After a thorough assessment of the company’s operational needs and remote work challenges, NSN Infotech implemented Azure Virtual Desktop (AVD) within the Azure Virtual Network with private endpoints to provide a secure, scalable, and high-performance virtual desktop solution.

Key Elements of the Solution:

• Azure Virtual Desktop (AVD) with Secure Connection
  To meet the performance and security needs of the remote workforce, NSN Infotech deployed Azure Virtual Desktop (AVD). AVD provided virtualized desktops with the processing capacity and memory required to efficiently run resource-intensive engineering applications like 3D AutoCAD and Autodesk Inventor.
  
  To secure connections, employees needed to connect to the company’s network using a site-to-site VPN before accessing the virtual desktops remotely. This ensured a secure link between the end-user devices and the AVD environment. Additionally, access was controlled using Microsoft Intune policies and Azure Active Directory Conditional Access to further enhance security by implementing multi-factor authentication and restricting unauthorized devices.
  
  This setup effectively mitigated security risks related to remote access and prevented unauthorized access from external and unmanaged devices.
  
  
  
• Cost-Effective Resource Allocation through Host Pool Management
  To ensure reliable performance and optimize resource allocation, NSN Infotech configured four virtual machines within a host pool. These virtual machines were configured to provide load balancing, distributing computing resources equally among users to ensure smooth performance and consistent user experience.
  
  Given Azure’s pay-per-use model, the four virtual machines were configured to align with the company’s business hours. During off-peak hours and weekends, three of the virtual machines automatically powered down, leaving one VM active for any urgent or unplanned work. This configuration helped the company significantly reduce operating costs without compromising availability or performance during critical business periods.
  
  
• Private Endpoints for Enhanced Security
  To meet the requirement of keeping all data within Australia, both the AVD and the company’s central vault server were hosted in Microsoft’s Sydney Data Centre. Furthermore, instead of using the public endpoints generally available for AVD, we configured private endpoints. This ensured that only users connected to the company’s network could access the AVD environment, significantly reducing the risk of unauthorized access and data breaches.