Tune ramp-down session handling, disconnect timeout and deallocation policies. This would be appropriate for the different task-specific situation "A scaling plan powers off hosts too aggressively while employees have disconnected but resumable sessions", because Autoscale decisions must account for existing user session state to avoid disruption. It does not directly resolve the stated condition, which calls for Collect the relevant AVD connection and error diagnostics and query them in Log Analytics.

Use session counts and host availability trends to refine scaling plan ramp-up times. This would be appropriate for the different task-specific situation "A host pool shows insufficient available session capacity during a predictable daily spike", because Scaling before known peak demand helps ensure ready capacity is available at sign-in. It does not directly resolve the stated condition, which calls for Collect the relevant AVD connection and error diagnostics and query them in Log Analytics.

Configure an AVD autoscale scaling plan with appropriate schedules and minimum capacity. This would be appropriate for the different task-specific situation "A pooled host pool runs all its VMs overnight even though no users connect", because AVD scaling plans can deallocate surplus session hosts according to defined operating periods. It does not directly resolve the stated condition, which calls for Collect the relevant AVD connection and error diagnostics and query them in Log Analytics.

RDP Multipath maintains multiple potential transport flows per session, increasing port planning requirements. This describes the separate situation "A firewall team plans to allow only one outbound source port for every RDP Multipath session" but does not justify the selected fix for the current issue. The decisive behavior is: Client-side internet path failures can prevent broker access without any failure in Azure session-host resources.

RDP Multipath improves session resilience with monitored active and backup paths rather than merging multiple unrelated users into one connection. This describes the separate situation "A network architect expects RDP Multipath to aggregate the bandwidth of five independent user desktops into one session" but does not justify the selected fix for the current issue. The decisive behavior is: Client-side internet path failures can prevent broker access without any failure in Azure session-host resources.

Remote display performance depends on round-trip distance as well as application resource allocation. This describes the separate situation "Users in a distant geography report high interactive latency while all session hosts are placed in one remote Azure region" but does not justify the selected fix for the current issue. The decisive behavior is: Client-side internet path failures can prevent broker access without any failure in Azure session-host resources.

Verify Defender for Endpoint onboarding and collect device timeline data for the affected sessions. This would be appropriate for the different task-specific situation "A SOC cannot correlate risky AVD processes because host devices have no defender telemetry", because Endpoint telemetry links process and security events to individual Windows session hosts. It does not directly resolve the stated condition, which calls for Move secrets to a protected secret store or secure deployment path with least-privilege access.

Use Defender for Cloud, Azure Policy and endpoint management compliance reports at the intended scope. This would be appropriate for the different task-specific situation "An audit requires evidence that desktop hosts conform to centrally mandated security baseline settings", because Combining posture and device telemetry makes configuration drift visible to security reviewers. It does not directly resolve the stated condition, which calls for Move secrets to a protected secret store or secure deployment path with least-privilege access.

Select compatible VM families, image generation and security-profile settings. This would be appropriate for the different task-specific situation "A customer tries to enable Trusted Launch on a VM size and image combination that does not support it", because Trusted Launch support is constrained by eligible VM hardware and operating system image features. It does not directly resolve the stated condition, which calls for Move secrets to a protected secret store or secure deployment path with least-privilege access.

Include the supported agent and registration process after VM provisioning. This would be appropriate for the different task-specific situation "A PowerShell automation creates only session-host Azure VMs but never registers their AVD agent", because AVD service placement depends on completed host-pool registration, not simply Azure VM creation. It does not directly resolve the stated condition, which calls for Check maintenance drain mode and release only verified healthy hosts back into rotation.

Configure Start VM on Connect and the required platform permissions for the personal host pool. This would be appropriate for the different task-specific situation "The IT team wants to turn on a powered-off personal VM only when its assigned user connects", because Start VM on Connect permits a supported AVD connection attempt to initiate a deallocated session host VM. It does not directly resolve the stated condition, which calls for Check maintenance drain mode and release only verified healthy hosts back into rotation.

