1. If needed, from your local computer, start a web browser, navigate to the Azure portal and sign in with your Odl_user credentials.
2. In the Azure portal, start a PowerShell session in the Azure Cloud Shell.

   Note: if prompted, in the Getting started pane, in the Subscription drop-down list, select the name of the Azure subscription you are using in this lab and then select Apply.

3. In the PowerShell session in the Azure Cloud Shell pane, run the following commands to register the required resource providers:
   Register-AzResourceProvider -ProviderNamespace Microsoft.DesktopVirtualization
   Register-AzResourceProvider -ProviderNamespace Microsoft.VirtualMachineImages
   Register-AzResourceProvider -ProviderNamespace Microsoft.Storage
   Register-AzResourceProvider -ProviderNamespace Microsoft.Compute
   Register-AzResourceProvider -ProviderNamespace Microsoft.Network
   Register-AzResourceProvider -ProviderNamespace Microsoft.KeyVault
   Register-AzResourceProvider -ProviderNamespace Microsoft.ContainerInstance

   Note: do not wait for the registration to complete. This might take about 5 minutes.

4. Close the Azure Cloud Shell pane.

1. From the Azure portal, search for and select Managed Identities.
2. On the Managed Identities page, select + Create.
3. On the Basics tab of the Create User Assigned Managed Identity page, specify the following settings and then select Review + create:

   Setting	Value
   Subscription	the name of the Azure subscription you are using in this lab
   Resource group	the name of a new resource group <sName>-cpoF67-7-RG
   Region	the name of the Azure region where you want to deploy your Azure Virtual Desktop environment
   Name	<sName>-cpoF67-uami

4. On the Review + create tab, select Create. Screenshot must show your Odl_user account, the <sName>-cpoF67-uami user-assigned managed identity you created

Note: the custom RBAC role will be used to assign appropriate permissions to the user-assigned managed identity created in the previous task.

1. From the Azure portal, start a PowerShell session in the Azure Cloud Shell.
2. In the PowerShell session in the Azure Cloud Shell pane, run the following command to identify the value of the Id property of the Azure subscription used for this lab and store it in the $subscriptionId variable:
   $subscriptionId = (Get-AzSubscription).Id
3. Run the following command to create the role definition of the new custom role including its assignable scope value and store it in the $jsonContent variable (replace the <sName> placeholder with your name):
   $jsonContent = @"
   { "Name": "Desktop Virtualization Image Creator (<sName>)", "IsCustom": true, "Description": "Create custom image templates for Azure Virtual Desktop images.", "Actions": [ "Microsoft.Compute/galleries/read", "Microsoft.Compute/galleries/images/read", "Microsoft.Compute/galleries/images/versions/read", "Microsoft.Compute/galleries/images/versions/write", "Microsoft.Compute/images/write", "Microsoft.Compute/images/read", "Microsoft.Compute/images/delete" ], "NotActions": [], "DataActions": [], "NotDataActions": [], "AssignableScopes": [ "/subscriptions/$subscriptionId", "/subscriptions/$subscriptionId/resourceGroups/<sName>-cpoF67-72-RG" ] }
   "@
4. Run the following command to store the content of the $jsonContent variable in a file named CustomRole.json:
   $jsonContent | Out-File -FilePath 'CustomRole.json'
5. Run the following command to create the custom role:
   New-AzRoleDefinition -InputFile ./CustomRole.json
6. Close the Azure Cloud Shell pane. Screenshot must show your Odl_user account, the Cloud Shell with the Desktop Virtualization Image Creator custom role created via New-AzRoleDefinition

1. From your local computer, in the Azure portal, search for and select Resource groups and, on the Resource groups page, select + Create.
2. On the Basics tab of the Create a resource group page, specify the following settings and then select Review + create:

   Setting	Value
   Subscription	the name of the Azure subscription you are using in this lab
   Resource group	the name of a new resource group <sName>-cpoF67-72-RG
   Region	the name of the Azure region where you want to deploy your Azure Virtual Desktop environment

3. On the Review + create tab, select Create.
4. Refresh the Resource groups page and, in the list of resource groups, select <sName>-cpoF67-72-RG.
5. On the <sName>-cpoF67-72-RG page, in the vertical navigation menu, select Access control (IAM), and select + Add and then Add role assignment.
6. On the Role tab of the Add role assignment page, ensure that the Job function roles tab is selected, in the search textbox enter Desktop Virtualization Image Creator (<sName>), in the list of results select Desktop Virtualization Image Creator (<sName>), and then select Next.
7. On the Members tab of the Add role assignment page, select the Managed identity option, click + Select members, in the Select managed identities pane, in the Managed identity drop-down list, select User-assigned managed identity, and in the list, select <sName>-cpoF67-uami and then click Select.
8. Back on the Members tab of the Add role assignment page, select Review + assign.
9. On the Review + assign tab, select Review + assign. Screenshot must show your Odl_user account, the Desktop Virtualization Image Creator role assignment to <sName>-cpoF67-uami on <sName>-cpoF67-72-RG

1. From the Azure portal, search for and select Azure compute galleries and, on the Azure compute galleries page, select + Create.
2. On the Basics tab of the Create Azure compute gallery page, specify the following settings and then select Next : Sharing method:

   Setting	Value
   Subscription	the name of the Azure subscription you are using in this lab
   Resource group	<sName>-cpoF67-72-RG
   Name	<sName>_cpoF67_Gallery
   Region	the name of the Azure region where you want to deploy your Azure Virtual Desktop environment

3. On the Sharing tab, leave the default option Role based access control (RBAC) selected and then select Review + create.
4. On the Review + create tab, select Create.

