Comprehensive Enterprise Architecture, Management & Migration Lab Framework
Course Overview & Delivery Format
This intensive boot camp is designed for experienced virtualization and cloud administrators deploying and managing Azure Virtual Desktop (AVD) using Nerdio Manager for Enterprise (NME). The course is approximately 95% hands-on and focuses on enterprise architecture, automated host pool management, advanced FSLogix profiling, Azure Storage integration, Enterprise Auto-scale cost management, image management pipelines, App Attach application delivery, disaster recovery, and production operations across 100 guided labs.
Methodology: 95% Hands-On Enterprise Labs / 5% Instructor-Led Architecture Discussion
Target Audience: Cloud Administrators, VDI Engineers, Systems Administrators, Azure/VDI Solutions Architects, Nerdio Administrators
Module 1: AVD Architecture & Nerdio Manager Deployment Foundations
Module Focus: Establish a foundational understanding of Azure Virtual Desktop control plane architecture integrated with Nerdio Manager for Enterprise (NME). Learn to deploy Nerdio Manager via Azure Marketplace, integrate Entra ID RBAC, manage Azure subnets, configure FSLogix storage, and create automated host pools.
Key Core Curriculum Topics
- Nerdio Architecture & Control Plane: Nerdio Manager PaaS installation, Azure App Service, Key Vault, and Web App management plane vs. AVD resources.
- Identity & Access Management: Nerdio RBAC integration, Entra ID Domain Services, Hybrid Entra ID Join, and Native Entra ID Join with Kerberos ticket granting.
- Automated Storage & FSLogix Integration: Automated Azure Files Premium and Azure NetApp Files (ANF) provisioning and automated FSLogix profile container management via Nerdio.
- Session Host Lifecycle & Host Pools: Automated host pool creation (Dynamic vs. Static), dynamic host sizing, and golden master provisioning via Azure Compute Gallery (ACG).
- Network & RDP Optimization: Azure VNet routing, Subnet delegation, Private Endpoints, RDP Shortpath tuning, and Nerdio network diagnostics.
- Image Management Pipelines: Nerdio scripted OS image creation, VM generalized/specialized image capturing, and versioning control.
Guided Hands-On Enterprise Labs
- Lab 1.1 Azure Subscription & VNet Environment Setup: Provision core resource groups, Azure VNets, subnets, and configure Azure DNS settings for Nerdio host deployments.
- Lab 1.2 Deploying Nerdio Manager for Enterprise (NME): Deploy Nerdio Manager from Azure Marketplace, initializing Azure App Service, Key Vault, and SQL Database backends.
- Lab 1.3 Configuring Nerdio RBAC & Entra ID App Registrations: Configure API permissions, Service Principals, and delegate granular Nerdio RBAC roles (Nerdio Admin, Desktop Admin, Helpdesk).
- Lab 1.4 Automated Storage Provisioning via Nerdio: Use Nerdio Manager to automatically deploy Azure Files Premium SMB shares with pre-configured NTFS permissions.
- Lab 1.5 Enterprise Azure NetApp Files (ANF) Integration in Nerdio: Connect ANF capacity pools to Nerdio, configure delegated subnets, and deploy high-performance shares for user profiles.
- Lab 1.6 FSLogix Profile Container Management via Nerdio UI: Configure centralized FSLogix profile rules, VHDX locations, and registry settings directly through Nerdio Manager.
- Lab 1.7 Centralized Golden Image Library & ACG Setup: Establish Azure Compute Gallery (ACG) definitions in Nerdio and import base OS installation media.
- Lab 1.8 Custom Windows 11 Enterprise Multi-Session Master Creation: Provision a golden master VM in Nerdio, install enterprise software, and run OS optimization scripts.
- Lab 1.9 Custom Windows 11 Personal Desktop Master Creation: Deploy single-session master image for power users, configure vGPU passthrough parameters, and seal image via Nerdio.
- Lab 1.10 Dynamic Host Pool Provisioning (Pooled Multi-Session): Create a dynamic pooled multi-session host pool using Nerdio template definitions and automated domain join.
- Lab 1.11 Static Personal Host Pool Provisioning: Deploy dedicated personal desktop host pools with direct/automatic user assignment via Nerdio Manager.
