WVD and Intune / Endpoint Manager

[Stefan Kießig]

Hello,

I am using a pure cloud environment (Azure AD - Azure AD Domain Services - Windows Virtual Desktop). How can I use Intune / Endpoint Manater for the sessions hosts in the environment?

Thanks a lot
Stefan

[#2]

You can't at all if your using windows 10 multi-session
https://docs.microsoft.com/en-us/mem/intune/fundamentals/windows-virtual-desktop#windows-10-enterpri...

[#3]

Microsoft - are there plans to support management of WVD Windows 10 Multi-Session through Intune/Endpoint Manager? We have embraced the modern desktop and deployed Azure AD joined endpoints to all users, locked down using Intune security baselines. It seems like a lot of wasted effort to have to go back to traditional group policy to set up a consistent user experience on WVD...

[#4]

@lukewilcock Yes. See https://docs.microsoft.com/en-us/mem/intune/fundamentals/in-development#device-management

[#5]

@David Schrag - thanks for the link. Looks like the feature is scheduled for release in May 2021 according to the roadmap. Fingers crossed!

[#6]

How do I get the machine into Azure AD?

I do not have an AD Connect running because it is a cloud-only environment. The domain services are provided via Azure AD Domain Services.

[#7]

@Stefan Kießig you can use auto-enrollment configured in your AAD server in the cloud, check my post Enroll Windows Virtual Desktop a Microsoft Intune – Deployment MX

[#8]

@DeploymentMX AD Connect does not work for me because I do not have an onPremise domain.
The domain functionality is provided by the Azure AD Domain Service.

[#9]

@Stefan Kießig - I think the only (supported) way would be to spin up a traditional domain controller, e.g. in Azure so not on premise as such, install AD Connect and go from there. We had to retain an 'on-premise' domain controller for a line of business app. It was frustrating at the time, but proving useful for WVD and some other use cases.  

[#10]

There are too many limitations with only using AADS, in my opinion its really only good for very simple small business situations.

[#11]

same for us. We moved our clients to cloud only azure ad join and I was excited about the intune what's new this week as wvd windows 10 multi user is in public preview now. But at a closer look we still need an hybrid join for wvd machines as a requierement. Are there plans in near future to have cloud only aad joined wvds?

[#12]

@lukewilcock Hey Luke, But why aren't you are using Group policies for those devices.. I am just trying to understand whats wrong with on premise policy for those WVD devices and people are going with Intune policies. Apart from the external devices? I have a customer who is looking for managing WVD devices and they have on premise group policies. 

[#13]

@AK_MS - there isn't anything wrong with using Group Policy. Indeed it would make sense if that is your main method for securing your environments. We made a decision a couple of years ago to transition to Azure AD joined endpoints fully managed by Intune. We no longer use Group Policy and were very keen to avoid having to re-invent the wheel and try to mirror settings we already have set up in Microsoft Endpoint Manager.