Image Management | Windows Virtual Desktop - #03
ฝัง
- เผยแพร่เมื่อ 14 ก.ค. 2024
- Start with Image Management for Azure today! How should you prepare a master image for WVD Multi-Session deployments? Images all need a base OS, Applications and Customizations.
Come with us down the rabbit hole and learn how to do this process for a
Windows Virtual Desktop-specific configuration that can be used with your organization's existing processes. Learn how Create & Update your VM Images for Windows Virtual Desktop today and if you want to Master the Azure cloud you can start right now by clicking Subscribe aka.ms/AzureAcademy-Subscribe and the notification bell so you don't miss anything.
00:00 Intro
1:50 Imaging Process
4:00 Azure Snapshots
6:35 App Installs
10:17 WVD Special App Install
12:20 Image Customization
18:00 Roll Back to SnapShot
20:45 Capture Azure VM Image
23:00 Test NEW WVD Image
Install TEAMS for WVD (When it is supported)
docs.microsoft.com/en-us/micr...
Deploy WVD With my ARM Template on GitHub
github.com/DeanCefola/Azure-W...
📲 Follow Azure Academy
►Twitter: / msazureacademy
►LinkedIn: / dean-cefola-2902934b
►Facebook: / azure-academy-87979521...
💰 Support Azure Academy
►Patreon: / azureacademy
📡 Contact Azure Academy
►Email: Dean.Cefola@Microsoft.com
►MAIN Channel: / azureacademy
🤣Playlists
►Azure Governance: aka.ms/AzureAcademy-Governance
►Azure Fundamentals: aka.ms/AzureAcademy-Fundamentals
►Azure Blueprints: aka.ms/AzureAcademy-Blueprints
►Azure AD Series: aka.ms/AzureAcademy-AzureAD
►Azure ARM Templates: aka.ms/AzureAcademy-ARMTemplates
►Azure Automation: aka.ms/AzureAcademy-Automation
►Azure Networking: aka.ms/AzureAcademy-Networking
►Azure Migrations: aka.ms/AzureAcademy-Migrations
►Azure Backup: aka.ms/AzureAcademy-Backups
►Azure New Features: aka.ms/AzureAcademy-NewFeatures
►Windows Virtual Desktop: aka.ms/AzureAcademy-WVD
►Cloud Adoption Framework:aka.ms/AzureAcademy-CAF
#TheAzureAcademy #WindowsVirtualDesktop #CustomImages - วิทยาศาสตร์และเทคโนโลยี
Another awesome video, Dean! Some great points raised about embedding WVD agent and considerations about the use of tokens!
Thanks Dean!
please continue doing this
its so appreciated
Happy to help the community!
Thanks a lot for sharing the knowledge. Appreciate it.
Happy to help!
Awesome session. Provide much details about Image customization Options and WVD
Thanks Afzaal!
Excellent video and well walk through process... Thanks a lot of your efforts and dedication 👍
Thanks Adeel!
Excellent, thank you very much
Thanks for watching! If you liked that…I think you’ll love this one -> th-cam.com/video/QxRb9sV3tHU/w-d-xo.html
Thanks. I got the info what i am looking for. Great video
Glad it was helpful!
Thanks for this. I need to have a go at creating a pool of desktops for DR, so we can access the network from anywhere. I did get a bit lost after the sysprep, but I'm sure I will figure it out.
Just before sysprep take a snapshot
Sysprep with generalize and shutdown
Then in the VM blade you can click capture at the top.
Go through the capture process and save the image in the same region.
Then you are able to deploy the image for your hosts.
Another thing to consider is the new GA service of Azure Image Builder
Which does all this for you…and will replicate the image into multiple regions for DR
WATCH THIS
th-cam.com/video/UEOZsNBjGJc/w-d-xo.html
hats off
Thanks!
Thank, all the steps are pretty cool., however still corporate LOB application still a challenge :)
it can be a challenge for sure. One thing to keep in mind with some application deployment tools is how they evaluate an OS. If they are hard coded to look for a client OS, Windows 10 Multi-Session may have an issue. it depends on the tools you are using but sometimes the tools see Windows 10 Multi-Session as a server SKU...so keep that in mind as well.
Hi Dean, can you please confirm if it's possible to create an image from an existing WVD host? (I know it's best to create an image first and then deploy it as a host).
Is it a case of removing the host from the host pool, doing a snapshot, sysprep it and then capture?
Is there anything that needs to be cleaned up first before doing a sysprep? Would I need to uninstall the WVD Agent and WVD Boot Loader from the VM before the sysprep? Many thanks!
