You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# App attach and MSIX app attach in Azure Virtual Desktop
@@ -16,12 +16,12 @@ The following table compares MSIX app attach with app attach:
16
16
17
17
| MSIX app attach | App attach |
18
18
|--|--|
19
-
| Applications are delivered using RemoteApp or as part of a desktop session. Permissions are controlled by assignment to application groups, however all desktop users see all MSIX app attach applications in the desktop application group. | Applications are delivered using RemoteApp or as part of a desktop session. Permissions are applied per application per user, giving you greater control over which applications your users can access in a remote session. Desktop users only see the app attach applications assigned to them. |
19
+
| Applications are delivered using RemoteApp or as part of a desktop session. Assignment to application groups controls access, however all desktop users see all MSIX app attach applications in the desktop application group. | Applications are delivered using RemoteApp or as part of a desktop session. Permissions are applied per application per user, giving you greater control over which applications your users can access in a remote session. Desktop users only see the app attach applications assigned to them. |
20
20
| Applications might only run on one host pool. If you want it to run on another host pool, you must create another package. | The same application package can be used across multiple host pools. |
21
21
| Applications can only run on the host pool in which they're added. | Applications can run on any session host running a Windows client operating system in the same Azure region as the application package. |
22
22
| To update the application, you must delete and recreate the application with another version of the package. You should update the application in a maintenance window. | Applications can be upgraded to a new application version with a new disk image without the need for a maintenance window. |
23
23
| Users can't run two versions of the same application on the same session host. | Users can run two versions of the same application concurrently on the same session host. |
24
-
| Telemetry for usage and health is not available through Azure Log Analytics. | Telemetry for usage and health is available through Azure Log Analytics. |
24
+
| Telemetry for usage and health isn't available through Azure Log Analytics. | Telemetry for usage and health is available through Azure Log Analytics. |
25
25
26
26
You can use the following application package types and file formats:
27
27
@@ -38,14 +38,14 @@ MSIX and Appx are Windows application package formats that provide a modern pack
38
38
> [!TIP]
39
39
> Select a button at the top of this article to choose between *app attach* and *MSIX app attach* to see the relevant documentation.
40
40
41
-
You can get MSIX packages from software vendors, or you can [create an MSIX package from an existing installer](/windows/msix/packaging-tool/create-an-msix-overview). To learn more about MSIX, see [What is MSIX?](/windows/msix/overview)
41
+
You can get MSIX packages from software vendors or you can [create an MSIX package from an existing installer](/windows/msix/packaging-tool/create-an-msix-overview). To learn more about MSIX, see [What is MSIX?](/windows/msix/overview)
42
42
43
43
::: zone pivot="app-attach"
44
44
## How a user gets an application
45
45
46
46
You can assign different applications to different users in the same host pool or on the same session host. During sign-in, all three of the following requirements must be met for the user to get the right application at the right time:
47
47
48
-
- The application must be assigned to the host pool. Assigning the application to the host pool enables you to be selective about which host pools the application is available on to ensure that the right hardware resources are available for use by the application. For example, if an application is graphics-intensive, you can ensure it only runs on a host pool with GPU-optimized session hosts.
48
+
- The application must be assigned to the host pool. Assigning the application to the host pool enables you to be selective about which host pools the application is available on to ensure that the right hardware resources are available for use by the application. For example if an application is graphics-intensive, you can ensure it only runs on a host pool with GPU-optimized session hosts.
49
49
50
50
- The user must be able to sign-in to session hosts in the host pool, so they must be in a Desktop or RemoteApp application group. For a RemoteApp application group, the app attach application must be added to the application group, but you don't need to add the application to a desktop application group.
51
51
@@ -78,7 +78,7 @@ Before you can use MSIX application packages with Azure Virtual Desktop, you nee
78
78
79
79
### Disk image types
80
80
81
-
For MSIX and Appx disk images, you can use *Composite Image File System (CimFS)*, *VHDX* or *VHD*, but we don't recommend using VHD. Mounting and unmounting CimFS images is faster than VHD and VHDX files and also consumes less CPU and memory. We only recommend using CimFS for your application images if your session hosts are running Windows 11.
81
+
For MSIX and Appx disk images, you can use *Composite Image File System (CimFS)*, *VHDX*, or *VHD*, but we don't recommend using VHD. Mounting and unmounting CimFS images is faster than VHD and VHDX files and also consumes less CPU and memory. We only recommend using CimFS for your application images if your session hosts are running Windows 11.