- Lab 1.12 Breadth-First vs. Depth-First Load Balancing in Nerdio: Configure host pool load-balancing algorithms, session limits, and evaluate user session placement in real time.
- Lab 1.13 Dynamic Host Pool Expansion & Automated Scale-Out: Expand host pools on demand using custom VM naming patterns, IP allocation rules, and ARM extensions in Nerdio.
- Lab 1.14 Session Host Health Checks & Automated Drain Mode: Set up automated health checks in Nerdio to detect degraded hosts, place them in Drain Mode, and trigger auto-healing.
- Lab 1.15 FSLogix Cloud Cache Configuration in Nerdio: Deploy multi-destination FSLogix Cloud Cache rules using Nerdio storage policies for redundant profile storage.
- Lab 1.16 RDP Shortpath & Network Latency Tuning: Enable RDP Shortpath UDP transport across session hosts and test connectivity bottlenecks via Nerdio Console.
- Lab 1.17 Storage Benchmarking & Profile IOPS Profiling: Run automated I/O tests against Azure Files and ANF from session hosts to establish baseline logon times.
- Lab 1.18 Troubleshooting Host Registration & Agent Failures: Resolve agent communication errors, invalid registration tokens, and domain join failures using Nerdio logs.
- Lab 1.19 Nerdio REST API & PowerShell Integration: Execute administrative management tasks and host operations using the Nerdio Manager REST API and PowerShell SDK.
- Lab 1.20 Architecture Validation & Health Review: Conduct a complete operational health audit across host pools, storage accounts, and image galleries prior to migration.
Module 2: On-Premises & Legacy VDI Migration to AVD with Nerdio
Module Focus: Discover, plan, and execute the migration of legacy Citrix XenApp/XenDesktop, VMware Horizon, and RDS environments to Azure Virtual Desktop using Nerdio Manager. Master image import automation, MSIX App Attach delivery, FSLogix profile transformation, and scripted migration cutovers.
Key Core Curriculum Topics
- Nerdio Migration Orchestration: Importing master VM images, automated agent conversion, user persona mapping, and wave scheduling.
- Modern Application Virtualization: MSIX App Attach packaging, dynamic package staging via Nerdio, and FSLogix App Masking rule creation.
- Automated Profile Conversion: Migrating Citrix UPM, VMware DEM, and Roaming Profiles into FSLogix Containers using automated Nerdio utilities.
- Image Transformation Pipelines: Stripping legacy hypervisor tools, injecting Azure VM extensions, and running Virtual Desktop Optimization Tool (VDOT).
- Wave-Based Cutover Management: Staged user cutover, warm profile staging, DNS update automation, and rollback execution.
Guided Hands-On Enterprise Labs
- Lab 2.1 On-Premises VDI Inventory & Capacity Profiling: Collect performance metrics from legacy Citrix/VMware environments to generate Nerdio AVD sizing recommendations.
- Lab 2.2 Migrating On-Premises Golden Images into Nerdio: Upload converted VHD/VMDK master images to Azure and register them directly into Nerdio Image Library.
- Lab 2.3 Automated Legacy Agent Cleanup via Scripted Actions: Execute Nerdio Scripted Actions to strip Citrix VDA and VMware Horizon agents from imported master VMs.
- Lab 2.4 Virtual Desktop Optimization Tool (VDOT) Integration: Run automated VDOT Scripted Actions in Nerdio to optimize Windows 11 Multi-Session images prior to deployment.
- Lab 2.5 MSIX App Attach Package Creation & Nerdio Library Integration: Package Win32 applications into MSIX format and upload expansion disks to the Nerdio App Attach Library.
- Lab 2.6 Dynamic App Attach Assignment to Host Pools: Assign MSIX App Attach packages to AVD host pools and user groups using Nerdio’s streamlined application workflow.
- Lab 2.7 FSLogix Application Masking Deployment via Nerdio: Deploy App Masking rule sets to host pools to hide installed applications from unauthorized department users.
- Lab 2.8 Automated Citrix UPM to FSLogix Profile Conversion: Run automated conversion jobs in Nerdio to convert legacy Citrix UPM profile directories into FSLogix VHDX containers.
- Lab 2.9 Migrating VMware DEM & Roaming Profiles: Execute profile migration scripts via Nerdio to convert legacy roaming profiles to centralized FSLogix storage shares.
