Security
Reader small image

You're reading from  Mastering Windows 365

Product typeBook
Published inSep 2023
PublisherPackt
ISBN-139781837637966
Edition1st Edition
Concepts
Operating Systems
Right arrow
Authors (3):
Christiaan Brinkhoff
Christiaan Brinkhoff
author image
Christiaan Brinkhoff

Christiaan Brinkhoff works as a Principal Program Manager and Community Director for Windows 365 and AVD at Microsoft, in his role at Microsoft, he works on features such as Windows 11, Windows 365 app, Switch and Boot. Christiaan is also an Author (3 books) and Inventor (3 patents). His mission is to drive innovation while bringing Windows 365, Windows, and Microsoft Intune closer together, drive community efforts around virtualization to empower Microsoft customers in leveraging new cloud virtualization scenarios. Christiaan joined Microsoft in 2018 as part of the FSLogix acquisition. He has also been rewarded with the Microsoft MVP, Citrix CTP, and VMware vExpert community achievements - for his continued support in the EUC community.
Read more about Christiaan Brinkhoff

Sandeep Patnaik
Sandeep Patnaik
author image
Sandeep Patnaik

Sandeep is a virtualization veteran with nearly two decades of experience in the industry. He has shipped multiple billion-dollar products and cloud services for Microsoft to a global user base including Windows, Azure Virtual Desktop, and Windows 365. His contributions have earned him multiple patents in this field. Currently, he leads a stellar team that is responsible for building the product strategy for Windows 365 and Azure Virtual Desktop services and shaping the future of end-user experiences for these services.
Read more about Sandeep Patnaik

Morten Pedholt
Morten Pedholt
author image
Morten Pedholt

Morten works as a Cloud Architect for a consultant company in Denmark where he advises and implements Microsoft virtual desktop solutions to customers around the world, Morten started his journey as a consultant over 8 years ago where he started with managing client devices but quickly found a passion for virtual device management. Today Windows 365 and Azure Virtual Desktop are the main areas that are being focused on alongside Microsoft Intune. Based on all the community activities Morten has done in the past years, he got rewarded with the Microsoft MVP award in the category of Windows 365 in March 2022.
Read more about Morten Pedholt

View More author details
Right arrow

Creating custom images

When configuring your provisioning policy, you will be able to choose between gallery images and custom images. This section will describe and show you how to create a custom image for your Windows 365 environment.

Even though a custom image sounds like a good idea at first, always remember to consider the management overhead you will create by using custom images. We recommend using the gallery images because that will simplify the overall management of the Windows 365 environment. The gallery images will be updated monthly after the security patch release schedule of Windows servicing and delivery. The components that will be updated are as follows:

  • Windows 10/11 monthly image updates
  • Microsoft 365 apps security and feature updates
  • Microsoft Teams updates
  • WebRTC Redirector Service updates

If the built-in gallery images do not meet your needs and you do need to deploy Cloud PCs with a custom image, don’t worry, we have got...

Configuring Windows 365 Boot

Windows 365 Boot is one of the newest Windows integrations released as part of Windows 365 and Windows 11. The feature allows users to boot directly to Cloud PCs from the initial Windows login screen, meaning that the friction of logging on to local Windows first, opening the Windows 365 app, and clicking Connect completely vanishes!

In this section, we will explain how you can push the Windows 365 Boot components to your Windows 11 endpoints via Microsoft Intune via a simplified guided flow scenario that is purposely built for this feature. Let us get started!

  1. Go to Devices | Provisioning | Overview and open the Windows 365 Boot guide. You will be forwarded to the Boot to Cloud guided flow scenario:
Figure 3.54 - Windows 365 section in Microsoft Intune

Figure 3.54 - Windows 365 section in Microsoft Intune

Note

To move forward, you need to have at least Group and Intune Administrator rights.

  1. Click on Next: Basics > to start the configuration:
...

Migrating to Windows 365 – profiles and data

In this section, we will go through what to consider in terms of migrating existing solutions to Windows 365. The solutions we typically hear about are traditional Virtual Desktop Infrastructure (VDI) solutions such as Citrix, Amazon Workspaces, Remote Desktop Services, and others.

