Blog Post

Azure Virtual Desktop Blog
1 MIN READ

Announcing general availability of FSLogix profiles for Azure AD-joined VMs in Azure Virtual Desktop

DavidBelanger's avatar
DavidBelanger
Icon for Microsoft rankMicrosoft
Nov 08, 2022
Today we're announcing the general availability of using FSLogix profiles with Azure Active Directory (AD)-joined VMs for hybrid users in Azure Virtual Desktop. By leveraging Azure AD Kerberos with A...
Updated Nov 10, 2022
Version 2.0
updates
KeenanW's avatar
KeenanW
Copper Contributor
Feb 16, 2023

MagicHair, the article is regarding Azure Virtual Desktops, so Windows 10 & 11 refer to the Enterprise edition.

 

DavidBelanger, thank you for the article. I have successfully deployed this.

 

In case anyone else runs into an issue where your Elevated Contributor account has access to the share but cannot change permissions: Check that the user in the Elevated Contributor role is not also a member of the Contributor group/role because, from my testing, it appears the mount will respect the lesser of the two permissions for the root of the share specifically.

 

This means that both icacls and Explorer will be unable to modify the root permissions should the admin user be a member of both the Elevated Contributor role group and the Contributor role group.

 

To allow changing the root share permissions, remove the user from the standard Contributor role group, and you'll be able to run similar to the following:

 

icacls \\yourfs.file.core.windows.net\profiles /grant fslogix-group:(M)
icacls \\yourfs.file.core.windows.net\profiles /grant "Creator Owner:(OI)(CI)(IO)(M)"
icacls \\yourfs.file.core.windows.net\profiles /remove "Authenticated Users"
icacls \\yourfs.file.core.windows.net\profiles /remove "Builtin\Users"