just wanted to point out you called the certificate a script. and also the public cert is all that needs to be installed on each WVD VM. not the PFX. it was a great intro. looking forward to seeing the automated demo.
Thanks for catching that David! On your second point I do call out the signing preferences at time 7:30 in the video and that you can choose a cert or .pfx what ever cert is used to sign the packages, the cert / root in that chain needs to be on all session hosts. This can also be pushed through GPO and normally will be if you are using am in house Cert Auth in your AD but thanks for taking the time to call this out and contributing to the community! #HappyLearning
Hello, thanks for the great video. I am getting a null array error when trying to run line 48 at minute 17:11. Are there any assets or configuration items to get this to work? I have tried modifying the line since it does not copy perfectly from the Microsoft site. I just cannot see the entire line in your video to verify that what I have is correct. Thanks in advance.
Hey RollingwithRobby, thanks for the question. Here is the line of code you are looking for: $asTask = ([System.WindowsRuntimeSystemExtensions].GetMethods() | Where { $_.ToString() -eq 'System.Threading.Tasks.Task`1[TResult] AsTask[TResult,TProgress](Windows.Foundation.IAsyncOperationWithProgress`2[TResult,TProgress])'})[0] you can find this and all the other scripts on GitHub here - github.com/Azure/RDS-Templates/tree/master/msix-app-attach This link was in the Azure docs as well 😊 Once you have the correct code...try again and let me know if you still get that error.
Thank you for the step-by-step instructions! Can I use a self-signed certificate? I tried creating one with PowerShell, but confused with the parameters to be used. Do you have a script already?
yes you can use a self signed cert...that is what I used. However it does need to be a code-signing cert for this to work I don't have a script for this
So, to run the 4 scripts, the wvd users need to be an admin? What I noticed is that - a WVD user with no admin rights cannot get through the very fist script (the staging one), will throw an error like "A Required Privilege Is Not Held By The Client " at the drive-mounting part of the script.
Not exactly...mounting a disk is an admin level function. Running PowerShell scripts depends on how you have your PowerShell execution policy and scope set. The reason you should set up the 4 scripts as part of group policy is because you need the stage and de-stage scripts to run as system so the .vhd Files can be mounted and the attach and detach to run as the user.
Brilliant idea : MSIX app attach very brief information is it the same as "AppStack" creation in VMWare Horizon? is "MSIX app attach" supports VMWare Horizon environment? If applicatio having any user data (%appdata%) how to manage it , everything will sit in the VHD drive ?
MSIX App Attach will works on Windows 10 version 2004 or newer. There is nothing specific to WVD or VMWARE to make it work I am not familiar with App Stack so I cannot say
In your video, you created msix vhd file and ran the stage register script in a single VM, how about a hostpool? Do we need to put the vhd and the .msi file in every session hosts and manually run the script one by one? And why you did not run the stage script in a session host from hostpool ?
No...that was just a test...later in the video I show that you put the .vhd onto a file share, this way everyone can access it. More to come on App Attach soon...
Are there any specific requirements/configurations for the machine where you package the MSIX applications? - I've used Liquidware FlexApp and Citrix App Layering tools in the past and they have specific instructions for the packaging machine. Thanks once again.
If you can create an MSIX installer then you can attach it and once it is attached the app functions as normal. App Attach is not like app-v, this isn’t streaming apps or app isolation it is a type of side loaded application...does that help?
MSIX App Attach is an OS based feature and Microsoft is looking at it as the future of application management. This should be incorporated into the next version of Windows that is released in the spring. So if you have the windows insider preview version on your laptop today you could use it
How to we push the updates? get the new msi, package it and create a new vhd and stage and register it? Can we automate the entire process? Is there a way to use Azure Devops to automate the entire pipeline?
you still have to update the applications like any app deployment. The difference is that you update it once and everyone who uses it gets the updates. You can certainly create a pipeline process in Azure DevOps to do this.
You need to join the windows insider preview 2:20 in the video. It is free to join insider.windows.com/en-us/ Then create a vm from that .iso Follow the azure docs to prep the VM Move the VM into Azure or Copy the .vhd to Azure storage and create an Azure image from that Then deploy your VM and you are ready to start using app attach
Mr.Dean, I followed this video and got working first time. However you did promised for a video on the scripts. Did you make one or can you direct me to find these scripts?
