image
FSLogix Storage Permissions
Start course
Difficulty
Intermediate
Duration
37m
Students
338
Ratings
5/5
starstarstarstarstar
Description

Your Storage is your data, so in Azure Virtual Desktop we need to address your storage needs. This comes in a few flavors: FSLogix User Profiles and Office Profiles as well as the Storage solution that they will be mounted from and the disks for your Operating Systems and data drives.  

In this course, we will help you design your Azure Virtual Desktop storage components so you can get the most out of them in your AVD solution but also control cost to make AVD a more cost-effective solution with a dedicated focus on preparing you for the Azure Virtual Desktop Specialty exam.

Learning Objectives

  • Understand Azure Virtual Desktop Storage requirements
  • Recommend an appropriate storage solution 
  • Configure storage for FSLogix components
  • Configure storage solution
  • Configure disks
  • Create and configure file shares
  • Protect your storage using Azure Backup
  • Understand high availability and disaster recovery

Intended Audience

  • Azure administrators with subject matter expertise in planning, delivering, and managing virtual desktop experiences and remote apps, for any device, on Azure
  • Anyone looking to learn more about Azure Virtual Desktop

Prerequisites

To get the most out of this course, you should already have some knowledge of:

  • Azure Storage accounts
  • Storage capacity planning
  • Storage performance 
  • Windows PowerShell
Transcript

Since the FSLogix user profiles are stored centrally on a SMB file share, we need to have the correct user permissions on that share so that users can access their own folders but not anyone else's. Implementing this is slightly different based on which storage solution you're working with. But the same thing may not be said of the windows NTFS file permissions. All users would need to be granted modify permissions at the share level. The creator owner permission would need to be set to modify for subfolders and files only. And optionally, the administrator would have full control over this folder, subfolders and files. This configuration allows users to create their own folders or their profiles on a file share and gives them the modify access over their own folders while not being able to access anyone else's.

About the Author

Dean Cefola is a Principal Azure Engineer at Microsoft and has worked in the IT industry for over 20 years. Dean has been supporting Azure Virtual Desktop from the beginning and is the Microsoft FastTrack Global Leader for AVD.