YES and NO
You could take a WVD Host that is working perfectly to start with but I would remove the WVD agents, boot loader and any other installed software first
Then Snapshot the VM
Build a new VM from the snapshot
Sysprep the new VM
Make your image
Then delete the VM
Also, this video could use an update now that the WVD Spring Preview is out. Thanks!
From an imaging perspective, no. Imaging process is exactly the same...deploying them image can be done as a normal Azure VM, WVD Non-ARM or ARM
@@AzureAcademy Can you confirm? Office suite appears to be installed for allusers by default. Relevant regsettings indicate onedrive is configured for allusers already.
If you deploy a Windows image that has Office installed correctly, then it is installed for all users. OneDrive needs some clarification. OneDrive is installed as part of office...however if you did the install of Office yourself, you need to remove OneDrive and install it so it can work in a multi-user environment.
docs.microsoft.com/en-us/azure/virtual-desktop/install-office-on-wvd-master-image#install-onedrive-in-per-machine-mode
Thank you very much for yet another informative video! I do still have question regarding image management, and particularly the way forward after creating a custom image like you did in this video. After a few months there will be application updates and maybe new installs in addition. Are the correct procedure to go back to the last «clean» snapshot and do the while thing again? That is, do the needed changes and create a new snapshot, new disk and so on? What do you do when this process has been done a couple of times? You do know sysprep can only be run three times on the same image, so how do you make this approach sustainable over time?
Once you have a finished image, and it has been tested and verified to be correct I would throw away all old snapshots, VMs and disks.
When you are ready to update the image deploy a new VM from the verified image.
Repeat the process
1. Snapshot
2. add all patches, app updates, configurations and policies.
3. Snapshot
4. Sysprep
5. Create new image
6. Test
Make sense?
@@AzureAcademy Perfect - thank you!
Any time Henrik!
at 8:34 you mention the WVD Agent install. I assume at this point the image has never been domain joined. However, the docs say the VM must be domain bound before installing the WVD Agent (docs.microsoft.com/en-us/azure/virtual-desktop/create-host-pools-powershell). Which is it?
You are putting different processes together. YES the WVD VM needs to be joined to a domain before you can add the agent and make it part of WVD.
NO, when doing imaging, the machine does not need to be joined to a domain...
Also I was pointing out that the WVD agent should NOT be installed in the image...unless you update your images more often then the registration token would expire...In the new portal experience you would not need to add the agent to the image because it is done for you at the time of deployment
Hi Dean, thanks for the great content. When you select "Replace" mode at 15:00, would that not override the "Prevent access to D drive" rule you created under user settings?
it would not...the reason why is because I have this as a local system policy and a group policy...good thinking though! 😎
@@AzureAcademy Ah gotcha, thanks!
😉
When you choosed the original disk size for the backup snapshot, can you choose a less size to create a windows image on 32 GB disk? to save the coast of the 128 GB disk.
When doing the restore you can select the size that you want… The only thing to remember is you cannot have a disk that is smaller than the actual size of the operating system or dated that you are restoring. If there is actually 60 gigs of data you must have a disk that is larger like 64 gigs
Another informative video Dean!
Sometimes I get stuck while creating a new custom image. Post customization (Citrix Optimizer) > sysprep and shutdown, it creates Image using "Capture" but when I try to deploy the new VM from that custom image, it doesn't start after taking too much time, even sometimes deployment gets failed or keeps it running. Am I doing something wrong?
I am not sure about the citrix optimizer...but I believe you are supposed to run that after the VM is deployed, not before the Sysprep
Also verify that when you do sysprep...you run as Admin, and you use the Out of Box experience and you selected Generalize and shutdown. Then after the RDP windows closes do not click the stop button, just click Capture
It should work...unless there is something wrong in the image...which is why I take VM Snapshots before I do the sysprep...in case it goes wrong I can get back to it quickly
Can you share the powershell script to install onedrive the correct way ? This is only needed when you run with fs logix and a shared computer device right ?
