Deploy a sample management UI to manage your Windows Virtual Desktop resources!

%3CLINGO-SUB%20id%3D%22lingo-sub-683795%22%20slang%3D%22en-US%22%3EDeploy%20a%20sample%20management%20UI%20to%20manage%20your%20Windows%20Virtual%20Desktop%20resources!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-683795%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSTRONG%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3EThank%20you%20for%20everyone%20who%E2%80%99s%20begun%20testing%20Windows%20Virtual%20Desktop!%20Primarily%2C%20management%20of%20your%20Windows%20Virtual%20Desktop%20resources%20has%20been%20through%20PowerShell.%20However%2C%20now%20you%20can%20manage%20your%20resources%20with%20a%20sample%20UI%20that%20you%20can%20deploy%20in%20your%20own%20Azure%20subscription.%20See%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Fvirtual-desktop%2Fmanage-resources-using-ui%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Edeploy%20a%20management%20tool%3C%2FA%3E%20for%20the%20steps!%3C%2FFONT%3E%3C%2FSTRONG%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-683825%22%20slang%3D%22en-US%22%3ERE%3A%20Deploy%20a%20sample%20management%20UI%20to%20manage%20your%20Windows%20Virtual%20Desktop%20resources!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-683825%22%20slang%3D%22en-US%22%3EI%20just%20tried%20it%2C%20it%20looks%20amazing!%20Thanks.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-685081%22%20slang%3D%22en-US%22%3ERE%3A%20Deploy%20a%20sample%20management%20UI%20to%20manage%20your%20Windows%20Virtual%20Desktop%20resources!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-685081%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%20if%20I%20want%20another%20user%20to%20publish%20application%20through%20this%20portal.%20What%20should%20be%20his%20access%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20tried%20to%20give%20him%20%22Tenant%20creator%22%20on%20the%20%22Windows%20Virtual%20Desktop%22%20application%20but%20it%20does%20not%20seem%20to%20work%20as%20my%20user%20can%20not%20see%20the%20WVD%20tenant.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20already%20tried%20in%20Powershell%20with%20his%20user%20account%20but%20it%20does%20not%20seems%20to%20be%20enough%20access.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPS%20C%3A%5Cwindows%5Csystem32%26gt%3B%20New-RdsAppGroup%20*****%20****%20****%20-ResourceType%20%22RemoteApp%22%3C%2FP%3E%3CP%3ENew-RdsAppGroup%20%3A%20User%20is%20not%20authorized%20to%20query%20the%20management%20service.%20ActivityId%3A%20*****%20Powershell%20commands%20to%20diagnose%20the%20failure%3A%20Get-RdsDiagnosticActivities%20-ActivityId%20*****%20At%20line%3A1%20char%3A1%20%2B%20New-RdsAppGroup%20*******%20*****%20*****%20-ResourceType%20%22Rem%20...%20%2B%20~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~%20%2B%20CategoryInfo%20%3A%20FromStdErr%3A%20(Microsoft.RDInf....NewRdsAppGroup%3ANewRdsAppGroup)%20%5BNew-RdsAppGroup%5D%2C%20RdsPow%20erShellException%20%2B%20FullyQualifiedErrorId%20%3A%20UnauthorizedAccess%2CMicrosoft.RDInfra.RDPowershell.AppGroup.NewRdsAppGroup%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-686513%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Deploy%20a%20sample%20management%20UI%20to%20manage%20your%20Windows%20Virtual%20Desktop%20resources!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-686513%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F297703%22%20target%3D%22_blank%22%3E%40ghonyme%3C%2FA%3E%26nbsp%3B%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20Tenant%20Creator%20permission%20is%20only%20to%20give%20a%20user%2FSPN%20permissions%20to%20create%20a%20WVD%20Tenant%20for%20that%20specific%20Azure%20AD%20Tenant.%20It%20does%20not%20provide%20access%20to%20the%20WVD%20Tenant%20itself.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETo%20manage%20resources%20in%20the%20WVD%20Tenant%2C%20you%20will%20have%20to%20delegate%20permissions%20using%20these%20cmdlets%3A%3C%2FP%3E%3CUL%3E%3CLI%3E%3CSTRONG%3EGet-RdsRoleAssignment%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Edisplays%20a%20list%20of%20role%20assignments.%3C%2FLI%3E%3CLI%3E%3CSTRONG%3ENew-RdsRoleAssignment%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Ecreates%20a%20new%20role%20assignment.%3C%2FLI%3E%3CLI%3E%3CSTRONG%3ESet-RdsRoleAssignment%3C%2FSTRONG%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Eedits%20role%20assignments.%3C%2FLI%3E%3C%2FUL%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMore%20information%20can%20be%20found%20here%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fvirtual-desktop%2Fdelegated-access-virtual-desktop%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fvirtual-desktop%2Fdelegated-access-virtual-desktop%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHere%20is%20an%20example%20of%20delegation%20which%20I%20use%20in%20my%20slides%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F117876i553F907B206AA2F1%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%222019-06-12_11-02-15.png%22%20title%3D%222019-06-12_11-02-15.