3 Biggest Mistakes AVD Admins Make (Easy, Simple Fix)

Рет қаралды 17,043

Күн бұрын

Fix 3 Common FSLogix Issues & Improve AVD Performance Security & Save $$$.
🔥AFTER THIS 👉 • The SECRET to FSLogix ... 👈
▬▬▬▬▬▬ C H A P T E R S 📲 ▬▬▬▬▬▬
00:00 FSLogix The Ultimate Guide
00:17 Mistake #1
04:01 Mistake #2
11:23 Mistake #3
15:52 Wrap Up:
▬▬▬▬▬▬ R E S O U R C E S 📡 ▬▬▬▬▬▬
► FSLogix Docs: aka.ms/FSLogix
► When to use Office Profiles: learn.microsoft.com/en-us/fsl...
► Redirections.xml: learn.microsoft.com/en-us/fsl...
► AV Exclusions: learn.microsoft.com/en-us/fsl...
► OneDrive & FSLogix: learn.microsoft.com/en-us/fsl...
► Azure Files Std vs Prem: learn.microsoft.com/en-us/azu...
▬▬▬▬▬▬ S U P P O R T 💰 ▬▬▬▬▬▬
► Become a Learner TODAY: tinyurl.com/AzureAcademy-Subs...
► Twitter: / msazureacademy
► LinkedIn: / dean-cefola-2902934b
#TheAzureAcademy #FSLogix #AzureVirtualDesktop

Пікірлер: 100

@Brad_Myers Жыл бұрын

Wow.. Really good content in this video! Perfectly timely as I was just running into the AD auth settings. Looking forward to the Storage video!

@AzureAcademy Жыл бұрын

Glad you enjoyed it! Storage video should be out in the next week, stay tuned!

@TriumphAventura 7 ай бұрын

This channel became one of my favorites keep the coming Dean!

@AzureAcademy 7 ай бұрын

Awesome, More to come so stay tuned and if you have any suggestions let me know

@kmajors Жыл бұрын

Great content! Very timely as well. Thanks

@AzureAcademy Жыл бұрын

Glad you enjoyed it! Please share with others!

@ilannknochen Жыл бұрын

Great tips Dean!

@AzureAcademy Жыл бұрын

Thanks for watching!

@basharbader1590 Жыл бұрын

Thanks. Very useful presentation

@AzureAcademy Жыл бұрын

Glad it was helpful!

@swissbuechi Жыл бұрын

Very great video!

@AzureAcademy Жыл бұрын

Thanks!

@JakeArnott_ Жыл бұрын

Just as a note for those cost conscious companies - Premium File Shares will charge you based on your provisioned capacity, regardless if you are using the storage. In your example of 3TB, you are paying for 3TB from day 1, even if you have 100 users with 10GB profiles at the start consuming ~1TB. I like to put in storage alerts to expand the provisioned capacity, or leverage Nerdios dynamically scaling storage if it's in-place. Great video! The ODFC was something I thought I knew, but I learnt something for sure.

@AzureAcademy Жыл бұрын

Good point on the cost of premium files. Thanks for watching, and contributing to the comments ☺️

@Joooooooooooosh Жыл бұрын

Keep in mind that the provisioned size of a premium file share directly impacts its performance. So there is a performance benefit to over-provisioning the share.

@AzureAcademy Жыл бұрын

Yes there can be, but if you over provision for performance and try to shrink to save cost…you’re in for a shock. You can decrease the size of the share when ever you want, but the cost only goes DOWN once every 24 hours. 🤕

@ramp79 Жыл бұрын

Great content ❤

@AzureAcademy Жыл бұрын

Thanks Ram!

@Nightnova Жыл бұрын

You have no idea how many of the co-workers I work with and clients I do FSL or FS migrations for don't understand share/ntfs permissions lol. Nice you showed this with authenticated users vs everyone

@AzureAcademy Жыл бұрын

Glad I could help, Please share with your customers and friends! Stay tuned for the FSLogix storage video

@matthewsmith741 5 ай бұрын

Great channel! Any update on the deep dive on storage you mention at 4:20?

@AzureAcademy 5 ай бұрын

Here ya go kzfaq.info/get/bejne/r7Chh62Zl7rLqKM.htmlsi=v1JMaUOQvk1vxrPu

@Thomas-qm2mj Жыл бұрын

Thank you for the video Dean and starting the discussion. Avoiding unnecessary high Azure backup costs can be a good reason to use ODFC so we can separate the Office cache from the User profile containers. Correct?

@AzureAcademy Жыл бұрын

No ODFC is the general best practice in AVD. The cost of Azure Backup can also be limited by not using the ODFC, for the reasons I talked about...AND using redirections to keep the big cache items out of the profile. Most everything else in ODFC is small...try it out and see the difference for yourself!

