Part 3: Security Controls for W365 and AVD

The third part of the book discusses security controls that are available for both Windows 365 and Azure Virtual Desktop. It explains how to secure user sessions by using controls such as Conditional Access and MFA and how to prevent data leakage from a desktop using screen capture protection and watermarking. It also covers Microsoft’s cloud-based update solutions, such as Windows Update for Business, Windows Autopatch, and Custom Image Templates. But there is more to keeping company data safe on a desktop. Make sure to use solutions such as Defender for Endpoint with tamper protection and encryption to detect and prevent threats. This part concludes with configuring access control, where you’ll learn about RBAC, Microsoft Entra PIM, and the new Windows LAPS. By the end of this part, you will have learned how to keep your data and desktop safe using modern security controls that can be used for both Windows 365 as well...