The scripts are on the WVD Docs page docs.microsoft.com/en-us/azure/virtual-desktop/app-attach#set-up-simulation-scripts-for-the-msix-app-attach-agent Unless I am misunderstanding your question?
This is a big demand for sure. App Attach requires the next big update to Windows to go public first. There are bits in there that are foundational. Today, MSIX is the foundational technology here, and You can invest in that today. Take all the apps you deliver and convert them to MSIX Then you will be ready to take full advantage of App Attach.
You can do that to deploy .MSIX App packages but you would not deploy APP ATTACH like a traditional application it is simply attached to the VM when needed.
@@roshaantherollercoaster5119 The process is now integrated into the Azure Portal...so I would suggest you look at this video - th-cam.com/video/m0ifZg2WF5Q/w-d-xo.html
That is the ultimate goal for MSIX AppAttach. Today you can implement this through AD Group Policy and use the GPOs with AD Authentication groups. In the future this will be a more native experience as it develops
Hello, I am having issue at the last stage this is the error. "Cannot convert argument "deploymentOptions", with value: "StageInPlace", for "StagePackageAsync" to type "Windows.Management.Deployment.DeploymentOptions": "Cannot convert value "StageInPlace" to type "Windows.Management.Deployment.DeploymentOptions". Error: "Unable to match the identifier name StageInPlace to a valid enumerator name. Specify one of the following enumerator names and try again: None, ForceApplicationShutdown, DevelopmentMode, InstallAllResources, ForceTargetApplicationShutdown, RequiredContentGroupOnly, ForceUpdateFromAnyVersion, RetainFilesOnFailure"" At line:13 char:1 + $asyncOperation = $packageManager.StagePackageAsync($path, $null, "St ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [], MethodException + FullyQualifiedErrorId : MethodArgumentConversionInvalidCastArgumen" CAN YOU GET ME UPDATES ON THIS ? i am running 1909 windows 10 multi-session.
Was the version of Windows downloaded from the insider program? As I understand it, the windows 10 version that is public won’t support MSIX App Attach until about April Please verify that you download the windows image from the insider program.
OK, that is the problem...The Azure images in the Gallery have NOT been updated with the Windows bits needed for App Attach. Those bits are ONLY in the windows insider builds until the next release of Windows...I think it is in April. So you can join the windows insiders for free, download the new bits and contribute to making windows better. insider.windows.com/en-us/insidersigninboth/
Good question, this is not exactly know today since App Attach is still so new. Today it is only through scripts that are run manually or by GPO. We will have to see, but I think the direction the PG is moving is to make app attach part of the WVD agent...stay tuned.
how goes the update process with msix? So for each update, i've to create a new vhd? Since appatach filesystem will be only "read only" as i've saw on the ignite. Can i also link the script with AD Groups? So did i connected our Datadrive access to the groups a.e. Would be great :)
the update process would depend on the app and how it is packaged. once the app is updated into a new version of the .msix then YES you would roll that into the .vhd file you can use AD Groups through Group Policy
@@AzureAcademy Thank you. I understand that it will be easy to manage especially in regards to updates. But personally I think what would be more convenient is to add multiple application in a single MSIX package and then attach it with a single VHD.
@@tahasiddiqui8675 understood...you are not the first to ask this question... in order for that to work you would have to create a very custom appregistration.xml file that would allow all the apps to individually be registered into the users session...doesn't work like that today...but I would put the feedback into the tech community and user voice so the PG hear it from multiple sources.
I have a requirement to install Office 365 Pro Plus in 32bit mode, this is for a legacy Excel Add-in. Is it possible to use the AppAttach solution to do this?
This is a great question Paul. App Attach is still evolving so I can’t say for sure, however I will speculate for a moment. Since App Attach is an extension of MSIX I believe the question should be, is the feature you want supported in a MSIX package. I believe the answer is yes, however I have not done it. Whatever the MSIX package has in it is what App Attach will do.
If you can please share those findings here with the community that would help everyone, and I will raise them with the WVD Product group to help the products get better Thanks!
Hi Dean, I logged into the system with admin and executing the staging and register script and i see the application. Now i have logged off the system and logged back wtih different user and when i search the application, it is not visible. Is this application will appear to the same user in the staging and register script was executed ?
The MSIX apps have 2 parts...mounting the VHD to the VM and registering the apps for the user...the registration happens when the user logs in...this is NOT a 1 time process. It needs to happen in the user session.
not really because each internal CA has unique configurations and policies. So what I would show would not really be applicable in your setup...if you can give me more info I may be able to help
I can’t speak for every application but in general, if you can package it with MSIX then you should be able to use it in App Attach. Try doing a basic package of the IDE then install it on a clean machine...if it works give the app attach a try with it.
