Entra Only AVD & FSLogix Setup: How to Ditch Your Domain Controllers
AVD + Entra-only Azure Files with FSLogix: Full Cloud-Native Setup Explained!
Ready to ditch domain controllers? In this Azure tutorial, I’ll show you how to configure AVD with FSLogix using Entra-only identities and Azure Files—a true cloud-native solution for modern IT environments.
We’ll cover everything step-by-step: enabling Entra Kerberos, setting up permissions, configuring FSLogix profiles, and testing with Windows session hosts. This is perfect for anyone looking to boost their IT skills and master cloud-identity management in Azure.
What you’ll learn:
How to deploy AVD without Active Directory
Configure Azure Files for FSLogix profiles
Enable Entra Kerberos authentication
Apply file-level permissions in the Azure portal
If you’re serious about Azure, cloud-native architecture, and improving your IT skills, this video is for you.
Links to documentation and resources are below
00:00 - Start
03:30 - Enable Microsoft Entra Kerberos Authentication
04:31 - Assign Default Share-level Permissions
05:06 - Create the File Share
06:10 - Grant Admin Consent to the Service Principal
06:57 - Update Tags in the Application Manifest File
07:43 - Disable MFA on the Storage Account
09:08 - Configure the Clients to Retrieve Kerberos Tickets
10:29 - Configure Directory and File-level Permissions for FSLogix
16:46 - Enable FSLogix
18:03 - Test Entra Only Azure Files and FSLogix
🔗 Links:
Free Azure guide! Subscribe to the newsletter
https://subscribepage.io/rbsIjt
Zero to Hero with Azure Virtual Desktop
https://www.udemy.com/course/zero-to-...
A Beginner’s Guide to the AZ-900
https://www.udemy.com/course/beginner...
Hybrid Identity with Windows AD and Azure AD
https://www.udemy.com/course/hybrid-i...
Windows 365 Enterprise and Intune Management
https://www.udemy.com/course/windows-...
Microsoft Links:
Cloud Native Identity with Azure Files: Entra-only Secure Access for the Modern Enterprise
https://techcommunity.microsoft.com/b...
Store FSLogix profile containers on Azure Files using Microsoft Entra ID
https://learn.microsoft.com/en-us/fsl...
Assign share-level permissions
https://learn.microsoft.com/en-us/azu...
Update Tags attribute in the application manifest file
https://learn.microsoft.com/en-us/ent...
Configure the clients to retrieve Kerberos tickets
https://learn.microsoft.com/en-us/azu...
Mount the file share with admin-level access
https://learn.microsoft.com/en-us/azu...
Configure Windows ACLs using the Azure portal
Portal URL: https://aka.ms/portal/fileperms
https://learn.microsoft.com/en-us/azu...
FSLogix recommended ACL(s)
https://learn.microsoft.com/en-us/fsl...
Registry settings to configure FSLogix
https://github.com/tsrob50/CiraltosTools