@@AzureAcademy One thing that causing us pain currently is applying ASG to new VM in hostpool, It would be nice to be able to add/set default ASGs to all member in the hostpool so that all vm in that hostpool will pick that up either at the point of scalling, or new additional vm.
Oh so many good things here! So excited for this!!! The various customizations starting at 6:00 seem like they're local machine policy settings instead of relying on Active Directory Group Policies, is that correct?
I don’t understand why I can’t use custom image templates. When I get to step 3, Distribution targets, I fill out everything under Azure Compute Gallery. But when I click Next the 3 turns to a ❌. :( thoughts?
I can’t say exactly…but my guess is either The gallery is in a different region Or the definition you created is a different OS or security type or generation
This is a great feature - i tested this and came up with interesting results. I tried using the windows update option to update an image from my azure compute Gallery and found when it tried to create a machine to build the template it failed with this error "The provided gallery image only supports creation of VMs with 'TrustedLaunch' security type" I set the build machine to a std B2s which supports G2 machines but no luck. So did some research and apparently "a trusted launch VM can only be created from vanilla Microsoft Marketplace images. Deployment from a custom image is not working and is not supported" I have set my definition in the gallery to trusted launch so i am going to create a new def with this not set to see if that allows this to work. Has anybody else come across this in their settings?
Hey Guys! Just checking any updates to this? Just started a new AVD migration and building the image was great using this but would love to see this get better. Dean in order to update the original image do you just start build again and then save the image as version 1.1 or whichever version system you choose to use back the the Azure Compute Gallery?
Superman is back in the Gotham to help Batman with AVD Templates😁, but Walter#thevillan 😂works on a plan to blow up the regional Data Center.... and btw it is all in #preview and coming to Theater close to you 🔜🤩😁🥳
Every product has some features that are the big selling point…I’m hoping this one and the one to come soon will close one of those feature advantages.
If we have Intune handling VM management, including removing cruft and pushing out customizations, does this feature include anything that Intune wouldn't?
yes...about a million things for POOLED VMs. Pooled VMs should be disposable...when you need to patch...build new VMs. Throw old VMs away. Intune cannot image AVD VMs. all the built in AVD customizations in the process are such time savers that this process is worth it for that alone. Apps and configs installed in the image save time. if apps aren't in the image, the VM is built, but needs to be quarantined from users logging onto it because all apps are configs are not done yet. the VM needs to be QA'd after you hope all apps and configs are applied to VM before you make the VM available to users. App installation into the image just requires the apps install to be scripted...Intune requires repackaging into .intunewin format I could go on...but you get the point. Personal VMs...you can make a case that Intune is a better way to manage the VMs...because they are like someones laptop.
thanks for this video, I am facing issue while select the own staging RG. we have gave the contributor rights to them as well. please advise. (Not authorized to access the resource) "Contributor AVD-Staging Resource Group AVD-deployment-MI None"
You are welcome ☺️ sometimes after changing the permissions on a managed ID it can take several minutes before they take effect If you look at the permissions currently assigned to the managed ID does it have everything you expected…and it still isn’t working?
You can just check the boxes for the features you want to optimize, but YES, this script will run the optimization with the default settings raw.githubusercontent.com/danielsollondon/azvmimagebuilder/master/solutions/14_Building_Images_WVD/1_Optimize_OS_for_WVD.ps1
Hi Dean nice video. Do you know if the team have any plans to include Intune in this image build process. For an example, to manage our Multi session image the same way as an Normal endpoint? Some of the Customers put a lot of men power to package up their software in to Intune, so why not using it.
Hu Dean, Great video as always. Is there a reason when I'm done creating my image that my VM are at the initial set up of Windows ? Like selecting a language?
They are SysPrep in the imaging and capture process so when you first deploy them you need to complete the OOBE (Out Of Box Experience). You can provide a .xml file to answer all the OOBE questions and get right to windows
The feature is still in the oven cooking…needs a bit more time. I will have a video on it as soon as it is public…so subscribe and hit the bell so you don’t miss it 🥺☺️
Your VM selected is configured with unsupported trusted launch or confidential VM. - It does not work with Generation 2 VM with Trusted launch enabled settings ?