VDI environments have a lot of different components and policies that you wouldn’t have to consider on a Windows 365 environment such as profile disk configuration, actions that prevent users from changing settings impacting all users on the VDI platform, the infrastructure behind the solution, and more.

What needs to be focused on are the user data, applications, settings configurations, and overall security around the existing environment. As Windows 365 is fully integrated into Microsoft Intune, we recommend configuring applications and security configurations there. It’s of course also possible outside of Microsoft Intune –...

Enabling Windows Autopatch

We explained Windows Autopatch in the first chapter of this book. In this section, we will explain how you can enable this service inside your Microsoft Intune tenant settings. Windows Autopatch works fully cloud with Microsoft Intune and co-management:

Note

Before you continue, ensure that you have the required licenses of Windows Autopatch enabled inside your tenant.

  1. To enable Windows Autopatch, you must go to Tenant admin | Tenant enrollment. Run checks can help to see whether you need to perform steps before you can enable the service inside your tenant:
Figure 3.63 – Management settings

Figure 3.63 – Management settings

  1. Enabling Windows Autopatch is simple. If you have the proper licenses, you only have to agree to the terms and conditions:
Figure 3.64 – Windows Autopatch

Figure 3.64 – Windows Autopatch

  1. Once everything runs successfully, you can start the enrollment via the Enroll button.
Figure 3.65 – Tenant enrolment in Autopatch ...

Summary

In the chapter, you learned everything about deploying Windows 365 Cloud PCs via Microsoft Intune, configuring networking, custom images, Windows 365 Boot, and how to approach a migration to Windows 365.

In the next chapter, we will cover how to manage different things such as resizing Cloud PCs, Windows settings, application deployment, and more – all the things that are essential to managing your Windows 365.

Questions

At the end of each chapter, we ask three questions to evaluate your learning and challenge you as well. Here are the next three questions:

  1. How do you manually trigger a health check for an ANC?
  2. What is the easiest way to set up Windows 365 Boot?
  3. What generation images are supported for custom images in Windows 365?

Further reading

Please continue your learning journey while going through the other chapters. If you want to learn more about the subjects covered in this chapter, please visit any of these online resources:

Creating custom images

When configuring your provisioning policy, you will be able to choose between gallery images and custom images. This section will describe and show you how to create a custom image for your Windows 365 environment.

Even though a custom image sounds like a good idea at first, always remember to consider the management overhead you will create by using custom images. We recommend using the gallery images because that will simplify the overall management of the Windows 365 environment. The gallery images will be updated monthly after the security patch release schedule of Windows servicing and delivery. The components that will be updated are as follows:

  • Windows 10/11 monthly image updates
  • Microsoft 365 apps security and feature updates
  • Microsoft Teams updates
  • WebRTC Redirector Service updates

If the built-in gallery images do not meet your needs and you do need to deploy Cloud PCs with a custom image, don’t worry, we have got...

Configuring Windows 365 Boot

Windows 365 Boot is one of the newest Windows integrations released as part of Windows 365 and Windows 11. The feature allows users to boot directly to Cloud PCs from the initial Windows login screen, meaning that the friction of logging on to local Windows first, opening the Windows 365 app, and clicking Connect completely vanishes!

In this section, we will explain how you can push the Windows 365 Boot components to your Windows 11 endpoints via Microsoft Intune via a simplified guided flow scenario that is purposely built for this feature. Let us get started!

  1. Go to Devices | Provisioning | Overview and open the Windows 365 Boot guide. You will be forwarded to the Boot to Cloud guided flow scenario:
Figure 3.54 - Windows 365 section in Microsoft Intune

Figure 3.54 - Windows 365 section in Microsoft Intune

Note

To move forward, you need to have at least Group and Intune Administrator rights.

  1. Click on Next: Basics > to start the configuration:
...

Migrating to Windows 365 – profiles and data

In this section, we will go through what to consider in terms of migrating existing solutions to Windows 365. The solutions we typically hear about are traditional Virtual Desktop Infrastructure (VDI) solutions such as Citrix, Amazon Workspaces, Remote Desktop Services, and others.

