Skip to content
Trending
Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface
AVD Intune Support is Available for Windows 10 or Windows 11 Multi-Session

AVD Intune Support is Available for Windows 10 or Windows 11 Multi-Session

Written By Anoop C Nair
Last Updated August 26, 2024
Posted In AVD
SHARE

The Microsoft docs page recently received an update announcing that AVD Intune Support is available for Windows 10 or Windows 11 Multi-Session. It’s great news that Microsoft Endpoint Manager (MEM) Intune officially supports Windows 10 or Windows 11 multi-session VMs. This support is in public preview while writing this post.

I have tested Windows 11 or 10 multi-session operating systems with Intune, and my experience is shared in the previous post, AVD Windows 10 Multi-Session Intune Hybrid Azure AD Support. As you can see in that post, the Access Work or School option is missing from the settings app on Windows 10 Multi-session.

The only option to enroll Windows 10 multi-session VMs into Intune is using the Intune Group policy. You have more details about Windows 10 Intune Enrollment Using Group Policy | Automatic Enrollment | AVD | Azure Virtual Desktop. Let’s also understand what is Microsoft Endpoint Manager (#MEM).

Windows 10 multi-session support is already in place for Configuration Manager (a.k.a SCCM). You can read more about ConfigMgr Windows 10 Multi-Session Support For AVD | SCCM. Also, you can read about Windows 10 multi-session patching options with ConfigMgr.

Patch My PC
AVD Intune Support is Available for Windows 10 or Windows 11 Multi-Session - Fig.1
AVD Intune Support is Available for Windows 10 or Windows 11 Multi-Session – Fig.1

Prerequisites – AVD Intune Support is Available for Windows 10 Multi-Session

The following are the prerequisites and limited support available for Windows 10 Multi-Session VMs using Endpoint Manager Intune. Yes, AVD Intune Support has been announced for Windows 10 Multi-Session, but this is in public preview (generally available now) while writing this post. Things can change sooner after the public preview release.

  • Windows 10 multi-session, version 1903 or later.
  • Hybrid Azure AD-joined (Domain Join + Azure AD Registered).
  • Set up host pool as pooled for Windows 10 multi-session VMs.
  • Enrolled in Intune using any of the following options:
    • Use Active Directory group policy, set to use Device credentials, and set to enroll devices that are Hybrid Azure AD-joined automatically.
    • Configuration Manager/SCCM co-management to enrol in Endpoint Manager Intune (MEM).
AVD Intune Support is Available for Windows 10 or Windows 11 Multi-Session - Fig.2
AVD Intune Support is Available for Windows 10 or Windows 11 Multi-Session – Fig.2

Limited Support with Intune (MEM)

The following is the limited support available with MEM Intune. I think we will soon have more support announcements from Microsoft.

  • Only Intune Device-based policy configurations are supported. You cannot deploy the User scope policies at this time.
  • All Windows 10 multi-session configurations must be targeted to Azure AD device groups.
  • Existing Intune device configuration profile policies are not supported for Windows 10 Enterprise multi-session VMs.
  • Only support device certificates at this point.

Intune Configuration Policies for Windows 10 Multi-Session

Let’s check how to create Intune policies for AVD Windows 10 multi-session VMs. Before configuring Intune policies, ensure you have reviewed the limited support with Intune (MEM) points and prerequisites.

  • Sign in to https://endpoint.microsoft.com/ portal with admin access
  • Select Devices > Windows > Configuration profiles > Create Profile.
  • Select Windows 10 and later from the Platform options.
  • Select Settings Catalog (Preview) for the Profile type.
  • Click on the Create button.
AVD Intune Support is Available for Windows 10 or Windows 11 Multi-Session - Fig.3
AVD Intune Support is Available for Windows 10 or Windows 11 Multi-Session – Fig.3

Enter the profile name and Description of the profile and click on the Next button.