Gen 2 is supported from what I see and read, but your VM Generation and Image Definition need to be on the same VM Generation for it to work. You can't use a Gen 1 Definition with a Gen 2 VM. This doc also shows that Confidential and Trusted Launch ARE supported with Azure Image Builder and Custom Image Templates...IF the Source image you are using is supported. learn.microsoft.com/en-us/azure/virtual-machines/image-builder-overview?tabs=azure-powershell#confidential-vm-and-trusted-launch-support
Thank you for the explanation, here are the links for the previous videos: th-cam.com/video/QxRb9sV3tHU/w-d-xo.html th-cam.com/video/oXGmfog8Cao/w-d-xo.html th-cam.com/video/UEOZsNBjGJc/w-d-xo.html it's a granchild of symantec ghost suite ;)
What is the issues with Storage Sense and OneDrive? Curious as I am looking at some Storage Sense policy settings for the users Downloads folder along with 30 day recycle bin purge
Very awesome tutorial! I am very much still playing around and testing but am diving into the deep end! :) I got this error when deploying the template: "PrivateLinkService Network Policy is not disabled for the given subnet. Please disable the Private Service Policy on the subnet." This is an existing VNET currently running my VMware Horizon environment (I'm thinkin of moving to AVD). I was playing here because it's already setup and and easy. I don't know what the PLS is or what it does. is it dangerous to turn off? OR should I just build out a new VNET?
I don’t think Azure Image Builder supports private link. Private link is a service in Azure that allows you to have a dedicated IP on your VNET so you can write local rules for it. The other one is at the vnets subnet level and that is a service endpoint Which allows you to dedicate a subnet for a service link storage or Azure SQL I do t think AIB supports this either I’d Let the service create the vnet for you
@@AzureAcademy Just tested ! very easy to use. All working good except maybe the VM clock and the country is still in USA I have almost finished my blog article !
Thanks for your feedback! I add these effects to keep things moving and engaging because tech videos can be very dry…but it is a always good to keep improving the balance, thanks again
I have a green screen that I stand in front of then use Adobe Premiere Pro to edit the video, remove the green and place myself inside the computer...some of the animations are done with Adobe After Effects and the thumbnails are created in Photoshop
This is really great!! I am sure everyone were waiting for this since a long time. I have one question though: if you enable windows update while building the image it's going to update the latest patches on the images during the run but I am not sure what benefit we will get for the next month. I believe for the next month anyhow we need to run this entire process to create a new version of the image referencing the existing image and while doing that we will select the windows update anyway.
that IS what having windows update selected and letting it run month after month. It will ingest all the latest patches on top of the existing image and create a new version.
@Azure Academy you mean selecting that will create new versions automatically?? Or you need to do it again next month while the setting is already in place?
@@AzureAcademy Do we have an "official" ETA on when the automagic Host Pool update bit will be available? That to me is one of the biggest challenges (besides image creation/updating that is) in adopting AVD vs say Citrix or View (or using Nerdio).
Dean this is amazing!!! We just went through and built all this with ImageBuilder using Pipelines. This is a game changer. Cant wait for the Host pool update option!!!!
Dean quick question? We tried to use an image from SIG that we did with AIB and pipeline and it immediately failed trying to update it with this method. My theory was that the C:\buildartifacts dir had previous things in it preventing it. Does this I assume use that same dir behind the scenes? Being that its just AIB doing the work?
@@AzureAcademy So its just immediatelay failing. THe Temp IT_ isnt even creating. I am watching this again just to confirm but it worked beautifully with a new image from marketplace but for some reason if I use a SIG image to try and modify it immediately fail and the guidance for the error Validation failed: 'ImageTemplate.properties': Field 'source.type' has a bad value:
Oh…then your problem should be that you didn’t set up the managed ID or give it proper permissions. I cover that here th-cam.com/video/oXGmfog8Cao/w-d-xo.html
@@AzureAcademy i definitely watched that one and i’ll do it again. The MI is setup and works but your probably right. Most of your common issues i have run into each and every one of them so the videos are a great help
@@AzureAcademy I sent it to a few of my guys too - right now our process is manual and takes us a solid three hours from making a template change to having it be deployable.