- Lab 2.10 Deploying Staged Migration Host Pools: Provision target multi-session and personal host pools in Azure using Nerdio templates ahead of cutover waves.
- Lab 2.11 User Persona & Migration Wave Scheduling: Group users into migration waves within Nerdio and schedule automated host pool entitlement shifts.
- Lab 2.12 Warm Profile Staging & Background Delta Synchronization: Sync user data in the background using AzCopy/Robocopy scripts integrated into Nerdio maintenance tasks.
- Lab 2.13 Cold Migration Execution for Power Users: Execute offline migration of dedicated personal physical/virtual desktops to AVD Personal Host Pools.
- Lab 2.14 Staged Cutover Execution for Shared Multi-Session Users: Shift user groups from legacy Citrix XenApp/RDS to AVD multi-session host pools during live cutover windows.
- Lab 2.15 Network Re-IP & DNS Cutover Scripting: Trigger automated DNS update scripts via Nerdio post-migration tasks to route client traffic to AVD workspaces.
- Lab 2.16 Automated Rolling Host Deployment during Migration Wave: Scale migration host pools dynamically as new user waves log in using Nerdio Auto-scale rules.
- Lab 2.17 Rollback Plan Execution & Legacy Fallback Simulation: Simulate a critical cutover issue and execute rapid rollback scripts to re-enable legacy VDI access.
- Lab 2.18 Post-Migration User Acceptance Testing (UAT): Run automated synthetic logon tests via Nerdio to verify desktop response times, application launches, and printing.
- Lab 2.19 Legacy Infrastructure Decommissioning: Unregister legacy VDI host controllers, unmount storage arrays, and archive master image baselines.
- Lab 2.20 Migration Gate Review & Production Sign-Off: Review migration metrics, storage consumption, and performance reports in Nerdio prior to full production go-live.
Module 3: Advanced Storage, FSLogix, High Availability & Multi-Region DR
Module Focus: Design, deploy, and manage resilient storage, user profile containers, and multi-region disaster recovery for Azure Virtual Desktop using Nerdio Manager. Master automated storage auto-scaling, FSLogix Cloud Cache, ANF replication, host pool disaster recovery, and automated failover runbooks.
Key Core Curriculum Topics
- Automated Storage Scaling & Performance: Nerdio auto-scaling for Azure Files Premium quota/IOPS and ANF capacity pool scaling based on user demand.
- FSLogix Cloud Cache Management: Multi-destination profile replication rules, lock-file cleanup, and automated storage endpoint switching.
- Multi-Region Disaster Recovery Topologies: Active-Active and Active-Passive multi-region host pools managed natively through Nerdio Manager.
- Automated Host Healing & Maintenance: Nerdio automated host detection, drain mode, auto-re-imaging, and unhealthy host replacement.
- Backup & Recovery Pipelines: Integrating Azure Backup for host pools and granular FSLogix container snapshot restores in Nerdio.
Guided Hands-On Enterprise Labs
- Lab 3.1 Azure Files Auto-Scaling Configuration in Nerdio: Configure Nerdio automated storage scaling policies to dynamically adjust Azure Files quota/IOPS during peak usage.
- Lab 3.2 Dynamic Azure NetApp Files (ANF) Service Level Scaling: Deploy automated scripts in Nerdio to scale ANF service levels (Standard/Premium/Ultra) based on IOPS demand.
- Lab 3.3 FSLogix Cloud Cache Multi-Region Replication via Nerdio: Configure Cloud Cache registry policies in Nerdio to write user profiles concurrently to primary and secondary Azure regions.
- Lab 3.4 Active-Passive Multi-Region Host Pool Setup in Nerdio: Provision secondary DR host pools in an alternate Azure region and manage standby VM states via Nerdio.
- Lab 3.5 Cross-Region Storage Replication Monitoring: Configure ANF volume replication between regions and verify snapshot sync states in the Nerdio Console.
- Lab 3.6 Simulated Primary Storage Failure & Cloud Cache Failover: Simulate primary storage outage and observe seamless FSLogix Cloud Cache failover to secondary regional storage.
- Lab 3.7 Regional Outage Simulation & Automated DR Failover: Execute a full regional failover in Nerdio, redirecting user session feeds to standby DR host pools.