82
82
83
83
A CimFS image is a combination of several files: one file has the `.cim` file extension and contains metadata, together with at least two other files, one starting with `objectid_` and the other starting with `region_` that contain the actual application data. The files accompanying the `.cim` file don't have a file extension. The following table is a list of example files you'd find for a CimFS image:
84
84
@@ -134,11 +134,11 @@ MSIX app attach doesn't limit the number of applications users can use. You shou
134
134
## Application state
135
135
136
136
::: zone pivot="app-attach"
137
-
Application packages are set as **active** or **inactive**. Packages set to active makes the application available to users. Packages set to inactive are ignored by Azure Virtual Desktop and not added when a user signs-in.
137
+
Application packages are set as **active** or **inactive**. Packages set to active makes the application available to users. Azure Virtual Desktop ignores packages set to **inactive**and aren't added when a user signsin.
138
138
::: zone-end
139
139
140
140
::: zone pivot="msix-app-attach"
141
-
An MSIX package is set as **active** or **inactive**. MSIX packages set to active makes the application available to users. MSIX packages set to inactive are ignored by Azure Virtual Desktop and not added when a user signs in.
141
+
An MSIX package is set as **active** or **inactive**. MSIX packages set to active makes the application available to users. Azure Virtual Desktop ignores packages set to **inactive**and aren't added when a user signs in.
142
142
::: zone-end
143
143
144
144
::: zone pivot="app-attach"
@@ -262,9 +262,9 @@ All MSIX and Appx packages require a valid code signing certificate. To use thes
262
262
263
263
- A tool such as the PowerShell cmdlet [New-SelfSignedCertificate](/powershell/module/pki/new-selfsignedcertificate) that generates a self-signed certificate. You should only use self-signed certificates in a test environment. For more information on creating a self-signed certificate for MSIX and Appx packages, see [Create a certificate for package signing](/windows/msix/package/create-certificate-package-signing).
264
264
265
-
Once you've obtained a certificate, you need to digitally sign your MSIX or Appx packages with the certificate. You can use the [MSIX Packaging Tool](/windows/msix/packaging-tool/tool-overview) to sign your packages when you create an MSIX package. For more information, see [Create an MSIX package from any desktop installer](/windows/msix/packaging-tool/create-app-package).
265
+
Once you obtain a certificate, you need to digitally sign your MSIX or Appx packages with the certificate. You can use the [MSIX Packaging Tool](/windows/msix/packaging-tool/tool-overview) to sign your packages when you create an MSIX package. For more information, see [Create an MSIX package from any desktop installer](/windows/msix/packaging-tool/create-app-package).
266
266
267
-
To ensure the certificate is trusted on your session hosts, you need your session hosts to trust the whole certificate chain. How you do this depends on where you got the certificate from and how you manage your session hosts and the identity provider you use. The following table provides some guidance on how to ensure the certificate is trusted on your session hosts:
267
+
To ensure the certificate is trusted on your session hosts, you need your session hosts to trust the whole certificate chain. How your session hosts trust the certificate chain depends on where you got the certificate from and how you manage your session hosts and the identity provider you use. The following table provides some guidance on how to ensure the certificate is trusted on your session hosts:
268
268
269
269
-**Public CA**: certificates from a public CA are trusted by default in Windows and Windows Server.
270
270
@@ -279,7 +279,7 @@ To ensure the certificate is trusted on your session hosts, you need your sessio
279
279
-**Self-signed**: install the trusted root to the **Trusted Root Certification Authorities** store on each session host. We don't recommend distributing this certificate using Group Policy or Intune as it should only be used for testing.
280
280
281
281
> [!IMPORTANT]
282
-
> You should timestamp your package so that its validity can outlast your certificate's expiration date. Otherwise, once the certificate has expired, you need to update the package with a new valid certificate and once again ensure it's trusted on your session hosts.
282
+
> You should timestamp your package so that its validity can outlast your certificate's expiration date. Otherwise, once the certificate expires, you need to update the package with a new valid certificate and once again ensure session hosts trust the certificate chain.
Copy file name to clipboardExpand all lines: articles/virtual-desktop/fslogix-profile-containers.md
+8-10Lines changed: 8 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,7 +3,7 @@ title: User profile management for Azure Virtual Desktop with FSLogix profile co
3
3
description: Learn about using User profile management for Azure Virtual Desktop with FSLogix profile containers to manage user profiles and personalization.