This is great, no more packer pipeline to build custom images
Yeah! Let me know how you like using it and any improvements you can think of
@@AzureAcademy One thing that causing us pain currently is applying ASG to new VM in hostpool, It would be nice to be able to add/set default ASGs to all member in the hostpool so that all vm in that hostpool will pick that up either at the point of scalling, or new additional vm.
Agreed, I will submit this to the PG as a feature improvement, thanks!
appreciate all of your efforts!! thanks for presenting this information in a format that's easy to digest!!
Thanks for watching Andrew!
Oh so many good things here!
So excited for this!!!
The various customizations starting at 6:00 seem like they're local machine policy settings instead of relying on Active Directory Group Policies, is that correct?
You can check all the details what each customization is doing by looking at each URL.
I don’t understand why I can’t use custom image templates. When I get to step 3, Distribution targets, I fill out everything under Azure Compute Gallery. But when I click Next the 3 turns to a ❌. :( thoughts?
I can’t say exactly…but my guess is either
The gallery is in a different region
Or the definition you created is a different OS or security type or generation
This is a great feature - i tested this and came up with interesting results. I tried using the windows update option to update an image from my azure compute Gallery and found when it tried to create a machine to build the template it failed with this error "The provided gallery image only supports creation of VMs with 'TrustedLaunch' security type" I set the build machine to a std B2s which supports G2 machines but no luck. So did some research and apparently "a trusted launch VM can only be created from vanilla Microsoft Marketplace images. Deployment from a custom image is not working and is not supported" I have set my definition in the gallery to trusted launch so i am going to create a new def with this not set to see if that allows this to work. Has anybody else come across this in their settings?
You are correct, You can build a trusted launch vm unless the image definition was created with the trusted launch options.
This is awesome! Been waiting for this support for a whille. Using AIB manually can be a pain. GUI driven? Yes please!
Enjoy!! O think about anything that makes this a better tool, and let me know
Between James and you the whole team helping me automate our AVD deployment is here! Thanks fellas!
Awesome!
Hey Guys! Just checking any updates to this? Just started a new AVD migration and building the image was great using this but would love to see this get better.
Dean in order to update the original image do you just start build again and then save the image as version 1.1 or whichever version system you choose to use back the the Azure Compute Gallery?
You start a new build then give it your previous template…then make any changes you need to
Superman is back in the Gotham to help Batman with AVD Templates😁, but Walter#thevillan 😂works on a plan to blow up the regional Data Center.... and btw it is all in #preview and coming to Theater close to you 🔜🤩😁🥳
LOL wow what will this “Joker” come up with next! 🤣☺️👍👍
@@AzureAcademy 😹🕹🀄
🥺🤣🥰😏🤔☺️
Amazing. Thanks for sharing
Thanks for watching!
Thanks for the video Dean
happy to help! Please share and help promote this video 🙏
WOW good have in azure portal 😮 Bye bye to azure image builder json template 😅
It’s still good to know the template side and scripting but yeah this will make things easier for everyone
Is there already news from when the feature with the automatic image import will happen?
Very…very soon, I’ll have a video on it the day it is available
Finally almost catching up to Nerdio ;)
Every product has some features that are the big selling point…I’m hoping this one and the one to come soon will close one of those feature advantages.
If we have Intune handling VM management, including removing cruft and pushing out customizations, does this feature include anything that Intune wouldn't?
yes...about a million things for POOLED VMs.
Pooled VMs should be disposable...when you need to patch...build new VMs. Throw old VMs away.
Intune cannot image AVD VMs.
all the built in AVD customizations in the process are such time savers that this process is worth it for that alone.
Apps and configs installed in the image save time.
if apps aren't in the image, the VM is built, but needs to be quarantined from users logging onto it because all apps are configs are not done yet.
the VM needs to be QA'd after you hope all apps and configs are applied to VM before you make the VM available to users.
App installation into the image just requires the apps install to be scripted...Intune requires repackaging into .intunewin format
I could go on...but you get the point.
Personal VMs...you can make a case that Intune is a better way to manage the VMs...because they are like someones laptop.
thanks for this video, I am facing issue while select the own staging RG. we have gave the contributor rights to them as well. please advise. (Not authorized to access the resource) "Contributor AVD-Staging Resource Group AVD-deployment-MI None"
You are welcome ☺️ sometimes after changing the permissions on a managed ID it can take several minutes before they take effect
If you look at the permissions currently assigned to the managed ID does it have everything you expected…and it still isn’t working?
