You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/virtual-desktop/create-profile-container-adds.md
+11-6Lines changed: 11 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -15,7 +15,9 @@ manager: lizross
15
15
16
16
This article will show you how to create an FSLogix profile container with Azure Files and Azure Active Directory Domain Services (AD DS).
17
17
18
-
## Configure Azure AD DS
18
+
## Set up Azure AD DS
19
+
20
+
This section explains how to set up your Azure AD DS account and configure it to create FSLogix profile containers. If you already have your Azure AD DS account set up, skip ahead to [Add Azure AD DS admins](#add-azure-ad-ds-admins).
19
21
20
22
To configure your Azure AD DS account to create FSLogix profile containers:
21
23
@@ -80,6 +82,7 @@ To enable authentication:
80
82
1. Go to the Azure portal, then select **All services**, and then select **Storage accounts**.
81
83
82
84
2. Select **Add** to create a storage account.
85
+
83
86
3. In the window that appears:
84
87
85
88
- Select **Subscription** (if applicable).
@@ -99,17 +102,22 @@ To enable authentication:
99
102
100
103
8. Select **Overview** in the pane on the left side of the screen, then select **Files** in the main pane.
101
104
102
-
9. Select **File share** and enter the **Name** and **Quota** into the fields that appear on the right side of the screen.
105
+
9.Select **File share** and enter the **Name** and **Quota** into the fields that appear on the right side of the screen.
103
106
104
107
## Assign access permissions to an identity
105
108
106
109
From the Azure portal, navigate to the **Files share** created in the previous section.
107
110
108
111
1. Select **Access Control (IAM)**.
112
+
109
113
2. Select **Add a role assignment**.
114
+
110
115
3. In the **Add role assignment** tab, select the appropriate built-in role from the role list. You'll need to at least select **Storage File Data SMB Share Contributor** for the account to get proper permissions.
116
+
111
117
4. For **Assign access to**, select **Azure Active Directory user, group, or service principal**.
118
+
112
119
5. Select a name or email address for the target Azure Active Directory identity.
120
+
113
121
6. Select **Save**.
114
122
115
123
## Get the storage account access key
@@ -120,9 +128,6 @@ From the Azure portal, navigate to the **Files share** created in the previous s
120
128
121
129
3. Under **Settings**, select **Access keys** and copy the key from **key1**.
122
130
123
-
>[!NOTE]
124
-
>If the key contains the "/" symbol, select the **Refresh** icon to generate a new key.
125
-
126
131
4. Go to the **Virtual Machines** tab and locate any VM that is going to be part of your host pool.
127
132
128
133
5. Select the name of the virtual machine (VM) under **Virtual Machines (adVM)** and select **Connect**
@@ -209,7 +214,7 @@ From the Azure portal, navigate to the **Files share** created in the previous s
209
214
Add-RdsAccount -DeploymentUrl $brokerurl
210
215
```
211
216
212
-
When prompted for credentials, enter the same user that was granted the Tenant Creator, RDS Owner, or RDS Contributor role on the Windows Virtual Desktop tenant.
217
+
When prompted for credentials, enter the same user that was granted the TenantCreator, RDS Owner, or RDS Contributor role on the Windows Virtual Desktop tenant.
213
218
214
219
2. Run the following cmdlets to assign the user to the remote desktop group:
0 commit comments