4
4
author: dknappettmsft
5
5
ms.topic: conceptual
6
-
ms.date: 01/04/2021
6
+
ms.date: 08/22/2024
7
7
ms.author: daknappe
8
8
ms.custom: docs_inherited
9
9
---
@@ -12,7 +12,7 @@ ms.custom: docs_inherited
12
12
13
13
A user profile contains data elements about an individual, including configuration information like desktop settings, persistent network connections, and application settings. By default, Windows creates a local user profile that is tightly integrated with the operating system.
14
14
15
-
A remote user profile provides a partition between user data and the operating system. It allows the operating system to be replaced or changed without affecting the user data. With a VDI solution, such as Azure Virtual Desktop, the operating system may be replaced for the following reasons:
15
+
If you configure a user profile to be remote, it provides a partition between user data and the operating system. You can change or replace the operating system without affecting the user data. With a virtual desktop infrastructure (VDI) solution, such as Azure Virtual Desktop, the operating system might be replaced for the following reasons:
16
16
17
17
- An upgrade of the operating system.
18
18
- A replacement of an existing session host.
@@ -23,19 +23,17 @@ We recommend using [FSLogix profile containers](/fslogix/concepts-container-type
23
23
> [!NOTE]
24
24
> If you're looking for comparison material about the different FSLogix Profile Container storage options on Azure, see [Storage options for FSLogix profile containers](store-fslogix-profile.md).
25
25
26
-
27
26
## FSLogix profile containers
28
27
29
28
Existing and legacy Microsoft solutions for user profiles came with various challenges. No previous solution handled all the user profile needs of a VDI environment.
30
29
31
30
FSLogix profile containers address many user profile challenges. Key among them are:
32
31
33
-
-**Performance:** The [FSLogix profile containers](/fslogix/configure-profile-container-tutorial/) are high performance and resolve performance issues that have historically blocked cached exchange mode.
34
-
35
-
-**OneDrive:** Without FSLogix profile containers, OneDrive is not supported in non-persistent VDI environments.
32
+
-**Performance:**[FSLogix profile containers](/fslogix/configure-profile-container-tutorial/) are high performance and can resolve performance issues that historically blocked cached Exchange mode in Microsoft Outlook.
36
33
37
-
-**Additional folders:** FSLogix profile containers provides the ability to extend user profiles to include additional folders.
-**Additional folders:** you can extend user profiles to include other folders.
39
37
40
38
## Best practices for Azure Virtual Desktop
41
39
@@ -51,17 +49,17 @@ To ensure your Azure Virtual Desktop environment follows best practices:
51
49
52
50
- Azure Files has limits on the number of open handles per root directory, directory, and file. For more information on the limits and sizing guidance, see [Azure Files scalability and performance targets](../storage/files/storage-files-scale-targets.md#file-scale-targets) and [Azure Files sizing guidance for Azure Virtual Desktop](../storage/files/storage-files-scale-targets.md#azure-files-sizing-guidance-for-azure-virtual-desktop).
53
51
54
-
- Each host pool VM must be built of the same type and size VM based on the same master image.
52
+
- Each host pool VM must be built of the same type and size VM based on the same VM image.
55
53
56
54
- Each host pool VM must be in the same resource group to aid management, scaling and updating.
57
55
58
56
- For optimal performance, the storage solution and the FSLogix profile container should be in the same data center location.
59
57
60
-
- The storage account containing the master image must be in the same region and subscription where the VMs are being provisioned.
58
+
- The storage account containing the VM image must be in the same region and subscription where the VMs are being provisioned.
61
59
62
60
## Next steps
63
61
64
-
-Learn more about storage options for FSLogix profile containers, see [Storage options for FSLogix profile containers in Azure Virtual Desktop](store-fslogix-profile.md).
62
+
-To learn more about storage options for FSLogix profile containers, see [Storage options for FSLogix profile containers in Azure Virtual Desktop](store-fslogix-profile.md).
65
63
-[Set up FSLogix Profile Container with Azure Files and Active Directory](fslogix-profile-container-configure-azure-files-active-directory.md)
66
64
-[Set up FSLogix Profile Container with Azure Files and Microsoft Entra ID](create-profile-container-azure-ad.yml)
67
65
-[Set up FSLogix Profile Container with Azure NetApp Files](create-fslogix-profile-container.md)
0 commit comments