Create a Master Virtual Machine

• Add / Remove required Applications and Features
• Remove unwanted Microsoft Store Apps
• Install required Language Packs
• Install all available Windows and Application updates
• Configure the Default User Profile
• Disable unnecessary Scheduled Tasks
• Disable unnecessary Services
• Enable required Services (Windows Search)
• Enable Firewall Rules (Domain Profile)
• Delete Temporary Files and Source Media on the OS Disk
• Apply known optimizations

Install the following PowerShell Modules

• Az.Accounts
• Az.DesktopVirtualization

These are required by AVD-Join to join the Azure Virtual Desktop Host Pool.

Snapshot the Master Virtual Machine

Take a snapshot of the Master Virtual Machine. The snapshot will be used to re-create the Master Virtual Machine during the next update cycle.

Sysprep the Master Virtual Machine

Remove the Master Virtual Machine from Active Directory.

Run

C:\Windows\System32\Sysprep\sysprep.exe /oobe /generalize /shutdown

Create a Master Image

Create a Master Image from the Master Virtual Machine.

The Master Virtual Machine is deleted after the Master Image is created.

Create a Virtual Machine Scale Set

Create a Virtual machine Scale Set using the Master Image.

To join an Azure Virtual Desktop Host Pool, create the AVD-Join Service Principal in Entra ID. This allows the Virtual Machine instances to join an AVD host pool at system startup when creating or updating a Scale Set.

Update a Virtual Machine Scale Set

Re-Create the Master Virtual Machine from the last snapshot.

Perform required updates and changes.

Create a new snapshot of the Master Virtual Machine for the next update cycle.

Sysprep the Master Virtual Machine.

Create an updated Master Image.

Modify the Scale Set configuration by updating the VM Source attribute.

Virtual Machine instances may be updated on-demand or the update may be scheduled using AVD-Automate.

After updating, the Virtual machine instances will be running the updated Master Image. They will retain their Active Directory computername, Entra ID device identity (sync via Entra Connect), and Azure Virtual Desktop Session Host name.