You rock Dean! I come here first to learn this stuff.
Thanks for the kind words someguyinnj!
Another great video, Dean. Looking forward to having a play with AppAttach!
Thanks for the feedback Dean!
just wanted to point out you called the certificate a script.
and also the public cert is all that needs to be installed on each WVD VM. not the PFX.
it was a great intro. looking forward to seeing the automated demo.
Thanks for catching that David!
On your second point I do call out the signing preferences at time 7:30 in the video and that you can choose a cert or .pfx
what ever cert is used to sign the packages, the cert / root in that chain needs to be on all session hosts.
This can also be pushed through GPO and normally will be if you are using am in house Cert Auth in your AD
but thanks for taking the time to call this out and contributing to the community!
#HappyLearning
Thanks for the great explanation and demo! Looking forward to test this..
Thanks, let us know how it goes!
Nice video! I hope there will be an agent later with GPO support or something else to manage appattach smooth :)
Thanks David, and YES there will be a MSIX App Attach agent...stay tuned!
Very good instructions and demo
Thanks for the feedback!
Awesome Dean!!
Thanks!! How many apps are you looking to use in App Attach?
+Tony Diaz thanks
+Tony Diaz thanks
Hello, thanks for the great video. I am getting a null array error when trying to run line 48 at minute 17:11. Are there any assets or configuration items to get this to work? I have tried modifying the line since it does not copy perfectly from the Microsoft site. I just cannot see the entire line in your video to verify that what I have is correct. Thanks in advance.
Hey
RollingwithRobby, thanks for the question. Here is the line of code you are looking for:
$asTask = ([System.WindowsRuntimeSystemExtensions].GetMethods() | Where { $_.ToString() -eq 'System.Threading.Tasks.Task`1[TResult] AsTask[TResult,TProgress](Windows.Foundation.IAsyncOperationWithProgress`2[TResult,TProgress])'})[0]
you can find this and all the other scripts on GitHub here - github.com/Azure/RDS-Templates/tree/master/msix-app-attach
This link was in the Azure docs as well 😊
Once you have the correct code...try again and let me know if you still get that error.
Another Great video Dean. Does the product team have this perfected yet.
they are working on it...stay tuned!
Great work. Hopefully on Public it will be a little bit easier
It should be...not long now ☺️
Hi Dean! Thanks for the walkthrough =) any tentative date the windows 10 preview OS will be in full public standard OS gallary?
When the next version of Windows 10 is released publicly...I have no idea...stay tuned!
You are awesome Dean
👍👍 please share The Azure Academy on your social media so others can learn too ☺️
@@AzureAcademy shared to all of my friends, everyone one knows about awesome Azure Academy
Thanks @@VermaThinks thats great!
Thank you for the step-by-step instructions!
Can I use a self-signed certificate? I tried creating one with PowerShell, but confused with the parameters to be used. Do you have a script already?
yes you can use a self signed cert...that is what I used.
However it does need to be a code-signing cert for this to work
I don't have a script for this
So, to run the 4 scripts, the wvd users need to be an admin? What I noticed is that - a WVD user with no admin rights cannot get through the very fist script (the staging one), will throw an error like "A Required Privilege Is Not Held By The Client " at the drive-mounting part of the script.
Not exactly...mounting a disk is an admin level function. Running PowerShell scripts depends on how you have your PowerShell execution policy and scope set.
The reason you should set up the 4 scripts as part of group policy is because you need the stage and de-stage scripts to run as system so the .vhd Files can be mounted and the attach and detach to run as the user.
@@AzureAcademy Got it, thanks a ton Dean.
👍😁👍
Brilliant idea : MSIX app attach
very brief information
is it the same as "AppStack" creation in VMWare Horizon?
is "MSIX app attach" supports VMWare Horizon environment?
If applicatio having any user data (%appdata%) how to manage it , everything will sit in the VHD drive ?
MSIX App Attach will works on Windows 10 version 2004 or newer.
There is nothing specific to WVD or VMWARE to make it work
I am not familiar with App Stack so I cannot say
In your video, you created msix vhd file and ran the stage register script in a single VM, how about a hostpool? Do we need to put the vhd and the .msi file in every session hosts and manually run the script one by one? And why you did not run the stage script in a session host from hostpool ?