- Lab 3.8 Azure Backup Integration for Session Hosts & Profiles: Configure backup schedules for personal session hosts and storage shares directly within Nerdio Manager.
- Lab 3.9 Granular FSLogix Profile Container Restoration: Perform point-in-time restores of corrupted user profiles from storage snapshots using Nerdio management workflows.
- Lab 3.10 Automated Unhealthy Host Detection & Auto-Healing: Configure Nerdio Auto-heal rules to detect broken VM agents, set hosts to Drain Mode, and re-image them automatically.
- Lab 3.11 Active-Active Multi-Region Host Pool Load Balancing: Manage active-active host pools across two Azure regions using Nerdio and Azure Traffic Manager / GSLB.
- Lab 3.12 Storage IOPS Throttling Mitigation during Boot Storms: Simulate 500+ concurrent logons and evaluate Nerdio automated storage quota expansion under load.
- Lab 3.13 Host Drain Operations & Zero-Downtime Infrastructure Updates: Execute rolling host drains across host pools to perform infrastructure updates without kicking active users.
- Lab 3.14 RDP Shortpath UDP Performance & Fallback Testing: Verify RDP Shortpath performance over ExpressRoute and test automatic fallback to TCP Reverse Connect.
- Lab 3.15 Automated FSLogix VHDX Shrink & Disk Compaction: Schedule automated VHDX compaction tasks in Nerdio to shrink bloated profile containers and reclaim storage.
- Lab 3.16 Scripted Disaster Recovery Failover Automation: Develop and execute one-click DR failover Scripted Actions in Nerdio Manager for regional disaster recovery.
- Lab 3.17 Controlled Failback & Cloud Cache Re-Synchronization: Restore primary region operations, re-sync Cloud Cache profile changes, and execute controlled failback.
- Lab 3.18 Multi-Tenant & Multi-Subscription DR Validation: Validate cross-subscription storage permissions and identity sync during disaster recovery failover tests.
- Lab 3.19 Total Region Destruction & Bicep Template Recovery Challenge: Rebuild complete AVD infrastructure in a new region using Bicep templates and Nerdio configurations.
- Lab 3.20 High Availability & Storage Architecture Review: Audit storage scaling rules, DR readiness, and host auto-healing policies prior to enterprise operations.
Module 4: Enterprise Security, Automation, Cost Optimization & Operations
Module Focus: Secure, optimize, and automate Azure Virtual Desktop at scale using Nerdio Manager for Enterprise. Master Nerdio Enterprise Auto-scale (achieving up to 75% cost savings), Scripted Actions library management, Azure Monitor integration, dynamic desktop image updating, and security compliance enforcement.
Key Core Curriculum Topics
- Nerdio Enterprise Auto-Scale: Pre-stage VM schedules, depth/breadth scaling algorithms, stopped vs. deallocated states, and disk auto-scaling.
- Automation & Scripted Actions: Nerdio Scripted Actions (PowerShell/Bash), community script repo integration, and REST API automation.
- Automated Image Management & Patching: Nerdio Image Builder pipelines, automated OS patching, host pool re-imaging without user downtime.
- Enterprise Security & Compliance: Watermarking, Screen Capture Protection, Conditional Access, Defender for Endpoint, and RBAC controls in Nerdio.
- Observability & Cost Management: Nerdio Cost Analytics, Log Analytics workspace integration, KQL query reporting, and user session monitoring.
Guided Hands-Hands Enterprise Labs
- Lab 4.1 Configuring Advanced Nerdio Auto-Scale Policies: Configure multi-metric Auto-scale algorithms combining CPU, RAM, active user sessions, and time-of-day schedules.
- Lab 4.2 Pre-Stage Capacity Planning & Morning Boot Storm Optimization: Set up pre-staged host capacity schedules in Nerdio to power on session hosts ahead of morning peak logon hours.
- Lab 4.3 OS Disk Auto-Scaling & Storage Cost Reduction: Configure Nerdio to dynamically switch OS disks from Premium SSD to Standard HDD when VMs are powered off.
- Lab 4.4 Advanced Cost Analytics & Reserved Instance Optimization: Utilize Nerdio Cost Modeling tools to analyze spending baselines, reserved instances, and auto-scale savings.
