My blog about Azure and the Hybrid Cloud
Hi There, Welcome to the 2nd part of my 2 serie blogpost about AVD on confidential virtual machines. In the first part I showed how to create the key vault, keyvault key and disk encryption set. You can check it here. In this part I’ll focus on the deployment of a session host with Terraform.…
Hello everybody, Welcome to another blogpost about Azure Virtual Desktop. In this blog post I’m going to talk about security. One of the first things to do when you create a new subscription for AVD is to enable the Defender for Cloud plans. Defender for Cloud is a cloud-native application protection platform (CNAPP) that will…
Hello, I’m back with another blogpost about Azure Virtual Desktop and Terraform. Since security is very important, I’m going to focus on that topic in this post. A very easy way to add more security to your AVD environment is to enable MFA for the users. Using MFA we can ensure that the users need…
Hi everyone, Welcome to another deploying Azure resources with Terraform blogpost. As you all know the support for Server 2012 and Server 2012 R2 is stopping. Because of this a lot of companies need to deploy new domain controllers. In this blogpost I’ll show you the deployment of 2 domain controllers in West Europe with…
Hi All, Welcome to my next blog blog post about Nerdio and Azure. When you are working in Azure a very important item is naming convention. Your company might have a strict policy of how all the resources should be named. To learn more about naming convention and see what Microsoft recommends, check out this…
In my last couple of blog posts about deploying an AVD host pool and session hosts I always deploy all the resources in one deployment. Till now Terraform couldn’t load the host pool in your main.tf file other then with an import command. Recently I got a question from a community member if I had…
The last couple of years we had to rely on ADDS or AADDS for the FSLogix permissions. Last year Microsoft introduced a new way of authenticating. Azure AD Kerberos was introduced last year as a third option. This is a a great solution for customers who want to go cloud only. If you want to…
By default Azure virtual machine have outbound internet access. You might have the requirement of having a public ip on your resource for outbound connectivity. To avoid having to assign public ip’s on virtual machines, you can choose to use an Azure NAT gateway. If you enable NAT gateway all the devices in the subnet…
So you have an Azure Virtual Desktop environment and you need to check something on a session host. These machines don’t have a public ip address so you need a way of connecting to it on the private ip address. You can use Azure Bastion and connect through the Azure portal or with the native…
This week Tom Hickling shared the news that the host pool deployment now supports availability zones during the AVD deployment. this new feature will speed up the process of deploying your session hosts in for example the 3 availability zones of West Europe. For the people who want to read the official announcement click here.…