Microsoft docs page recently got updated to announce WVD Intune Support is available for Windows 10 Multi-Session. Mattias Melkersen well spots this update on Twitter. It’s great news that Microsoft Endpoint Manager (MEM) Intune officially supports Windows 10 multi-session VMs. This support is in public preview while writing this post.
I have tested Windows 10 multi-session operating system with Intune, and the experience is shared in the previous post – WVD Windows 10 Multi-Session Intune Hybrid Azure AD Support. As you can see in that post, the Access Work or School option is missing from the settings app on Windows 10 Multi-session.
The only option to enroll Windows 10 multi-session VMs into Intune is using the Intune Group policy. You have more details about Windows 10 Intune Enrollment Using Group Policy | Automatic Enrollment | WVD | Windows Virtual Desktop. Let’s also understand what is Microsoft Endpoint Manager (#MEM).
Windows 10 multi-session support is already in place for Configuration Manager (a.k.a SCCM). You can read more about ConfigMgr Windows 10 Multi-Session Support For WVD | SCCM. Also, you can read about Windows 10 multi-session patching options with ConfigMgr.
Prerequisites – WVD Intune Support is Available for Windows 10 Multi-Session
The following are the prerequisites and limited support available for Windows 10 Multi-Session VMs using Endpoint Manager Intune. Yes, WVD Intune Support is Announced for Windows 10 Multi-Session, but this is in public preview while writing this post. Things can change sooner after the public preview release.
- Windows 10 multi-session, version 1903 or later.
- Hybrid Azure AD-joined (Domain Join + Azure AD Registered).
- Set up host pool as pooled for Windows 10 multi-session VMs.
- Enrolled in Intune using any of the following options:
- Use Active Directory group policy, set to use Device credentials, and set to automatically enroll devices that are Hybrid Azure AD-joined.
- Configuration Manager/SCCM co-management to enroll to Endpoint Manager Intune (MEM).
Limited Support with Intune (MEM)
The following are the limited support available with MEM Intune. I think soon; we will have more support announcements from Microsoft.
- Only Intune Device-based policy configurations are supported. You cannot deploy the policies of User scope policies at this time.
- All Windows 10 multi-session configurations must be targeted to Azure AD device groups.
- Already existing Intune device configuration profiles policies are not supported for Windows 10 Enterprise multi-session VMs.
- Only support device certificates at this point.
Intune Configuration Policies for Windows 10 Multi-Session
Let’s check how to create Intune policies for WVD Windows 10 multi-session VMs. Ensure you have gone through the limited support with Intune (MEM) points and prerequisites before configuring Intune policies.
- Sign in to https://endpoint.microsoft.com/ portal with admin access
- Select Devices > Windows > Configuration profiles > Create Profile.
- Select Windows 10 and later from Platform options.
- Select Settings Catalog (Preview) from For Profile type.
- Click on Create button.
Enter the profile name and Description about the profile and click on Next button.
From the Configuration settings page, select Add settings hyperlink.
Under Settings picker, select Add filter button to show only Windows 10 multi-session supported policies from Intune settings catalog. To filter, select the following options:
- Key: OS edition
- Operator: ==
- Value: Enterprise multi-session
- Select the Apply button to show the relevant policies
For example, I want to deploy some Microsoft Edge-related configuration policies. On the search bar, type in Edge and click on the search button to show the relevant policies.
You must select only Device-based policies now as shown in the below screenshot. Try to configure each policy after selection.
Click on NEXT button to continue to the next page.
NOTE! – You can see the scope for the policy in parentheses (Device or User). Currently, only device settings are supported for multisession.
The rest of the configurations are similar to the post How To Set Time Zone For WVD VMs With Endpoint Manager | Intune Policies | Settings Catalog. Only make sure you must assign Windows 10 multi-session device-based configuration policies only to Azure AD device groups.
The following posts might help you troubleshoot issues related to the Intune Settings catalog (and, in general, Intune troubleshooting).
- Free Intune Training Videos
- How to Start Troubleshooting Intune Issues
- Windows 10 MDM Log Checklist
- MDM Diagnostics Tool – Tips & Tricks
- Learn How to Collect Windows 10 Diagnostics Information from Intune Portal | Endpoint Manager