Dino9021: Azure WVD 攻略筆記

2020-12-22

只是重要設定備忘筆記，尚未分類整理

如果要禁止 USB 裝置

Computer Configuration / Policies / Administrative Templates

System/Device Installation/Device Installation Restrictions

[Prevent installation of devices not described by other policy settings]

=> Enabled

必須要搭配以下設定，否則 Fslogix 無法將 User Profile Disk Mount 上

[Allow installation of devices that match any of these Device IDs]

=> STORAGE\Volume

[Allow installation of devices using drivers that match these device setup classes]

=> {4d36e967-e325-11ce-bfc1-08002be10318}

[Important]

Computer Configuration / Policies / Administrative Templates

System/Device Redirection/Device Redirection Restrictions

[Prevent redirection of USB devices]

=> Not Configured or Disable

FsLogix 要用 admx 設定

DeleteLocalProfileWhenVHDShouldApply REG_DWORD 1

Enabled REG_DWORD 1

FlipFlopProfileDirectoryName REG_DWORD 0

IsDynamic REG_DWORD 1

KeepLocalDir REG_DWORD 0

PreventLoginWithFailure REG_DWORD 1

PreventLoginWithTempProfile REG_DWORD 1

VolumeType REG_SZ vhdx

SizeInMBs REG_DWORD 400

VHDLocations REG_SZ \\ProfileDiskServer\UserProfileDisk$\HostPoolName

WVD Deploy Provision Step dscextension

https://wvdportalstorageblob.blob.core.windows.net/galleryartifacts/Configuration_12-15-2020.zip

https://docs.microsoft.com/zh-tw/azure/virtual-desktop/safe-url-list

Shrink Managed OS Disk

https://jrudlin.github.io/2019-08-27-shrink-azure-vm-osdisk/

Dino9021