Set the supported RDP properties for the host pool and validate resulting session behavior. This would be appropriate for the different task-specific situation "An organization needs a custom remote display transport policy for a particular host pool", because AVD host pool RDP properties apply remote experience options at the connection configuration layer. It does not directly resolve the stated condition, which calls for Check maintenance drain mode and release only verified healthy hosts back into rotation.

Multipath can switch among viable backup UDP or TCP paths when an active session route degrades. This describes the separate situation "Users report session drops when their laptops roam between Wi-Fi and mobile connectivity" but does not justify the selected fix for the current issue. The decisive behavior is: Azure Virtual Desktop's reverse-connect transport requires outbound connectivity from hosts instead of exposing inbound RDP ports to the internet.

Session density and display or multimedia behavior determine actual network capacity more reliably than the number of assigned users alone. This describes the separate situation "A call center is moving 900 concurrent users to Azure Virtual Desktop and lacks an estimate of peak RDP throughput" but does not justify the selected fix for the current issue. The decisive behavior is: Azure Virtual Desktop's reverse-connect transport requires outbound connectivity from hosts instead of exposing inbound RDP ports to the internet.

Service endpoints and IP ranges can change, so supported FQDN and service-tag approaches simplify maintained egress policies. This describes the separate situation "The enterprise firewall permits a few static AVD IP addresses but connections fail after Microsoft service changes" but does not justify the selected fix for the current issue. The decisive behavior is: Azure Virtual Desktop's reverse-connect transport requires outbound connectivity from hosts instead of exposing inbound RDP ports to the internet.

Install the required version consistently on every host eligible to receive that RemoteApp session. This would be appropriate for the different task-specific situation "An application is installed only on two of six pooled session hosts and users get intermittent launch failures", because A pool can route a session to any eligible host, so application availability must match session placement. It does not directly resolve the stated condition, which calls for Validate both Teams optimization status and allowed client camera redirection policies.

Remove the app from the managed image or App attach entitlement and roll out a tested deployment change. This would be appropriate for the different task-specific situation "An organization must remove an unapproved application from all new AVD sessions while preserving existing profiles", because Application lifecycle controls determine availability, whereas user profile preservation is a separate concern. It does not directly resolve the stated condition, which calls for Validate both Teams optimization status and allowed client camera redirection policies.

Create the supported package image format for the application and host OS. This would be appropriate for the different task-specific situation "An App attach test uses a standard installer folder instead of a supported packaged disk image", because App attach consumes supported packaged image artifacts rather than arbitrary unpacked installer directories. It does not directly resolve the stated condition, which calls for Validate both Teams optimization status and allowed client camera redirection policies.

Use Defender for Cloud, Azure Policy and endpoint management compliance reports at the intended scope. This would be appropriate for the different task-specific situation "An audit requires evidence that desktop hosts conform to centrally mandated security baseline settings", because Combining posture and device telemetry makes configuration drift visible to security reviewers. It does not directly resolve the stated condition, which calls for Apply Conditional Access and secure administrative access workflows to sensitive AVD operations.

Replace blanket exclusions with Microsoft-documented FSLogix and workload-specific exclusions after validation. This would be appropriate for the different task-specific situation "An administrator excludes the entire C drive from Microsoft Defender scans to improve AVD logon times", because Overly broad antivirus exclusions permit malware execution outside the paths that require compatibility tuning. It does not directly resolve the stated condition, which calls for Apply Conditional Access and secure administrative access workflows to sensitive AVD operations.

Layer endpoint security, patching, application control and least privilege on top of network segmentation. This would be appropriate for the different task-specific situation "A team assumes a private VNet guarantees an AVD session host cannot be compromised by malicious browser content", because Private network placement does not eliminate host-level attack and malicious execution risks. It does not directly resolve the stated condition, which calls for Apply Conditional Access and secure administrative access workflows to sensitive AVD operations.

Set the image definition's operating system state correctly before image version creation. This would be appropriate for the different task-specific situation "Operations needs a way to describe whether a gallery image uses generalized or specialized OS state", because Compute Gallery image definitions distinguish generalized images from specialized VM images. It does not directly resolve the stated condition, which calls for Install and validate supported GPU drivers for the target VM family within the image release.

