• Azure Active Directory
• Azure Firewall
• Azure Resource Manager (and DSC)
• Azure Virtual Desktop
• Log Analytics
• Route Tables
• vNet Gateways (with BGP)
• vNet Peering

The lab script will deploy 4 virtual networks in a hub-spoke topology.

• An Azure Firewall and VPN Gateway are deployed in the hub network.
• A Windows Domain is deployed in the "Directory" spoke vNet.
• A Windows VM is deployed in the "WVD" spoke vNet
• A Windows VM is deployed in the 'oprem' vNet.
• Routing tables have been created to designate Azure Firewall as the next hop IP address in Azure.
• Route propagation has been disabled on the vNet peering connections.

• Lab Deployment
  • Prerequisites
  • Deploy the environment
• Firewall Setup
  • Gather Information
  • NAT Rules
    • NAT Rule Details
    • Create the NAT rule collection
    • Test RDP Connectivity
  • Network Rules
    • Domain Controller Network Rule
    • Azure Virtual Desktop Network Rule
    • General Connectivity Network Rule
  • Application Rules
    • Azure Virtual Desktop Application etwork Rule
    • Blocked Websites Application Rule
    • Allowed Websites Application Rule
• Configure Azure Virtual Desktop
• Add Session Hosts to Azure Virtual Desktop
  • Obtain the registration key from the Azure Portal
  • Register the session host VM to the Azure Virtual Desktop host pool
  • Confirm the VM is registered with Azure Virtual Desktop
• Configure Authentication
  • Create a user account in Azure Active Directory
  • Add the UPN suffix to the domain
  • Create a user account in Windows Active Directory
  • Grant access to Azure Virtual Desktop
• Azure Virtual Desktop Client Configuration
  • Client Configuration
  • Confirm Operation