Windows 365 now supported in Mexico and Spain
Today I am pleased to announce that we have enabled Windows 365 in Spain and Mexico. You can now deploy your Cloud PCs into Spain, in the Spain Central region and in Mexico, in the Mexico Central region. Within a provisioning policy if you select the European Union geography, you can then select Spain Central. This increases the number of regions available in the European Union region grouping to six. The Mexico Central region is available from within the new Mexico Geography. Whilst you can select each region specifically we always recommend you select the “Automatic” option to take advantage of more of the benefits the SaaS nature of Windows 365 provides now and in the future. Spain Central: Mexico Central: In the future we will be making some exciting improvements to the provisioning of Cloud PCs by simplifying the region and network selection within your provisioning policies. This expansion increases the number of Azure geographies that Windows 365 supports, giving you more choices for locating your Cloud PCs. This means you can place them closer to your user estate, reducing latency for users in these locations. We are committed to providing more choice and flexibility for your Cloud PCs by enabling new Azure regions over the coming years. This ongoing expansion demonstrates our dedication to evolving the service into a truly global service by growing into existing and new Azure geographies, ensuring you can provide the best service to your organization. Stay tuned for more updates as we continue to enhance Windows 365 and bring it to more locations worldwide.Windows 365 and Azure Virtual Desktop sessions at the Microsoft Technical Takeoff
The next iteration of the Microsoft Technical Takeoff is coming up quick. Four days of in depth sessions, demos, roadmap and Q&A are coming up on Monday March the 3rd to Thursday the 6th. This is a great learning event where we in the Microsoft engineering and product groups go deep on a whole host of topics, from Windows, Azure Virtual Desktop, Intune and Windows365. For those specifically interested in Windows 365 and Azure Virtual Desktop then this is the ultimate short list of sessions. Please click on the link for the session below and then click on the Attend button, (times below are in PST). To access the full site with the entire agenda and session list just visit: aka.ms/TechnicalTakeoff Windows 365 and Azure Virtual Desktop Monday, March 3, 2025 8:30 AM - The path ahead: The roadmap for Windows in the cloud 10:30 AM - Understanding security and management on Windows 365 Link 11:00 AM - Unlocking productivity on the frontline with Windows 365 Tuesday, March 4, 2025 10:30 AM - Skill up! Cloud PC management and reporting 11:00 AM - Get to know Windows security and resiliency in the cloud Wednesday, March 5, 2025 9:30 AM - Enhancing resiliency with Windows 365 10:30 AM - Delivering like-local Windows experiences from the cloud Thursday, March 6, 2025 7:00 AM - Azure Virtual Desktop app management 7:30 AM - Azure Virtual Desktop hostpool management at scale 11:00 AM - Windows cloud migration and deployment best practices
"this device can't connect cloud pcs"
Hello, I'm a newbie admin. I restarted the cloud pc hitting the restart button while the session active. Now we can't connect to enviroment from anywhere, including web. I have full access to everything. We don't have any conditionnal access set up. Restoring to a previous point didn't help. Device is compliant. Connectivity status is available. I'm in need of your assistance. The error reads: "This device can't connect cloud pcs. ask your admin to install any required apps on this device or use another device connect to your cloud pc."
Create options are greyed out in windows 365 blade.