Follow the supported AVD agent provisioning workflow and register each deployed host separately. This would be appropriate for the different task-specific situation "Administrators install AVD agents manually on an image and accidentally bake an existing host-pool registration into it", because Agent registration represents an individual session host relationship and should not be cloned as a persistent identity. It does not directly resolve the stated condition, which calls for Install and validate supported GPU drivers for the target VM family within the image release.

Publish an Azure Compute Gallery image version with supported regional replication. This would be appropriate for the different task-specific situation "Host pools across two regions require the same tested Windows multi-session image release", because Azure Compute Gallery can distribute versioned image artifacts to configured regions for VM deployment. It does not directly resolve the stated condition, which calls for Install and validate supported GPU drivers for the target VM family within the image release.

Narrow NSG rules to documented necessary sources and service ports. This would be appropriate for the different task-specific situation "A security group allows all inbound network traffic to pooled session hosts for troubleshooting", because NSGs enforce network filtering and broad inbound allows enlarge the reachable attack surface. It does not directly resolve the stated condition, which calls for Deploy supported Trusted Launch session host VM configurations with Secure Boot and vTPM.

Restore Defender update connectivity and monitor antivirus definition freshness. This would be appropriate for the different task-specific situation "One AVD VM image has outdated malware signatures because it has not contacted security update services", because A running security sensor without current signatures can miss newly recognized threats. It does not directly resolve the stated condition, which calls for Deploy supported Trusted Launch session host VM configurations with Secure Boot and vTPM.

Apply a supported disk encryption approach and audit compliance against the policy. This would be appropriate for the different task-specific situation "Azure Policy audit shows AVD session-host disks without required encryption configuration", because Storage encryption controls protect data at rest independently of access-control lists. It does not directly resolve the stated condition, which calls for Deploy supported Trusted Launch session host VM configurations with Secure Boot and vTPM.

Use separate host pools and resource governance boundaries where different controls are required. This would be appropriate for the different task-specific situation "An organization needs different security policy scope for high-risk developers and ordinary staff", because Pool separation supports divergent VM baseline, app and access-policy requirements. It does not directly resolve the stated condition, which calls for Choose a personal host pool with appropriate direct or automatic assignment behavior.

Design an AVD scaling plan with minimum capacity, schedules and Start VM on Connect as appropriate. This would be appropriate for the different task-specific situation "Administrators want to minimize cold host start costs during non-business hours", because Autoscale can power down surplus hosts, but sufficient capacity and start-up behavior must still support user sign-ins. It does not directly resolve the stated condition, which calls for Choose a personal host pool with appropriate direct or automatic assignment behavior.

Validate each proposed user's AVD access licensing and supported entitlement before rollout. This would be appropriate for the different task-specific situation "Contractors need AVD desktops but their identity and Microsoft license eligibility are unclear", because Remote access rights depend on the chosen AVD operating system, user population and licensing model. It does not directly resolve the stated condition, which calls for Choose a personal host pool with appropriate direct or automatic assignment behavior.

ODFC targets specific Office application data rather than replacing the full Windows user profile. This describes the separate situation "An organization uses a third-party profile method but needs Outlook and other Office cache data to roam" but does not justify the selected fix for the current issue. The decisive behavior is: Deleting content inside a virtual disk does not necessarily shrink its backing VHDX file immediately.

FSLogix provides profile roaming, while separate storage protection covers deletion and corruption recovery. This describes the separate situation "A tenant wants both profile portability and recoverable historical profile data" but does not justify the selected fix for the current issue. The decisive behavior is: Deleting content inside a virtual disk does not necessarily shrink its backing VHDX file immediately.

Profile detach and cache synchronization can lengthen sign-out when remote storage is saturated. This describes the separate situation "Desktop sessions experience long logoff delays when very large profile disks upload changes" but does not justify the selected fix for the current issue. The decisive behavior is: Deleting content inside a virtual disk does not necessarily shrink its backing VHDX file immediately.