Today we're happy to announce Microsoft Intune user scope configuration for Azure Virtual Desktop multi-session Virtual Machines (VMs) on Windows 11 and Windows 10 is now generally available.
In April 2022, we announced general availability of device scope configuration for Windows 11 and Windows 10 multi-session, enabling you to manage VMs using Microsoft Intune settings catalog and the Endpoint security blade. This new update enables you to configure user scope policies using settings catalog, configure user certificates, and configure PowerShell scripts in user context.
The following capabilities are now generally available on Azure Virtual Desktop with Microsoft Intune:
- Manage device and user scope configuration for multi-session session host VMs using the settings catalog and Endpoint Security in the Microsoft Endpoint Manager (Intune) admin center.
- Easily create new endpoint security policies, like you do for physical devices, by choosing the Windows 10, Windows 11, and Windows Server platform.
- Manage multi-session VMs created in the Azure Public and Azure Government (US GCC High and DoD environments) clouds.
Here is an example of configuring user settings in Microsoft Intune settings catalog.
This is an example of creating a security profile in Intune Endpoint security blade.
Getting started
To get started, follow the instructions to use Azure Virtual Desktop multi-session with Intune which will guide you in creating new configurations.
Learn more about the recommended ways to manage your Azure Virtual Desktop session hosts with Microsoft Intune on the Manage session host with Microsoft Intune page.
Apr 11, 2023 – UPDATE: This post was edited after publication to mention that this feature is now also generally available for Azure Virtual Desktop Virtual Machines (VMs) on Windows 10 multi-session (KB5023773 or later is required).