Create a host pool in AVD using with active directory or mantra ID.

Suresh J 0 Reputation points
2026-04-26T06:30:24.73+00:00

How to create a host pool in AVD using with active directory or mantra ID.

step 1 - tried with windows active directory -but no luck

step 2- tried with mantra ID - no luck.

Windows for business | Windows Server | User experience | Create a host pool and session host
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. VPHAN 43,565 Reputation points Independent Advisor
    2026-04-26T07:09:17.35+00:00

    Hi Suresh J,

    Since your deployments failed with both standard Active Directory and Microsoft Entra ID, the root cause is likely environmental prerequisites failing during the virtual machine provisioning cycle.

    For traditional Active Directory joins, the failure is network routing and DNS resolution. You must verify that the Azure Virtual Network hosting the session hosts is configured with custom DNS servers pointing directly to your Domain Controllers. Without this configuration, the automated join process cannot locate your domain. If a deployment fails, you can inspect the domain join logs located at C:\Windows\debug\Netsetup.log on the failed virtual machine. This specific log file will clearly identify standard resolution errors, such as missing SRV records or inaccessible domain controllers, allowing you to pinpoint the network blockage.

    When utilizing Microsoft Entra ID, the deployment relies on the AADLoginForWindows virtual machine extension, which requires unrestricted outbound HTTPS access over port 443 to Entra authentication endpoints. Network Security Groups or firewall appliances blocking traffic to endpoints like login.microsoftonline.com will cause the extension to time out and fail the entire deployment. You can review the extension provisioning state by checking the log files located at C:\WindowsAzure\Logs\Plugins\Microsoft.Azure.ActiveDirectory.AADLoginForWindows to confirm if network timeouts occurred during the Entra registration phase.

    Furthermore, ensure your access control logic is complete when using Entra ID. Beyond assigning users to the application group, Entra ID-joined session hosts require users to be explicitly assigned the Virtual Machine User Login role at the resource group or virtual machine level. Without this specific registry and access control alignment, users will receive unauthorized errors when attempting to broker a connection, even if the deployment succeeds.

    Hope this answer brought you some useful information. If it did, please hit “accept answer”. Should you have any questions, feel free to leave a comment.

    VP

    Was this answer helpful?

    0 comments

  2. AI answer

    2026-04-26T06:30:42.7933333+00:00

    To create an Azure Virtual Desktop (AVD) host pool that uses either Active Directory or Microsoft Entra ID (formerly Azure AD), the directory choice is configured when adding session hosts (VMs) to the host pool, not on the host pool object itself.

    Below is a concise end‑to‑end outline using the Azure portal; the same host pool works with either directory type depending on how the session hosts are joined.

    1. Create the host pool (standard management)
    2. Sign in to the Azure portal and search for Azure Virtual Desktop.
    3. Select Host pools → Create.
    4. On the Basics tab:
      • Subscription / Resource group: Select or create.
      • Host pool name: e.g. hp01.
      • Location: Choose the Azure region.
      • Preferred app group type: Desktop or RemoteApp.
      • Host pool type:
        • Pooled or Personal.
          • If Pooled, configure Load balancing algorithm and Max session limit.
          • If Personal, configure Assignment type (Automatic/Direct) and optional multiple desktops per user.
    5. Continue to Next: Virtual machines if session hosts should be created now; otherwise go straight to Review + create and create only the host pool.

    This creates the host pool; directory integration is defined on the Virtual machines tab.

    1. Add session hosts joined to Microsoft Entra ID

    Prerequisites: For Microsoft Entra joined session hosts, only the AADLoginForWindows VM extension is supported; it is added automatically when using the Azure portal or ARM template with the AVD service.

    On the Virtual machines tab while creating or expanding the host pool:

    1. Choose to add session hosts on Azure.
    2. Configure VM size, image, number of VMs, etc.
    3. Under Domain to join / Select which directory you would like to join, choose Microsoft Entra ID.
    4. Provide the required Entra configuration (tenant, identity, etc.). The portal will automatically add and configure the AADLoginForWindows extension.
    5. Configure Virtual Machine Administrator account (local admin username and password) according to Windows VM requirements.
    6. Complete networking (VNet, subnet, NSG, no public inbound ports recommended) and finish the wizard.

    Once deployment completes, the host pool will have Microsoft Entra joined session hosts.

    1. Add session hosts joined to Active Directory

    There are two main patterns depending on whether using standard management or the preview “session host configuration” approach.

    A. Standard management (Virtual machines tab)

    On the Virtual machines tab while creating or updating the host pool:

    1. Choose to add session hosts on Azure.
    2. Configure VM size, image, count, etc.
    3. Under Domain to join / Select which directory you would like to join, choose Active Directory.
    4. Provide domain join details (domain name, OU if needed) and domain credentials.
    5. Configure Virtual Machine Administrator account for the local admin.
    6. Finish networking and create.

    B. Session host configuration (preview)

    If using the preview “session host configuration” management approach:

    1. Create a pooled host pool with ManagementType = 'Automated' via PowerShell, for example: 
         $parameters = @{
       Name = '<HostPoolName>'
       ResourceGroupName = '<ResourceGroupName>'
       ManagementType = 'Automated'
       HostPoolType = 'Pooled'
       PreferredAppGroupType = 'Desktop'
       LoadBalancerType = 'BreadthFirst'
       MaxSessionLimit = '<value>'
       Location = '<AzureRegion>'
       IdentityType = 'SystemAssigned'
   }
   
   New-AzWvdHostPool @parameters
    2. Create a session host configuration with New-AzWvdSessionHostConfiguration, specifying a custom image or marketplace image and Active Directory join.
    3. In the portal, when configuring the session host configuration, under Select which directory you would like to join, choose Active Directory, then:
      • Select the key vault that contains the secrets for the domain join account (username/password).
      • Optionally specify domain name and OU path.
      • For Virtual Machine Administrator account, select key vault secrets for the local admin account.
    4. Create a session host management policy with New-AzWvdSessionHostManagement to control update behavior.
    5. Workspace and app group

    After the host pool and session hosts are configured:

    1. On the Workspace tab (optional during creation):
      • Set Register desktop app group to Yes.
      • Choose an existing workspace or Create new (e.g. ws01).
    2. Complete Advanced (diagnostic settings) and Tags, then Review + create.
    3. Post‑deployment
    4. Ensure licensing is applied correctly to session hosts as described in the licensing section.
    5. Assign users or groups to the application group so they can access desktops/apps.

    If previous attempts with Windows Active Directory or Microsoft Entra ID failed, verify specifically on the Virtual machines (or session host configuration) step that the correct Select which directory you would like to join option is chosen and that domain/tenant credentials, networking (VNet/subnet reachability to domain controllers or Entra endpoints), and required extensions (AADLoginForWindows for Entra) are correctly configured.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.