Sessionwright for Azure Virtual Desktop
An AI admin agent for your Azure Virtual Desktop host pools
Session host health, scaling plans, FSLogix and cost. Read-only by default; every change approved and logged.
Rule AVD-COST-SCALE-02
MediumHost pool hp-prod-weu runs 6 hosts overnight with no sessions
- Scaling plan
- None assigned
- Idle window
- 19:00 to 07:00 UTC, 5 of 7 nights
- Sessions
- 0 during the idle window
- Start VM on Connect
- Disabled
Proposed fix: Create a scaling plan in a disabled state for review
T1What it watches, explains and fixes
Findings come from rules run against Azure Resource Manager and Log Analytics data, with the evidence attached.
Session hosts that drop out
Hosts in Unavailable or Needs assistance, grouped by cause: agent health, domain trust, FSLogix, disk or networking. Drain mode is proposed only for hosts with no sessions.
Scaling plans and Start VM on Connect
Pools with no scaling plan, plans that never ramp down, and schedules that do not match when people actually log on.
FSLogix profile health
Profile container attach failures, capacity on the profile share, and settings that slow logons or lose data.
Cost leaks
Idle hosts, orphaned disks, oversized SKUs, licence settings and reservation fit, with an estimate of what each fix saves.
Images and agents
Hosts on old images, agents behind the current version, and pools where hosts were built from different images.
Many tenants, one view
MSPs manage customer tenants through Azure Lighthouse, with a consented app for what Lighthouse cannot reach.
Least privilege, in roles you already know
Read-only built-in roles at host pool or resource group scope. Write roles are separate and activated only for an approved change window.
Read (assessment, Advisor)
Desktop Virtualization Reader, Reader, Log Analytics Reader
Low-risk writes (T1)
Desktop Virtualization Session Host Operator and User Session Operator, scoped per host pool
Disruptive writes (T2)
Eligible assignments through Privileged Identity Management, activated by the approver for the window
Role names: Microsoft Learn: built-in roles for Azure Virtual Desktop
Your model, on your Azure bill if you like
Chat and plan narratives run on the model endpoint you choose: your Claude seats, your Anthropic API key, or Claude in Microsoft Foundry so usage is billed through your Azure subscription. Findings never depend on the model; they come from deterministic rules.
Start with a fixed-price, read-only assessment
The fee is credited in full toward Advisor or Operator if you continue within 60 days. Design partners get 50% off.
- Drop-in Assessment: Azure Virtual DesktopUp to 500 users, one tenant
- $2,500
- AdvisorRead-only agent and chat. It watches, explains and drafts plans. It does not change anything.
- from $750/mo
- OperatorEverything in Advisor, plus approve-to-execute: plan, dry-run, approve, execute, verify, roll back.
- from $1,500/mo
Questions
Do we need to install anything in Azure?
For Azure Virtual Desktop, the runner reads Azure Resource Manager and Log Analytics through an app registration or managed identity you create with read-only roles. Session-host internals such as FSLogix logs are read through the same least-privilege access.
Can it change our host pools on its own?
No. Every change starts as a plan with a dry-run. Low-risk actions need one approval; disruptive ones need a Change Approver, a change window and a rollback. Nothing runs outside the window you set.
Does it work for MSPs with many tenants?
Yes. Azure Lighthouse gives delegated access across customer tenants, and a customer-consented app covers what Lighthouse cannot reach. See the MSP Partner program for pricing.
Is Sessionwright affiliated with Microsoft?
No. Sessionwright is independent and works with Azure Virtual Desktop through Microsoft's documented APIs. It is not endorsed by Microsoft.
Help shape the Azure Virtual Desktop agent
We are onboarding a small number of AVD design partners and MSPs: free or half-price assessments in exchange for regular feedback.