@@AzureAcademy still not working but it can create a new RG but facing an issue while using the existing one.
Sounds like the managed id pensions are not correct
Oh wow! This is one of the greatest features
Thank you for this valuable video team🎉
Thanks Pavan! Please share this video on social media with your followers!
"Windows optimization for AVD" - is there a by chance a pre-built script I can run during my image build for this?
You can just check the boxes for the features you want to optimize, but YES, this script will run the optimization with the default settings
raw.githubusercontent.com/danielsollondon/azvmimagebuilder/master/solutions/14_Building_Images_WVD/1_Optimize_OS_for_WVD.ps1
Excellent tutorial. Very clear and also fun. Keep up the good work! :)
Awesome! Thanks for watching!!!
Hi Dean nice video. Do you know if the team have any plans to include Intune in this image build process. For an example, to manage our Multi session image the same way as an Normal endpoint? Some of the Customers put a lot of men power to package up their software in to Intune, so why not using it.
Intune app deployment happens after the VM is built, so if you use dynamic groups your new VMs will get the Intune apps once they are deployed!
Hu Dean, Great video as always. Is there a reason when I'm done creating my image that my VM are at the initial set up of Windows ? Like selecting a language?
They are SysPrep in the imaging and capture process so when you first deploy them you need to complete the OOBE (Out Of Box Experience). You can provide a .xml file to answer all the OOBE questions and get right to windows
Can you point me to the video that explains automatically updating the Host Pools as described at 7:30?
The feature is still in the oven cooking…needs a bit more time. I will have a video on it as soon as it is public…so subscribe and hit the bell so you don’t miss it 🥺☺️
@@AzureAcademy Already done! Thanks...this sent me down a very large rabbit hole of your videos 😊
Awesome! Stay tuned ☺️
Your VM selected is configured with unsupported trusted launch or confidential VM. - It does not work with Generation 2 VM with Trusted launch enabled settings ?
Gen 2 is supported from what I see and read, but your VM Generation and Image Definition need to be on the same VM Generation for it to work. You can't use a Gen 1 Definition with a Gen 2 VM.
This doc also shows that Confidential and Trusted Launch ARE supported with Azure Image Builder and Custom Image Templates...IF the Source image you are using is supported.
learn.microsoft.com/en-us/azure/virtual-machines/image-builder-overview?tabs=azure-powershell#confidential-vm-and-trusted-launch-support
Thank you for the explanation, here are the links for the previous videos:
th-cam.com/video/QxRb9sV3tHU/w-d-xo.html
th-cam.com/video/oXGmfog8Cao/w-d-xo.html
th-cam.com/video/UEOZsNBjGJc/w-d-xo.html
it's a granchild of symantec ghost suite ;)
Cool thanks
What is the issues with Storage Sense and OneDrive? Curious as I am looking at some Storage Sense policy settings for the users Downloads folder along with 30 day recycle bin purge
OneDrive uses storage sense the way to clean up cold files. Windows multisession does not support storage sense today
Very awesome tutorial! I am very much still playing around and testing but am diving into the deep end! :) I got this error when deploying the template: "PrivateLinkService Network Policy is not disabled for the given subnet. Please disable the Private Service Policy on the subnet." This is an existing VNET currently running my VMware Horizon environment (I'm thinkin of moving to AVD). I was playing here because it's already setup and and easy. I don't know what the PLS is or what it does. is it dangerous to turn off? OR should I just build out a new VNET?
I don’t think Azure Image Builder supports private link. Private link is a service in Azure that allows you to have a dedicated IP on your VNET so you can write local rules for it.
The other one is at the vnets subnet level and that is a service endpoint
Which allows you to dedicate a subnet for a service link storage or Azure SQL
I do t think AIB supports this either
I’d Let the service create the vnet for you
Crazy update ! As you said, expected for years ! Thank you Dean !!
Happy to help! let me know how you like using it and if you have suggestions for improvement
@@AzureAcademy Just tested !
very easy to use.
