A blog about End User Computing (EUC)
I was implementing Packer at a client of mine and I stumbled upon a new authentication type for Packer. You can pass the Azure CLI logon to Packer. This has the advantage that you don’t need to manage credentials for your Packer pipeline in Azure DevOps to run on Microsoft Azure. I was skeptical at … Read more
An AVD deployment is often joined to Intune. This results in a compliance state in Intune used in Conditional Access for access to Microsoft 365 applications. We don’t want users logging onto AVD machines that aren’t compliant hence the DrainMode dependent on Compliance. Also, AVD deployments are often Hybrid Entra Joined. That comes with the … Read more
This is a blog post about how to schedule a PowerShell script via Intune. Of course, we would like this to be built-in within Microsoft Intune but we are not there yet. Hopefully, this will be an option in the future. We would like to schedule app installs and scripts via Microsoft Intune directly. We … Read more
This is a quick short blog about these error codes: FSLogix error code 0x0000052E The user profile failed to attach. Please contact supportStatus: 0x0000001B, Message: cannot find the virtual disk at the provided locationReason: 0x00000005, Message: Reason initialized to empty stateError code: 0x0000052E, Message: The user name or password is incorrect. You will see this … Read more
I am currently investigating whether joining AVD only to Entra is an option. One of the subjects is FSLogix on Entra Joined AVD hosts. Using FS Logix on Entra Joined AVD hosts with proper NTFS permissions on the share is possible. You can use this doc from Microsoft Learn to do so: Microsoft Doc It … Read more
This blog post is creating an Azure DevOps library group via Powershell. I like to use the library group feature within Azure DevOps but there is one big downside. The library group doesn’t have version history. When someone in your team makes a change to the library group, the previous version is not available, So, … Read more
New year, new blog! This post is all about how to view API permissions for all Service Principals. It is quite easy to see the permissions for 1 Service Principal but how about all? I created a script that gathers all assigned application permissions and exports them to CSV (or you can use Out-Gridview). A … Read more
This post is about automating the cleanup for Entra Joined Azure Virtual Desktop (AVD) hosts. So, what is the problem? The problem is that when you frequently deploy Entra Joined AVD hosts, they are only Entra Joined, and they already exist Entra/Intune. You get this error when running the bicep template: That error is because … Read more
This post is about performance monitoring Azure Virtual Desktop (AVD) with Azure monitor. This features the CPU, RAM, Disk utilization, and more. The log analytics agent will be deprecated in 2024: You can check out the Microsoft docs here. This post features the manual configuration via the Azure portal and an automated configuration via Bicep … Read more
There is a new feature within Windows Autopatch called Deployment Cadence with scheduled install. I have waited for feature for a long time. I wrote another blog about Windows Autopatch called notes from the field. Read about it here: This blog states that one of the things that I run into with Windows Autopatch that … Read more