Question

You manage a pooled Azure Virtual Desktop host pool running Windows 11 Enterprise multi-session with Microsoft Defender Antivirus enabled. Users store their profiles in FSLogix profile containers hosted on Azure Files. Users report intermittent profile corruption and slow logon times. Investigation shows Defender Antivirus is actively scanning the mounted VHDX files during logon. What should you configure to resolve the issue while keeping Defender Antivirus protection enabled?

Accepted Answer

Add the FSLogix VHD/VHDX file paths and the FSLogix agent processes to the Defender Antivirus exclusion list

Answer

Disable Microsoft Defender Antivirus on all session hosts and rely on Microsoft Defender for Endpoint instead

Answer

Enable Controlled Folder Access and add the FSLogix profile share as a protected folder

Answer

Configure a User-Defined Route to bypass the Azure Files storage account for antivirus traffic