No...that was just a test...later in the video I show that you put the .vhd onto a file share, this way everyone can access it.
More to come on App Attach soon...
Are there any specific requirements/configurations for the machine where you package the MSIX applications? - I've used Liquidware FlexApp and Citrix App Layering tools in the past and they have specific instructions for the packaging machine. Thanks once again.
The only requirement at this point is the version of Windows needs to have the bits in it for MSIX
why vhdx is not visible for app after configuring msix appattach
Not sure what you mean…please provide more detail
Can you use app attach for middleware apps like Oracle Client? Do they communicate from all apps(msi, office, etc) or only across app attached apps?
If you can create an MSIX installer then you can attach it and once it is attached the app functions as normal.
App Attach is not like app-v, this isn’t streaming apps or app isolation it is a type of side loaded application...does that help?
Great Video. Is that only possible for Azure Virtual Desktop or also locally on Hyper-V ?
MSIX App Attach is an OS based feature and Microsoft is looking at it as the future of application management.
This should be incorporated into the next version of Windows that is released in the spring.
So if you have the windows insider preview version on your laptop today you could use it
How to we push the updates? get the new msi, package it and create a new vhd and stage and register it? Can we automate the entire process? Is there a way to use Azure Devops to automate the entire pipeline?
you still have to update the applications like any app deployment.
The difference is that you update it once and everyone who uses it gets the updates. You can certainly create a pipeline process in Azure DevOps to do this.
@@AzureAcademy Thank you so much. If possible, please create a video on how to build Devops pipeline to achieve this.
I will look into it...stay tuned.
At 20:20 is this a VM you have setup in a host pool using Windows 10 Insider Preview OS? How does this work?
You need to join the windows insider preview
2:20 in the video.
It is free to join
insider.windows.com/en-us/
Then create a vm from that .iso
Follow the azure docs to prep the VM
Move the VM into Azure or
Copy the .vhd to Azure storage and create an Azure image from that
Then deploy your VM and you are ready to start using app attach
Mr.Dean, I followed this video and got working first time. However you did promised for a video on the scripts. Did you make one or can you direct me to find these scripts?
The scripts are on the WVD Docs page
docs.microsoft.com/en-us/azure/virtual-desktop/app-attach#set-up-simulation-scripts-for-the-msix-app-attach-agent
Unless I am misunderstanding your question?
@@AzureAcademy I see them! Great thanks.
👍👍
So when is MS going to make this the way we install/run all apps on all machines?
This is a big demand for sure.
App Attach requires the next big update to Windows to go public first. There are bits in there that are foundational.
Today, MSIX is the foundational technology here, and You can invest in that today.
Take all the apps you deliver and convert them to MSIX
Then you will be ready to take full advantage of App Attach.
How is mass deployment
Shall we deploy with Intune or SCCM?
You can do that to deploy .MSIX App packages but you would not deploy APP ATTACH like a traditional application
it is simply attached to the VM when needed.
How do you get a pfx file for something like Adobe or chrome?
You need to either get one from your certificate authority, or you can do what I showed…create a self signed cert, and export it as a .pfx
+Carlos Giraldo you can create your own
Great video Dean!! Have the scripts now been replaced by an agent that does the job for us?
Referring to 19:51
Where can I get these scripts from?
@@roshaantherollercoaster5119 The process is now integrated into the Azure Portal...so I would suggest you look at this video - th-cam.com/video/m0ifZg2WF5Q/w-d-xo.html
@@roshaantherollercoaster5119 👍👍
Thank you!
Can we assign the applications based on AD group membership of the user
That is the ultimate goal for MSIX AppAttach. Today you can implement this through AD Group Policy and use the GPOs with AD Authentication groups.
In the future this will be a more native experience as it develops
Hello,
I am having issue at the last stage
this is the error.
"Cannot convert argument "deploymentOptions", with value: "StageInPlace", for "StagePackageAsync" to type "Windows.Management.Deployment.DeploymentOptions": "Cannot convert value
"StageInPlace" to type "Windows.Management.Deployment.DeploymentOptions". Error: "Unable to match the identifier name StageInPlace to a valid enumerator name. Specify one of the following
enumerator names and try again:
None, ForceApplicationShutdown, DevelopmentMode, InstallAllResources, ForceTargetApplicationShutdown, RequiredContentGroupOnly, ForceUpdateFromAnyVersion, RetainFilesOnFailure""
At line:13 char:1
+ $asyncOperation = $packageManager.StagePackageAsync($path, $null, "St ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [], MethodException
+ FullyQualifiedErrorId : MethodArgumentConversionInvalidCastArgumen"
CAN YOU GET ME UPDATES ON THIS ?
i am running 1909 windows 10 multi-session.
