Windows 10: Defender AV Security Intelligence and Product Updates for Azure Virtual Desktops.

I have persistent AVDs with Defender AV running in passive mode. I need to know what's the default method for Defender AV to receive Security Intelligence Updates and Product updates on these AVDs. Does it automatically reach out to the windows update servers to get updates, or do I need to configure something to setup these updates?This article has me confused, Configure Microsoft Defender Antivirus on a remote desktop or virtual desktop infrastructure environment Microsoft LearnDo I need to follow the step mentioned in this article or it is not required to get the updates?

:)

 

Microsoft renames Windows Virtual Desktop to Azure Virtual Desktop

Source: https://azure.microsoft.com/en-us/bl...rid-workplace/

 

Microsoft Defender and Azure VDI

We have built a POC for Citrix Virtual Apps and Desktops on MS Azure. In Azure Advisor it is showing "Microsoft Defender for DNS should be enabled" and under the Subscription where we have the Virtual Desktops it is showing all the virtual desktops as suggestions and cloud connectors. My question is as follows:

1. I have installed Windows Defender on the image before I created the virtual desktops. So, it should not show up here, but it is showing up. (Citrix-001,002,003)

2. Citrix cloud connectors are created automatically when I created the virtual desktops. So, would it have Defender installed on it automatically?

3. Some of the machines under the list of virtual machines are showing as stopped and deallocated. I am not sure what those machines are. The ones that start with azr-prod-xxxxxx shown below.

 

Azure Virtual Desktop

What is Azure Virtual Desktop?

AVD provides a desktop and application virtualization platform on top of the Azure public cloud. That last part is crucial, as it highlights a potential departure on Microsoft’s behalf from offering virtualization services exclusively to Windows users.



With WVD, users could access Windows 10 applications and desktops from virtually anywhere via Windows, Android, iOS, and macOS devices, as well as HTML5 web browsers. Soon, though, AVD will support more operating systems, including Linux.



By leveraging the public cloud infrastructure, Azure Virtual Desktop can offer increased scalability, enhanced collaboration, and less expensive licensing fees than WVD. Further, AVD is a Desktop-as-a-service (DaaS) offering, which means that companies don’t need to support the underlying layers of technology. All they have to do is set it up and administer it.

1. Enhancements to Windows 10 Enterprise Multi-Session VMs

Remote Desktop Session Hosts allow several users to access a single virtual desktop on Windows 10 at the same time so that users can continue to use familiar Windows 10 applications and desktops with their existing per-user Microsoft 365 licenses.



With AVD, you can manage both virtual and physical desktops with Microsoft Endpoint Manager in the same way that you can with shared physical devices.

2. Automatic enrollment of AVD Virtual Machines

In the past, Microsoft created WVD QuickStart to enable users to deploy the virtual desktop service in as little as 1-2 hours for a basic setup, and as little as a few hours from start to finish – all without digging through Microsoft documentation or spending weeks (even months) testing the service.



Despite this, Microsoft did not consider WVD QuickStart one of its official products. But now WVD QuickStart has been formally integrated into the Azure portal with full support, and has been renamed simply ‘QuickStart’.

3. Azure Virtual Desktop VMs join Azure Active Directory

Password and username-related cyber attacks increased by 450% in 2020. ForgeRocks’ 2021 Consumer Identity Breach Report also revealed that phishing and ransomware attacks followed at 25% and 17%, respectively.



Though these findings focus on consumers, they’re notable for enterprise organizations as well, as many employees use their personal devices to log in to their company’s portals. Hackers may use compromised personal devices to gain access to your company’s sensitive data, especially in the healthcare, financial, and technology sectors.

Hope this will be helpful