As I showed in the video, this is in the Azure Docs - docs.microsoft.com/en-us//azure/virtual-desktop/install-office-on-wvd-master-image#install-onedrive-in-per-machine-mode
Dean, do you know why there is no standard SSD option in the IG, only Standard HDD (too slow) and Premium SSD (too expensive)
For your images I suggest HDD the difference is a few seconds slower in deployment, but much cheaper. I don’t know of any reason why you would “need” premium SSD for images
1. Can you use Windows 10 optimization tools?
2. Can you do Windows update & Cleanup the image after & then shrink the VHDX file?
3. How do you update the Application later or every 2 months?
Yes
Yes to windows update
Not sure what you mean “clean up the image”
Not sure what you mean “shrink the image”
Also moving images to Azure the desk will need to be converted from VHDX to VHD also it will need to be converted from dynamic to fixed size
In a traditional image you would need to deploy the image install your application updates or patches then go through the surface prep and reseal process again
All of this is done for you in as your image builder which you can learn about here - th-cam.com/video/UEOZsNBjGJc/w-d-xo.html
Great video and thanks for sharing it. Is there any recommendation for automating updates on host pool VMs that are using Client OS like Windows 10 Ent Multi-session? Similar to what we do using Azure automation and Update management but it works only for Server OS. It will save a lot of effort of re-creating the image, maintaining it and re-enrolling new VMs to host pools retiring existing ones. Thoughts?
So...I just deployed this, so it does work...for now.
It seems like you can use Azure Automation Update Management with Windows 10 Multi-Session.
This works because the OS registers as a server SKU.
Now I don't think this is going to last, because I know that the next version of Windows 10 should correct this and be seen as a client SKU. 🤔
Aside from that patching can be done with windows update, SCCM, and many other tools.
However, the image work is not that much and it means that your users don't have downtime...so I see that as a better use experience.
life is full of trade-offs
🤷♂️
@@AzureAcademy Sounds good, thanks. About installation of Microsoft monitoring agent - would it still be advisable to do this while preparing the golden image or is it just an essential step for Sepago' solution? Because now you can directly redirect diagnostic logs of ARM objects to a log analytics workspace e.g. host pool, host pool VMs and even Azure monitor can help by getting the host pool VMs registered. So in a nutshell, installing MMA on VM is going to give any additional telemetry information than enabling diagnostic logging?
either way works...if you have some other automation to make this happen, then no need to put it into the image.
One quick question about OneDrive, I thought the WVD Windows 10 multisession with Office 365 proplus in the marketplace is already "optimized" for WVD. If so, then why do we need to reinstall OneDrive in per machine mode? Thanks for the videos.
It is installed for machines in the multi-session image. I was showing how to properly install it for a multi-user environment, since this video was focused on how to make an image for WVD, and I have no way of knowing what image people are starting from....but good observation.
+Cookiekaikai I was giving an example of how to install OneDrive per machine since this was a new concept.
Plz reply -- present, we have a VM with important data and configuration on our POC tenant... We want this VM to move into a different Tenant and subscription.. is it possible?
Yes, you can move a VM and almost any other resource into another Subscription.
It depends on IF the Azure Subscriptions are all linked under the same Azure AD Tenant.
If so you can do this right in the Azure Portal.
If they are not, you can still do it, but you would need to export the disk from Azure and download it to the other Subscription
Hi Dean thank you for this awesome video! I have a question of course :) so currently we can’t install teams apps on the desktop host? Let say if we need this to share the desktop with 15 users let say. Thanks again!
Teams is not officially supported in WVD...yet.
You can certainly install it in the image and you can use it, but if you have issues when using it there would not be support...stay tuned it is coming.
@@AzureAcademy Thank you Dean! I noticed also when I tried to login from the web browser, it didn't show me the environment, is this not supported also?
When you log in from the web browser to...what exactly? WVD or TEAMS?
@@AzureAcademy sorry... its WVD, so when I tried to login from the web client, it didn't show me the tenant nor the apps.
@@AzureAcademy just got answers from Microsoft support, it seems the link has been changed with rdweb.wvd.microsoft.com/arm/webclient/index.html before it doesn't have arm on the link.
Has anything changed in the last couple years for migrating from VMware Horizon? I've got a bunch of gold images I currently use and I would love to convert them over to AVD, but they are all VMDK files or template files.
You can convert and import your .vmdk files into Azure, then create VMs from them.
learn.microsoft.com/en-us/azure/virtual-machines/windows/prepare-for-upload-vhd-image#convert-from-vmware-vmdk-disk-format
Or you can migrate your VMWare VMs into Azure learn.microsoft.com/en-us/azure/migrate/tutorial-migrate-vmware
I didn't quite get the difference between managed images vs shared image gallery. Also where they are stored?
A managed image is a standalone azure resource.
Shared image gallery makes the image version controlled, retains the version history, created multiple replicas of the image so you can build more VMs.
A managed image is limited to deploying 20 VMs at once. Shared image gallery images can scale up to 200 VMs at once.
Hi Dean, Thanks for your wonderful work. i have few question.. 1) as we are traditional on premises infra service users and new to searching for cloud based WVD solution in Azure, what are prerequisite is required to have WVD? 2) as per architect perspective what is the simple integration to be done to get WVD? 3) License: it is per user license based or per host pool license?
