Skip to content

Commit af7b9d0

Browse files
committed
Updated based on Stefan's feedback.
1 parent ab06ad4 commit af7b9d0

File tree

1 file changed

+11
-6
lines changed

1 file changed

+11
-6
lines changed

articles/virtual-desktop/create-profile-container-adds.md

Lines changed: 11 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,9 @@ manager: lizross
1515

1616
This article will show you how to create an FSLogix profile container with Azure Files and Azure Active Directory Domain Services (AD DS).
1717

18-
## Configure Azure AD DS
18+
## Set up Azure AD DS
19+
20+
This section explains how to set up your Azure AD DS account and configure it to create FSLogix profile containers. If you already have your Azure AD DS account set up, skip ahead to [Add Azure AD DS admins](#add-azure-ad-ds-admins).
1921

2022
To configure your Azure AD DS account to create FSLogix profile containers:
2123

@@ -80,6 +82,7 @@ To enable authentication:
8082
1. Go to the Azure portal, then select **All services**, and then select **Storage accounts**.
8183

8284
2. Select **Add** to create a storage account.
85+
8386
3. In the window that appears:
8487

8588
- Select **Subscription** (if applicable).
@@ -99,17 +102,22 @@ To enable authentication:
99102

100103
8. Select **Overview** in the pane on the left side of the screen, then select **Files** in the main pane.
101104

102-
9. Select **File share** and enter the **Name** and **Quota** into the fields that appear on the right side of the screen.
105+
9. Select **File share** and enter the **Name** and **Quota** into the fields that appear on the right side of the screen.
103106

104107
## Assign access permissions to an identity
105108

106109
From the Azure portal, navigate to the **Files share** created in the previous section.
107110

108111
1. Select **Access Control (IAM)**.
112+
109113
2. Select **Add a role assignment**.
114+
110115
3. In the **Add role assignment** tab, select the appropriate built-in role from the role list. You'll need to at least select **Storage File Data SMB Share Contributor** for the account to get proper permissions.
116+
111117
4. For **Assign access to**, select **Azure Active Directory user, group, or service principal**.
118+
112119
5. Select a name or email address for the target Azure Active Directory identity.
120+
113121
6. Select **Save**.
114122

115123
## Get the storage account access key
@@ -120,9 +128,6 @@ From the Azure portal, navigate to the **Files share** created in the previous s
120128

121129
3. Under **Settings**, select **Access keys** and copy the key from **key1**.
122130

123-
>[!NOTE]
124-
>If the key contains the "/" symbol, select the **Refresh** icon to generate a new key.
125-
126131
4. Go to the **Virtual Machines** tab and locate any VM that is going to be part of your host pool.
127132

128133
5. Select the name of the virtual machine (VM) under **Virtual Machines (adVM)** and select **Connect**
@@ -209,7 +214,7 @@ From the Azure portal, navigate to the **Files share** created in the previous s
209214
Add-RdsAccount -DeploymentUrl $brokerurl
210215
```
211216

212-
When prompted for credentials, enter the same user that was granted the Tenant Creator, RDS Owner, or RDS Contributor role on the Windows Virtual Desktop tenant.
217+
When prompted for credentials, enter the same user that was granted the TenantCreator, RDS Owner, or RDS Contributor role on the Windows Virtual Desktop tenant.
213218

214219
2. Run the following cmdlets to assign the user to the remote desktop group:
215220

0 commit comments

Comments
 (0)