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-687028%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Deploy%20a%20sample%20management%20UI%20to%20manage%20your%20Windows%20Virtual%20Desktop%20resources!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-687028%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F298270%22%20target%3D%22_blank%22%3E%40michawets%3C%2FA%3E%26nbsp%3BAmazing%20thank%20you!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-769338%22%20slang%3D%22en-US%22%3ERe%3A%20Deploy%20a%20sample%20management%20UI%20to%20manage%20your%20Windows%20Virtual%20Desktop%20resources!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-769338%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F139744%22%20target%3D%22_blank%22%3E%40Eva%20Seydl%3C%2FA%3E%26nbsp%3BI%20have%20followed%20these%20instructions%2C%20but%20when%20i%20access%20the%20URL%20thats%20supposed%20to%20launch%20the%20admin%20portal%20afterwords%2C%20all%20i%20get%20is%20a%20page%20saying%20%22Hey%2C%20app%20developers!%20Your%20app%20service%20is%20up%20and%20running%22....%20Any%20ideas%20to%20why%20this%20is%20happening%2C%20and%20how%20to%20fix%20it%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-789474%22%20slang%3D%22en-US%22%3ERe%3A%20Deploy%20a%20sample%20management%20UI%20to%20manage%20your%20Windows%20Virtual%20Desktop%20resources!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-789474%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F139744%22%20target%3D%22_blank%22%3E%40Eva%20Seydl%3C%2FA%3E%26nbsp%3BI'm%20getting%20a%26nbsp%3B%3CSPAN%3E%22%3C%2FSPAN%3E%3CSPAN%3EThe%20IconPath%20property%20does%20not%20contain%20a%20well-formed%20RDSH%20file%20path%22%20error%20when%20trying%20to%20publish%20a%20start%20menu%20app%20through%20this.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-876561%22%20slang%3D%22en-US%22%3ERe%3A%20Deploy%20a%20sample%20management%20UI%20to%20manage%20your%20Windows%20Virtual%20Desktop%20resources!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-876561%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F139744%22%20target%3D%22_blank%22%3E%40Eva%20Seydl%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHello%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ei%20tried%20to%20deploy%20management%20tool%2C%20during%20deployment%20i%20got%20an%20error%2C%20here%20is%20error%20message%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%7B%20%22status%22%3A%20%22Failed%22%2C%20%22error%22%3A%20%7B%20%22code%22%3A%20%22ResourceDeploymentFailure%22%2C%20%22message%22%3A%20%22The%20resource%20operation%20completed%20with%20terminal%20provisioning%20state%20'Failed'.%22%20%7D%20%7D%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20idea%20what%20i%20am%20doing%20wrong%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBR%20Michael%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-877062%22%20slang%3D%22en-US%22%3ERE%3A%20Deploy%20a%20sample%20management%20UI%20to%20manage%20your%20Windows%20Virtual%20Desktop%20resources!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-877062%22%20slang%3D%22en-US%22%3EHi%20again%2C%20tried%20to%20redeploy%20template%2C%20now%20i%20get%20other%20error%20message%20Job%20with%20specified%20id%20already%20exists.%20Job%20id%3A%202561761f-7ba3-5d9d-a095-a1e506ae4460%2C%20br%20Michael%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-984098%22%20slang%3D%22en-US%22%3ERe%3A%20Deploy%20a%20sample%20management%20UI%20to%20manage%20your%20Windows%20Virtual%20Desktop%20resources!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-984098%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F139744%22%20target%3D%22_blank%22%3E%40Eva%20Seydl%3C%2FA%3E%26nbsp%3BI%20have%20successfully%20deployed%20the%20UI%20but%20I%20cannot%20get%20user's%20to%20see%20the%20default%20tenant%20group.%26nbsp%3B%20I%20am%20the%20only%20one%20that%20can%20see%20the%20default%20tenant%20group%20as%20well%20as%20our%20Tenants.%26nbsp%3B%20I%20add%20them%20using%20the%20new-rdsroleassignment%20PS%20cmdlet%20and%20also%20made%20them%20Tenant%20Creators%20in%20the%20WVD%20app.%26nbsp%3B%20They%20can%20log%20in%20but%20get%20a%20screen%20that%20looks%20like%20this.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1048641%22%20slang%3D%22en-US%22%3ERe%3A%20Deploy%20a%20sample%20management%20UI%20to%20manage%20your%20Windows%20Virtual%20Desktop%20resources!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1048641%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F139744%22%20target%3D%22_blank%22%3E%40Eva%20Seydl%3C%2FA%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20the%20same%20issue%20that%20none%20of%20my%20colleagues%20can%20see%20%22default%20tenant%20group%22%20from%20Web%20UI.%20How%20do%20we%20fix%20this%20issue%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1050094%22%20slang%3D%22en-US%22%3ERe%3A%20Deploy%20a%20sample%20management%20UI%20to%20manage%20your%20Windows%20Virtual%20Desktop%20resources!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1050094%22%20slang%3D%22en-US%22%3EActually%20for%20us%2C%20our%20palo%20firewalls%20we%E2%80%99re%20blocking%20some%20traffic.%20We%20had%20to%20add%20the%20URL%20as%20being%20exempt%20from%20the%20url%20filter.%3C%2FLINGO-BODY%3E
Highlighted
Microsoft

