Step by Step Installation and Configuration of Nerdio Manager for Enterprise 7.4 – Part Two
Published November 2025 at blog.youngtech.com
Click Here to Download this Full Guide as a PDF
A couple weeks ago I published the Full Guide linked above, which includes 165+ pages of Step by Step instructions for Installation and Configuration of Nerdio Manager for Enterprise 7.4. Part One of this Blog Series can be found here:
This post is Part Two (of Four), all sections of which can be found in the Full Guide linked above.
As mentioned previously, this guide is not a replacement for the excellent documentation available at https://nmehelp.getnerdio.com. I highly recommend checking out the official Implementation Guide, which I’ve linked here.
What This Guide Covers
This walkthrough is designed to help you lay the foundation for a successful Proof of Concept (PoC) or initial deployment of Nerdio Manager for Enterprise. In the previous Blog Post, I shared the first section out of six outlined below. In this Part Two of the series, I’ll be sharing the second and third sections from the 165+ page guide.
- Initial Deployment of Nerdio Manager for Enterprise from the Azure Marketplace (Included in Previous Blog Post)
- Grant Consent using Global Administrator (Global Admin) account (Included in This Blog Post)
- Creating Initial Desktop Image (Included in This Blog Post)
To be shared in future parts of this multi-part blog series:
- Creating Resource Group and IT Workspace
- Assign the IT Workspace and Login
- Lock Down Nerdio Manager for Enterprise to an Azure Private Endpoint
If you want to review the entirety of the content that I’ll be releasing over the coming weeks in multiple parts, you may: Click Here to Download this Full Guide as a PDF
Reminder of Prerequisites for a Smooth Deployment
To ensure a time-efficient engagement, I always confirm the following basics are in place before starting:
- Nerdio Engineer Account: The engineer (typically the PoC contact) should have Owner privileges on at least one Azure subscription. In this case, my account dane@youngtechavd.com serves as the Nerdio Engineer, with the subscription PAYGO-SPOKE-NER-INFRA designated for deployment.
- Azure Virtual Network (VNET): Pre-staged with subnets and configured to allow:
- Internet access for Azure Portal connectivity
- Access to Active Directory Domain Controllers for AVD domain join
- Custom DNS pointing to AD DCs for private DNS resolution
- A Private DNS Zone to restrict App Service access from the public internet
- Global Admin Access: Required at specific stages for elevated privileges.
- Entra ID Synchronization: Ensures Workspaces can be provisioned to MFA-enabled AD domain users.
To refresh your memory in Section 1 we reviewed Initial Deployment From Marketplace, see Part One of the Blog Series for Detailed Steps. For this blog post (Part Two), let’s jump back in where we left off!
Section 2: Grant Consent Using Global Administrator (Global Admin) Account
In the next steps, you’ll need access to the Azure Global Admin to grant admin consent. During these steps, work with the Global Admin to authenticate by clicking the link ‘Have an admin account? Sign in with that account’ as shown:
In the following screens, the dane@youngtech.com account represents the Global Admin which has permissions to grant on behalf of the organization:
Global Admin credentials are entered:
Multi-Factor Authentication prompts are completed for the Global Admin.