Hello, I am new to windows 365 services, I usually work on azure virtual desktop. We are planning to test windows 365, so I have got the windows 365 administrator role to start with. When I go to windows 365 blade in intune, I see the create options under all the tabs (provisioning policies, custom images, ANC and user settings) greyed out, I see in the document that windows 365 administrator role is enough to start with. Am I missing anything here. Appreciate your help. BR Naveen. SWindows 365 now supported in Japan West
Today I am pleased to announce that we have enabled a second region in Japan to deploy Windows 365 Cloud PC’s. You can now deploy your Cloud PCs into the Japan West Azure region in addition to the existing Japan East region. Within a provisioning policy if you select the Japan geography, you can then select Japan West. This increases the number of regions available to the Windows 365 service when you select the “Automatic” region option of Japan. We always recommend using the Automatic region option when using the Microsoft Hosted Network network type. In the future we will be making some exciting improvements to the provisioning of Cloud PCs by simplifying the region and network selection within your provisioning policies. This expansion increases the number of Azure geographies that Windows 365 supports, giving you more choices for locating your Cloud PCs. This means you can place them closer to your user estate, reducing latency for users in these locations. We are committed to providing more choice and flexibility for your Cloud PCs by enabling new Azure regions over the coming years. This ongoing expansion demonstrates our dedication to evolving the service into a truly global service by growing into existing and new Azure geographies, ensuring you can provide the best service to your organization. Stay tuned for more updates as we continue to enhance Windows 365 and bring it to more locations worldwide.
Remove, Hide, or Relocate the Connection Bar in Windows App when in Full Screen on Cloud PC
When using Cloud PC in full screen mode the connection bar always pops up. It's not Pinned so it auto hides. This issue is the bar pops up anytime the mouse is on top of screen. When using a browser, for example, to navigate to a different tab the user has to mouse to top of the screen. This mouse movement pops up the Connection bar which is VERY invasive and blocks a large portion of the top screen which blocks the browsers tabs. Users have to shift this left/right every time or move the mouse away (wait till it disappears) then hope they have better aiming to click on tab without bringing curser to top of screen... or else the annoying Connection bar pops up. Is there ANY method to be able to any of the these Relocate the connection bar to left side screen (right side interferes with up/down scroll) Delay the connection bar popup for few seconds (mouse on top of screen few seconds to show connection bar) Or permanently remove it and use Windows hotkeys to break out of Full Screen mode Any other idea...Microsoft Teams application window sharing is now generally available on Windows 365
We are happy to announce that Microsoft Teams application window sharing is now generally available on Windows 365 for Windows users. With application window sharing, users can now choose a specific window to share from their desktop screen. Previously, users could only share their full desktop windows or a Microsoft PowerPoint Live presentation. Application window sharing will help reduce the risk of displaying sensitive content during meetings/calls and keep meetings focused by directing participants to specified content. Getting Started The following minimum versions are required to enable the feature on Windows 365: Windows Desktop Client version 1.2.3770 WebSocket service version 1.31.2211.15001 To share your application window in a Microsoft Teams call, select Share content in your call window. Then click the Window panel to choose a window to share. Set up Teams on Windows 365 New to the service? Refer to the Teams on Windows 365 documentation on how to setup Microsoft Teams. Microsoft Teams Application window sharing is also available on Azure Virtual Desktop. To learn more, go to: https://aka.ms/AVDTeamsApplicationWindowSharing
Enhancing Secure Remote Work with Windows 365 and Microsoft Entra Suite
(Windows 365, Microsoft Entra Suite) Contributors: Juan José Guirola Sr. (Security GBB for Advanced Identity) Tenney Bartenfelder (GBB – Advanced Identity) Summary The document discusses the benefits of using Windows 365 and Microsoft Entra Suite to enhance secure remote work environments across various industries. Importance of Secure Remote Work: Remote work offers flexibility and access to a global talent pool but also introduces risks such as data breaches and cyber threats, making secure remote work crucial for business continuity. Windows 365 Cloud PC: Windows 365 provides a full Windows environment streamed from the cloud, offering centralized security, data protection, conditional access, integration with Microsoft security tools, remote management, and scalability. Microsoft Entra Suite Features: Microsoft Entra Suite includes Private Access, Internet