Johan Vanneuville Securing Cloud Pcs And Azure Virtual Desktop Pdf ((hot)) Link

Enable AVD watermarking to overlay the user's identity and IP address across the session screen, deterring users from taking photos of confidential data with physical mobile devices. Ephemeral OS Disks for AVD

| Pitfall | Consequence | Fix | |---------|-------------|-----| | Allowing copy/paste without logging | Data leakage undetected | Enable audit logs for clipboard via WVD diagnostics | | Using domain profiles without FsLogix | Profile corruption & data sprawl | Migrate to FSLogix containers | | Ignoring offline access | Stale policies on cached Cloud PC | Always require network for auth (CA: "Require compliant device") | | Not segmenting host pool workloads | Lateral movement | One app group = one host pool | Enable AVD watermarking to overlay the user's identity