If logged in with a Global Admin, check the box ‘Consent on behalf of your organization’ to create the app with the appropriate permissions. This is by far the easiest method to give Nerdio each of the required roles and permissions, using the Global Admin consent process. For alternative methods, reference the Nerdio documentation here: https://nerdioinc.mcoutput.com/1379027/Content/NME%20Curriculum/NME_Installation_Guide.htm
Select the Global Admin:
Click the button Register Nerdio Manager as shown below:
Enter the appropriate company, name and e-mail details as shown, then click Register:
Check the box for Azure Virtual Desktop:
Click the Checkbox for Network:
Select the first Subnet that will be used for deploying NME infrastructure and initial Desktop Images:
Review the Subnet has been added and click OK:
Click the Checkbox next to Directory:
Enter the Active Directory Domain details such as: Profile Name, Directory Type, Domain (FQDN), Service Account (UPN), Service Account Password, and the Organizational Unit in DistinguishedName format. When everything’s been entered, click OK:
Click the Checkbox for File Storage (and you can leave the Location not configured as this can be specified later). Review the details as entered and recognize that additional settings or NME capabilities can be configured later. These are (in my opinion) the bare essential configurations needed for a new Nerdio Manager for Enterprise 7.x deployment. Once reviewed, click Done:
With the Global Admin present, click the hyperlink for the Tenant – Domain.com as shown below:
This will open a window to authenticate as the Global Admin, and as shared previously in this environment, dane@youngtech.com represents the Global Admin account being used to provide consent:
Review the permissions that are being assigned using the Global Admin account, and click Accept:
If successfully granted, a confirmation message will be displayed as shown in the following:
Flip back to the NME deployment window and check the box I have granted admin consent then click OK as shown:
Section 3: Creating Initial Desktop Image
If successfully deployed and consent has been provided by the Global Admin, the NME view with WORKSPACES selected on the left will be shown as follows:
Select Desktop Images on the left and click New from Azure library:
The following empty window will be shown, with some basic settings pre-populated.
Enter your Desktop Image details, modeling initial configurations after those shown below if desired. For example, Name, Network, Azure Image, VM Size, OS Disk, Security Type (requires changing Geographic Distribution & Azure Compute Gallery below), Secure Boot, vTPM, Integrity Monitoring, etc. as shown:
De-select Join to AD as it’s generally not recommended to put Desktop Images on the domain. Continue entering details, modeled after those shown below:
Deselect Boot diagnostics as that’s generally only required for troubleshooting advanced configurations of Desktop Images. Take note of the toggle Geographic distribution & Azure compute gallery as that option must be Enabled to select Trusted Launch Virtual Machines as shown previously.
Enter a new name for an Azure compute gallery to have a new gallery created from within the Nerdio subscription. Enter the specific Region(s) for deployment. I personally recommend selecting Hibernation supported as this will come in handy down the road.
Review all settings modeled after those shown in prior screenshots, and when ready click OK:
The process will start showing three dots as progress is made in deploying the initial Desktop Image:
As the Desktop Image is created, I recommend clicking the information ( i ) icon on the right of Add desktop image to view the status and progress of creation:
While the Desktop Image is being created, you can monitor every step of the process using the information pop-up as mentioned:
Continue monitoring the progress, as this can take between 30-45 minutes based on the settings as configured:
Once completed, no steps will display In Progress and all will display Complete in the third column. Click Close to return to the Desktop Images screen:
Confirm the Add desktop image task shows Complete:
Click the Desktop Images hyperlink in the top left to flip away from the Tasks view.
Click Here to Continue Reading Part Three Online…
Click Here to Download this Full Guide as a PDF
To compliment this Blog Post, I have created a 165+ page PDF with the remaining steps in the following sections:
- Initial Deployment of Nerdio Manager for Enterprise from the Azure Marketplace
- Grant Consent using Global Administrator (Global Admin) account
- Creating Initial Desktop Image
- Creating Resource Group and IT Workspace
- Assign the IT Workspace and Login
- Lock Down Nerdio Manager for Enterprise to an Azure Private Endpoint
This PDF guide is available free of charge to Subscribers of the YOUNGTECH BLOG. To continue reading, please request access to this free resource using the following link: https://lp.constantcontactpages.com/sl/CJIeeLI/nme74
Click Here to Download this Full Guide as a PDF
By completing the form above, you will receive an e-mail to download a PDF of the full guide and continue reading from this section. Once you’ve received the link, you can unsubscribe from the blog at any time, but it’s our way of staying connected to our audience. Please advise if you have any challenges reaching the link provided in the e-mail.
I trust this will be a useful resource to you and that you’ve enjoyed this Step by Step Installation and Configuration of Nerdio Manager for Enterprise 7.4 guide. Best of luck in your NME deployments! If you need any help along the way, don’t hesitate to reach out.
Thank you so much!
Dane Young, MBA
My X | My LinkedIn