You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
description: How to set up a file share for MSIX app attach for Azure Virtual Desktop.
4
5
author: Heidilohr
5
6
ms.topic: how-to
6
-
ms.date: 04/13/2021
7
+
ms.date: 12/07/2022
7
8
ms.author: helohr
8
9
manager: femila
9
10
---
10
-
# Set up a file share for MSIX app attach
11
+
# Create a file share for MSIX app attach
11
12
12
-
All MSIX imagesmust be stored on a network share that can be accessed by users in a host pool with read-only permissions.
13
+
When a user in a host pool accesses MSIX images, they must be stored in a network share with read-only permissions. In the how-to, you'll learn the steps needed to set up a file share for MSIX app attach.
13
14
14
-
MSIX app attach doesn't have any dependencies on the type of storage fabric the file share uses. The considerations for the MSIX app attach share are same as those for an FSLogix share. To learn more about storage requirements, see [Storage options for FSLogix profile containers in Azure Virtual Desktop](store-fslogix-profile.md).
15
+
MSIX app attach doesn't have dependencies on the type of storage fabric the file share uses. The considerations for the MSIX app attach share are same as the considerations for an FSLogix share. To learn more about storage requirements, see [Storage options for FSLogix profile containers in Azure Virtual Desktop](store-fslogix-profile.md).
15
16
16
17
## Performance requirements
17
18
18
-
MSIX app attach image size limits for your system depend on the storage type you're using to store the VHD or VHDX files, as well as the size limitations of the VHD, VHDX or CIM files and the file system.
19
+
MSIX app attach image size limits for your system depend on:
19
20
20
-
The following table gives an example of how many resources a single 1 GB MSIX image with one MSIX app inside of it requires for each VM:
21
+
- The storage type you're using to store the VHD or VHDX files.
22
+
23
+
- The size limitations of the VHD, VHDX or CIM files and the file system.
24
+
25
+
The following table gives an example of how many resources a single 1-GB MSIX image with one MSIX app inside of it requires for each VM:
21
26
22
27
| Resource | Requirements |
23
28
|----------------------|--------------|
24
-
| Steady state IOPs |1 IOPs |
25
-
| Machine boot signin | 10 IOPs |
29
+
| Steady state IOPs |One IOP|
30
+
| Machine boot sign-in | 10 IOPs |
26
31
| Latency | 400 ms |
27
32
28
33
Requirements can vary widely depending how many MSIX-packaged applications are stored in the MSIX image. For larger MSIX images, you'll need to allocate more bandwidth.
29
34
30
-
###Storage recommendations
35
+
## Storage recommendations
31
36
32
37
Azure offers multiple storage options that can be used for MISX app attach. We recommend using Azure Files or Azure NetApp Files as those options offer the best value between cost and management overhead. The article [Storage options for FSLogix profile containers in Azure Virtual Desktop](store-fslogix-profile.md) compares the different managed storage solutions Azure offers in the context of Azure Virtual Desktop.
33
38
34
-
###Optimize MSIX app attach performance
39
+
## Optimize MSIX app attach performance
35
40
36
41
Here are some other things we recommend you do to optimize MSIX app attach performance:
37
42
@@ -45,15 +50,15 @@ Here are some other things we recommend you do to optimize MSIX app attach perfo
- Separate the storage fabric for MSIX app attach from FSLogix profile containers.
53
+
- Separate the storage fabrics for MSIX app attach from FSLogix profile containers.
49
54
- All VM system accounts and user accounts must have read-only permissions to access the file share.
50
55
- Any disaster recovery plans for Azure Virtual Desktop must include replicating the MSIX app attach file share in your secondary failover location. To learn more about disaster recovery, see [Set up a business continuity and disaster recovery plan](disaster-recovery.md). You'll also need to ensure your file share path is accessible in the secondary location. You can use [Distributed File System (DFS) Namespaces](/windows-server/storage/dfs-namespaces/dfs-overview) to provide a single share name across different file shares.
51
56
52
-
## How to set up the file share
57
+
## File share creation
53
58
54
59
The setup process for MSIX app attach file share is largely the same as [the setup process for FSLogix profile file shares](create-host-pools-user-profile.md). However, you'll need to assign users different permissions. MSIX app attach requires read-only permissions to access the file share.
55
60
56
-
If you're storing your MSIX applications in Azure Files, then for your session hosts, you'll need to assign all session hosts VMs both storage account role-based access control (RBAC) and file share New Technology File System (NTFS) permissions on the share.
61
+
If you're storing your MSIX applications in Azure Files, then for your session hosts, you'll need to assign all session hosts VMs both storage account role-based access permissions and file share New Technology File System (NTFS) permissions on the share.
@@ -83,9 +88,7 @@ To assign session hosts VMs permissions for the storage account and file share:
83
88
84
89
10. Set up NTFS permissions for the user accounts. You'll need an organizational unit (OU) sourced from the AD DS that the accounts in the VM belong to.
85
90
86
-
Once you've assigned the identity to your storage, follow the instructions in the articles in [Next steps](#next-steps) to grant other required permissions to the identity you've assigned to the VMs.
87
-
88
-
You'll also need to make sure your session hosts VMs have **Modify** NTFS permissions. You must have an OU container that's sourced from Active Directory Domain Services (AD DS), and your users must be members of that OU to use these permissions.
91
+
Ensure your session hosts VMs have **Modify** NTFS permissions. You must have an OU container that's sourced from Active Directory Domain Services (AD DS), and your users must be members of that OU to use these permissions.
0 commit comments