Microsoft docs page recently got updated to announce AVD Intune Support is available for Windows 10 or Windows 11 Multi-Session.
It’s great news that Microsoft Endpoint Manager (MEM) Intune officially supports Windows 10 or Windows 11 multi-session VMs. This support is in public preview while writing this post.
Read the latest updated post – Intune Support For Multi-Session Windows Server OS Version | AVD Workloads.
I have tested Windows 11 or 10 multi-session operating system with Intune, and the experience is shared in the previous post – AVD Windows 10 Multi-Session Intune Hybrid Azure AD Support. As you can see in that post, the Access Work or School option is missing from the settings app on Windows 10 Multi-session.
The only option to enroll Windows 10 multi-session VMs into Intune is using the Intune Group policy. You have more details about Windows 10 Intune Enrollment Using Group Policy | Automatic Enrollment | AVD | Azure Virtual Desktop. Let’s also understand what is Microsoft Endpoint Manager (#MEM).
Windows 10 multi-session support is already in place for Configuration Manager (a.k.a SCCM). You can read more about ConfigMgr Windows 10 Multi-Session Support For AVD | SCCM. Also, you can read about Windows 10 multi-session patching options with ConfigMgr.
Prerequisites – AVD Intune Support is Available for Windows 10 Multi-Session
The following are the prerequisites and limited support available for Windows 10 Multi-Session VMs using Endpoint Manager Intune. Yes, AVD Intune Support is Announced for Windows 10 Multi-Session, but this is in public preview (generally available now) while writing this post. Things can change sooner after the public preview release.
- Windows 10 multi-session, version 1903 or later.
- Hybrid Azure AD-joined (Domain Join + Azure AD Registered).
- Set up host pool as pooled for Windows 10 multi-session VMs.
- Enrolled in Intune using any of the following options:
- Use Active Directory group policy, set to use Device credentials, and set to automatically enroll devices that are Hybrid Azure AD-joined.
- Configuration Manager/SCCM co-management to enroll in Endpoint Manager Intune (MEM).
Limited Support with Intune (MEM)
The following are the limited support available with MEM Intune. I think soon; we will have more support announcements from Microsoft.
- Only Intune Device-based policy configurations are supported. You cannot deploy the policies of User scope policies at this time.
- All Windows 10 multi-session configurations must be targeted to Azure AD device groups.
- Already existing Intune device configuration profiles policies are not supported for Windows 10 Enterprise multi-session VMs.
- Only support device certificates at this point.
Intune Configuration Policies for Windows 10 Multi-Session
Let’s check how to create Intune policies for AVD Windows 10 multi-session VMs. Ensure you have gone through the limited support with Intune (MEM) points and prerequisites before configuring Intune policies.
- Sign in to https://endpoint.microsoft.com/ portal with admin access
- Select Devices > Windows > Configuration profiles > Create Profile.
- Select Windows 10 and later from Platform options.
- Select Settings Catalog (Preview) from For Profile type.
- Click on Create button.
Enter the profile name and Description of the profile and click on the Next button.
Intune Filters for Multi-Session
From the Configuration settings page, select Add settings hyperlink.
Under Settings picker, select Add filter button to show only Windows 10 multi-session supported policies from Intune settings catalog. To filter, select the following options:
- Key: OS edition
- Operator: ==
- Value: Enterprise multi-session
- Select the Apply button to show the relevant policies
For example, I want to deploy some Microsoft Edge-related configuration policies. On the search bar, type in Edge and click on the search button to show the relevant policies.
You must select only Device-based policies now as shown in the below screenshot. Try to configure each policy after selection.
Click on the NEXT button to continue to the next page.
NOTE! – You can see the scope for the policy in parentheses (Device or User). Currently, only device settings are supported for multisession.
The rest of the configurations are similar to the post How To Set Time Zone For AVD VMs With Endpoint Manager | Intune Policies | Settings Catalog. Only make sure you must assign Windows 10 multi-session device-based configuration policies only to Azure AD device groups.
Troubleshooting Options for AVD
The following posts might help you troubleshoot issues related to the Intune Settings catalog (and, in general, Intune troubleshooting).
- Free Intune Training Videos
- How to Start Troubleshooting Intune Issues
- Windows 10 MDM Log Checklist
- MDM Diagnostics Tool – Tips & Tricks
- Learn How to Collect Windows 10 Diagnostics Information from Intune Portal | Endpoint Manager
Anoop is Microsoft MVP! He is a Solution Architect in enterprise client management with more than 20 years of experience (calculation done in 2021) in IT. He is Blogger, Speaker, and Local User Group HTMD Community leader. His main focus is on Device Management technologies like SCCM 2012, Current Branch, and Intune. He writes about ConfigMgr, Windows 11, Windows 10, Azure AD, Microsoft Intune, Windows 365, AVD, etc………