Thank you!
1. Prerequisites are Azure AD, syncing to a domain controller so your VMs can join your domain, Azure virtual network, with DNS configured then you can build WVD
2. Not sure what you are asking about architects perspective?
3. License is per user to access WVD...WVD itself doesn’t have license cost
@@AzureAcademy Hi thanks.. during the WVD deployment everything is getting created but Domain joining is getting failed. this is due to free subscription?
No it is not. Since I don't know your environment...I will put all the reasons so you can figure it out.
1. You don't have a domain controller.
2. Your DNS IP Address is not configured in the VNET to use the domain controller DNS
3. You have a Network Security Group blocking communication to the domain controller
4. There is a firewall blocking communication to the domain controller
5. Your Domain controller is on prem, and you don't have a VPN / ER
6. Your VPN/ER or on prem firewall is not configured to allow the VMs to talk to the DC
Not sure which one fits your case...but this should help you to eliminate some possibilities.
@@AzureAcademy hi dean thanks i got it fixed last week.
There was a issue with my NSG
Awesome!
weird, but when I create a VM in a host pool I do not have an option for Managed image - only Gallery or a Storage Blob...
In the NEW WVD Admin Portal, when you select the image choices...yes there are 2 options
1. Blob
2. Gallery
You need to select gallery...under that is a drop down box to select 1 of 3 images...Under that there is a link to select a different image.
Click the link and at the top select My Images
Now you should see all your stuff.
When I prepare new images and add new languages to OS, I've got problem with execute sysprep command on Win 11 multi-session + M365 base image. How resolve this problem? I need image with diffrent language then english.
You said you’ve got a problem…since you didn’t tell me what the problem is…I can’t tell you how to resolve it…use this page for troubleshooting
learn.microsoft.com/en-us/answers/questions/596112/windows-111-mdt-sysprep-failure-onedrive.html
Hi Dean... If an image was created using a d2sv3 VM...can we create d4sV3 nachines using that image ?
Yes, the only time you can’t use an image on a VM type on another is crossing generations
Gen 1 images don’t work on Gen 2 VM or vice versa
@@AzureAcademy thanks Dean for your response!
Meanwhile can we have more than 400 vms in a hostpool?
Is there a limit?
anytime!
yes, you can have up to 5,000 VMs per region in each subscription.
The 400 VM limit has to do with the number you can build at 1 time.
200 VMs in an Availability Set, 400 VMs without an Availability Set
Can we move/take copy of VM to place in different Azure Tenant
Just to use the correct Terms...
Azure AD Tenant
WVD Tenant
Azure Subscription (this is where the VMs live)
So if you mean can you copy the VM into a different Azure Subscription...yes.
You can move a Disk or an Image to another Subscription you have.
The move depends on if your subscriptions are linked to the same Azure AD Tenant.
If they are all under 1 Azure AD Tenant then you can copy it in the Azure Portal.
If they are not, you can export from the one Azure Subscription to an Azure Storage account and then download them into the other Azure Subscription
@@AzureAcademy Thank you so much,,, that works for me
😉👍
I have a strange problem whereby after sysprep and I create a session host via the image. RDP doesn't work is there a setting in sysprep that removes all users from RDP?
Sysprep is generally done with the "generalize" box checked and the Out of Box experience enabled...which will remove a lot of things from the system and put it in the starting state so it can be deployed and setup for anyone.
Sounds like your users added to the Local RDP group were removed.
From a WVD standpoint...you should not add any users to the local RDP.
The only users who should have direct RDP access are the local admins...and they have access by default.
All other access is through the WVD service...which does all that for you
+Tony Adefuye by default there are no users in the RDP group. In AVD access is granted by putting your users into the application groups
+Tony Adefuye no there isn’t. Sounds like something went wrong in the capture process or in the deployment. In the VM on the left click on RUN COMMAND then reset RDP
Hmmm.. 'But around here we focus on what we can do in Azure so we're gonna rely on the native Azure tooling today...' '...and we'll start off with the Azure Image Builder...' . Feeling like I'm missing something here :-)
I understand what you are saying Steve, let me explain it this way.
Azure image building is a great tool, and before I would do a video on It I would show the “native” tooling in Azure for images and disk management...since Azure Image builder runs on top of that tooling and principals.
Also Image builder is NOT something that runs as a native tool. As I understand it, It is a DevOps pipeline process to build and update images, like packer.
DEVOps is a part of the cloud, but not Azure directly.
If a video on Image Builder is wanted, I can do one.
Dear thank u for a great video.
I have one point need your support to clarify.