Access, ID Governance, ID Protection, Verified ID, and Least Privilege Access, providing comprehensive security for modern workplaces. Global Consulting Firm Case Study: A global consulting firm improved security, scalability, user experience, and identity governance by adopting Windows 365, Microsoft Entra Private Access, and Microsoft Entra Identity Governance. Manufacturing Company Case Study: A manufacturing company addressed data security, scalability, user experience, identity governance, and internet threats by implementing Windows 365 Cloud PC, Microsoft Entra Private Access, Internet Access, and Identity Governance. Healthcare Provider Case Study: A healthcare provider ensured secure remote access, data security, scalability, user experience, identity governance, and verifiable identity by using Windows 365, Microsoft Entra Private Access, Internet Access, Identity Governance, and Verified ID. Comparison with Traditional Virtual Desktop Solutions: Windows 365 offers simplicity, per-user licensing, seamless Microsoft integration, scalability, robust security, and consistent user experience compared to traditional virtual desktop solutions. Comparison with Other IAM Solutions: Microsoft Entra Suite provides identity-centric Zero Trust Network Access, Secure Web Gateway, automated identity lifecycle management, digital identity verification, least privilege access, and advanced threat detection compared to other IAM solutions. Comparison with Other SASE Solutions: Other SASE solutions may offer strong security and scalability but often lack the seamless integration with Microsoft 365 and other productivity tools that Microsoft Entra Suite provides. Conclusion: Windows 365 and Microsoft Entra Suite offer robust, scalable, and integrated solutions for secure remote work, enhancing productivity and security in hybrid work environments. Main Document In today’s digital age, remote work has become a staple for many organizations. However, with the flexibility of remote work comes the challenge of ensuring security across various devices and networks. This is where solutions like Windows 365 and Microsoft Entra Suite come into play, offering robust security features that help organizations maintain productivity without compromising on security. The Importance of Secure Remote Work Remote work offers numerous benefits, including increased flexibility, reduced commute times, and the ability to tap into a global talent pool. However, it also introduces risks such as data breaches, unauthorized access, and cyber threats. Ensuring secure remote work is crucial to protect sensitive information and maintain business continuity. Windows 365: A Secure Cloud PC Solution Windows 365 transforms the traditional desktop experience by streaming a full Windows environment from the cloud to any device. Here are some key benefits: Centralized Security: Windows 365 leverages Microsoft Zero Trust security model, which includes identity verification and risk factor, device health validation, and least-privilege access to ensure that only authorized users can access Cloud PCs. Data Protection: Data is stored in the cloud, not on local devices, reducing the risk of data loss or theft. With features like virtual Trusted Platform Module (vTPM) and Secure Boot, Windows 365 ensures that data is encrypted, both in transit and at rest, and protected from malware and other threats. Conditional Access: Administrators can set Conditional Access policies to control who can access the Cloud PCs and under what conditions, enhancing security by ensuring that access is granted only from compliant devices and locations. Integration with Microsoft Security Tools: It integrates seamlessly with Microsoft Defender for Endpoint, providing advanced threat protection and security management capabilities. Remote Management: IT Administrators can manage and configure Cloud PCs remotely using tools like Microsoft Intune, simplifying the management of security policies and compliance. Scalability and Flexibility: Windows 365 allows organizations to quickly scale up or down based on their needs, providing flexibility to support a dynamic workforce while maintaining security standards. Microsoft Entra Suite: Comprehensive Security for Modern Workplaces Microsoft Entra Suite offers a unified approach to identity and network access security, making it easier for organizations to implement a Zero Trust security model. Key features include: Microsoft Entra Private Access: This feature provides identity-centric Zero Trust Network Access (ZTNA) to secure access to private applications and resources. It helps reduce operational complexity and costs by replacing legacy VPNs. Microsoft Entra Internet Access: An identity-centric Secure Web Gateway (SWG) that protects against malicious internet traffic, unsafe or non-compliant content, and other threats from the open internet. It ensures secure access to SaaS applications and internet traffic. Microsoft Entra ID Governance: A comprehensive identity governance and administration solution that automates the identity and access lifecycle. It ensures that the right people have the right access to the right apps and services at the right time. Microsoft Entra