VDI environments have a lot of different components and policies that you wouldn’t have to consider on a Windows 365 environment such as profile disk configuration, actions that prevent users from changing settings impacting all users on the VDI platform, the infrastructure behind the solution, and more.

What needs to be focused on are the user data, applications, settings configurations, and overall security around the existing environment. As Windows 365 is fully integrated into Microsoft Intune, we recommend configuring applications and security configurations there. It’s of course also possible outside of Microsoft Intune –...

Enabling Windows Autopatch

We explained Windows Autopatch in the first chapter of this book. In this section, we will explain how you can enable this service inside your Microsoft Intune tenant settings. Windows Autopatch works fully cloud with Microsoft Intune and co-management:

Note

Before you continue, ensure that you have the required licenses of Windows Autopatch enabled inside your tenant.

  1. To enable Windows Autopatch, you must go to Tenant admin | Tenant enrollment. Run checks can help to see whether you need to perform steps before you can enable the service inside your tenant:
Figure 3.63 – Management settings

Figure 3.63 – Management settings

  1. Enabling Windows Autopatch is simple. If you have the proper licenses, you only have to agree to the terms and conditions:
Figure 3.64 – Windows Autopatch

Figure 3.64 – Windows Autopatch

  1. Once everything runs successfully, you can start the enrollment via the Enroll button.
Figure 3.65 – Tenant enrolment in Autopatch ...

Summary

In the chapter, you learned everything about deploying Windows 365 Cloud PCs via Microsoft Intune, configuring networking, custom images, Windows 365 Boot, and how to approach a migration to Windows 365.

In the next chapter, we will cover how to manage different things such as resizing Cloud PCs, Windows settings, application deployment, and more – all the things that are essential to managing your Windows 365.

Questions

At the end of each chapter, we ask three questions to evaluate your learning and challenge you as well. Here are the next three questions:

  1. How do you manually trigger a health check for an ANC?
  2. What is the easiest way to set up Windows 365 Boot?
  3. What generation images are supported for custom images in Windows 365?

Further reading

Please continue your learning journey while going through the other chapters. If you want to learn more about the subjects covered in this chapter, please visit any of these online resources:

lock icon
The rest of the chapter is locked
Previous Chapter
Chapter 6 of 16
Next Chapter
You have been reading a chapter from
Mastering Windows 365
Published in: Sep 2023Publisher: PacktISBN-13: 9781837637966
© 2023 Packt Publishing Limited All Rights Reserved
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Sign up now
undefined
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Start free trial
Renews at $15.99/month. Cancel anytime

Authors (3)

author image
Christiaan Brinkhoff

Christiaan Brinkhoff works as a Principal Program Manager and Community Director for Windows 365 and AVD at Microsoft, in his role at Microsoft, he works on features such as Windows 11, Windows 365 app, Switch and Boot. Christiaan is also an Author (3 books) and Inventor (3 patents). His mission is to drive innovation while bringing Windows 365, Windows, and Microsoft Intune closer together, drive community efforts around virtualization to empower Microsoft customers in leveraging new cloud virtualization scenarios. Christiaan joined Microsoft in 2018 as part of the FSLogix acquisition. He has also been rewarded with the Microsoft MVP, Citrix CTP, and VMware vExpert community achievements - for his continued support in the EUC community.
Read more about Christiaan Brinkhoff

author image
Sandeep Patnaik

Sandeep is a virtualization veteran with nearly two decades of experience in the industry. He has shipped multiple billion-dollar products and cloud services for Microsoft to a global user base including Windows, Azure Virtual Desktop, and Windows 365. His contributions have earned him multiple patents in this field. Currently, he leads a stellar team that is responsible for building the product strategy for Windows 365 and Azure Virtual Desktop services and shaping the future of end-user experiences for these services.
Read more about Sandeep Patnaik

author image
Morten Pedholt

Morten works as a Cloud Architect for a consultant company in Denmark where he advises and implements Microsoft virtual desktop solutions to customers around the world, Morten started his journey as a consultant over 8 years ago where he started with managing client devices but quickly found a passion for virtual device management. Today Windows 365 and Azure Virtual Desktop are the main areas that are being focused on alongside Microsoft Intune. Based on all the community activities Morten has done in the past years, he got rewarded with the Microsoft MVP award in the category of Windows 365 in March 2022.
Read more about Morten Pedholt

