Forum Discussion
Stefan Georgiev
Dec 14, 2020Former Employee
MSIX app attach Azure portal integration public preview
MSIX app attach is an application layering solution that allows you to dynamically attach an application (that is an MSIX package) to a user session. Separating the application from the operating sys...
DBR14
Feb 25, 2021Iron Contributor
Yeah you're further than I am. All my permissions are correct. I can even hit the Azure File Share from the user session but no apps attach.
My one host is finally staying available in validation but none of the sessions connected show apps attached. I wish there was something I could actually look at and troubleshoot or some sort of error to go off of but there's nothing.
Without this WVD is a dead in the water project, we're a CPA firm and I can't be updating and rolling out a new image every other day when software updates during busy season.
I've wasted so much time on this, never had this much trouble with a Preview item before.
My one host is finally staying available in validation but none of the sessions connected show apps attached. I wish there was something I could actually look at and troubleshoot or some sort of error to go off of but there's nothing.
Without this WVD is a dead in the water project, we're a CPA firm and I can't be updating and rolling out a new image every other day when software updates during busy season.
I've wasted so much time on this, never had this much trouble with a Preview item before.
Stefan Beckmann
Feb 25, 2021Copper Contributor
Can you connect the share and list the content with the following commands:
<code>
psexec -s -i cmd.exe
net use T: \\storageaccount\share
T:
dir
</code>
Have you checked as admin on the SH, if there some content under "C:\Program Files\WindowsApps"?
During the test, I additionally granted permissions for the computer account directly on the share (via Explorer, group has the same). It may be too much, but I have the feeling that it only worked then.
In addition, the following for comparison:
- Group with a computer account as a member
- Synchronize this group including computer account in the AAD
- RBAC on Storage Account and Share Level Reader
<code>
psexec -s -i cmd.exe
net use T: \\storageaccount\share
T:
dir
</code>
Have you checked as admin on the SH, if there some content under "C:\Program Files\WindowsApps"?
During the test, I additionally granted permissions for the computer account directly on the share (via Explorer, group has the same). It may be too much, but I have the feeling that it only worked then.
In addition, the following for comparison:
- Group with a computer account as a member
- Synchronize this group including computer account in the AAD
- RBAC on Storage Account and Share Level Reader
- jlou65535Feb 25, 2021MCT
I spent a lot of time to setup the file share for MSIX files on my storage account, same I did for my FSLogix profiles. At the end, I put .vhdx and the .msix on a file share VM
- DBR14Feb 25, 2021Iron ContributorOh yeah, done did that.
- Stefan BeckmannFeb 25, 2021Copper ContributorStorage Account: mymsixstoa01.file.core.windows.net
File Share: msix
You map the share in the Session Host with:
net use t: \\mymsixstoa01.file.core.windows.net /user:AZURE\mymsixstoa01 AccessKey
Then open T: in Windows Explorer, open NTFS ACLs, add the computer account, and if not done yet also the group. - DBR14Feb 25, 2021Iron ContributorOh yeah its all listed there.
Groups there
All Sync'd
RBAC done
When you say computer account, you mean for instance if my SH is called StupidHost-1 | add that to the share?