MSIX - Revision history

Aleks: 6 revisions imported

2023-11-15T20:32:03Z

6 revisions imported

← Older revision	Revision as of 21:32, 15 November 2023
(No difference)

piszczynski>Aleks: /* Setup Azure NetApp Files */

2022-12-31T14:42:13Z

Setup Azure NetApp Files

← Older revision		Revision as of 15:42, 31 December 2022
Line 63:		Line 63:
	1.Set up your Azure NetApp Files account by following the instructions in Set up your Azure NetApp Files account.https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/virtual-desktop/create-fslogix-profile-container.md#set-up-your-azure-netapp-files-account		1.Set up your Azure NetApp Files account by following the instructions in Set up your Azure NetApp Files account.https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/virtual-desktop/create-fslogix-profile-container.md#set-up-your-azure-netapp-files-account

	2.Create a capacity pool by following the instructions in Set up a capacity pool.https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/azure-netapp-files/azure-netapp-files-set-up-capacity-pool.md		2.Create a capacity pool by following the instructions in Set up a capacity pool.[https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/azure-netapp-files/azure-netapp-files-set-up-capacity-pool.md capacity pool]

	3.Join an Azure Active Directory (Azure AD) connection by following the instructions in Join an ~~Active Directory connection.~~https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/virtual-desktop/create-fslogix-profile-container.md#join-an-active-directory-connection		3.Join an Azure Active Directory (Azure AD) connection by following the instructions in Join an [https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/virtual-desktop/create-fslogix-profile-container.md#join-an-active-directory-connection Active Directory connection].

	4.Create a new volume by following the instructions in Create a new volume and ~~Configure volume access parameters.~~https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/virtual-desktop/create-fslogix-profile-container.md#~~create~~-a-~~new~~-volume https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/virtual-desktop/create-fslogix-profile-container.md#~~configure~~-~~volume~~-access-~~parameters~~		4.Create a new volume by following the instructions in [https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/virtual-desktop/create-fslogix-profile-container.md#create-a-new-volume Create a new volume] and [https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/virtual-desktop/create-fslogix-profile-container.md#configure-volume-access-parameters Configure volume access parameters].

			5.Make sure your connection to the Azure NetApp Files share works by following the instructions in [https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/virtual-desktop/create-fslogix-profile-container.md#make-sure-users-can-access-the-azure-netapp-file-share Make sure users can access the Azure NetApp Files share].

	5.Make sure your connection to the Azure NetApp Files share works by following the instructions in Make sure users can access the Azure NetApp Files share.https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/virtual-desktop/create-fslogix-profile-container.md#make-sure-users-can-access-the-azure-netapp-file-share
	~~[http://www.example.com link title]~~
	Upload an MSIX image to the Azure NetApp file share:		Upload an MSIX image to the Azure NetApp file share:

piszczynski>Aleks: /* Setup Azure NetApp Files */

2022-12-31T14:40:04Z

Setup Azure NetApp Files

← Older revision		Revision as of 15:40, 31 December 2022
Line 69:		Line 69:
	4.Create a new volume by following the instructions in Create a new volume and Configure volume access parameters.https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/virtual-desktop/create-fslogix-profile-container.md#create-a-new-volume https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/virtual-desktop/create-fslogix-profile-container.md#configure-volume-access-parameters		4.Create a new volume by following the instructions in Create a new volume and Configure volume access parameters.https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/virtual-desktop/create-fslogix-profile-container.md#create-a-new-volume https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/virtual-desktop/create-fslogix-profile-container.md#configure-volume-access-parameters

	5.Make sure your connection to the Azure NetApp Files share works by following the instructions in Make sure users can access the Azure NetApp Files share.		5.Make sure your connection to the Azure NetApp Files share works by following the instructions in Make sure users can access the Azure NetApp Files share.https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/virtual-desktop/create-fslogix-profile-container.md#make-sure-users-can-access-the-azure-netapp-file-share
			[http://www.example.com link title]
	Upload an MSIX image to the Azure NetApp file share:		Upload an MSIX image to the Azure NetApp file share:

piszczynski>Aleks at 14:39, 31 December 2022

2022-12-31T14:39:25Z

← Older revision		Revision as of 15:39, 31 December 2022
Line 55:		Line 55:

	10.Set up NTFS permissions for the user accounts. You'll need an operating unit (OU) sourced from the AD DS that the accounts in the VM belong to.		10.Set up NTFS permissions for the user accounts. You'll need an operating unit (OU) sourced from the AD DS that the accounts in the VM belong to.


			== Setup Azure NetApp Files ==

			To start using Azure NetApp Files:

			1.Set up your Azure NetApp Files account by following the instructions in Set up your Azure NetApp Files account.https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/virtual-desktop/create-fslogix-profile-container.md#set-up-your-azure-netapp-files-account

			2.Create a capacity pool by following the instructions in Set up a capacity pool.https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/azure-netapp-files/azure-netapp-files-set-up-capacity-pool.md

			3.Join an Azure Active Directory (Azure AD) connection by following the instructions in Join an Active Directory connection.https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/virtual-desktop/create-fslogix-profile-container.md#join-an-active-directory-connection

			4.Create a new volume by following the instructions in Create a new volume and Configure volume access parameters.https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/virtual-desktop/create-fslogix-profile-container.md#create-a-new-volume https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/virtual-desktop/create-fslogix-profile-container.md#configure-volume-access-parameters

			5.Make sure your connection to the Azure NetApp Files share works by following the instructions in Make sure users can access the Azure NetApp Files share.

			Upload an MSIX image to the Azure NetApp file share:

			With Azure NetApp Files share setup, you can start uploading images to it.

			To upload an MSIX image to your Azure NetApp Files share:

			1.In each session host, install the certificate that you signed the MSIX package with. Make sure to store the certificates in the folder named Trusted People.

