Azure Virtual Desktop
Windows 11 Enterprise multi-session on Azure — the flagship for the Microsoft 365 world. Choose your add-ons below to see the feature set of your particular AVD configuration.
As at August 2026 · consistent with the Extended DaaS Feature Matrix
Assemble your AVD configuration
Choose the add-ons and management layers that belong to your AVD environment. The puzzle and the module descriptions below react live — you see exactly which module changes through which add-on, and why.
The feature set at a glance
Which of the twelve core capabilities of a modern workplace stack does your configuration cover natively — and where are extensions needed? Each puzzle piece shows the maturity.
The twelve modules — what is in, what is missing?
Each module describes one core capability of the workplace stack. The colour shows its current status in your configuration. Select add-ons in the configurator above and you will see here which module improves and why. The content is consistent with the Extended DaaS Feature Matrix.
Endpoint platform (outside the puzzle)
The thirteenth module is optional but strategically important: which operating system do your people use to connect to the AVD session? AVD sessions run on any client — but dedicated thin client operating systems such as IGEL OS or Unicon eLux lower TCO and raise security, because they are hardened, centrally managed and carry no local Windows overhead.
IGEL OS · IGEL Technology
A Linux-based thin client operating system, managed centrally through IGEL UMS. Read-only, chain-of-trust boot, preventive security model. Supports AVD through the Windows App and boots from a USB stick on almost any old hardware. Ideal for Zero Trust endpoints and reusing legacy devices.
Unicon eLux · Unicon GmbH, Karlsruhe
A German Linux-based thin client operating system, managed centrally through Scout Enterprise Management. Recommended by the BSI and widely used in public bodies and the financial sector. Supports AVD via an RDP client, with built-in smartcard support. European data sovereignty.
Windows App · Microsoft (official client)
The official Microsoft client for AVD and Windows 365, replacing the old Remote Desktop client. Available for Windows, macOS, iOS, Android, web browsers and IGEL OS. Full protocol support including RDP Shortpath (UDP), Teams AV optimisation and multimedia redirection.
Chrome Enterprise / Browser · BYOD scenarios
AVD is also reachable from any browser through the web client. Full session functionality, but limited peripheral redirection (USB, smartcard). Indispensable for BYOD setups with Mac developers, iPad sales teams or Chromebook schools.
All sensible AVD combinations compared
This matrix shows the most common AVD setups in the DACH region — each with its maturity, target group and the specific difference from the base setup. Actual licence and infrastructure costs depend heavily on the contract model (EA, CSP, Azure Reserved Instances) and on how intensively the environment is used. For a reliable cost calculation, current terms should be obtained directly from Microsoft and the respective add-on vendor.
| Setup | Modules native | Target group | What changes compared with „AVD on its own“ |
|---|---|---|---|
| AVD on its ownBase setup without add-ons | 7 / 12 | Lab and test environments, training, proofs of concept, small to medium production environments with predictable usage | The baseline — considerably more capable since June 2026: Dynamic Autoscaling, Automated Host Pools and ephemeral OS disks are generally available. Still open: user experience measurement, screen shadowing for the help desk, and multi-cloud. |
| AVD + FSLogixThe Microsoft standard setup | 8 / 12 | Every production environment using Office — in practice the starting point of any serious rollout | Profile management is added: the Outlook cache and OneDrive Known Folder Move run smoothly. It costs nothing extra — FSLogix is included in Microsoft 365. |
| AVD + infrastructure as codeBicep, Terraform, Azure DevOps | 8 / 12 | Development and test environments, repeatable training rooms, environments with a limited lifespan | The entire environment becomes reproducible from a template — host pools, networking and assignments come from code rather than clicks. For lab, development and training scenarios this is often the better answer than a management tool: build it, use it, throw it away. One limitation: for development teams that need Linux, AVD remains unsuitable. |
| AVD + NerdioA common enterprise setup | 10 / 12 | Mid-market to large group, several host pools, an in-house help desk team | Adds above all convenience and fine control: screen shadowing, cost allocation per user, automatic repair of unhealthy hosts, scaling down to zero, an image pipeline with WinGet, an AI assistant. Basic scaling is something AVD now handles itself. |
| AVD + Hydra (Login VSI)For shift work and peak loads | 9 / 12 | Shift work, production, call centres, service providers with several tenants | Billing by concurrent users instead of by named users — structurally cheaper where usage fluctuates strongly. Plus tenant separation at no extra charge, WinGet images and a free entry-level version. |
| AVD + ControlUpFor measurable user satisfaction | 8 / 12 | Organisations with binding service commitments, help desk-intensive environments | Delivers the user experience measurement that AVD lacks: a score per session, automatic remediation, screen shadowing — and it includes physical devices. |
