The estate
What they were running
Personal desktops for traders and a pooled pool for middle office, hosted in UK South.
The problem
Why the queue filled up
Night cover used a shared Azure login. Line managers logged tickets for idle sessions they could have cleared. Audit asked who sent a log-off during a freeze and Portal logs were too wide.
What they set up
The same four moves, scoped to this estate.
- 01
Stand up AvdControl. Keep the AVD data plane in the bank subscription.
- 02
Map night cover to help desk on the middle-office pool. Give a desk owner help desk on their own personal-desktop pool.
- 03
Keep log off with session admins. Require MFA for owner and admin.
- 04
Export or filter Activity by actor and pool when change control asks for a record.
What that gives them
A clearer way to act.
- No shared Azure admin account for session work.
- A desk owner can disconnect or message on their pool without a ticket.
- Change-freeze questions use the tenant Activity list.
More scenarios
All case studies