ID Protection: This advanced identity solution block’s identity compromise in real-time using high-assurance authentication methods, automated risk and threat assessment, and adaptive access policies powered by advanced machine learning. Microsoft Entra Verified ID: A managed verifiable credentials service based on open standards that enables real-time identity verification in a secure and privacy-respecting way. It includes premium capabilities like Face Check for streamlined remote onboarding and self-service recovery of passwordless accounts. Least Privilege Access: Automates the access lifecycle to ensure users have the minimum necessary access to perform their roles, helping to prevent lateral movement in case of a breach. Improved User Experience: Enhances the user experience with faster and more secure sign-in via paswordless authentication, single sign-on for all applications, and superior performance. It also provides a self-service portal for managing access requests and approvals. Reduced Complexity and Cost: By integrating multiple security tools into one suite, Microsoft Entra Suite reduces the complexity and cost of managing security tools from multiple vendors. Sample Use Cases Case Study: A Global Consulting Firm Background: A global consulting firm with offices in multiple countries needed a secure and scalable solution to support its remote workforce. The firm faced challenges with its existing VPN-based remote access solution, which was not adequately equipped to handle the increased demand for remote work and stringent security requirements. Additionally, the firm required robust identity governance to manage the lifecycle of user identities and ensure compliance with various international regulations. Challenges: Data Security and Compliance: Ensuring the protection of sensitive client data and compliance with various international regulations. Scalability: The need to quickly scale remote access solutions to accommodate a growing number of remote consultants. User Experience: Providing seamless and efficient user experience for consultants accessing critical applications and client data remotely. Identity Governance: Managing the lifecycle of user identities, including the creation, updating, and removal of access rights, to ensure that consultants had appropriate access based on their roles and responsibilities. Management Complexity: Reducing the complexity of managing a diverse IT environment with multiple security and access control solutions. Solution: The consulting firm adopted Windows 365, Microsoft Entra Private Access, and Microsoft Entra Identity Governance to address these challenges. Windows 365 Scalability: Enabled the firm to quickly scale virtual desktops based on demand, providing flexibility for remote and hybrid work. Centralized Management: Simplified IT management with centralized control over updates, patches, and configurations. Consistent User Experience: Delivered seamless user experience across devices, ensuring consultants could access critical applications and client data efficiently. Microsoft Entra Private Access: Zero Trust Security: Implemented Zero Trust principles to secure access to private applications and resources, ensuring only authorized users could access sensitive information. Conditional Access: Used Conditional Access policies to control access based on user identity, device health, and location, enhancing security. Identity Protection: Leveraged advanced identity protection features to detect and respond to potential security threats in real-time. VPN Replacement: Replaced the legacy VPN solution with Microsoft Entra Private Access, providing secure access to private corporate resources without the need for a traditional VPN. Microsoft Entra Identity Governance: Identity Lifecycle Management: Automated the creation, updating, and removal of user identities based on signals from HR systems, ensuring that consultants had the right access from day one and that access was revoked promptly when they left the organization. Access Lifecycle Management: Managed access rights across various resources, ensuring that consultants had appropriate access based on their roles and responsibilities. This included automated access reviews and entitlement management to maintain compliance and security. Privileged Access Management: Secured privileged accounts by implementing policies for just-in-time access and monitoring privileged activities to prevent misuse. Outcome: Enhanced Security: The firm achieved a higher level of security with Zero Trust principles, protecting sensitive client data and ensuring compliance with international regulations. Improved Performance: Consultants experienced improved performance and reliability with Windows 365, enabling them to work efficiently from any location. Scalability and Flexibility: The firm could easily scale its virtual desktop infrastructure to meet changing demands, supporting a dynamic workforce. Streamlined Management: IT teams benefited from simplified management and centralized control, reducing administrative overhead and improving operational efficiency. By integrating Windows 365, Microsoft Entra Private Access, and Microsoft Entra Identity Governance, the