Personalised recommendations for you

Based on your interests and search pattern

Attacking and Exploiting Modern Web Applications

Attacking and Exploiting Modern Web Applications

Attacking and Exploiting Modern Web Attacks will help you understand how to identify attack surfaces and detect vulnerabilities. This book takes a hands-on approach to implementation and associated methodologies and equips you with the knowledge and skills needed to effectively combat web attacks.

BookAug 2023338 pages
Automotive Cybersecurity Engineering Handbook

Automotive Cybersecurity Engineering Handbook

This Automotive Cybersecurity Engineering Handbook untangles the complexities of building secure automotive products and helps you to comply with cybersecurity standards. It provides practical tools, tips, and techniques coupled with real-world examples to enable you to create cyber-resilient automotive products with ease.

BookOct 2023392 pages
Official Google Cloud Certified Professional Cloud Security Engineer Exam Guide

Official Google Cloud Certified Professional Cloud Security Engineer Exam Guide

This book will help you to design, develop, and operate security controls on Google Cloud as well as discover best practices for relevant security domains, including identity and access management, network, and data.

BookAug 2023496 pages
Cloud Penetration Testing for Red Teamers

Cloud Penetration Testing for Red Teamers

The advent of cloud networks and the AWS, Azure, and GCP platforms has revolutionized how companies of all sizes in all industries do business online. This book will help you meet the emerging demand for pentesting as it guides you through the tools, techniques, and security measures used by pentesters and red teamers in the 2020s and beyond.

BookNov 2023298 pages
ISACA Certified in Risk and Information Systems Control (CRISC®) Exam Guide

ISACA Certified in Risk and Information Systems Control (CRISC®) Exam Guide

ISACA Certified in Risk and Information Systems Control (CRISC®) Certification Guide is an enterprise IT risk management professional’s dream. With its in-depth approach and various self-assessment exercises, this book arms you with knowledge of every single aspect of the certification, and is a fantastic career companion after you’re certified.

BookSep 2023316 pages5
Burp Suite Cookbook

Burp Suite Cookbook

Burp Suite is an immensely powerful and popular tool for web application security testing. This book provides a collection of recipes that address vulnerabilities in web applications and APIs. It offers guidance on how to configure Burp Suite, make the most of its tools, and explore into its extensions.

BookOct 2023450 pages
Building and Automating Penetration Testing Labs in the Cloud

Building and Automating Penetration Testing Labs in the Cloud

This hands-on guide will help you design and build a variety of penetration testing labs that mimic modern cloud environments running on AWS, Azure, and GCP. In addition to these, you will explore a number of practical strategies on how to manage the complexity, cost, and security risks involved when setting up vulnerable cloud lab environments.

BookOct 2023562 pages
Ethical Hacking Workshop

Ethical Hacking Workshop

As cyber-attacks grow and APT groups advance their skillset, you need to be able to protect your enterprise against cyber-attacks. In order to limit your attack surface, you need to ensure that you leverage the same skills and tools that an adversary may use to hack your environment and discover the security gaps. This book will teach you how to think like a hacker, use state-of-the-art hacking tools, and protect yourself and your organizaiton.

BookOct 2023220 pages
Windows Forensics Analyst Field Guide

Windows Forensics Analyst Field Guide

This book contains step-by-step processes to guide you in any investigation related to Windows OS. You’ll find out how to acquire evidence using multiple tools as well as examine and analyze the collected artifacts, while discovering multiple techniques used in real-world forensic incidents.

BookOct 2023318 pages
Implementing DevSecOps Practices

Implementing DevSecOps Practices

This book is a comprehensive, hands-on guide for individuals new to DevSecOps who want to implement DevSecOps practices successfully and efficiently. With its help, you’ll be able to shift security toward the left, enabling you to merge security into coding in no time.

BookDec 2023258 pages