אודות פרק זה
For years, the AVD decision was closely tied to an Azure infrastructure decision. If you wanted Microsoft’s brokered remote desktop experience, the assumption was usually that the session hosts would live in Azure too.
AVD Hybrid changes that equation.
In this episode of Demystifying Microsoft, Nathan Taylor sits down with Denis Vozian, Azure Cloud Engineer at Sourcepass, to explore how Azure Virtual Desktop can now extend to virtual machines running on infrastructure an organization already owns.
What You’ll Learn:
- Why organizations want AVD without moving the underlying workload into Azure
- How AVD Hybrid brokers access to on-premises virtual machines
- Why HTTPS-based access can reduce reliance on VPN-based remote desktop connectivity
- How Entra ID Conditional Access can still apply to AVD Hybrid connections
- Why AVD Hybrid is less restrictive about underlying infrastructure than Azure
- Why Azure Arc is central to the deployment architecture
- How Denis uses Azure DevOps and BICEP to automate VM onboarding
- Why the lack of Windows 11 multi-session support remains a significant limitation
About the Guest:
Denis Vozian is an Azure Cloud Engineer at Sourcepass with deep expertise across Microsoft Azure and Microsoft 365 technologies. A highly certified Microsoft professional, Dennis holds advanced credentials including Azure Solutions Architect Expert, Azure Network Engineer Associate, Enterprise Administrator Expert, Azure Security Engineer Associate, and Teams Administrator Associate.
With extensive hands-on experience designing, securing, and optimizing modern cloud environments, he helps organizations navigate complex Microsoft infrastructure, networking, security, and workplace transformation challenges.
About the Host:
Nathan Taylor is Senior Vice President and Global Microsoft Practice Leader at Sourcepass, where he leads the Sourcepass Center of Excellence for Microsoft, also known as the Sourcepass MCOE. With nearly two decades of experience, he helps organizations manage complex Microsoft cloud and security decisions by turning technology into secure, scalable outcomes.
Episode Highlights:
Denis explains why AVD remains a strong option for managed desktops, especially when infrastructure can be deployed through code, documented properly and scaled according to actual usage.
AVD Hybrid lets users connect to virtual machines running on-premises through the Windows app over HTTPS, without requiring the VM itself to sit in Azure or users to establish a traditional VPN connection.
Azure Local requires specific infrastructure and deployment patterns. Denis explains why AVD Hybrid gives IT teams considerably more freedom over the underlying hypervisor and hardware.
With Microsoft handling the connection brokerage, IT no longer needs to manage the remote-access gateway in the same way. Conditional Access in Entra ID can then be applied to control who is allowed to connect.
The main deployment challenge Denis identifies is getting virtual machines Arc-enabled reliably. He explains how he uses an Azure DevOps agent, managed service account, PowerShell, and pipeline logic to automate the process.
AVD Hybrid supports familiar AVD concepts such as RemoteApp and full desktops, but Windows 11 multi-session is not currently supported. Denis calls that out as a major missing capability for many prospective deployments.
Episode Resources:
Explore whether AVD Hybrid is the right fit for your infrastructure. Talk to Sourcepass MCOE about designing a secure, flexible deployment around your existing environment: https://sourcepassmcoe.com/demystifying-microsoft-contact?utm_source=podcast&utm_medium=show-notes&utm_campaign=demystifying-microsoft-show
Quotes:
- “You can connect over HTTPS without any VPN, without anything like that.”
- “You’re not forced to use Azure Local, and you’re not forced to use that hardware that has been certified.”
- “The security benefit is really great. You don’t have to manage that brokerage anymore.”
Demystifying Microsoft is handcrafted by our friends over at: fame.so
אנגלית
ארצות הברית
תעתיק 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
פרקים אחרים בפודקאסט הזה
Modern security teams are not short on alerts. The bigger challenge is knowing what deserves attention first and responding before an incident spreads.
In this episode of Demystifying Microsoft, Austin Kelly from Sourcepass MCOE explains how Microsoft Defender has evolved beyond traditional antivi…
Organizations tend to approach AI risk from one of two directions: restrict it heavily or encourage adoption quickly. Gabriel Friedlander, Founder and CEO of Wizer and former founder of ObserveIT, sees problems with both.
In this episode of Demystifying Microsoft, Nathan and Gabriel discuss why or…
GoDaddy can make Microsoft 365 easy to adopt when a company is small. The friction tends to appear later, when IT needs access to controls that sit outside GoDaddy’s managed experience.
In this episode of Demystifying Microsoft, Nathan Taylor sits down with Lindsay Cowan, Senior Sales and Business…
Microsoft has a habit of dropping new capabilities into subscriptions without much noise. Business Premium is no longer just a "basic" option for small teams and Austin Kelly highlights why. The most immediate gain is the increase to a 100GB mailbox, which removes a long-standing frustration for h…
הצהרה: הפודקאסט והגרפיקה המוטבעים בדף זה הם מ-Sourcepass Center of Excellence for Microsoft, שהוא רכושו של בעליו ואינו קשור או מאושר על ידי Listen Notes, Inc.