   Note: wait for the provisioning process to complete. This should take less than 1 minute.

5. From the Azure portal, search for and select Azure compute galleries and, on the Azure compute galleries page, select <sName>_cpoF67_Gallery.
6. On the <sName>_cpoF67_Gallery page, select + Add and, in the drop-down menu, select + VM image definition.
7. On the Basics tab of the Create VM image definition page, specify the following settings (leave other settings with their default values) and then select Next : Version:

   Setting	Value
   Region	the name of the Azure region where you want to deploy your Azure Virtual Desktop environment
   VM image definition name	<sName>-cpoF67-ImageDefinition
   OS type	Windows
   Security type	Trusted launch supported
   OS state	Generalized
   Publisher	MicrosoftWindowsDesktop
   Offer	Windows-11
   SKU	win11-23h2-avd-m365

   Note: VM generation is automatically set to Gen2, because Gen 1 virtual machines are not supported with Trusted and Confidential security type.

8. On the Version tab of the Create VM image definition page, leave the settings unchanged and select Next : Publishing options.

   Note: you should not create the VM image version at this stage. This will be done by Azure Virtual Desktop.

9. On the Publishing options tab of the Create VM image definition page, specify the following settings (leave other settings with their default values) and select Review + create:

   Setting	Value
   Recommended VM vCPUs	move slider to show 2 on the right side
   Recommended VM memory	move slider to show 8 on the right side
   Excluded disk types	select Premium SSD

10. On the Review + create tab of the Create VM image definition page, select Create. Screenshot must show your Odl_user account, the <sName>-cpoF67-ImageDefinition created in <sName>_cpoF67_Gallery

    Note: wait for the provisioning process to complete. This typically takes less than 1 minute.

1. From the Azure portal, search for and select Azure Virtual Desktop, in the Manage section select Custom image templates, then select + Add custom image template.
2. On the Basics tab of the Create custom image template page, specify the following settings and select Next:

   Setting	Value
   Template name	<sName>-cpoF67-ImageTemplate
   Import from existing template	No
   Subscription	the name of the Azure subscription you are using in this lab
   Resource group	<sName>-cpoF67-72-RG
   Location	the name of the Azure region where you want to deploy your Azure Virtual Desktop environment (East US)
   Managed identity	<sName>-cpoF67-uami

3. On the Source image tab of the Create custom image template page, specify the following settings and select Next:

   Setting	Value
   Source type	Platform image (marketplace)
   Select image	Windows 11 Enterprise multi-session, Version 23H2 + Microsoft 365 Apps

4. On the Distribution targets tab of the Create custom image template page, specify the following settings (leave other settings with their default values) and select Next:

   Setting	Value
   Azure Compute Gallery	enabled
   Gallery name	<sName>_cpoF67_Gallery
   Gallery image definition	<sName>-cpoF67-ImageDefinition
   Gallery image version	1.0.0
   Run output name	cpoF67-image-1.0.0
   Replication regions	the name of the Azure region where you want to deploy your Azure Virtual Desktop environment
   Exclude from latest	No
   Storage account type	Standard_LRS

   Note: you can use the Replication regions property to accommodate multi-region builds. Setting Exclude from latest to Yes would prevent this image version from being used when latest is specified as the version of the ImageReference element during VM creation.

5. On the Build properties tab of the Create custom image template page, specify the following settings (leave other settings with their default values) and select Next:

   Setting	Value
   Build timeout	120
   Build VM size	Standard_D2s_v3
   OS disk size (GB)	127
   Staging group	cpoF67-73-RG
   VNet	leave not set

   Note: Staging group is the resource group used to stage resources to build the image and store logs. If you don't provide its name, it will be automatically generated. If the VNet name is not set, a temporary one is created, along with a public IP address for the VM used to create the build.

6. On the Customization tab of the Create custom image template page, select + Add built-in script.
7. In the Select built-in scripts pane, review the available options grouped into operating system specific scripts, Azure Virtual Desktop scripts, MSIX App Attach scripts, Application scripts, and Windows Updates-related scripts, and then select the following entries: Time zone redirection (allows the client to use its time zone within a session on session hosts), Disable Storage Sense (prevents Storage Sense from negatively affecting session hosts by falsely detecting low free disk space conditions), and Enable screen capture protection with Block Screen capture on client and server (blocks or hides remote content in screenshots and screen sharing).
8. In the Select built-in scripts pane, select Save.

