Entra Only AVD & FSLogix Setup: How to Ditch Your Domain Controllers

AVD + Entra-only Azure Files with FSLogix: Full Cloud-Native Setup Explained! Ready to ditch domain controllers? In this Azure tutorial, I’ll show you how to configure AVD with FSLogix using Entra-only identities and Azure Files—a true cloud-native solution for modern IT environments. We’ll cover everything step-by-step: enabling Entra Kerberos, setting up permissions, configuring FSLogix profiles, and testing with Windows session hosts. This is perfect for anyone looking to boost their IT skills and master cloud-identity management in Azure. What you’ll learn: How to deploy AVD without Active Directory Configure Azure Files for FSLogix profiles Enable Entra Kerberos authentication Apply file-level permissions in the Azure portal If you’re serious about Azure, cloud-native architecture, and improving your IT skills, this video is for you. Links to documentation and resources are below 00:00 - Start 03:30 - Enable Microsoft Entra Kerberos Authentication 04:31 - Assign Default Share-level Permissions 05:06 - Create the File Share 06:10 - Grant Admin Consent to the Service Principal 06:57 - Update Tags in the Application Manifest File 07:43 - Disable MFA on the Storage Account 09:08 - Configure the Clients to Retrieve Kerberos Tickets 10:29 - Configure Directory and File-level Permissions for FSLogix 16:46 - Enable FSLogix 18:03 - Test Entra Only Azure Files and FSLogix 🔗 Links: Free Azure guide! Subscribe to the newsletter https://subscribepage.io/rbsIjt Zero to Hero with Azure Virtual Desktop https://www.udemy.com/course/zero-to-... A Beginner’s Guide to the AZ-900 https://www.udemy.com/course/beginner... Hybrid Identity with Windows AD and Azure AD https://www.udemy.com/course/hybrid-i... Windows 365 Enterprise and Intune Management https://www.udemy.com/course/windows-... Microsoft Links: Cloud Native Identity with Azure Files: Entra-only Secure Access for the Modern Enterprise https://techcommunity.microsoft.com/b... Store FSLogix profile containers on Azure Files using Microsoft Entra ID https://learn.microsoft.com/en-us/fsl... Assign share-level permissions https://learn.microsoft.com/en-us/azu... Update Tags attribute in the application manifest file https://learn.microsoft.com/en-us/ent... Configure the clients to retrieve Kerberos tickets https://learn.microsoft.com/en-us/azu... Mount the file share with admin-level access https://learn.microsoft.com/en-us/azu... Configure Windows ACLs using the Azure portal Portal URL: https://aka.ms/portal/fileperms https://learn.microsoft.com/en-us/azu... FSLogix recommended ACL(s) https://learn.microsoft.com/en-us/fsl... Registry settings to configure FSLogix https://github.com/tsrob50/CiraltosTools