Azure Virtual Desktop in the UAE: data location, licensing and cost, settled up front.
Azure Virtual Desktop (formerly Windows Virtual Desktop) streams Windows desktops and apps from Azure, with many users sharing each multi-session host. Session hosts and user profiles can run in Microsoft’s UAE regions, but AVD’s own service metadata is stored in a supported geography that does not yet include the UAE. Most Microsoft 365 business and enterprise plans already include the right to use it internally. We design, deploy and run it with those facts on the table from day one.
- UAESession hosts and profiles in-country
- M365Internal-use rights often included
- AutoscaleHosts off when nobody is working
- Windows AppCurrent client for users
Six pieces we design and run, beyond spinning up virtual machines.
Host pools and session hosts
Pooled Windows 11 Enterprise multi-session hosts for shared work, personal desktops where someone needs their own machine, and host sizes based on concurrent users and how heavy their apps are.
FSLogix profiles
User profiles live in containers on Azure storage, so a user gets the same desktop whichever host they land on. We size and maintain the containers so they do not grow out of control.
Images and App Attach
A managed gold image in Azure Compute Gallery, and applications delivered with App Attach, which replaced MSIX app attach, so apps can be updated per user or group without rebuilding the image.
Access security
Conditional Access with MFA and device compliance, plus host controls such as clipboard and drive redirection limits where data must not leave the session. Defender for Endpoint runs on the hosts.
Autoscale and monitoring
Scaling plans start and stop hosts on a schedule that matches your working hours, and Insights for Azure Virtual Desktop shows session load, host health and scaling activity.
Windows App for users
Microsoft now directs users to Windows App, which replaces the Remote Desktop client and brings Azure Virtual Desktop, Windows 365 and Dev Box into one app for computers, tablets, phones and web browsers.
Four answers we give before anyone is moved to AVD.
What actually stays in the UAE
Session hosts, FSLogix profiles and user files can all run in Microsoft’s UAE regions, and Microsoft states that user and app data resides in the region you choose. AVD’s service metadata, such as host pool, workspace and user principal names, is stored in one of Microsoft’s supported geographies, and the UAE is not yet on that list. We document this split for your compliance file instead of promising more than the service offers.
Licences you may already own
Microsoft 365 E3, E5, A3, A5, F3 and Business Premium, Windows Enterprise E3 and E5, Windows Education A3 and A5 and Windows VDA per user all include the right to use AVD for your own staff. You pay separately for the Azure resources. Giving access to external users, such as customers or contractors from another company, needs per-user access pricing instead.
Cost control built in
Most of an AVD bill is hosts running when nobody is using them. Scaling plans, right-sized hosts, reservations for hosts that run all day, and a monthly cost review keep spending in line with real use.
AVD or Windows 365?
AVD suits shared, IT-managed desktops for many users. Windows 365 gives each user a fixed-size personal Cloud PC with less to manage. If you are still deciding, read our AVD vs Windows 365 comparison first; this page is about running AVD well once you have chosen it.
Six UAE scenarios that suit AVD.
Controlled access to sensitive systems
Regulated firms that keep data inside the session with clipboard, drive and printing restrictions.
Contact centres and shift work
Several shifts sharing pooled multi-session hosts.
Clinical workstations
Fast user switching and controlled access to clinical systems.
Retail back office
Shared back-office desktops across branches.
Shared plant-floor terminals
Shift operators on shared terminals with roaming profiles.
Training rooms and labs
Lab and exam environments reset to a clean image.
Four phases from assessment to a managed environment.
- 1
Assessment and design
2 weeks
User groups, application inventory, identity readiness, licensing check, data-location requirements, host pool sizing and the scaling schedule. Output: a written AVD design.
- 2
Foundation build
2-3 weeks
Host pools in your chosen region, FSLogix storage, gold image in Azure Compute Gallery, App Attach packages, Conditional Access policies, scaling plans and Insights.
- 3
Pilot
2 weeks
A pilot group works on AVD through Windows App. We fix printing, device redirection and app issues, and check profile behaviour, performance and cost.
- 4
Rollout and managed service
2-4 weeks plus ongoing
Remaining users move over. Then monthly cost reviews, image updates, capacity planning and an annual licence review.
What UAE organisations ask before deploying.
Services that pair with AVD.
Book an AVD scoping call and get a written design proposal in 5 days.
Tell us about user personas, applications, connectivity, existing Azure setup and support requirements. We will confirm the requirements and proposed scope with you.
Related Services
Explore more solutions that work great with this service
AVD vs Windows 365
Which cloud desktop fits, with a written TCO model
Windows 365 Cloud PC
Cloud-based virtual desktop solutions
Azure Cloud Solutions
Azure landing zone, migration, FinOps, managed
Desktop as a Service
Cloud PCs per user, Intune managed
Microsoft Intune
Device management and endpoint security
Microsoft 365
Complete Microsoft 365 setup, migration & support
Endpoint Security
Defender for Endpoint and Intune managed