@sdfsdf2ify Жыл бұрын

I'm sorry, but have you tried the difference between outlook in online mode and offline mode? Thinking it's just as fast running it in online mode in AVD is simply not true. While its definately faster in AVD than on-prem, it's still snail slow compared to a file backed cahed mode outlook. So the whole point about the office container being a mistake, is really not valid, not to mention you don't really mention any benefits to not using it? While having it makes cleaning up and resetting user profile more versatile/faster/better.

@AzureAcademy Жыл бұрын

its not a mistake...but in MOST cases in AVD. it should not be used. This is NOT my opinion...but the product team who invented it...its stated in the docs because most people, most of the time in AVD do not need it, and should not use it. The benefits of NOT using it were talked about several times...did you watch the whole video? I even had a whole section on why you may want to use it! from 02:17 - 03:20

@sdfsdf2ify Жыл бұрын

@@AzureAcademy I guess I'm a bit far, or maybe just don't consider your mistake as a mistake. I couldn't remember you mentioning a single problem with the office container, only facts about why it might not be necessary for everyone. But again if it's not a mistake maybe it shouldn't be listed a mistake #1 🙂

@PeteAUS1983 Жыл бұрын

@@AzureAcademy Yeah I have to agree with Jonas, Just because the developer mentioned it does not make it true in the real world. We tried this is the past and the amount of raised help desk calls around slow Outlook at caused us to roll back. I showed this video to our MS partner; most deployments still use both.

@AzureAcademy Жыл бұрын

The mistake is using it in AVD. The issue is that it takes more management, complexity and cost for no real benefit for most use cases. BUT if you have 1 of the reasons I called out, which are included in the docs, it’s ok to use it. It’s just going to be more work than benefit to most customers

@AzureAcademy Жыл бұрын

It is true that developers do not always align with the real world. But FSLogix has been around a long time, much longer than AVD. So a lot of those partners learned it way back when. So I’m not surprised they still use it. Just saying that in general, for most situations in AVD the ODFC does not bring more benefits, just overhead, complexity and cost. However, like I said in the video, there are a few edge cases that make sense

@lxranes Жыл бұрын

Great vid as usual! I have one question on the exceptions path part. I noticed that in the screenshots you showed the “value” being the path to exclude, while we’ve got the “value name” as the path and the value set to zero? Should we have it reversed where the value is the path and value name is something random? Thanks!

@AzureAcademy Жыл бұрын

What time is that shown in the video?

@user-fo3nk1wy6l 11 ай бұрын

Thank you Dean for providing the valuable info. I have setup the FSLogix with Active directory integration with File Share Azure Storage account. I'm facing the profile size of vhdx size increasing day by day. Kindly advise on fix required.

@AzureAcademy 11 ай бұрын

This is the normal behavior of a dynamic disk no fix required. The vhdx disks grow as the users save data into their profiles.

@xDavidxG Жыл бұрын

Hello Dean, Thank you for this video. Regarding the last part for the Antivirus exclusions, we are already doing this with a third party AV (SentinelOne). I noticed on the screenshare you also added it on the GPO for Defender. Is that only necessary in the instances that you are using Defender Endpoint as the primary AV, or should we make sure to put that in place regardless if there is a third party AV in place ?

@AzureAcademy Жыл бұрын

correct, you only need to add that GPO IF you use defender. But since you are using SentinelOne...just put them in there!

@matthewlevy6759 Жыл бұрын

Just on AV scanning, how do you recommend the profile containers get scanned outside of the real-time logon? So say weekly at the weekend to make sure there are no nasties stored in the user's profile?

@AzureAcademy Жыл бұрын

depends on the AV software you have and if it can scan the file share directly...if it can't, then you need to mount the profile disks to a VM and scan them. if you must go this way...do it during off hours or a maintenance window

@alozborne Жыл бұрын

Good video, thanks Dean! Quick question - with AD Connect, best practices dictate that "on prem" Domain Admins are not synced to Azure AD. So, what's the best practice for administering Azure File shares? We grant the SMB elevated contributor IAM role to an AD security group and then grant that same AD group the required NTFS root permissions on the share. Is that the best option?

@AzureAcademy Жыл бұрын

You do NOT have to grant the elevated contributor role to a domain admin. it could be anyone who administers AVD or the profiles...it is only to set the NTFS permissions. Yes this is the only option in many cases because Azure and Windows don't really know how to talk to each other...but they are working on it.

