Windows
Pre-configured: AD DS on a domain controller and a second server, domain joined, that will serve as our file server. The servers will be called AD01 and FS01 respectively.
Create three new VMs. The VMs will be named RDSH01, RDSH02, and RDCB. RDSH01 and RDSH02 will serve as our session hosts. If you want more session hosts, you can add VMs and name appropriately. RDCB will serve as the connection broker, licensing, and our web access. On a side note, we can ignore web access for this lab, but it is required to be configured. To understand roles further: Remote Desktop Services roles | Microsoft Learn
Turn on the three VMs, set up static IPs and DNS to AD01, change VM names, join AD DS domain.
On AD01, create a central store for your group policy. This is done for later FSLogix steps. To create a central store, follow: Create Central Store for Group Policy Administrative Templates - ALI TAJRAN
Go to Active Directory Users and Computers. Create a group and name it something like “RDS Users”. Add Users to the group that you want to give access to remote desktop services.
In AD Users and Computers, move the RDCB to your server OU.
Create a new OU named “Remote Desktop Session Hosts”. Move both RDSH01 and RDSH02 into this OU.
Go to “DNS” > Forward Lookup Zone > Right click the domain zone > Select “New Host (A or AAAA)”
Name it “RDSFarm” and input the IP Address of RDSH01.
Create another Host record, name it “RDSFarm” again, and input the IP address of RDSH02.
On FS01, create a new folder on the C: called “FSLogix”. Create two folders inside of it called “FSLogixContainers” and “FSLogix_Profiles”.
Edit both of their advanced security and disable inheritance.
Remove all principals in the list.
Add “CREATOR OWNER” > For “Applies to”, input “Subfolders and files only” > For “Basic permissions”, select “Modify” > Select “Ok” to add.
Add “Domain Admins” > For “Applies to”, input “This folder, subfolders, and files” > For “Basic permissions”, select “Full Control” > Select “Ok” to add.
Add “Domain Users” > For “Applies to”, input “This folder only” > For “Basic permissions”, select “Modify” > Select “Ok” to add.
Now for both folders (FSLogixContainers and FSLogix_Profiles) go to sharing > advanced sharing > select Share this folder
Under permissions, grant everyone “Full control" > click Ok
Under Caching, select “No files or programs from the shared folder are available offline” > Click Ok.
Select Ok > and then close
Go to RDCB > Server Manager. Register RDS Servers. Right click “All Servers” and select “Add Servers”. Select “Find Now”. Select RDSH01, RDSH02, and RDCB and move to the right.
Then go to Manage > Add roles and Features > Installation Type > Select Remote Desktop Services installation.
Deployment type > Select Standard deployment.
Deployment Scenario > Select Session-based desktop deployment.
RD Connection Broker > Select RDCB > Move to right > select Next
RD Web Access > Select RDCB > Move to right > select Next
RD Session Host > Select RDSH01 > Move to right > Select Next
Check “Restart the destination server automatically if required” and select “Deploy”. Let the installation fully complete and then move onto the next steps.
Still on RDCB > Server Manager > Remote Desktop Services > Overview > click RD Licensing
Select RDCB > move to the right > select Next.
Click Add and Close once the installation completes.
Right click RD Session and select “Add RD Session Host Servers”
Select “RDSH02” and move to the right > Next > “Restart remote computers as needed” is checked > Add > Close
Right click RD Session and select “Create Session Collection”.
Name the collection. “RDSFarm”. This name must be the same as the Host records created in steps 6 and 7.
Select RDSH01 RDSH02, move to the right, select next.
Specify the group created in step 4. (RDS Users) > Next
Do not enable user profile disks > Next
Create and close
On BOTH RDSH01 and RDSH02, download FSLogix and install. Install FSLogix Applications - FSLogix | Microsoft Learn
Unzip the folders > Go to x64 folder > Go to release folder > Run “FSLogixAppsSetup” to install
On AD01, download FSLogix. Unzip the folder and locate the fslogix.adml and fslogix.admx files.
Copy the fslogix.admx to the central store, located at “C:Windows\SYSVOL\sysvol\<domain>\Policy\Policy Definitions”
Copy the fslogix.adml to another place in the central store located at “C:Windows\SYSVOL\sysvol\<domain>\Policy\Policy Definitions\en-US”
Open Group Policy Management and create a new GPO and link it to the “Remote Desktop Session Hosts” OU.
Edit the GPO and follow both guides linked to configure the Profile Container. Do not configure both the ODFC and the Profile container. Configuring the ODFC container is only used in legacy environments with a profile solution already.
Configuring FSLogix Profile Containers on Windows Server RDS | Windows OS Hub
Reboot RDSH01 and RDSH02 for the group policy to apply
Remote into the FQDN of the RDSFarm. (i.e. rdsfarm.ad.kylermatsuura.com)
Confirm FSLogix is being used at the login screen and by checking the fileserver’s FSLogix folder for entries for the new login.