- Lab 4.5 Custom Scripted Actions Development (PowerShell): Write custom PowerShell Scripted Actions in Nerdio to automate software deployment and registry configurations.
- Lab 4.6 Community Script Repository Integration: Import, customize, and execute pre-built automation scripts from the Nerdio Community Repository.
- Lab 4.7 Automated Image Patching & ACG Distribution: Configure scheduled image updates in Nerdio to automatically patch master VMs and publish new ACG versions.
- Lab 4.8 Rolling Host Pool Re-Imaging without Downtime: Deploy updated master images across host pools using Nerdio rolling host replacements during off-peak windows.
- Lab 4.9 Enforcing Session Security: Watermarking & Screen Capture Protection: Apply RDP security templates in Nerdio to enforce dynamic user watermarking and block screen capture tools.
- Lab 4.10 Data Loss Prevention (DLP) & Peripheral Redirection: Disable clipboard sharing, drive redirection, and USB passthrough across host pools using Nerdio policies.
- Lab 4.11 Conditional Access & MFA Enforcement via Entra ID: Configure Entra ID Conditional Access rules requiring MFA and compliant device posture for AVD connections.
- Lab 4.12 Defender for Cloud Integration & Endpoint Protection: Deploy Microsoft Defender for Endpoint onto session hosts automatically during host pool scale-out events.
- Lab 4.13 Centralized Log Analytics & Diagnostic Settings Setup: Forward Nerdio operational logs, user session events, and host health metrics to Azure Log Analytics.
- Lab 4.14 Custom KQL Query Writing for Nerdio Operations: Write Kusto Query Language (KQL) queries to report on logon performance, connection errors, and auto-scale events.
- Lab 4.15 Azure Monitor for AVD Dashboard & Alerting in Nerdio: Configure Azure Monitor workbooks and setup automated alerts for host failures and capacity limits.
- Lab 4.16 Microsoft Teams Optimization & Media Redirection Deployment: Deploy Teams WebSocket service and audio/video redirection tools onto session hosts via Scripted Actions.
- Lab 4.17 Universal Print Integration & Cloud Printing Configuration: Deploy Universal Print tools and map cloud printers to user sessions automatically upon logon.
- Lab 4.18 Security Compliance Audit against Azure Benchmarks: Audit AVD and Nerdio deployment against CIS Microsoft Azure Foundations Benchmark and NIST baselines.
- Lab 4.19 Automated Event-Driven Operational Scripting: Configure Azure Event Grid triggers to execute Nerdio REST API calls upon specific infrastructure alerts.
- Lab 4.20 Security, Cost & Operations Capstone Readiness Review: Audit RBAC permissions, Auto-scale settings, cost dashboards, and security controls prior to capstone project.
Module 5: Enterprise AVD with Nerdio Capstone Project
Module Focus: Apply all knowledge acquired throughout the boot camp to plan, execute, and validate a full-scale, end-to-end enterprise deployment and migration using Nerdio Manager for Enterprise. Work in engineering teams to transition a multi-region enterprise environment to Azure Virtual Desktop under production cutover conditions.
Key Core Curriculum Topics
- End-to-End Migration Orchestration: Runbook design, migration wave sequencing, maintenance window execution, and team management via Nerdio.
- Multi-Tier Workload Transition: Migrating identity, database backend, application servers, and desktop pools to AVD with Nerdio.
- Cutover Execution & Live User Migration: Profile cutover, App Attach delivery, network DNS updates, and user session redirection.
- Post-Cutover Optimization & Operations: Auto-scale tuning, backup onboarding, DR validation, cost management, and executive handover.
- Executive Reporting & Financial Metrics: Benchmarking performance, demonstrating ROI / Auto-scale savings, and post-mortem reporting.
Guided Hands-On Enterprise Labs
- Lab 5.1 Migration Runbook & Maintenance Window Planning: Develop a master operational runbook detailing hour-by-hour migration cutover steps, rollback criteria, and staff roles.
- Lab 5.2 Change Control & Pre-Migration Infrastructure Snapshot: Document enterprise change tickets and capture full system state backups across legacy VDI environments.
- Lab 5.3 Core Networking & Private Endpoint Pre-Provisioning: Deploy target Azure VNets, subnets, Network Security Groups, and Azure Firewall rules prior to migration.
