thank you for joining the az140 study
guide and in this episode we will finish
our planning of your wbd infrastructure
by talking about your clients with
everything from the features
deployments and management stay tuned
[Applause]
i'm dean sefola and this is the azure
academy the windows virtual desktop
clients allow your users to access your
organization's remote apps and desktops
over the reverse connect or rdp short
path protocols
and if you want more detail on how those
things work go check out episode 5 in
our series
now there are several clients to choose
from depending on the operating system
that
is on your client devices and more
importantly
what your users will be doing and what
they need to do it
now we do have several links in the
video description as usual in the
resources section
that are related to this particular
video and we'll be walking through those
links as we're
teaching you about this topic but be
sure that you save them for your future
reference
and our first link gives us an overview
of all the different wvd clients
so first we have the windows desktop
client and that's a traditional
x86 application along with the microsoft
store
version of the client which is a
universal windows platform app
then we have the third party operating
system clients like
android ios and mac os then we also have
the
html5 web-based client which could be
used on
basically any device that has an html5
browser
and notice that each one of them has a
getting started page
and a link to see all of the latest
features and which will also give you
the version history
and like i said in the beginning half of
the question is what is the operating
system of your client devices
that part's pretty obvious but the more
important question
is what will your users be doing and
what are the features that they need
in order to do it and for that we have
the second doc in our resources link
which compares
all of the different clients and the
features that they support
for example if you needed multi-monitor
support then you can only use the
windows desktop client
or the mac os client now why would it
only be those two you don't have an
iphone that has two screens
when you also use the html5 web browser
that is a
single browser session it doesn't span
multiple browsers therefore you can't
put it on multiple monitors
now there's two other big features that
i'll call out here and that is
teams with the optimizations this refers
to the audio
video redirection features that is only
supported on the windows desktop
client today and the other one is single
sign-on supported on the windows desktop
and
html5 clients only and there does seem
to be some confusion around single
sign-on with wbd
because there is another doc that i have
been pointed to
several times by people commenting on
videos that say that wvd
does not support sso so let me clarify
what's going on here
both of these documents are technically
correct
so how can that be well it's because
there are two different
kinds of sso involved in wvd the first
is for the wvd
client that's when you subscribe and log
on
and the second is when you start a wvd
session to a remote app or desktop
as of today single sign-on on the wbv
client
side is supported and this is able to
function because of what's actually
going on
in that process the very first step in
the wvd process is to authenticate to
azure active directory once that happens
you'll receive a token
which will be presented to the web
access layer of wvd which will give you
your list of apps and desktops
clicking on any one of those apps or
desktops begins the second
part of the process where sso is not yet
supported
now in order to make sso work you need a
active directory federation server or
adfs
in your environment and azure ad
configured to accept single sign-on
and so with that you now have your list
of features and you have your operating
systems that should point you at the
right clients for your particular use
case
so the only other questions that we need
to answer in this episode is how are you
going to manage all of that
and the first thing that comes to mind
is deployment now you basically have two
options
manual and automated now as to which one
you should
use is going to depend on your skills
your tools and who the device belongs to
since wvd can allow users to bring their
own
devices you may not have control over
those particular clients
and so the best thing you can do is
provide instructions to them
to download install and then subscribe
to their wvb
feeds for example mobile devices most
companies aren't issuing people
phones anymore because we all have them
so you would just
instruct your particular users to go out
to the google play store or the ios
store
download their particular clients and
set them up on their systems
so all they need to do is subscribe to
their wbd feeds
and we dug into discovery in episode two
but i think it bears repeating
so here i've got my iphone opened and
i'll open my wvd app
and i've got nothing registered so i
want to add a new user
so i'll click to add and i'll type in my
user's email address but i can't find
anything
now you could resolve this just by
telling them to remember the long
url for the feed discovery but that's a
pain let's solve this with dns
so here i have an azure public dns zone
and this is what i use for my internet
name resolution we need to go and add a
new record
and your name for that record should be
underscore msradc
the type of record should be a text
record and i'll leave my time to live
at one hour and now we need our value
for this record it's
where that text record resolves to and
you can grab that link directly from the
docs and i'll just post it here for our
feed discovery and there you go our new
record has been added so all you have to
wait for is dns propagation
which could take anywhere from a couple
minutes to a couple hours
and we go back to my ios client and then
type in the user's
email address again and now through the
power of dns we can complete that lookup
find all of the things that we have
access to and get back to work
now for your automated processes i'm
going to assume that we're dealing with
company-owned devices
so that you have more options we still
have the question of the skills that you
possess
and the tools that you have so let's
start really simple with just a basic
script to install
so on this dock which is the windows
desktop client for admins
you can see two code blocks here one for
device
installation and the other for user
installation and if you've ever done a
msi scripted install before
that should be pretty straightforward
you can plug that same
installation into your automation
toolsets and that would be things like
chef puppet powershell desired state
configuration
configuration manager or you can put it
into a system that you have through
mdm enrollment like intune or now
endpoint configuration manager so here
is my endpoint configuration manager
admin console
and let's go on the left and click on
the apps and we'll add a new app
now we have to select the list of the
applications here that we want to
install and there's lots of choices
like windows store ios android is all
the way at the bottom
as well as win32 apps and that's what
i'll choose so here we have to select a
package and this should be in a dot
intune win file format now if you don't
know how to convert an msi
into a dot intune win file be sure that
you subscribe and hit the bell because
we are going to have
a whole bunch of videos digging into
endpoint configuration manager and
all of the features so you don't want to
miss that once you have selected your
file you need to fill in the details
about that file
name of the app description publisher
all that basic kind of information
and then you hit next and here the dot
intune win file has been
expanded and you can see the details
from the msi
file that was inside it and all this was
just provided automatically
so you can tweak anything that you need
to and then hit next
and now you need to set the device
requirements this is what the client is
going to have to have
before it's allowed to install this
application and you can fill out as much
detail here as you want to as long as
you've specified
the windows version next there are the
detection rules how do we know that you
have properly
installed this application another
beauty of using an msi file here is
you'll have the id
tag of the msi that can just easily be
referenced from the system's
configuration data
and then a few tabs later you do your
assignment which i'll do to my wbd
users and then you can hit create and
finish that process
and i've done that similarly for the
microsoft store version of the client so
any systems that i have that are
hybrid azure ad joined and managed by my
mdm solution i can now
push out the wvd client and you can do
something similar if you use a different
mdm toolset
so that's deploying the client and now
thinking about updates and management
you could certainly create updated
versions of those clients and push them
out through the same mdm
process but you can also think simpler
and do this
simply at the installation back in the
windows desktop client for admins doc
there is a configuration
section and here's the particular
registry settings that allow you to
control the automatic
updates and how the client perceives
them so xero
would disable the notifications and turn
off updates
one would show notifications but turn
off auto updating
or two would be the fully managed
approach
and when they close their client it
would update automatically
in the background now some things that
don't happen in the background would be
clicking the subscribe button and the
like button and the notification bell
and don't forget to share the azure
academy videos from the az140 series
with all of your friends and family
across your social media so that
everyone can prepare for the
certification exam
which now has an official release date
of march 29th
and that means that you need to study
the rest of the videos in our series
which you can do
right here at the bottom or check out
the latest azure academy video up here
at the top
thanks for joining me today and i hope
this has been a help to you comment
below with any questions you have and i
will see you in the next
episode happy learning