global consulting firm successfully created a secure, scalable, and efficient remote work environment, enhancing productivity and ensuring compliance with industry regulations. Case Study: A Manufacturing Company Background: A global manufacturing company with multiple production facilities and offices worldwide needed a secure and scalable solution to support its remote workforce and 3 rd party access. The company faced challenges with its existing remote access infrastructure, which was not adequately equipped to handle the increased demand for remote work and stringent security requirements. Additionally, the company required robust identity governance to manage the lifecycle of user identities, including joiner, mover, and leaver scenarios, and to control access to internal resources and mitigate internet threats. The company was intrigued by the Entra Private Access ability to provide per app VPN functionality to restrict 3 rd parties from lateral movement on their network. Challenges: Data Security and Compliance: Ensuring the protection of sensitive manufacturing data and compliance with various international regulations. Scalability: The need to quickly scale remote access solutions to accommodate a growing number of remote employees. User Experience: Providing a seamless and efficient user experience for employees accessing critical applications and data remotely. Identity Governance: Managing the lifecycle of user identities, including the creation, updating, and removal of access rights, to ensure that employees had appropriate access based on their roles and responsibilities. Internet Threats: Protecting against malicious internet traffic and ensuring secure access to SaaS applications and internet resources. Management Complexity: Reducing the complexity of managing a diverse IT environment with multiple security and access control solutions. Solution: The manufacturing company adopted Windows 365 Cloud PC, Microsoft Entra Private Access, Microsoft Entra Internet Access, and Microsoft Entra Identity Governance to address these challenges: Windows 365 Cloud PC: Scalability: Enabled the company to quickly scale virtual desktops based on demand, providing flexibility for remote and hybrid work. Centralized Management: Simplified IT management with centralized control over updates, patches, and configurations. Consistent User Experience: Delivered seamless user experience across devices, ensuring employees can access critical applications and data efficiently. Microsoft Entra Private Access: Zero Trust Security: Implemented Zero Trust principles to secure access to private applications and resources, ensuring only authorized users could access sensitive information. Conditional Access: Used Conditional Access policies to control access based on user identity, device health, and location, enhancing security. VPN Replacement: Replaced the legacy VPN solution with Microsoft Entra Private Access, providing secure access to private corporate resources without the need for a traditional VPN. Microsoft Entra Internet Access: Secure Web Gateway: Provided identity-centric Secure Web Gateway (SWG) to protect against malicious internet traffic and ensure secure access to SaaS applications and internet resources. Threat Protection: Enhanced protection against internet threats, ensuring that employees can safely access the internet and SaaS applications. Microsoft Entra Identity Governance: Identity Lifecycle Management: Automated the creation, updating, and removal of user identities based on signals from HR systems, ensuring that employees had the right access from day one and that access was revoked promptly when they left the organization. Access Lifecycle Management: Managed access rights across various resources, ensuring that employees had appropriate access based on their roles and responsibilities. This included automated access reviews and entitlement management to maintain compliance and security. Privileged Access Management: Secured privileged accounts by implementing policies for just-in-time access and monitoring privileged activities to prevent misuse. Outcome: Enhanced Security: The company achieved a higher level of security with Zero Trust principles, protecting sensitive manufacturing data and ensuring compliance with international regulations. Improved Performance: Employees experienced improved performance and reliability with Windows 365 Cloud PC, enabling them to work efficiently from any location. Scalability and Flexibility: The company could easily scale its virtual desktop implementation to meet changing demands, supporting a dynamic workforce. Streamlined Management: IT teams benefited from simplified management and centralized control, reducing administrative overhead and improving operational efficiency. Comprehensive Threat Protection: The company effectively mitigated internet threats and ensured secure access to SaaS applications and internet resources. By integrating Windows 365 Cloud PC, Microsoft Entra Private Access, Microsoft Entra Internet Access, and Microsoft Entra Identity Governance, the manufacturing company successfully created a secure, scalable, and efficient remote work environment, enhancing productivity