Skip to content

AVD Deploy#

Azure Virtual Desktop · v2.0.5

AVD Deploy designs, checks and deploys Azure Virtual Desktop into your own Azure subscription, then finishes the Entra ID and Conditional Access setup. It runs in your browser at deploy.andykemp.com/avd: you install nothing and run no scripts, and every change is made with your own sign-in.

Watch the demo Try the live demo Product overview Open AVD Deploy

How it works#

  1. Connect. Sign in with a work account and consent to the AVD Deploy app. Host pools already in your subscriptions are listed with their session host health.
  2. Design. Six short pages: Azure, desktops, identities, network, access, and power and names. See Design and deploy.
  3. Review. Your design is checked against your subscription and tenant, read-only, and you see exactly what Deploy will create.
  4. Deploy. Entra groups, the Azure foundation, the host pool and the session hosts, with progress for each step.
  5. Finish setup. Sign-in for RDP, the storage app, Conditional Access and FSLogix permissions. Each tenant-wide change shows before and after, and waits for you to type APPLY. See Finish setup.
  6. Ready. How people sign in, what's left for a person to do, and removing the deployer's access.

What it creates#

In Azure#

Item Notes
Resource group rg-<prefix>-avd by default, or one you name.
Virtual network and NAT gateway vnet-<prefix>-avd on the first free 10.200–250.0.0/24, unless you use an existing network.
Key Vault Holds the session hosts' local administrator password.
Storage account Azure Files for FSLogix profiles behind a private endpoint, with private DNS. Pooled desktops only.
Host pool, application group and workspace <prefix>-HostPool, with your workspace and desktop names.
Scaling plan Business hours, or always on.
Session hosts Windows 11, Entra joined and enrolled in Intune, named <prefix>SH-0, <prefix>SH-1 and so on.
Role assignments Your users group can sign in to the desktop. AVD gets Desktop Virtualization Power On Off Contributor on the subscription so it can scale the hosts.

In Entra ID#

  • A users group and an admins group, new or existing.
  • Optionally, a dynamic device group of the session hosts, for Intune.
  • With Finish setup: the RDP sign-in setting, the storage account's app, and the storage app excluded from Conditional Access policies that require MFA for all resources.

Where to go next#