			2.Copy the MSIX image you want to add to the Azure NetApps Files share.

			3.Go to File Explorer and enter the mount path, then paste the MSIX image into the mount path folder.

			Your MSIX image should now be accessible to your session hosts when they add an MSIX package using the Azure portal or PowerShell.

piszczynski>Aleks: /* MSXI File share setup */

2022-12-31T14:35:52Z

MSXI File share setup

← Older revision		Revision as of 15:35, 31 December 2022
Line 44:		Line 44:
	4.Create a storage account.		4.Create a storage account.

	5.Create a file share under the storage account by following the instructions in ~~Create an Azure~~ file share.		5.Create a file share under the storage account by following the instructions in https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/storage/files/storage-how-to-create-file-share.md.

	6.Join the storage account to AD DS by following the instructions in enable AD DS authentication for your Azure file shares.		6.Join the storage account to AD DS by following the instructions in enable AD DS authentication for your Azure file shares.https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/storage/files/storage-files-identity-ad-ds-enable.md

	7.Assign the synced AD DS group to Azure AD, and assign the storage account the Storage File Data SMB Share Contributor role.		7.Assign the synced AD DS group to Azure AD, and assign the storage account the Storage File Data SMB Share Contributor role.

	8.Mount the file share to any session host by following the instructions in assign share-level permissions to an identity.		8.Mount the file share to any session host by following the instructions in assign share-level permissions to an identity.https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/storage/files/storage-files-identity-ad-ds-assign-permissions.md

	9.Grant NTFS permissions on the file share to the AD DS group.		9.Grant NTFS permissions on the file share to the AD DS group.

	10.Set up NTFS permissions for the user accounts. You'll need an operating unit (OU) sourced from the AD DS that the accounts in the VM belong to.		10.Set up NTFS permissions for the user accounts. You'll need an operating unit (OU) sourced from the AD DS that the accounts in the VM belong to.

piszczynski>Aleks: /* MSIX */

2022-12-31T14:34:06Z

MSIX

← Older revision		Revision as of 15:34, 31 December 2022
Line 22:		Line 22:
	*All VM system accounts and user accounts must have read-only permissions to access the file share.		*All VM system accounts and user accounts must have read-only permissions to access the file share.
	*Any disaster recovery plans for Azure Virtual Desktop must include replicating the MSIX app attach file share in your secondary failover location.		*Any disaster recovery plans for Azure Virtual Desktop must include replicating the MSIX app attach file share in your secondary failover location.


			== MSXI File share setup ==

			The setup process for MSIX app attach file share is largely the same as the setup process for FSLogix profile file shares. However, you'll need to assign users different permissions. MSIX app attach requires read-only permissions to access the file share.

			If you're storing your MSIX applications in Azure Files, then for your session hosts, you'll need to assign all session host VMs both storage account role-based access control (RBAC) and file share New Technology File System (NTFS) permissions on the share.

			Azure object Required role Role function
			Session host (VM computer objects) Storage File Data SMB Share Contributor Read and Execute, Read, List folder contents.
			Admins on File Share Storage File Data SMB Share Elevated Contributor Full control.
			Users on File Share Storage File Data SMB Share Contributor Read and Execute, Read, List folder contents.
			To assign session host VMs permissions for the storage account and file share:

			1.Create an Active Directory Domain Services (AD DS) security group.

			2.Add the computer accounts for all session host VMs as members of the group.

			3.Sync the AD DS group to Azure Active Directory (Azure AD).

			4.Create a storage account.

			5.Create a file share under the storage account by following the instructions in Create an Azure file share.

			6.Join the storage account to AD DS by following the instructions in enable AD DS authentication for your Azure file shares.

			7.Assign the synced AD DS group to Azure AD, and assign the storage account the Storage File Data SMB Share Contributor role.

			8.Mount the file share to any session host by following the instructions in assign share-level permissions to an identity.

			9.Grant NTFS permissions on the file share to the AD DS group.

			10.Set up NTFS permissions for the user accounts. You'll need an operating unit (OU) sourced from the AD DS that the accounts in the VM belong to.

piszczynski>Aleks: Created page with " == MSIX == ===Overview=== All MSIX images must be stored on a network share that can be accessed by users in a host pool with read-only permissions. MSIX app attach doesn'..."

2022-12-31T14:21:41Z

Created page with " == MSIX == ===Overview=== All MSIX images must be stored on a network share that can be accessed by users in a host pool with read-only permissions. MSIX app attach doesn'..."

New page

== MSIX ==

===Overview===

All MSIX images must be stored on a network share that can be accessed by users in a host pool with read-only permissions.

MSIX app attach doesn't have any dependencies on the type of storage fabric the file share uses. The considerations for the MSIX app attach share are same for an FSLogix share.

Azure offers multiple storage options that can be used for MISX app attach. We recommend using Azure Files or Azure NetApp Files as those options offer the best value between cost and management overhead.

Here are some other things we recommend you do to optimize MSIX app attach performance:

*The storage solution you use for MSIX app attach should be in the same datacenter location as the session hosts.
*To avoid performance bottlenecks, exclude the following VHD, VHDX, and CIM files from antivirus scans:
**<MSIXAppAttachFileShare\>\*.VHD
**<MSIXAppAttachFileShare\>\*.VHDX
**\\storageaccount.file.core.windows.net\share*.VHD
**\\storageaccount.file.core.windows.net\share*.VHDX
**<MSIXAppAttachFileShare>.CIM
**\\storageaccount.file.core.windows.net\share**.CIM
*All VM system accounts and user accounts must have read-only permissions to access the file share.
*Any disaster recovery plans for Azure Virtual Desktop must include replicating the MSIX app attach file share in your secondary failover location.