@alozborne Жыл бұрын

@@AzureAcademy Hmm, I didn't say that we granted that IAM role to Domain Admins - as I mentioned, no Domain Admin accounts are even replicated to Azure AD. Instead, we assign a regular AD user account to an AD security group that in turn is assigned the IAM role. Likewise for NTFS permissions. Based on your other comments though, it sounds like we are following best practices. Thanks for confirming

@AzureAcademy Жыл бұрын

👍👍

@jlou65535 Жыл бұрын

Great video ! So many issues about FSLogix misconfigurations. Same with you about Premium File Share best practice. One question about redirection : the excluded folders will only be hosted on the AVD Host, right ? Therefore they will disappeared as soon the user log off, right ?

@AzureAcademy Жыл бұрын

Correct, redirected folders go to the local_username folder while in the session and delete at log off

@jlou65535 Жыл бұрын

@@AzureAcademy Thanks Dean !

@AzureAcademy Жыл бұрын

Anytime

@haraprasadnayak4040 Жыл бұрын

Thanks Dean for the great video. However I have a small question: At 1:44 you mentioned that all of the office cache data lives in user profile anyways so you are not giving anything up. I believe you mean if we just create profile container and disable ODFC container we will still be caching office into the profile container, just that we will not have a different ODFC container. If this is correct then is it correct to assume that the OST will be created in the profile container? If yes then why we would do that as it would for sure increase the profile container size/cost?

@AzureAcademy Жыл бұрын

That is correct. If you allow OST to be created YES it will then be in the profile container. An option could be to not you have to cache so much email in your OST. Another choice is to use the redirections.xml so it’s not in your profile either

@haraprasadnayak4040 Жыл бұрын

@@AzureAcademy I think you mean have a group policy or use redirection.xml to completely remove caching of OST or decrease the number of days of caching

@AzureAcademy Жыл бұрын

Yes

@shahboy68 Жыл бұрын

Have fast disk performance is key on making VDI /AVD work. It doesn’t matter how many cpus And how much memory you have if you have a subpar disk IO.

@AzureAcademy Жыл бұрын

It is true that you need good disks which is why I suggest premium disks on all pooled session hosts. Also your FSLogix file share needs to have good performance…as well as enough CPU and RAM…it all works together

@l8erzmonkey Жыл бұрын

You can reduce the white space usage the disk mounted will still be the same size but the file in azure storage is less

@AzureAcademy Жыл бұрын

The profile containers will shrink when you reduce the white space IF you are using dynamic disks.

@anwaralwaki5993 Жыл бұрын

Danke sehr, How can we set the ost file with fslogix. What is the best image to set it? User profiles fill up quickly

@AzureAcademy Жыл бұрын

How much email are you allowing in your OST? Are your profiles containers 30GB or smaller?

@jamiebarbery1167 Жыл бұрын

Is cached mode policy setting still required/recommended when not using O365 containers in AVD? Migrating from RDS Farm to AVD and curious if online mode will perform well with only Profile containers and without cache mode enabled for X amount of time. Thank you sir!

@AzureAcademy Жыл бұрын

In AVD, your hosts are right next to the exchange servers so outlook should function fine in online mode.

@otakuguild5603 10 ай бұрын

Hello, In the Defender Exclusion you said your profile wont be scanned during sign in, that means once user is logged in defender will start scanning. We are not stopping the defender permanently correct? What if user is using 3rd party tools for endpoint protection?

@AzureAcademy 10 ай бұрын

Actually yes, we are 100% excluding the users profile from being scanned BY THE SESSION HOST. And this goes for 3rd party tools as well! However You SHOULD scan the profiles while they are offline by another system, Not a session host so you don’t impact the users performance. Can you imagine crushing the CPU by 20 users being logged on the same host and all getting scanned at the same time. Performance would go to Zero!

@stormlight1553 Жыл бұрын

By excluding the OST from your profile via the XML are you creating IO and data transfer cost by having the avd have to recreate it each time you log in? Especially when you have you OST be more then 6 months of data

@AzureAcademy Жыл бұрын

It is true that excluding the ost will cause you to redownload it each time…but most of the customers I have worked with want to save the space rather then have an instant email experience. The middle ground would be to include the OST but limit the OST file size / how far back in email they can have in the OST.

@blankmind13 9 ай бұрын

Are you saying this will reduce the azure storage costs? I am not understanding the advantage of redirection@@AzureAcademy

@AzureAcademy 9 ай бұрын

YES, The advantage is a smaller profile which can help keep storage costs down.

@erichrockman4852 Жыл бұрын

is this applicable to win10/11 multi-session or just single-session OS? Thanks.

@AzureAcademy Жыл бұрын

Typically I don’t recommend FSLogix for single session VMs

@5oa8in2wr Ай бұрын

Why would you allow using OST on terminal servers? Save the space by turning it off.

@AzureAcademy Ай бұрын

Listen…I agree with you! But some people…🤷🏼‍♂️🤦‍♂️

@user-hu9xt1uj8c 4 ай бұрын

Hello Dean, What is ODFC Stands for?