| AVD + Nerdio + ControlUpFull build for regulated industries | 11 / 12 | Finance, insurance, pharmaceuticals, the public sector | Combines Nerdio’s operational functions with ControlUp’s measurement. Nearly complete coverage — the only gap left is multi-cloud, because AVD is tied to Azure. |
AVD’s strengths
- Windows 11 Enterprise multi-session (exclusive to Azure) — up to 60% less compute than personal desktops
- Native Microsoft Teams optimisation through the SlimCore media engine (VDI 2.0) — audio and video run on the device instead of in the VM
- App Attach (GA, replacing MSIX App Attach), RemoteApp and Screen Capture Protection natively
- Watermarking GA since 2026 via Intune policy, confidential VMs GA since February 2026
- Full Azure control: VNet, Private Link, ExpressRoute, Azure Firewall, multi-region
- GA since June 2026: dynamic autoscaling (hosts are created and deleted automatically), automated host pools with session host configuration to prevent configuration drift, and ephemeral OS disks
- Session hosts can also run in your own data centre — through Azure Local or AVD Hybrid via Azure Arc on almost any hardware, still controlled from the Azure portal
- Since autumn 2025 external partners can sign in with their own company account (B2B guest access) — without you having to create a second account for them
- Connection stability much improved in 2026: RDP Multipath (several network paths) is GA, and Fast Reconnect restores interrupted sessions within seconds
- Entra ID join, Conditional Access and Intune device compliance out of the box
Gaps & what to add
- For fine control of scaling (combining several triggers, scaling down to zero, switching storage tier on shutdown) additional tools such as Nerdio or Hydra still make sense — the basic function has been covered by AVD itself since June 2026
- No native workspace environment management — FSLogix and Intune policies have to be orchestrated yourself
- No multi-cloud support (Azure and Azure Local only)
- Silent migration and geo-failover are not seamless (a session reconnect is needed)
- 3D SpaceMouse and USB HID only generically over RDP — optimised only with Citrix HDX or Omnissa Blast
- Image management is very manual without Nerdio (the Azure Compute Gallery alone is not enough)
- No Linux as a session host — AVD supports Windows only
The assessment in one sentence
AVD is the strongest foundation for organisations already committed to Microsoft 365 — and considerably more self-sufficient since June 2026 than a year ago. Scaling, uniform host configuration and ephemeral OS disks now run natively, and FSLogix is included in Microsoft 365. For small and mid-sized environments with predictable usage, AVD is therefore enough on its own. Additional tools such as Nerdio, Hydra or ControlUp pay off where convenience and fine control matter: help desk workflows with screen shadowing, cost allocation per user, tenant separation, automatic repair of unhealthy hosts and scaling down to zero. The question today is therefore no longer „AVD or Nerdio“ but „is AVD alone enough — or do the size of the estate and the level of ambition justify an extra tool?“
Technical deep dive
Architectural basis: AVD uses session hosts as ordinary Azure VMs in a host pool. The control plane (broker, gateway, diagnostics) is hosted by Microsoft — only Azure consumption is billed (compute, storage, network egress); AVD itself is free. That makes AVD structurally cheaper than Citrix DaaS or Omnissa Horizon, but the management layer is largely something you build yourself or buy as an add-on.
Multi-session as the differentiator: Windows 11 Enterprise multi-session is available only on Azure and is the platform’s real contribution. Several users share one VM, without Windows Server RDSH and without server CALs. With typical knowledge worker profiles, six to ten users fit on one D8s v5 VM — the compute share per user falls dramatically. That is the argument which often decides TCO calculations against Citrix or Horizon.
When an additional tool becomes worthwhile: Since June 2026 AVD covers the basics itself — scaling including creating and deleting hosts, uniform host configuration and ephemeral OS disks. For manageable environments with predictable usage that is sufficient. A tool such as Nerdio, Hydra or ControlUp pays off where convenience and fine control tip the balance: screen shadowing for the help desk, cost allocation per user, several tenants from one interface, automatic repair of unhealthy hosts, scaling down to zero, switching storage tier on shutdown, and comfortable image pipelines. As a rough guide: from several host pools, an in-house help desk team or service provider scenarios with multiple customers, the extra effort usually pays off — below that, rarely.
New developments in 2026: Confidential VMs for AVD have been GA since February 2026 (AMD SEV-SNP, confidential OS disk encryption). Watermarking is production-ready via Intune policy. The Delos Cloud (SAP/Microsoft/Arvato) has been available in production since early 2026 — a sovereign AVD option under German law for public administration and critical infrastructure, operated in Gütersloh and Leipzig.
Which AVD configuration fits your organisation?
The feature set is one side of the coin — the fit with personas, compliance and the existing IT estate is the other. Compare directly in DaaS Maps, or discuss it on LinkedIn.
Trademarks: Microsoft®, Azure®, Windows®, Azure Virtual Desktop®, Windows 365® · Nerdio® · Login VSI®, Hydra™ · ControlUp® · IGEL® · Unicon® · and all other product and company names mentioned are registered trademarks of their respective owners and are named here solely for factual comparison, as nominative use.