Was the version of Windows downloaded from the insider program?
As I understand it, the windows 10 version that is public won’t support MSIX App Attach until about April
Please verify that you download the windows image from the insider program.
@@AzureAcademy Yes i used standard OS from Gallery. what about windows server 2016 ?
OK, that is the problem...The Azure images in the Gallery have NOT been updated with the Windows bits needed for App Attach.
Those bits are ONLY in the windows insider builds until the next release of Windows...I think it is in April.
So you can join the windows insiders for free, download the new bits and contribute to making windows better.
insider.windows.com/en-us/insidersigninboth/
What Azure administrative role is required to administer app attach applications?
Good question, this is not exactly know today since App Attach is still so new. Today it is only through scripts that are run manually or by GPO. We will have to see, but I think the direction the PG is moving is to make app attach part of the WVD agent...stay tuned.
@@AzureAcademy Thanks for the quick reply.
@@eddiejackson4227 That's what we're here for 😊
how goes the update process with msix? So for each update, i've to create a new vhd? Since appatach filesystem will be only "read only" as i've saw on the ignite. Can i also link the script with AD Groups? So did i connected our Datadrive access to the groups a.e. Would be great :)
the update process would depend on the app and how it is packaged.
once the app is updated into a new version of the .msix then YES you would roll that into the .vhd file
you can use AD Groups through Group Policy
What if I want deploy 8 applications? Do I need to make 8 packages with 8 vhds?
yes, each application should be in its own hard drive so they can be managed and updated separately.
@@AzureAcademy Thank you. I understand that it will be easy to manage especially in regards to updates. But personally I think what would be more convenient is to add multiple application in a single MSIX package and then attach it with a single VHD.
@@tahasiddiqui8675 understood...you are not the first to ask this question...
in order for that to work you would have to create a very custom appregistration.xml file that would allow all the apps to individually be registered into the users session...doesn't work like that today...but I would put the feedback into the tech community and user voice so the PG hear it from multiple sources.
@@AzureAcademy Great! Thank you so much.
@@tahasiddiqui8675 👍
I have a requirement to install Office 365 Pro Plus in 32bit mode, this is for a legacy Excel Add-in. Is it possible to use the AppAttach solution to do this?
This is a great question Paul. App Attach is still evolving so I can’t say for sure, however I will speculate for a moment.
Since App Attach is an extension of MSIX I believe the question should be, is the feature you want supported in a MSIX package.
I believe the answer is yes, however I have not done it.
Whatever the MSIX package has in it is what App Attach will do.
@@AzureAcademy Thanks for the feedback. Ok sounds like a challenge. I will give it a try and document my findings.
If you can please share those findings here with the community that would help everyone, and I will raise them with the WVD Product group to help the products get better
Thanks!
Azure Academy will do.
Thanks!
Can you share the PS Command to get the Volume GUID
Disregard
you can see it right here in the video
th-cam.com/video/6kkPLFgPaN8/w-d-xo.html
Hi Dean, I logged into the system with admin and executing the staging and register script and i see the application. Now i have logged off the system and logged back wtih different user and when i search the application, it is not visible. Is this application will appear to the same user in the staging and register script was executed ?
The MSIX apps have 2 parts...mounting the VHD to the VM and registering the apps for the user...the registration happens when the user logs in...this is NOT a 1 time process. It needs to happen in the user session.
@@AzureAcademy can you create a video on creating a coding certificate with internal CA?
not really because each internal CA has unique configurations and policies. So what I would show would not really be applicable in your setup...if you can give me more info I may be able to help
Will this work for Visual Studio IDE for multiple users logging in to Win10 Multi-session VM?
I can’t speak for every application but in general, if you can package it with MSIX then you should be able to use it in App Attach.
Try doing a basic package of the IDE then install it on a clean machine...if it works give the app attach a try with it.
@@AzureAcademy I will try this myself and update this thread.
Thanks!
@@Surindersd57 hello could you successfully finish last Stage ?
@@karenchojan Hi Haven't started yet on it. Planning to start and complete this weekend :)