Azure Virtual Desktop
| Recommendation | Reliability Stage |
|---|---|
| Ensure that all fault-points and fault-modes are understood and operationalized | Design |
| Design a BCDR strategy that will help to meet the business requirements | Design |
Summary
Details
Monitor service health and resource health for AVD
Impact: High Category: Governance PG Verified: Verified
Description:
Set up Service Health alerts so that you stay aware of service issues, planned maintenance, or other changes that might affect your Azure Virtual Desktop resources. Use Resource Health to monitor your VMs and storage solutions.
Potential Benefits:
Enhanced AVD error tracking and resolution
Learn More:
ARG Query:
Click the Azure Resource Graph tab to view the query
// Azure Resource Graph Query
// This resource graph query, will return rows if service health alerts haven't been configured for AVD service
resourcecontainers
| where type == 'microsoft.resources/subscriptions'
| project subscriptionAlerts=tostring(id),name,tags
| join kind=leftouter (
resources
| where type == 'microsoft.insights/activitylogalerts' and properties.condition contains "ServiceHealth"
| extend subscriptions = properties.scopes
| project subscriptions
| mv-expand subscriptions
| project subscriptionAlerts = tostring(subscriptions)
) on subscriptionAlerts
| where isempty(subscriptionAlerts1)
| project-away subscriptionAlerts1
| project recommendationID = "0bf1a2bb-7617-4ab2-a784-e7ea40c5f01b",id=subscriptionAlerts,name,tags, param1 = "AVDServiceHealthAlertsConfigured: False"
Configure AVD Insights workbook
Impact: High Category: Monitoring and Alerting PG Verified: Verified
Description:
Configure AVD insights workbook template to monitor and troubleshoot AVD workloads across metrics, logs, events, and more. Both Production and DR workloads should be enabled with AVD Insights.
Potential Benefits:
Enhanced AVD monitoring and troubleshooting
Learn More:
ARG Query:
Click the Azure Resource Graph tab to view the query
// cannot-be-validated-with-arg
Ensure separate log analytics workspaces for Prod and DR
Impact: Low Category: Disaster Recovery PG Verified: Verified
Description:
Having separate Log Analytics ensures that your DR environment is fully operational for visibility of the metrics, performance, and other auditing tools your workload teams will rely on in the event of an incident.
Potential Benefits:
Improved DR visibility and operation
Learn More:
ARG Query:
Click the Azure Resource Graph tab to view the query
// under-development
Organize AVD resources using the AVD scale unit model described by the AVD landing zone methodology
Impact: Low Category: Governance PG Verified: Verified
Description:
Follow AVD Landing Zone best practices using multiple resource groups based on resource type and associated shared resources for AVD workloads.
Potential Benefits:
Enhanced organization and scalability
Learn More:
ARG Query:
Click the Azure Resource Graph tab to view the query
// under-development
Monitor and plan capacity for AVD resources
Impact: Low Category: Disaster Recovery PG Verified: Verified
Description:
Monitor and plan for subscription limits and API throttling limits. Keep track of resource usage within your subscription. Consider scaling across multiple subscriptions if further scaling is required. To handle a large number of users, consider scaling horizontally by creating multiple host pools.
Potential Benefits:
Avoids limits, ensures smooth scaling
Learn More:
ARG Query:
Click the Azure Resource Graph tab to view the query
// under-development
Ensure DNS regions are replicated to avoid single point of failure
Impact: High Category: High Availability PG Verified: Verified
Description:
Active Directory Domain Services (AD DS) integrated DNS/other should target Secondary/Tertiary customer DNS across multi-region zones. If using custom DNS, ensure there are redundant DNS servers to avoid a single point of failure.
Potential Benefits:
Improves uptime & resilience
Learn More:
ARG Query:
Click the Azure Resource Graph tab to view the query
// under-development
Implement a multi-region BCDR Plan
Impact: Medium Category: Disaster Recovery PG Verified: Verified
Description:
It is recommended to adopt a multi-region deployment (active-active or active-passive) for AVD. Each region should contain at least identity, name resolution, AVD management resources, and session hosts in case of a primary region outage.
Potential Benefits:
Enhanced resilience and uptime
Learn More:
ARG Query:
Click the Azure Resource Graph tab to view the query
// under-development