How to install and configure FSLogix for Azure Virtual Desktops Host pool

Prerequisites

1. Azure Virtual Desktop Host Pool (Entra ID-joined).
2. Entra ID (Azure AD) users assigned to the host pool.
3. Microsoft Entra ID Kerberos is required to use FSLogix without Active Directory.
4. FSLogix Profile Storage: A storage account (Azure Files or Azure NetApp Files) with identity-based access (Entra ID Kerberos).
5. FSLogix App: Latest version downloaded from Microsoft.

Step-by-Step Installation & Configuration

Step 1: Configure Microsoft Entra Kerberos

You must enable Entra Kerberos to allow AVD to access storage using Entra credentials.

1. Go to Azure Portal > Storage Account.
2. Under Settings > Configuration:
   • Set Identity-based access to Enabled using Entra ID Kerberos.
   1. Click Enable on Microsoft Entra Kerberos.
   2. Assign storage permissions to your Entra user group (e.g., "AVD Users") with Storage File Data SMB Share Contributor role.

Step 2: Create and Configure Profile Storage

Use Azure Files (Premium, LRS or ZRS).

1. Create a file share (e.g., profiles) in your storage account.
2. Assign Entra ID users/groups to the share.
3. Use this path in the FSLogix config: \\\\<storageaccountname>.file.core.windows.net\\<sharename>

Step 3: Install FSLogix on Session Hosts

Download FSLogix: https://aka.ms/fslogix-download

1. Install it silently using:

      FSLogixAppsSetup.exe /install /quiet
   

Step 4: Configure FSLogix Settings (Registry or GPO)

Create registry keys manually

You can use the Registry Editor or deploy via PowerShell:

New-Item -Path "HKLM\SOFTWARE\FSLogix\Profiles" -Force
Set-ItemProperty -Path "HKLM\SOFTWARE\FSLogix\Profiles" -Name "Enabled" -Value 1 -Type DWord
Set-ItemProperty -Path "HKLM\SOFTWARE\FSLogix\Profiles" -Name "VHDLocations" -Value "\\<storageaccount>.file.core.windows.net\<sharename>" -Type String
Set-ItemProperty -Path "HKLM\SOFTWARE\FSLogix\Profiles" -Name "FlipFlopProfileDirectoryName" -Value 1 -Type DWord
Set-ItemProperty -Path "HKLM\SOFTWARE\FSLogix\Profiles" -Name "ProfileType" -Value 1 -Type DWord  # 1 = VHDX
Set-ItemProperty -Path "HKLM\SOFTWARE\FSLogix\Profiles" -Name "IsAADEnabled" -Value 1 -Type DWord
Optional for performance:

Optional for performance:

Set-ItemProperty -Path "HKLM\SOFTWARE\FSLogix\Profiles" -Name "VolumeType" -Value "VHDX"

Step 5: Enable AVD Host to Authenticate to Storage (Entra ID Hybrid Token)

Ensure the AVD session host has Entra ID Join + Entra ID Authentication configured:

1. VM must be Entra-joined (check in portal or via dsregcmd /status).
2. dsregcmd /status output should show AzureAdJoined: YES and EnterpriseJoined: NO.

Step 6: Test the Setup

1. Assign a user to the AVD host pool.
2. Login and verify FSLogix mounts the VHDX from your file share.
3. Check logs:

• C:\\ProgramData\\FSLogix\\Logs\\Profile\\
  • Look for successful profile loading