Domain join account for Azure Virtual Desktop (AVD)

Hello there! Quick post today on how to create a domain join service account to add Azure Virtual Desktop (AVD) session hosts to the domain.

Prerequisites

• Create a service account, e.g. AVDDomainJoin@domain.net
• Permissions within Active Directory to delegate control to various OU’s
• Organisational structure for AVD

Organisational Unit Structure for AVD

Before we start, ensure that your organisational units are setup in a clean manner, as delegating control will apply to the OU that we select and all of it’s sub OU’s, I tend to create the AVD OU structure like so:

Note: There is no right or wrong way of setting up your OU structures for AVD, it’s what works for you. The key takeaway is that the delegated control that will be implemented in the next section will apply to all sub OU’s, be mindful of this.

Delegating Control

On the OU in question, right-click and select Delegate Control:

Add the service account within Selected users and groups:

Select Create a custom task to delegate:

Select Only the following objects in the folder, then Computer Objects and then select Create selected objects in this folder:

Select Create All Child Objects:

Complete the wizard and that’s it! AVD domain join is configured, use this account to join AVD session hosts to the domain. Until next time!