and ensuring compliance with industry regulations. The desired least privilege for 3 rd party access was achieved by isolating the users on a compliant device segmented by per app VPN access via Global Secure Access. Case Study: A Healthcare Provider Background: A large healthcare provider with multiple hospitals and clinics across the United States needed to ensure secure remote access for its staff to access patient records and other sensitive information. The provider faced challenges with its existing remote access infrastructure, which was not adequately equipped to handle the increased demand for remote work and stringent regulatory requirements such as HIPAA. Additionally, the provider required a solution for verifiable identity to manage the lifecycle of user identities, including joiner, mover, and leaver scenarios, and to ensure that only authorized personnel could access sensitive patient data. Challenges: Data Security and Compliance: Ensuring the protection of sensitive patient data and compliance with healthcare regulations such as HIPAA. Scalability: The need to quickly scale remote access solutions to accommodate a growing number of remote healthcare professionals. User Experience: Providing seamless and efficient user experience for healthcare professionals accessing critical applications and patient records remotely. Identity Governance: Managing the lifecycle of user identities, including the creation, updating, and removal of access rights, to ensure that healthcare professionals had appropriate access based on their roles and responsibilities. Verifiable Identity: Implementing a system to verify the identities of healthcare professionals securely and efficiently. Solution: The healthcare provider adopted Windows 365, Microsoft Entra Private Access, Microsoft Entra Internet Access, Microsoft Entra Identity Governance, and Microsoft Entra Verified ID to address these challenges: Windows 365: Scalability: Enabled the provider to quickly scale virtual desktops based on demand, providing flexibility for remote and hybrid work. Centralized Management: Simplified IT management with centralized control over updates, patches, and configurations. Consistent User Experience: Delivered seamless user experience across devices, ensuring healthcare professionals can access critical applications and patient data efficiently. Microsoft Entra Private Access: Zero Trust Security: Implemented Zero Trust principles to secure access to private applications and resources, ensuring only authorized users could access sensitive information. Conditional Access: Used Conditional Access policies to control access based on user identity, device health, and location, enhancing security. VPN Replacement: Replaced the legacy VPN solution with Microsoft Entra Private Access, providing secure access to private corporate resources without the need for a traditional VPN. Microsoft Entra Internet Access: Secure Web Gateway: Provided identity-centric Secure Web Gateway (SWG) to protect against malicious internet traffic and ensure secure access to SaaS applications and internet resources. Threat Protection: Enhanced protection against internet threats, ensuring that healthcare professionals could safely access the internet and SaaS applications. Microsoft Entra Identity Governance: Identity Lifecycle Management: Automated the creation, updating, and removal of user identities based on signals from HR systems, ensuring that healthcare professionals had the right access from day one and that access was revoked promptly when they left the organization. Access Lifecycle Management: Managed access rights across various resources, ensuring that healthcare professionals had appropriate access based on their roles and responsibilities. This included automated access reviews and entitlement management to maintain compliance and security. Privileged Access Management: Secured privileged accounts by implementing policies for just-in-time access and monitoring privileged activities to prevent misuse Microsoft Entra Verified ID: Verifiable Credentials: Implemented a managed verifiable credential service to issue and verify credentials for healthcare professionals. This ensured that only verified individuals could access sensitive patient data and applications. Identity Verification: Used verifiable credentials to confirm the identities of healthcare professionals during onboarding and access requests, enhancing security and compliance. Decentralized Identity: Leveraged decentralized identifiers (DIDs) to provide healthcare professionals with self-owned, verifiable credentials that could be securely stored and presented when needed. Outcome: Enhanced Security: The provider achieved a higher level of security with Zero Trust principles, protecting sensitive patient data and ensuring compliance with healthcare regulations. Improved Performance: Healthcare professionals experienced improved performance and reliability with Windows 365, enabling them to work efficiently from any location. Scalability and Flexibility: The provider could easily scale its virtual desktop implementation to meet changing demands, supporting a dynamic workforce. Streamlined Management: IT teams benefited