Thank you for everyone who’s begun testing Windows Virtual Desktop! Primarily, management of your Windows Virtual Desktop resources has been through PowerShell. However, now you can manage your resources with a sample UI that you can deploy in your own Azure subscription. See deploy a management tool for the steps!

11 Replies
Highlighted
I just tried it, it looks amazing! Thanks.
Highlighted

Hello, if I want another user to publish application through this portal. What should be his access?

 

I tried to give him "Tenant creator" on the "Windows Virtual Desktop" application but it does not seem to work as my user can not see the WVD tenant.

 

I already tried in Powershell with his user account but it does not seems to be enough access.

 

PS C:\windows\system32> New-RdsAppGroup ***** **** **** -ResourceType "RemoteApp"

New-RdsAppGroup : User is not authorized to query the management service. ActivityId: ***** Powershell commands to diagnose the failure: Get-RdsDiagnosticActivities -ActivityId ***** At line:1 char:1 + New-RdsAppGroup ******* ***** ***** -ResourceType "Rem ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : FromStdErr: (Microsoft.RDInf....NewRdsAppGroup:NewRdsAppGroup) [New-RdsAppGroup], RdsPow erShellException + FullyQualifiedErrorId : UnauthorizedAccess,Microsoft.RDInfra.RDPowershell.AppGroup.NewRdsAppGroup

Highlighted

Hi @ghonyme ,

 

The Tenant Creator permission is only to give a user/SPN permissions to create a WVD Tenant for that specific Azure AD Tenant. It does not provide access to the WVD Tenant itself.

 

To manage resources in the WVD Tenant, you will have to delegate permissions using these cmdlets:

  • Get-RdsRoleAssignment displays a list of role assignments.
  • New-RdsRoleAssignment creates a new role assignment.
  • Set-RdsRoleAssignment edits role assignments.

 

More information can be found here:

https://docs.microsoft.com/en-us/azure/virtual-desktop/delegated-access-virtual-desktop

 

Here is an example of delegation which I use in my slides:

2019-06-12_11-02-15.png

Highlighted
Highlighted

@Eva Seydl I have followed these instructions, but when i access the URL thats supposed to launch the admin portal afterwords, all i get is a page saying "Hey, app developers! Your app service is up and running".... Any ideas to why this is happening, and how to fix it?

Highlighted

@Eva Seydl I'm getting a "The IconPath property does not contain a well-formed RDSH file path" error when trying to publish a start menu app through this.

Highlighted

@Eva Seydl 

 

Hello,

 

i tried to deploy management tool, during deployment i got an error, here is error message:

 

{ "status": "Failed", "error": { "code": "ResourceDeploymentFailure", "message": "The resource operation completed with terminal provisioning state 'Failed'." } }

 

Any idea what i am doing wrong?

 

BR Michael

Highlighted
Hi again, tried to redeploy template, now i get other error message Job with specified id already exists. Job id: 2561761f-7ba3-5d9d-a095-a1e506ae4460, br Michael
Highlighted

@Eva Seydl I have successfully deployed the UI but I cannot get user's to see the default tenant group.  I am the only one that can see the default tenant group as well as our Tenants.  I add them using the new-rdsroleassignment PS cmdlet and also made them Tenant Creators in the WVD app.  They can log in but get a screen that looks like this.

 

Highlighted

@Eva Seydl 

 

I have the same issue that none of my colleagues can see "default tenant group" from Web UI. How do we fix this issue?

 

Highlighted
Actually for us, our palo firewalls we’re blocking some traffic. We had to add the URL as being exempt from the url filter.