When my users login to the host pool(wvd) they are able to shutdown the host , after that no one be able to connect to the pool so I need to connect to the azure and start the vm .
How we can fix this issue by hide shutdown button what is the behavior of the host pool is should be automatically start If there is any request in case the vm is shutdown
Appricate your support
In Azure it is NEVER good to shutdown the VM from inside windows.
This turns the OS off, but leaves the VM allocated...so you are still paying for it.
I am surprised to hear this issue because unless a user is an admin on the host they don't have shutdown abilities.
Here are a few things to look at
If the users are admins on the Session Host
local policy settings or GPO settings that you have on the VMs.
There are GPOs you can put in place to hide the power off features.
In the GPMC go to...
User Configuration > Administrative Templates > Start Menu and Taskbar > Remove and Prevent Access to the shutdown command.
@@AzureAcademy thank u for your answer . Now it is clear for may .
Regards
happy to help
How can you create the custom image using Configuration Manager
Great question Dawn!
In Azure...you can’t use MDT or ConfigMgr directly...Azure doesn’t support PXE boot.
So you can still use it in a few ways.
1. Deploy a VM using ConfigMgr on premise then upload it to Azure for use
2. Deploy an Azure VM, then use GPO to install the ConfigMgr agent and install all the apps from there
If you are going to do this it is recommended to use a cloud DP or setup a DP in Azure
@@AzureAcademy Looks like you first have to create the WIM from Azure's Windows 10 Multi-User and then you can use that WIM in SCCM to build a VHD with task sequence.
www.microcloud.nl/create-a-wim-file-from-the-wvd-vhd-file/
ronnydejong.com/2013/06/28/how-to-create-and-deploy-vhds-with-configuration-manager-2012-r2-preview-sysctr/
yes...IF you are planning to build the image in ConfigMgr...you do need the .wim
1. After creating a image , is there any way to remove the application from the image ?
2. I want add RSAT ad application in Remote App is it possible ? If yes can you please guide me with the steps.
Thanks in advance
yes this is possible...what you need to do is either share the shortcut link like this -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk
or create your own .mmc and save it to a location on the harddrive like this
c:\temp\Console.mmc
then share that to the App group
@@AzureAcademy Thanks for that , i will give it a try today. But about the first question how we can remove the application from created image. suppose if the image is generalized is it possible to remove the app ?
Not sure which app you are talking about? But you can always remove an app or add one then sysprep again
Azure Academy I managed to add active directory app successfully for service desk team Thanks.
I want to remove adobe flash from existing image , so i need to completely start again ?
no...deploy your image onto a VM.
Once the VM boots up, log in and uninstall Adobe Flash.
Then run sysprep again.
Capture the image
now you have a new version of the image.
I have below two questions :
1. Suppose if we enroll the custom image machine to windows defender ATP , machines which will get this image will also get enrolled to ATP ? or do we need to enroll the new WVD again ?
2. What about SCCM client ? If the agent is installed on custom image it will get installed on new wvd's which is created using this image
not sure about ATP, but in my experience ConfigMgr should be installed AFTER the VM is built from the image.
@@AzureAcademy Thanks ConfigMgr is installed.
sounds good
@@AzureAcademy Typically, you can install ConfigMgr to a base image, by doing so, then removing the private SMS keys from the certificate store, and removing the c:\windows\smscfg.ini before you sysprep the image.
(Tho do bear in mind, you then create a maintenance overhead for clearing up ConfigMgr re the "old" VMs in the WVD pool that you destroy and re-provision with a new image/name)
Can you consider community tool WVDAdmin in upcoming videos?
I love the tools that Marcel has come up with to support WVD...especially how it can build WVD on top of VMScaleSets.
I have had a few requests on WVDAdmin and the other partner tools to manage WVD.
I have held off because the new WVD Portal that was shown publicly in November should be released sometime soon I don’t want to promote one tool then another, then another...I think it would cause confusion.
But thanks for the recommendation
Wouldn’t it be a conflict if policies are being managed through local and AD
Conflict in what way? Do you mean conflict with local policy that is set in the image??? YES it could, but your approach should be to use the same policy settings. This builds a VM that is 100% compliant without having to wait for GPO
@@AzureAcademy Thanks for clarifying sir,I am planning to do Az140 and your videos will be very helpful thanks for sharing your knowledge with us.
Awesome! Please share the AZ-140 series with friends and on social media as well!
I dont see the bell for notifications
Right next to the subscribe button
Your videos would be perfect, if it wasn't for the nails-on-chalkboard music that loops in the background. It's not needed!
Thanks for the feedback...
Are you saying that you want NO background music at all...or just want different music?