from simplified management and centralized control, reducing administrative overhead and improving operational efficiency. Comprehensive Threat Protection: The provider effectively mitigated internet threats and ensured secure access to SaaS applications and internet resources. Verifiable Identity: The use of Microsoft Entra Verified ID ensured that only verified healthcare professionals could access sensitive patient data, enhancing security and compliance. By adopting Windows 365 and the Microsoft Entra Suite, the healthcare provider successfully met their stringent requirements for secure remote access. They achieved enhanced security and compliance with healthcare regulations, ensuring the protection of sensitive patient data. The scalable and flexible virtual desktop provided by Windows 365 allowed the provider to support a dynamic remote workforce efficiently. Additionally, the integration of Microsoft Entra Private Access, Internet Access, Identity Governance, and Verified ID ensured robust identity management, secure access to internal resources, and protection against internet threats. This comprehensive solution streamlined IT management, improved operational efficiency, and delivered seamless user experience for healthcare professionals, ultimately enabling the provider to maintain high standards of patient care and data security in a remote work environment. These case studies demonstrate the versatility and effectiveness of Windows 365 and Microsoft Entra Suite in enhancing secure remote work across various industries. If you need more details or have any other questions, feel free to ask! When comparing Windows 365 and Microsoft Entra Suite to other remote work tools, several key factors come into play, including security, ease of use, scalability, and integration capabilities. Here’s a comparison with some popular remote work solutions: Windows 365 vs. Traditional Virtual Desktop Solutions Windows 365: Simplicity and Ease of Use: Widows 365 is designed for straightforward deployment and management. It provides seamless experience with minimal setup, making it ideal for organizations that need quick, reliable access to virtual desktops without the extensive technical customization. Per-User Licensing: Windows 365 uses a per-user licensing model, which simplifies budgeting and cost management. This model allows for predictable costs, making it easier for businesses to plan their expenses. Integration with Microsoft Ecosystem: Being a Microsoft product, Windows 365 integrates seamlessly with other Microsoft services like Microsoft 365, Microsoft Entra ID, Microsoft Intune, Microsoft Entra Suite, Microsoft Defender for Endpoint, and many more. This integration enhances productivity and security by providing a unified environment. Scalability: Windows 365 can easily scale to meet the needs of growing businesses. Whether you need to add more users or increase resources, Windows 365 can adapt to changing demands without significant reconfiguration. Security: Windows 365 benefits from Microsoft’s robust security infrastructure. It includes features like multi-factor authentication, conditional access, Microsoft Intune, Microsoft Defender for Endpoint, Microsoft Entra Suite (Entra Private/Internet Access, Entra Identity Governance, Entra Identity Protection, Entra Verified ID) ensuring that your data, resources, and applications are always protected. Consistent User Experience: Windows 365 provides a consistent and familiar Windows experience across devices. Users can access their Cloud PC from any device with an internet connection, maintaining productivity and continuity. Traditional Virtual Desktop Solutions: Complexity in Setup and Management: Traditional solutions can be complex to set up and manage, requiring significant IT expertise and resources. This complexity can lead to higher operational costs and longer deployment times. Scalability Issues: Scaling traditional virtual desktops solutions can be challenging. Adding new users or increasing resources often requires substantial reconfiguration and investment in additional hardware. Integration Challenges: Non-Microsoft solutions may not integrate as seamlessly with other tools and services, especially those within the Microsoft ecosystem. This can result in fragmented user experience and reduced productivity. Security Concerns: While traditional solutions offer security features, they may not match the comprehensive security infrastructure provided by Microsoft. This includes advanced threat protection, multi-factor authentication, and seamless integration with security tools like Microsoft Defender and Microsoft Entra Suite. Cost Management: Traditional solutions often use a per-device licensing model, which can be less predictable and more expensive compared to the per-user licensing model of Windows 365. This can make budgeting and cost management more difficult. User Experience: Traditional solutions might not provide a consistent and familiar user experience across different devices. Users may face issues with performance and accessibility, impacting their productivity. Microsoft Entra Suite vs Other Identity and Access Management (IAM) Solutions Microsoft Entra Suite: Microsoft