Windows 10: Azure - Unable to Turn on Defender - Memory Integrity on Azure Virtual Desktops using...

We have personal and pooled Azure Virtual Desktops, and we are unable to turn the Defender Memory Integrity on. We have deployed and enabled the memory integrity using Intune policy https://learn.microsoft.com/en-us/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity#enable-memory-integrity-using-intune. The registry key to enable it is in place on my AVD, so I guess the policy is applying, but something is stopping it from running. The hardware requirement is met. System Information shows enabled but not running. If we switch the memory integrity ON m

:)

 

Azure Virtual Desktop

What is Azure Virtual Desktop?

AVD provides a desktop and application virtualization platform on top of the Azure public cloud. That last part is crucial, as it highlights a potential departure on Microsoft’s behalf from offering virtualization services exclusively to Windows users.



With WVD, users could access Windows 10 applications and desktops from virtually anywhere via Windows, Android, iOS, and macOS devices, as well as HTML5 web browsers. Soon, though, AVD will support more operating systems, including Linux.



By leveraging the public cloud infrastructure, Azure Virtual Desktop can offer increased scalability, enhanced collaboration, and less expensive licensing fees than WVD. Further, AVD is a Desktop-as-a-service (DaaS) offering, which means that companies don’t need to support the underlying layers of technology. All they have to do is set it up and administer it.

1. Enhancements to Windows 10 Enterprise Multi-Session VMs

Remote Desktop Session Hosts allow several users to access a single virtual desktop on Windows 10 at the same time so that users can continue to use familiar Windows 10 applications and desktops with their existing per-user Microsoft 365 licenses.



With AVD, you can manage both virtual and physical desktops with Microsoft Endpoint Manager in the same way that you can with shared physical devices.

2. Automatic enrollment of AVD Virtual Machines

In the past, Microsoft created WVD QuickStart to enable users to deploy the virtual desktop service in as little as 1-2 hours for a basic setup, and as little as a few hours from start to finish – all without digging through Microsoft documentation or spending weeks (even months) testing the service.



Despite this, Microsoft did not consider WVD QuickStart one of its official products. But now WVD QuickStart has been formally integrated into the Azure portal with full support, and has been renamed simply ‘QuickStart’.

3. Azure Virtual Desktop VMs join Azure Active Directory

Password and username-related cyber attacks increased by 450% in 2020. ForgeRocks’ 2021 Consumer Identity Breach Report also revealed that phishing and ransomware attacks followed at 25% and 17%, respectively.



Though these findings focus on consumers, they’re notable for enterprise organizations as well, as many employees use their personal devices to log in to their company’s portals. Hackers may use compromised personal devices to gain access to your company’s sensitive data, especially in the healthcare, financial, and technology sectors.

Hope this will be helpful

 

Microsoft renames Windows Virtual Desktop to Azure Virtual Desktop

Source: https://azure.microsoft.com/en-us/bl...rid-workplace/

 

Microsoft Defender and Azure VDI

We have built a POC for Citrix Virtual Apps and Desktops on MS Azure. In Azure Advisor it is showing "Microsoft Defender for DNS should be enabled" and under the Subscription where we have the Virtual Desktops it is showing all the virtual desktops as suggestions and cloud connectors. My question is as follows:

1. I have installed Windows Defender on the image before I created the virtual desktops. So, it should not show up here, but it is showing up. (Citrix-001,002,003)

2. Citrix cloud connectors are created automatically when I created the virtual desktops. So, would it have Defender installed on it automatically?

3. Some of the machines under the list of virtual machines are showing as stopped and deallocated. I am not sure what those machines are. The ones that start with azr-prod-xxxxxx shown below.