You have an application that must be installed locally on the OS drive of the session host, but you want to restrict its visibility so only users in the 'HR-App-Users' Active Directory group can see and run it. How can you achieve this in AVD?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Use FSLogix Application Masking to hide the application from users who are not in the AD group.

FSLogix Application Masking is designed exactly for this scenario: installing applications in the base image but dynamically hiding files, folders, shortcuts, and registry keys fro...

๐Ÿ“‹Part of Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140) ยท Azure Certification Practice
Real Exam ScenarioAzure Virtual Desktop App Delivery

You have an application that must be installed locally on the OS drive of the session host, but you want to restrict its visibility so only users in the 'HR-App-Users' Active Directory group can see and run it. How can you achieve this in AVD?

โœ“ Correct Answer & ExplanationAzure Virtual Desktop App Delivery

Correct Answer

Use FSLogix Application Masking to hide the application from users who are not in the AD group.

Why This Answer Is Correct

FSLogix Application Masking is designed exactly for this scenario: installing applications in the base image but dynamically hiding files, folders, shortcuts, and registry keys from users who do not have the necessary entitlements (like AD group membership).

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Azure Virtual Desktop App Delivery โ€” a core concept tested in Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140). Understanding Azure Virtual Desktop App Delivery is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.