AVD Intune Support is Available for Windows 10 or Windows 11 Multi-Session - Fig.4
AVD Intune Support is Available for Windows 10 or Windows 11 Multi-Session – Fig.4

Intune Filters for Multi-Session

From the Configuration settings page, select the Add settings hyperlink.
Under the Settings selector, select the Add filter button to show only Windows 10 multi-session supported policies from the Intune settings catalog. To filter, select the following options:

  • Key: OS edition
  • Operator: ==
  • Value: Enterprise multi-session
  • Select the Apply button to show the relevant policies
AVD Intune Support is Available for Windows 10 or Windows 11 Multi-Session - Fig.5
AVD Intune Support is Available for Windows 10 or Windows 11 Multi-Session – Fig.5

For example, I want to deploy some Microsoft Edge-related configuration policies. On the search bar, type in Edge and click the search button to show the relevant policies.

Now, as shown in the screenshot below, you must select only device-based policies. After choosing each policy, try to configure it.

Click on the NEXT button to continue to the next page.

NOTE! The policy’s scope is shown in parentheses (Device or User). Currently, only device settings are supported for multisession.

AVD Intune Support is Available for Windows 10 or Windows 11 Multi-Session - Fig.6
AVD Intune Support is Available for Windows 10 or Windows 11 Multi-Session – Fig.6

The rest of the configurations are similar to the post How To Set Time Zone For AVD VMs With Endpoint Manager | Intune Policies | Settings Catalog. Only ensure you assign Windows 10 multi-session device-based configuration policies only to Azure AD device groups.

Troubleshooting Options for AVD

The following posts might help you troubleshoot issues related to the Intune Settings catalog (and, in general, Intune troubleshooting).

We are on WhatsApp. To get the latest step-by-step guides and news updates, Join our Channel. Click here –HTMD WhatsApp.

Author

Anoop C Nair has been Microsoft MVP for 10 consecutive years from 2015 onwards. He is a Workplace Solution Architect with more than 22+ years of experience in Workplace technologies. He is a Blogger, Speaker, and Local User Group Community leader. His primary focus is on Device Management technologies like SCCM and Intune. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security, Career, etc.

Written by

Anoop C Nair is Workplace Technology solution architect with 25+ years of experience in global enterprise organizations such as JP Morgan, Capgemini, etc. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He also conducts Intune and modern workplace tech training for enterprise organizations. He is Blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security.

Discussion · 1 comment

  1. Hey, did you some testing with AVD Personal Host and ESP? It seems like dynamic groups are not supported/working. Do you have made any experiences with this? Thanks in advance

    Reply

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

AVD

Windows 365 Frontline is Now Windows 365 Flex with No Change to Features or Licensing

Key Takeaways Windows 365 Frontline is Now Windows 365 Flex with No Change to Features or Licensing! Hey, let’s discuss about Windows 365 and Azure Virtual Desktop Expanding Access to Cloud Windows for Every Workstyle. The way people work is evolving, and so are cloud-delivered Windows solutions. From small businesses to enterprises and shift workers, […]

AC Anoop C Nair 4 min read
AVD

How RDP Multipath Improves Azure Virtual Desktop Connectivity Using Dynamic UDP Path Selection

Key Takeaways How RDP Multipath Improves Azure Virtual Desktop Connectivity Using Dynamic UDP Path Selection! RDP Multipath creates multiple connection paths between your device and the remote desktop instead of relying on just one. It continuously checks which path is performing best and automatically switches if one becomes slow or drops. This ensures a smoother […]

AC Anoop C Nair 4 min read
AVD

Resilient Connectivity Architecture with Multiple Service Instances in Azure

Key Takeaways Resilient Connectivity Architecture with Multiple Service Instances in Azure! This architecture helps IT administrators by providing a more reliable and scalable connectivity platform for cloud services. Because multiple service instances run independently within each region, the platform can continue operating even if one component fails. This reduces service disruptions and ensures that users […]

AC Anoop C Nair 3 min read