select **Review + create**. This will start the validation process for the information you entered for your new storage account.
48
+
2. Once you've finished setting up your account, select **Go to resource**.
96
49
97
-
5. Once the validation process is done, select **Create**. This will start the deployment process.
50
+
3. Select **Configuration** from the pane on the left side of the screen, then enable **Azure Active Directory authentication for Azure Files** in the main pane. When you're done, select **Save**.
98
51
99
-
6. Once the deployment is done, select **Go to resource**.
52
+
4. Select **Overview** in the pane on the left side of the screen, then select **Files** in the main pane.
100
53
101
-
7. Select **Configuration** from the pane on the left side of the screen, then enable **Azure Active Directory authentication for Azure Files** in the main pane. When you're done, select **Save**.
102
-
103
-
8. Select **Overview** in the pane on the left side of the screen, then select **Files** in the main pane.
104
-
105
-
9. Select **File share** and enter the **Name** and **Quota** into the fields that appear on the right side of the screen.
54
+
5. Select **File share** and enter the **Name** and **Quota** into the fields that appear on the right side of the screen.
106
55
107
56
## Assign access permissions to an identity
108
57
109
-
From the Azure portal, navigate to the **Files share**created in the previous section.
58
+
From the Azure portal, open the file share you created in [Set up an Azure Storage account](#set-up-an-azure-storage-account).
110
59
111
60
1. Select **Access Control (IAM)**.
112
61
@@ -128,7 +77,7 @@ From the Azure portal, navigate to the **Files share** created in the previous s
128
77
129
78
3. Under **Settings**, select **Access keys** and copy the key from **key1**.
130
79
131
-
4. Go to the **Virtual Machines** tab and locate any VM that is going to be part of your host pool.
80
+
4. Go to the **Virtual Machines** tab and locate any VM that will become part of your host pool.
132
81
133
82
5. Select the name of the virtual machine (VM) under **Virtual Machines (adVM)** and select **Connect**
134
83
@@ -172,26 +121,30 @@ From the Azure portal, navigate to the **Files share** created in the previous s
172
121
173
122
## Configure your profile container
174
123
124
+
Now that you're ready to go, let's configure the FSLogix profile container.
125
+
126
+
To configure a FSLogix profile container:
127
+
175
128
1. Sign in to the session host VM you configured at the beginning of this article, then [download and install the FSLogix agent](/fslogix/install-ht/).
176
129
177
130
2. Unzip the FSLogix agent file you downloaded and go to **x64** > **Releases**, then open **FSLogixAppsSetup.exe**.
178
131
179
-
>[!NOTE]
180
-
> If there are multiple VMs in the host pool the below configuration must be done for each VM.
181
-
182
132
3. Once the installer launches, select **I agree to the license terms and conditions.** If applicable, provide a new key.
183
133
184
134
4. Select **Install**.
185
135
186
136
5. Open **Drive C**, then go to **Program Files** > **FSLogix** > **Apps** to make sure the FSLogix agent was properly installed.
187
137
138
+
>[!NOTE]
139
+
> If there are multiple VMs in the host pool, you'll need to repeat steps 1 through 5 for each VM.
140
+
188
141
6. Run **Registry Editor** (RegEdit) as an administrator.
189
142
190
143
7. Navigate to **Computer** > **HKEY_LOCAL_MACHINE** > **software** > **FSLogix**, right-click on **FSLogix**, select **New**, and then select **Key**.
191
144
192
145
8. Create a new key named **Profiles**.
193
146
194
-
9. Right-click on **Profiles**, select **New**, and then select **DWORD (32-bit) Value.** Name the value **Enabled** and set the **Data** value to **1**.
147
+
9. Right-click on **Profiles**, select **New**, and then select **DWORD (32-bit) Value.** Name the value **Enabled** and set the **Data** value to **1**.
195
148
196
149

197
150
@@ -201,6 +154,10 @@ From the Azure portal, navigate to the **Files share** created in the previous s
201
154
202
155
## Assign users to session host
203
156
157
+
Now you'll need to assign users to your session host.
158
+
159
+
To assign users:
160
+
204
161
1. Run Windows PowerShell as an administrator, then run the following cmdlet to sign in to Windows Virtual Desktop with PowerShell:
0 commit comments