- Lab 5.4 Deploying Production Nerdio Manager Instance: Deploy and configure a dedicated enterprise Nerdio Manager instance with Key Vault and App Service integrations.
- Lab 5.5 Enterprise FSLogix Storage Pre-Provisioning via Nerdio: Initialize Azure Files Premium and ANF storage shares with Active Directory Kerberos auth via Nerdio Manager.
- Lab 5.6 Wave 1: Core Identity Infrastructure Migration: Migrate domain controllers, DNS services, and identity sync components to Azure, validating Entra ID sync.
- Lab 5.7 Identity Integrity & Kerberos Authentication Verification: Verify Active Directory replication, Kerberos ticket issuing, and DNS resolution across session host subnets.
- Lab 5.8 Wave 2: Backend Database & Business Application Servers: Migrate SQL Server clusters and application backend servers to Azure VMs, minimizing service downtime.
- Lab 5.9 Database Consistency & Service Connection Verification: Perform DBCC checks, verify transaction logs, and confirm application server connectivity to database backends.
- Lab 5.10 Wave 3: Golden Image Capture & Host Pool Deployment: Capture master OS images, apply optimizations, and deploy multi-session host pools via Nerdio templates.
- Lab 5.11 Application Virtualization & MSIX App Attach Rollout: Stage App Attach packages across host pools using Nerdio and apply FSLogix App Masking policies.
- Lab 5.12 Wave 4: FSLogix Profile Cutover & Sync: Execute final profile synchronization from legacy Citrix UPM/Roaming Profiles into FSLogix VHDX containers.
- Lab 5.13 End-to-End Desktop Connectivity & Logon Verification: Perform synthetic user logon tests across host pools, confirming desktop launch times under 15 seconds.
- Lab 5.14 Legacy VDI Decommissioning & Resource Reclaim: Disable access to legacy Citrix/VMware infrastructure, unmount storage arrays, and document asset retirement.
- Lab 5.15 Enabling Nerdio Enterprise Auto-Scale & Cost Controls: Activate Auto-scale scaling plans across all production host pools with aggressive off-peak power-off policies.
- Lab 5.16 Automated Backup Onboarding & Snapshot Configuration: Enroll session hosts and FSLogix storage shares into Azure Backup schedules with 30-day retention via Nerdio.
- Lab 5.17 Disaster Recovery Failover & Multi-Region Resilience Testing: Simulate primary region outage and execute automated failover to secondary DR region using Nerdio DR runbooks.
- Lab 5.18 System Benchmarking & Performance Optimization: Compare post-migration user logon times, app launch latency, and frame rates against original legacy VDI baselines.
- Lab 5.19 Security Posture Audit & Compliance Sign-Off: Execute security scans against session hosts, validating Conditional Access, watermarking, and RBAC rules in Nerdio.
- Lab 5.20 Capstone Sign-Off & Official Production Go-Live: Present migration metrics, cost savings reports, and operational documentation to stakeholders for final sign-off!
Bootcamp Key Takeaways & Enterprise Competencies
- Architecture & Deployment: Design, deploy, and maintain enterprise Azure Virtual Desktop infrastructure powered by Nerdio Manager for Enterprise, incorporating Azure Files Premium, Azure NetApp Files, Entra ID authentication, and Azure Compute Gallery.
- Automated Workload Migration: Execute end-to-end migrations of complex legacy VDI (Citrix, VMware, RDS) environments to AVD using Nerdio automation, image transformation pipelines, MSIX App Attach delivery, and profile conversion utilities.
- Cost Optimization Mastery: Leverage Nerdio Enterprise Auto-scale algorithms, dynamic OS disk scaling, pre-staged capacity planning, and Reserved Instance optimization to achieve up to 75% infrastructure cost reduction.
- Resilience & Disaster Recovery: Implement robust multi-region high availability and disaster recovery topologies using FSLogix Cloud Cache, ANF volume replication, active-passive/active-active host pools, and one-click Nerdio DR failover.
- Operational Excellence & Automation: Develop custom Scripted Actions, enforce strict security baselines (Conditional Access, Watermarking, DLP), maintain image patch pipelines, and manage complete observability through Log Analytics and Azure Monitor.
