Azure Virtual Desktop
Deep Dive 2026

AIB Pipeline — Key Steps

AIB Template (Bicep Snippet)

# Azure Image Builder — key config sections
# Full template: learn.microsoft.com/azure/virtual-machines/linux/image-builder

resource imageTemplate 'Microsoft.VirtualMachineImages/imageTemplates@2022-02-14' = {
  name: 'avd-win11-m365-$(date)'
  properties: {
    source: {
      type: 'PlatformImage'
      publisher: 'MicrosoftWindowsDesktop'
      offer: 'windows-11'
      sku: 'win11-24h2-avd-m365'
      version: 'latest'
    }
    customize: [
      {
        type: 'PowerShell'
        name: 'InstallFSLogix'
        scriptUri: 'https://stg.blob.core.windows.net/scripts/Install-FSLogix.ps1'
      }
      {
        type: 'WindowsUpdate'
        searchCriteria: 'IsInstalled=0'
        filters: ['exclude:$_.Title -like "*Preview*"']
      }
      {
        type: 'PowerShell'
        name: 'AVD-Optimize'
        inline: ['C:\\AVDImage\\Virtual-Desktop-Optimization-Tool\\Win11_VirtualDesktop_Optimize.ps1 -Optimizations All']
      }
    ]
    distribute: [{
      type: 'SharedImage'
      galleryImageId: acg.id
      runOutputName: 'avd-image-$(date)'
    }]
  }
}

Azure Files Premium — Setup

# 1. Create Storage Account (FileStorage tier):
az storage account create \
  --name stfslogixprod \
  --resource-group rg-avd-prod \
  --sku Premium_LRS \
  --kind FileStorage \
  --https-only true \
  --allow-shared-key-access true

# 2. Create file share (min 1 TiB for 100k IOPS):
az storage share-rm create \
  --storage-account stfslogixprod \
  --name profiles \
  --quota 1024  # 1 TiB = 100k IOPS

# 3. Private Endpoint (REQUIRED):
az network private-endpoint create \
  --name pe-fslogix \
  --resource-group rg-avd-prod \
  --vnet-name vnet-avd \
  --subnet subnet-pe \
  --private-connection-resource-id [storage-id] \
  --group-id file

# 4. RBAC for Session Hosts (Entra ID join):
# Assign: Storage File Data SMB Share Contributor
# To: Session host VMs managed identity

FSLogix GPO / Registry for AVD

# FSLogix settings for AVD Multi-Session
# Deploy via Intune Configuration Profile or GPO

# HKLM\SOFTWARE\FSLogix\Profiles
Enabled                       = 1
VHDLocations                  = \\stfslogixprod.file.core.windows.net\profiles
# OR for Cloud Cache (HA/DR):
CCDLocations                  = type=smb,name="EastUS",connectionString=\\stor1.file.core.windows.net\profiles;type=smb,name="WestUS",connectionString=\\stor2.file.core.windows.net\profiles-dr

VolumeType                    = VHDX
SizeInMBs                     = 30720   # 30 GB
DeleteLocalProfileWhenVHDShouldApply = 1
FlipFlopProfileDirectoryName  = 1
PreventLoginWithTempProfile   = 1
PreventLoginWithFailure       = 1
ClearCacheOnLogoff            = 1       # Cloud Cache only

# Entra ID join RBAC (instead of AD perms):
# Storage File Data SMB Share Contributor = session hosts
# Storage File Data SMB Share Elevated Contributor = admins

MSIX App Attach — How It Works

• 1.Package application as MSIX (using MSIX Packaging Tool)
• 2.Expand into VHD/VHDX container using msixmgr.exe
• 3.Upload to Azure Files share (same as FSLogix or dedicated share)
• 4.Register in AVD portal: App Packages → Add Package
• 5.Assign to Application Group and App Group users
• 6.At logon: VHD mounted, app registered in session, visible in Start Menu

MSIX Packaging Command Reference

# Convert MSIX to VHD container:
msixmgr.exe -Unpack `
  -packagePath "C:\Apps\MyApp.msix" `
  -destination "\\storage\msix\MyApp.vhd" `
  -applyACLs -create -vhdSize 500 `
  -filetype VHD

# Or VHDX (recommended — resizable):
msixmgr.exe -Unpack `
  -packagePath "C:\Apps\MyApp.msix" `
  -destination "\\storage\msix\MyApp.vhdx" `
  -applyACLs -create -vhdSize 500 `
  -filetype VHDX

# Sign MSIX package (Strict Mode requirement):
# Using code signing cert:
SignTool sign /fd SHA256 `
  /a /f "cert.pfx" /p "password" `
  "C:\Apps\MyApp.msix"

# Validate MSIX:
Add-AppxPackage -Path "C:\Apps\MyApp.msix" -Stage

Scaling Plan Configuration

# AVD Scaling Plan — key settings
# Portal: Azure Virtual Desktop > Scaling Plans

# Ramp-up (7-9 AM):
RampUpStartTime         = 07:00
RampUpLoadThreshold     = 60%       # Start new VMs if >60% sessions
RampUpMinimumHosts      = 3         # Always keep 3 hosts on
RampUpCapacityThreshold = 80%       # Max before adding more

# Peak hours (9 AM - 5 PM):
PeakStartTime           = 09:00
PeakLoadThreshold       = 80%       # Trigger point for scale-out
PeakMinimumHosts        = 5         # Minimum during peak

# Ramp-down (5-8 PM):
RampDownStartTime       = 17:00
RampDownForceLogOff     = true      # Send disconnect message
RampDownWaitTime        = 30 min    # Grace before shutdown
RampDownMinimumHosts    = 2         # Keep 2 for late users

# Off-peak (8 PM - 7 AM):
OffPeakMinimumHosts     = 1         # Keep 1 for emergencies
OffPeakLoadThreshold    = 90%

Scaling Best Practices

• ▸DepthFirst + Autoscale — maximizes cost savings. Packs users on fewer hosts → shuts down empty ones.
• ▸Start VM On Connect — enable for personal host pools. VM starts when user connects (vs pre-warming).
• ▸Drain mode — use instead of forced logoff. Users keep sessions, no new ones allowed on draining host.
• ▸Reserved Instances — buy 1-year RI for base capacity. Spot/On-demand for burst. 60–70% cost reduction.
• ▸Custom schedule — align ramp-up to your org's timezone. Don't pre-warm 2 hours early.
• !Watch FSLogix detach — ensure profile properly unmounts before VM shuts down. Set ClearCacheOnLogoff=1.