@AzureAcademy 4 ай бұрын

Office data file container

@user-hu9xt1uj8c 4 ай бұрын

@@AzureAcademy Thank You So Much...

@AzureAcademy 3 ай бұрын

Anytime

@Christopher-ex9py Жыл бұрын

Office Data Filtering Catalog apparently.. I have to disagree with setting your Premium Files share to the maximum from the start. Billing for Premium Files is based on provisioned size. It will take your users quite a while to reach the 30GB limit of their profile size, if they ever get there at all. Meanwhile you're paying for unused capacity and, it's not cheap. Premium File share provisioned size can be increased and decreased after the fact, and increasing the size can even be done automatically as demand increases.

@AzureAcademy Жыл бұрын

Those are good points. But I’ve worked with too many customers who never increase their size until the share runs out of room and everyone crashes…they all think set it and forget it…but if you can plan and monitor correctly…awesome!

@Joooooooooooosh Жыл бұрын

Keep in mind that the provisioned size of a premium file share directly impacts its performance. So there is a performance benefit to over-provisioning the share.

@AzureAcademy 10 ай бұрын

It does to a point…but if total required IOPS is 10,000 having 50,000 doesn’t help more ☺️

@Christopher-ex9py 10 ай бұрын

@@AzureAcademy yea, we developed automation that evaluates the size regularly and increases it accordingly.

@AzureAcademy 10 ай бұрын

cool

@nex7053 Жыл бұрын

"I do not think anyones profiles are actually that large" .. well sir, let me introduce to our marketing team - periodicaly destroying DFS and deduplication by moving terabytes of data from one folder to another since internet was invented :D. Now they are frustrated with sharepoint, cuz they cannot force IT work several hours on dedup restoration anymore :D. And also I limited their profile container for 15GB. Sweet revenge

@AzureAcademy Жыл бұрын

Part of the reason for 30GB profiles is not because they need it that large…but because most people never reach the limit. That way you never have to do profile maintenance. Work smarter, not harder! And remember the disks are dynamic ☺️ but if you have a bunch of “heavy users”. Then you work around it as needed

@nex7053 Жыл бұрын

@@AzureAcademy exactly.. 90% of our tribe never fills even 5GB of profile. We are using Citrix xenapp and I set policies in a way that if they are saving files they see only C drive of their laptop not Citrix C drive. Rest of them are somehow crafty and found a way around.... Usually ppl like that are asking why file is not appearing on their desktop where they saved it xD

@AzureAcademy Жыл бұрын

LOL got it!

@RenevdLinden Жыл бұрын

ODFC = Office Data File Containers

@AzureAcademy Жыл бұрын

We have a winner!!!

@Zastrutzki Жыл бұрын

Why is your voice always alternating between left and right audio channels? It's super distracting.

@AzureAcademy Жыл бұрын

I balance the left and right in the video...so you should NOT be hearing that. at what time do you think its happening so I can look into it?

@Zastrutzki Жыл бұрын

@@AzureAcademy It's actually the entire video. Your voice moves around from mostly right to almost left. At first I thought it might be because I'm using Dolby Access (Windows, by the way, not on a phone), but it just makes it more pronounced. If I turn of the spatial sound, or switch over to DTS Unbound or even Windows Sonic, it's still the case. No other weirdness installed. And it's not just on my headphones, it's on my speakers as well. Love your content by the way, it's just something that I've noticed watching your videos. (And just yours.)

@AzureAcademy Жыл бұрын

Strange? I don’t hear that in my mix. So just to be clear, are you saying that my voice moves 100% left and right during the video or is it more like you can still hear it on both sides but sound is more dominate on 1 side

@mrkesu Жыл бұрын

Same for me, in my headset it's kind of surreal sometimes where your voice seem to bounce back and forth, like those binaural music things 😄 Not 100%, but like the volume is increasing/decreasing just slightly between each side back and forth quickly.

@AzureAcademy Жыл бұрын

hm...thanks for telling me...I'll look into fixing that!

@hinduhistory7466 Жыл бұрын

Fslogix has been a pain in the arse, none of the documentation of ms is simple.

@AzureAcademy Жыл бұрын

hopefully this video...and my next one make it easy for you!

@hinduhistory7466 Жыл бұрын

@@AzureAcademy sure i hope so, problem is not only with these but the troubleshooting with numerous profile issues arising after the updates are challenging. Every hotfix or updates creates some new issues. As admins we have customers call us for all kinds of issues. Can i request may bea video on troubleshooting for fslogix

@AzureAcademy Жыл бұрын

Here it is! Enjoy, and let me know what you think! kzfaq.info/get/bejne/r7Chh62Zl7rLqKM.html