Forum Discussion

Stefan Georgiev's avatar
Stefan Georgiev
Iron Contributor
Apr 15, 2020

FSLogix profile container using Azure Files and domain controller step by step

This guide walks an IT administrator through the steps needed to configure an existing Windows Virtual Desktop (WVD) hostpool with profiles stored on an Azure Files storage account. Authentication wi...
Christian_Pedersen's avatar
Christian_Pedersen
Brass Contributor
Apr 29, 2020

Stefan Georgiev 

 

Please consider changing / noting that its NOT recommended to add all users full control on the share - its really NOT best practice at all - and a huge security issue if people can map each others VHD.. 

  • Stefan Georgiev's avatar
    Stefan Georgiev
    Iron Contributor
    Apr 30, 2020

    Christian_Pedersen there is an article we are working for FSlogix permissions on the share and folders under its

     

    User Account

    Access

    Applies to

    System

    Full control

    This folder, subfolders and files

    Administrators

    Full Control

    This folder only

    Creator/Owner

    Full Control

    Subfolders and files only

    Security group of users needing to put data on share (Roaming User Profiles Users and Computers)

    List folder / read data (Advanced permissions)

    Create folders / append data (Advanced permissions)

    This folder only

    Other groups and accounts

    None (remove)

     
    • Christian_Pedersen's avatar
      Christian_Pedersen
      Brass Contributor
      Apr 30, 2020

      Stefan Georgiev Thats perfect - the right way of doing it.. 🙂

       

      The other could lead into problems!

Resources