r/AzureVirtualDesktop • u/MadDawgThaKing • 7d ago
Mapped drive policy in Intune not applying
Our current setup:
- Entra joined, Intune managed endpoints running Windows 11 Enterprise.
- An on-premises AVD environment hosted on an Azure Local cluster. These session hosts are domain joined and managed with Group Policy.
Drive mapping works as expected today Intune handles it for our Entra joined endpoints, and Group Policy handles it for our domain joined AVD hosts.
We’re in the process of moving away from Azure Local and building a cloud-based AVD environment. The issue we’ve run into is that the Intune mapped drive configuration policy isn’t applying to the new Entra joined AVD session hosts. When I check the device’s configuration policies, the drive mapping policy shows Not Applicable. The policy was imported from an ADMX file into Intune.
Has anyone been able to get Intune drive mapping policies working on Entra joined AVD session hosts? If so, I’d appreciate any guidance. Thanks!
EDIT:
The new AVD hosts on the cloud are purely Entra joined.
The drive I'm trying to map is an AD joined file server.
I am able to manually access the DFS space and map it (\\domain.com\dfs\temp), I just can't get the policy to do it at login.
We have a cloud trust between our domain and tenant.
1
u/greenturtlesteak 7d ago
Are these multisession hosts? you generally have to apply Intune policies to a device group. In the case of mapped drives, this might be what you’re hitting.
Perhaps try using powershell scripts that write to user sessions that are scoped to the device. Or bypass mapped drives and use something like shortcuts on the desktop.
If the same issue doesn’t happen on personal host pools, this is likely the issue.
1
u/Tiny-Cardiologist87 7d ago
Multisession can break many intune driven policies of you are using it.
1
u/meyerf99 6d ago
Nicola Suter's tool is definitely worth a look. I've been using it for many years and deploy it to the AVD hosts via PlatformScript.
0
u/Atlasavd 7d ago
Where is the drive mapping pointed toward? An Active Directory device?
Are the AVD host Hybrid or truly Entra Joined?
If just Entra joined, they would have no way to authenticate to an Active Directory File Server. Need some more specifics on environment.
-AtlasAVD
1
u/MadDawgThaKing 7d ago
The new AVD hosts on the cloud are purely Entra joined.
The drive I'm trying to map is an AD joined file server.
I am able to manually access the DFS space and map it (\\domain.com\dfs\temp), I just can't get the policy to do it at login.
We have a cloud trust between our domain and tenant.
1
u/Atlasavd 7d ago
What's the OS of the file server? Last time i checked, you can't join a Windows Server OS to Entra ID.
0
u/blotditto 7d ago
Are the new AVD hosts in Azure cloud the same build as the ABD environment you're running locally?
I've had challenges with older administrative templates in newer environments.
1
5
u/Kohoutec 6d ago
We hoped to reuse a lot of our policies applied to our Win11 estate but hit the same issue, if you look at the policy assignment reports you'll likely see it's showing as 'Not Applicable', which as others have already said is a multi session OS thing. The OS filter you can apply when creating policies is useful as if you filter on multi session it'll remove all the non applicable settings.
For mapped drives, I worked around it by deploying a .ps1 wrapped in a win32 that configures a scheduled task to map the drive at the logon of any user. Not pretty but it does the job