All working good except maybe the VM clock and the country is still in USA
I have almost finished my blog article !
Awesome! Please drop a link to your blog so everyone can read it!
good content - but at least from my side - "less is more" so many sounds, icons, I don´t need a hollywood like experience for those kind of videos
Thanks for your feedback! I add these effects to keep things moving and engaging because tech videos can be very dry…but it is a always good to keep improving the balance, thanks again
Very nice!!! Thanks for the tutorial. (Subscribed)
Awesome, thank you!
Excellent video for beginning and deep shxt admin in AVD. thx alot.
Thanks for watching!
looking forward to watching the next re. one click update session hosts !!
Me too ☺️
IM very exited about this
Cant wait to try this out.😀😀
awesome, let me know how it goes!
What software is used to create the video with you standing in front?
I have a green screen that I stand in front of then use Adobe Premiere Pro to edit the video, remove the green and place myself inside the computer...some of the animations are done with Adobe After Effects and the thumbnails are created in Photoshop
Awesome added feature and excellent presentation. Thanks.
Thanks!
This is really great!! I am sure everyone were waiting for this since a long time. I have one question though: if you enable windows update while building the image it's going to update the latest patches on the images during the run but I am not sure what benefit we will get for the next month. I believe for the next month anyhow we need to run this entire process to create a new version of the image referencing the existing image and while doing that we will select the windows update anyway.
that IS what having windows update selected and letting it run month after month. It will ingest all the latest patches on top of the existing image and create a new version.
@Azure Academy you mean selecting that will create new versions automatically?? Or you need to do it again next month while the setting is already in place?
Run the build once, get an image version, run it again next month and you get a new image version with all of next months updates in it, make sense
Is there support for building this out using Bicep/ARM to manage via Pipeline?
Image Builder can be done in bicep and all the AVD customization URLs are publicly accessible…so YES!
@@AzureAcademy Do we have an "official" ETA on when the automagic Host Pool update bit will be available? That to me is one of the biggest challenges (besides image creation/updating that is) in adopting AVD vs say Citrix or View (or using Nerdio).
None that I can share publicly…but SOON ☺️ and the team understands your concerns! Stay tuned it won’t be too long
Excellent !! Thanks for keeping it very simple as always.
happy to help!
@@AzureAcademy thank you your the best for helping in windows have a great day
☺️
No problem post more good videos 😁😁 👍👍👍👏👏🙂
Will do! Are there any specific topics you are interested in?
This is amazing 👏, thanks for sharing this and already looking forward to the next part!
Thanks for watching! Yeah, the next part is going to be amazing!
@@AzureAcademy I'm looking for the next part but I can't find it. Is it ready yet?
not yet...soon...I hope 🤞
Excellent Work
Thanks!
Dean this is amazing!!! We just went through and built all this with ImageBuilder using Pipelines. This is a game changer. Cant wait for the Host pool update option!!!!
Dean quick question? We tried to use an image from SIG that we did with AIB and pipeline and it immediately failed trying to update it with this method. My theory was that the C:\buildartifacts dir had previous things in it preventing it. Does this I assume use that same dir behind the scenes? Being that its just AIB doing the work?
It does use the same Directory. Check the AIB storage account for the packer logs to see why it failed
@@AzureAcademy So its just immediatelay failing. THe Temp IT_ isnt even creating. I am watching this again just to confirm but it worked beautifully with a new image from marketplace but for some reason if I use a SIG image to try and modify it immediately fail and the guidance for the error Validation failed: 'ImageTemplate.properties': Field 'source.type' has a bad value:
Oh…then your problem should be that you didn’t set up the managed ID or give it proper permissions. I cover that here th-cam.com/video/oXGmfog8Cao/w-d-xo.html
@@AzureAcademy i definitely watched that one and i’ll do it again. The MI is setup and works but your probably right. Most of your common issues i have run into each and every one of them so the videos are a great help
Awesome
Thanks, let me know what improvements you think it needs!
Ohhhhh..... Excelent!!
Yeah, let me know what you think and what should be improved!
@@AzureAcademy I sent it to a few of my guys too - right now our process is manual and takes us a solid three hours from making a template change to having it be deployable.
Cool, let me know how much time this is saving you