Entra Private Access Identity-Centric Zero Trust Network Access (ZTNA): Replaces traditional VPNs with a more secure, identity-centric approach, reducing the attack surface and mitigating lateral movement. Seamless Access: Provides fast, seamless access to private applications from any device and location, enhancing user productivity. Conditional Access Policies: Enforces adaptive Conditional Access controls, including multifactor authentication (MFA), to validate both device and user identities. Microsoft Entra Internet Access Secure Web Gateway (SWG): Protects against malicious internet traffic and unsafe content, ensuring secure access to SaaS apps and internet resources. Identity-Centric Security: Integrates identity and network access controls to provide comprehensive protection across public and private networks. Microsoft Entra ID Governance Automated Identity Lifecycle Management: Ensures that the right people have the right access to the right resources at the right time, improving productivity and security. Access Reviews and Compliance: Facilitates regular access reviews and compliance checks to reduce the risk of access abuse and ensure regulatory compliance. Delegated Access Management: Allows business groups to manage access requests and approvals, streamlining operations and reducing IT workload. Microsoft Entra Verified ID Digital Identity Verification: Enables secure, real-time verification of identity claims and credentials, reducing fraud and improving trust. Self-Service Enrollment: Simplifies identity verification processes, reducing the need for support calls and manual checks. Open Standards-Based: Built on open standards, ensuring interoperability and flexibility for various use cases. Least Privilege Access Role-Based Access Control (RBAC): Assigns users the minimum permissions necessary to perform their duties, reducing the risk of unauthorized access. Just-In-Time Access: Grants access rights only for the duration needed, minimizing the window of opportunity for potential attackers. Regular Audits: Conducts periodic reviews of user access to ensure compliance with the principle of least privilege. Microsoft Entra ID Protection Advanced Threat Detection: Uses machine learning to identify and respond to sign-in risks and unusual user behavior in real-time. Adaptive Access Policies: Automatically adjusts access policies based on detected risks, enhancing security without compromising user experience. Integration with Security Tools: Seamlessly integrates with other Microsoft and non-Microsoft security solutions for comprehensive threat management. Other IAM Solutions: Security: Varies widely depending on the provider but may not offer the same level of integration with Conditional Access and Zero Trust principles. Ease of Use: User experience can vary, with some solutions requiring more complex setup and management. Scalability: Many IAM solutions are scalable, but integration with existing systems can be challenging. Integration: May not integrate as seamlessly with Microsoft 365 and other productivity tools, potentially leading to a fragmented user experience. Other Secure Access Service Edge (SASE) Solutions Security: Generally strong, but the level of identity integration can vary. Ease of Use: User experience can differ, with some solutions requiring more complex configurations. Scalability: Typically scalable, but integration with existing systems and applications can be a challenge. Integration: May not offer the same level of integration with Microsoft 365 and other productivity tools, potentially leading to a less cohesive experience. Conclusion Windows 365 and Microsoft Entra Suite offer robust, scalable, and integrated solutions for secure remote work. This combined solution stands out for its comprehensive security features, ease of use, and seamless integration with other Microsoft services. While other solutions may offer strong security and scalability, the deep integration and unified ecosystem provided by Microsoft can significantly enhance productivity and security for remote hybrid work environments. Stay tuned for a follow up blog discussing the Business Value of this combined solution (ROI/TCO).
Windows 11 22H2 | Remote Desktop Session | Disconnected
Since upgrading to Windows 11 Enterprise 22H2 (10.0.22621.1992) via (WUfB), connections via Windows 365 App, Edge Browser, Remote Desktop Client, and Windows 365 Boot all fail to connect with the following error: +++++++++++++++++++++++++++ Remote Desktop Your Remote Desktop Services session has ended, possibly for one of the following reasons: The administrator has ended the session. An error occurred while the connection was being established. A network problem occurred. [Expanded Information] Error code: 0x3 Extended error code: 0x12 Timestamp (UTC): 2023-07-14T05:03:43.990Z Activity ID: cb06eab3-0690-4f06-9365-060549f70000 +++++++++++++++++++++++++++ "Turn off UDP On Client" has been set it to Enabled to try and rectify the issue. No success. Windows Components > Remote Desktop Services > Remote Desktop Connection Client Reprovisioning the device back to Windows 11 Enterprise 21H2 works successfully and connections are established as expected. Thoughts? Andy
