WVD User - how to provide profiles share to users automatically

%3CLINGO-SUB%20id%3D%22lingo-sub-1276857%22%20slang%3D%22en-US%22%3EWVD%20User%20-%20how%20to%20provide%20profiles%20share%20to%20users%20automatically%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1276857%22%20slang%3D%22en-US%22%3E%3CP%3EWhen%20working%20with%20FSLogix%20I%20have%20-%20among%20other%20things%20-%20to%20provide%20a%20file%20share%2C%20assign%20a%20letter%20to%20it%20and%20have%20to%20set%20the%20access%20permissions%20in%20a%20proper%20way.%20That%20is%20described%20here%3A%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Flearn%2Fmodules%2Fm365-optimize-wvd%2Fprovision-fslogix%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Flearn%2Fmodules%2Fm365-optimize-wvd%2Fprovision-fslogix%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20detail%3A%3C%2FP%3E%3CPRE%20class%3D%22lia-code-sample%20language-markup%22%3E%3CCODE%3Enet%20use%20Z%3A%20%5Bconverted%20SMB%20path%20used%20in%20VHDLocations%20in%20the%20registry%5D%20%5BAccess%20Key%5D%0A%0AIcacls%20Z%3A%20%2Fgrant%20%5BEnd%20user%20UPN%5D%3A(f)%3C%2FCODE%3E%3C%2FPRE%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHow%20do%20these%20commands%20need%20to%20be%20included%20in%20the%20VM%20or%20at%20boot%20time%20so%20that%20they%20are%20automatically%20executed%20when%20a%20normal%20user%20logs%20on%3F%20Is%20there%20step-by-step%20guide%20for%20this%20available%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20have%20several%20dozen%20user%20changes%20per%20day.%20With%20manual%20login%20and%20logout%20to%20each%20VM%20for%20each%20user%2C%20this%20is%20not%20possible.%20So%20I%20need%20an%20automatic%20process%20for%20this.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1278543%22%20slang%3D%22en-US%22%3ERe%3A%20WVD%20User%20-%20how%20to%20provide%20profiles%20share%20to%20users%20automatically%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1278543%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F33043%22%20target%3D%22_blank%22%3E%40Robert%20K%3C%2FA%3E%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ehere%20you%20find%26nbsp%3BEnable%20Active%20Directory%20authentication%20over%20SMB%20for%20Azure%20file%20shares%20(azuread%20also%20possible%20or%20you%20install%20windows%20fileserver)%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fde-de%2Fazure%2Fstorage%2Ffiles%2Fstorage-files-identity-auth-active-directory-enable%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fde-de%2Fazure%2Fstorage%2Ffiles%2Fstorage-files-identity-auth-active-directory-enable%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ewhen%20you%20created%20azure%20file%20share%20and%20assigned%20permissions%20than%20you%20can%20use%20fslogix.admx%20to%20set%20the%20fileshare.%20you%20do%20not%20need%20this%20skript%20running%20at%20every%20login.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Contributor

When working with FSLogix I have - among other things - to provide a file share, assign a letter to it and have to set the access permissions in a proper way. That is described here: https://docs.microsoft.com/en-us/learn/modules/m365-optimize-wvd/provision-fslogix

 

In detail:

net use Z: [converted SMB path used in VHDLocations in the registry] [Access Key]

Icacls Z: /grant [End user UPN]:(f)

 

How do these commands need to be included in the VM or at boot time so that they are automatically executed when a normal user logs on? Is there step-by-step guide for this available?

 

We have several dozen user changes per day. With manual login and logout to each VM for each user, this is not possible. So I need an automatic process for this.

 

1 Reply

 

Hi @Robert K,

 

here you find Enable Active Directory authentication over SMB for Azure file shares (azuread also possible or you install windows fileserver) https://docs.microsoft.com/de-de/azure/storage/files/storage-files-identity-auth-active-directory-en...

 

when you created azure file share and assigned permissions than you can use fslogix.admx to set the fileshare. you do not need this skript running at every login.