Design and Deploy Microsoft Azure Virtual Desktop: An Essential Guide for Architects and Administrators

✍ Scribed by Puthiyavan Udayakumar

• Publisher: Apress
• Year: 2021
• Tongue: English
• Leaves: 401
• Edition: 1
• Category: Library

✦ Synopsis

Design and build the new desktop service from Microsoft. This book offers a modern framework, design methodology, and best practices of design and deployment for virtual apps and desktops.

Microsoft Azure Virtual Desktop (AVD) is a Desktop as a Service (DaaS) which is simple to deploy, accessible from any device, easy to manage, and secure. The book starts with AVD essentials and its critical features, followed by the planning and method of preparing for AVD. You will go through defining the requirements and assessing by setting the AVD application baseline, network requirements, and security requirements. Next, you will learn how to design and deploy the core infrastructure of Microsoft AVD to understand its Access Layer, Control Layer, Resource Layer, Hosting Layer, and User Layer. You will also learn how to design the desktop and Host Pool of AVD. And you will learn the modern way to manage and secure AVD components.

After reading this book, you will have the right blend of knowledge and skills to set up and run the Azure cloud-based virtual desktop and virtual applications.

What You Will Learn

• Understand the key design and deployment essentials of AVD
• Plan, gather requirements, and assess for AVD
• Design and deploy Core Infrastructure of Microsoft AVD
• Integrate with profile and personalization management
• Monitor and secure Azure virtual desktops

Who Is This Book For:

AVD system administrators and AVD system architects

✦ Table of Contents

Table of Contents
About the Author
About the Technical Reviewer
Acknowledgments
Introduction
Chapter 1: Microsoft AVD Essentials
Introduction to Cloud Computing and Microsoft Azure
Top Five Benefits of Cloud Computing
Three Delivery Models of Cloud Computing
Microsoft Azure Overview
Azure Region
Azure Geography
Azure Availability Zones
Azure Resource Group
Azure Subscriptions
Management Groups
Azure Resource Manager
Azure Management Offerings
Azure Security and Compliance Offerings
Getting Started with DaaS
What Are Traditional Workplace Challenges and DaaS Value Proposition?
How Does DaaS Work?
Benefits of DaaS
Access DaaS from Any Device
Delivers a Great User Experience
Centralized and Uncomplicated Application Delivery
Enhanced Security and Compliance
Usage-Based Billing on a Subscription Model
Key AVD Terminologies
AVD
AAD
AVD Session Host
AVD Host Pool
AVD Remote Applications
AVD Remote Applications and Desktop Groups
AVD Workspace
MSIX
FSLogix
AppLocker
Foundation for Microsoft AVD
Authentication and Authorization Block
Control Block
Resource Block
Profile Management Block
Security Block
Summary
Chapter 2: Planning and Preparing for AVD
Planning DaaS
Preparing AVD
Azure AD
Azure Tenant
Azure Virtual Network
Azure Storage
Azure Observability
Azure Security and Compliance
AVD Licenses
Design Methodology for AVD
An Agile Approach Design and Deploy Solutions for AVD
Hurdles and Impediments Encountered by On-Prem Virtual Desktop Infrastructure
Architecture of AVD
Reference AVD Use Case
Reference AVD Success Criteria
Reference AVD Logical Architecture
Summary
Chapter 3: Defining AVD Requirements and Assessment
Defining AVD Requirements
Business Requirements
What Is the Problem?
What Is the High-Level Approach?
What Is the Solution Purpose?
Who Is the Primary Persona?
Who Is the Secondary Persona?
Define Goals
Define Success Criteria
Define the Fundamental Value Proposition
Define the Solution Overview
Timeline/Release Planning
Question and Iteration
Summary of Company XYZ Business Requirements
Technical Requirements
Functional Requirements
Nonfunctional Requirements
Performing Assessment
Business Viewpoints
Technical Viewpoints
AVD Users
AVD Apps
AVD Data
AVD IaaS
AVD Security
AVD Management
Designing AVD
Conceptual Architecture of AVD
Azure AVD Stack
Network Connectivity
Use Case
Internal Users Access
External Users Access
Network Workflow
AVD End Users
Summary
Chapter 4: Designing and Deploying AVD Solution
Design and Deploy AVD Solution
Essential Design Characteristics for Deploying AVD Hosting Layer
Design Pattern for Implementing AVD Solution with Reliability
Design of AVD layer
Building Block 1: Design of Access Layer
Securing and Monitoring the Access Layer
Building Block 2: Design of Control layer
Management and Monitoring the Control Layer
Microsoft Azure AD Services
Microsoft Domain Controller
Domain Controller Deployed in VM Running in Azure Cloud
Domain Controller as a Service Which Is Azure AD Domain
An Existing On-Premises DC with a Site-to-Site VPN or Express Route from On-Premises to the Azure vNET
Design Consideration for Azure AD
Key Design Consideration
Key Design Consideration
Microsoft AVD Resources Licensing
Microsoft AVD Infrastructure Pricing
Microsoft AVD Monitoring Services
Key Design Consideration
Microsoft Azure Sentinel for AVD
Key Design Considerations
Microsoft AVD Monitoring Services via Third-Party Solution
Building Block 3: Design of
Host Pool Type
Type 1: Pooled host pool
Type 2: Personal host pool
Automatic and Direct
AVD Image Management
Image Management Release Process
Golden Image Update Process
AVD Application Management
AVD Profile Management
Profile Container
Key Design Consideration of Resource Layer
Building Block 4: Design of Hosting layer
Building Block 5: Design of User Layer
Summary
Chapter 5: Managing and Securing AVD Solution
Managing AVD Solution
Key Principles for IaC
Task 1: Create and Publish Applications
Task 2: Set Drain Mode Enable and Disable
Task 3: Create and Publish Desktop
Task 4: Set Up and Configure Workspace
Task 5: Install and Configure AVD Agent
Task 6: Install and Configure FsLogix Client
Task 7: Install and Configure Microsoft 365 Proplus
Task 8: Install and Configure Microsoft Teams
Task 9: Create MSIX Package to the Host Pool
Task 10: Add and Publish MSIX Package to the Host Pool
Securing AVD Solution
Resiliency for AVD Solution
Summary
Index