The estate
What they were running
Pooled AVD for outpatient clinics, ward admin, and a smaller pool for corporate staff.
The problem
Why the queue filled up
Clinic PCs locked mid-clinic when a session froze. Ward clerks waited for a small Azure team. Security would not give Desktop Virtualization roles to first line or to a clinic manager.
What they set up
The same four moves, scoped to this estate.
- 01
Connect one Entra app owned by the trust, with Desktop Virtualization roles on the AVD subscription only.
- 02
Expose clinic and ward pools to service desk. Leave the corporate pool for session admins.
- 03
Invite a clinic lead with help desk on the clinic pool so they can clear a lock without a ticket.
- 04
Keep log off with session admins. Review Activity after each clinic peak.
What that gives them
A clearer way to act.
- Service desk and a clinic lead can clear a locked session without the Azure Portal.
- A clinic does not wait on the cloud team when a session freezes.
- Privileged Azure stays with the small IT team.
More scenarios
All case studies