   Note: you have the option of adding your own scripts. For examples, consider referencing the built-in scripts, such as Time zone redirection, Disable Storage Sense, or Enable screen capture protection.

9. Back on the Customization tab of the Create custom image template page, select Next.
10. On the Tags tab, select Next.
11. On the Review + create tab of the Create custom image template page, select Create.
12. Wait for the template to be created. This might take a few minutes. Refresh the Azure Virtual Desktop | Custom image templates page to review the template status. Screenshot must show your Odl_user account, the <sName>-cpoF67-ImageTemplate in the Custom image templates list

Note: the remaining tasks of this lab involve a fairly extensive wait time.

1. From the Azure portal, on the Azure Virtual Desktop | Custom image templates page, select <sName>-cpoF67-ImageTemplate.
2. On the <sName>-cpoF67-ImageTemplate page, select Start build.
3. Wait for the build to complete. The actual time to complete the build process might vary, but with the settings provided in the lab instructions, it should complete within 45 minutes. Refresh the page every few minutes and monitor the Build run state value in the Essentials section of the <sName>-cpoF67-ImageTemplate page.

   Note: the build run state should change at some point from Running - Building to Running - Distributing and finally to Succeeded.

4. While waiting for the build to complete, review the content of the staging resource group cpoF67-73-RG, where the build resources, including the build virtual machine, a virtual network, network security group, key vault, snapshot, container instance, and storage account are automatically provisioned.
5. On the <sName>-cpoF67-ImageTemplate page, monitor the build progress.

   Note: alternatively, you can use Activity Log to keep track of the completion of the build process. The action you should focus on is Execute a VM image template to produce its output. Its status should change at some point from Accepted to Succeeded.

6. Once the build completes, from the Azure portal, search for and select Azure compute galleries and select <sName>_cpoF67_Gallery.
7. On the <sName>_cpoF67_Gallery, on the Definitions tab, select <sName>-cpoF67-ImageDefinition and review its properties. Screenshot must show your Odl_user account, the <sName>-cpoF67-ImageDefinition with image version 1.0.0 in <sName>_cpoF67_Gallery

Note: step through the initial stages of deploying Azure Virtual Desktop session hosts by using the custom image you created. Generate key when adding new session hosts.

1. From your local computer, in the Azure portal, search for and select Azure Virtual Desktop, in the Manage section of the vertical navigation menu, select Host pools and select <sName>-cpoF67-hp1.
2. On the <sName>-cpoF67-hp1 page, click on the Registration key, and Generate new key. On the Expiration date, select tomorrow's date and press OK. Close the window.
3. Back on the <sName>-cpoF67-hp1 page, in the Manage section, select Session hosts. Click + Add.
4. On the Basics tab of Add virtual machines to a host pool page, select Next: Virtual Machines, specify the following settings and select Create + Review (leave other settings with their default values):

   Setting	Value
   Add virtual machines	Yes
   Resource group	<sName>-cpoF67-21e-RG
   Name prefix	<sName>-img
   Virtual machine type	Azure virtual machine
   Virtual machine location	the name of the Azure region where you want to deploy your Azure Virtual Desktop environment
   Availability options	No infrastructure redundancy required
   Security type	Trusted launch virtual machines

5. For Image, click on See all images and on the Virtual machines tab of the Create a host pool page, below the Image drop-down list, select See all images.
6. On the Select an image page, select Shared images and, in the list of images, select <sName>-cpoF67-ImageDefinition.
7. Specify the following settings (leave other settings with their default values):

   Setting	Value
   Image	<sName>_cpoF67_Gallery/<sName>-cpoF67-ImageDefinition/1.0.0
   Virtual machine size	Standard D2s_v3
   Number of VMs	1
   OS disk type	Standard HDD
   OS disk size	Default size
   Boot Diagnostics	Disabled
   Virtual network	cpoF67-vnet11e
   Subnet	hp1-Subnet
   Network security group	Basic
   Public inbound ports	No
   Select which directory you would like to join	Microsoft Entra ID
   Enroll VM with Intune	No
   User name	Adminuser
   Password	provide a complex password
   Confirm password	retype the password

8. On the Review + create tab of the Add virtual machines to a host pool page, select Create.

   Note: wait for the deployment to complete. This might take about 10-15 minutes.

9. When completed, check the Session hosts and ensure that all are Available. Screenshot must show your Odl_user account, the session hosts <sName>-img deployed from the custom image with status Available

Minimum 2-3 sentences each — original thinking, your own words!

1. Lab Reflection: After completing all Azure Virtual Desktop labs in this course, reflect on your overall experience with the AVD service. What are the most important concepts or skills you gained from these labs, and how do you think they would apply in a real-world cloud or IT environment? (Answer based on your own personal experience doing the lab; do not use general or textbook statements.)

Screenshots you attach above and your Task 9 answers appear here. This is exactly what prints/exports as your PDF.

1. All attached screenshots must be high quality, with your Odl_user account clearly visible.
2. A brief explanation added for each screenshot.
3. Export with Print / Save as PDF and upload it to the Blackboard lab submission page.