Jump to Section:
General Questions
Q: What does AVD mean?
A: Azure Virtual Desktop
Q: The initial email indicated "A simplified, modern work experience with eCR available via a web browser." Yet the instructions include downloading a Remote Desktop. Does the change to Azure Virtual Desktop (AVD) truly translate to browser-based access?
A: Yes, though device and drive redirects are not yet tested for browser-based access. These redirects were successfully tested with the Remote Desktop client.
Q: Does this change mean every user will have remote access?
A: Yes
Q: If users can access eCR via a web browser, does this mean they can access eCR on their phone?
A: The Remote Desktop client for Azure Virtual Desktop is available for many different types of devices, platforms, and form factors, so technically yes. Use of phones or other devices is NOT recommended because the entire application is rendered on a much smaller screen.
Q: Will Azure Virtual Desktop (AVD) replace Forticlient?
A: Yes, Forticlient VPN will no longer be needed.
Q: Where can I access the Knowledge Hub article for the AVD setup?
A: There are two documents:
- Download and Install Remote Desktop Client for Azure Virtual Desktop (AVD)
- Subscribe to eCR and Authenticate Your Account in Azure Virtual Desktop (AVD)
Q: Will each customer be contacted when they are able to demo, and again when they go-live?
A: We will work closely with you to schedule the go live date. All beta and live users can go through the MFA process at any time. If your users do pre-register, they will not see any eCR icons in the live workspace until the live migration takes place.
Q: Do all my organization’s users need Beta accounts?
A: No, they do not. Only the users from your organization who you want to test the functionality of eCR in the Azure Virtual Desktop setup need beta accounts. Ideally, this is a small targeted group of users, as each user will need to subscribe to both the beta and live workspaces.
Q: Who do we contact if we have users that have not logged in for over 90 days?
A: Please enter a Zendesk ticket if you have a user who cannot log into the beta or live environments.
Authentication & Security Questions
Q: Workspace is not an option for type of account. The available options are Personal Account, Work or school account, or Other. Which one should we use?
A: You should select “Work or school account.”
Q: Do we do anything differently if we already use the Microsoft Authenticator app? Do we need to go through the entire process of scanning the app and setting it up?
A: You still need to subscribe to the eCR application in AVD by following Subscribe to eCR and Authenticate Your Account in Azure Virtual Desktop (AVD).
Q: Does anything change if we are already using a Microsoft account for email and other 365 services?
A: No. The Azure Virtual Desktop remote client and authentication will not affect existing Microsoft accounts.
Q: Will there be two forms to authenticate every time, or is this just for initial setup?
A: This should be once a day but does depend on the timeout period.
Q: Once the Azure Virtual Desktop (AVD) installation and initial setup is completed and eCR accessed, will I be able to access the Microsoft 'stay signed in' option across multiple days?
A: Once signed into the azure remote desktop, you remain logged in. When you open the remote desktop connection, you are prompted to sign into that computer.
Q: Is there an option for setting up a single sign on (SSO) option and/or Trust Connection so users don’t need to set up multi-factor authentication (MFA) again if they already use Microsoft 365 and the Authenticator Apps?
A: No. This currently is not an option.
Q: Our organization currently uses Microsoft multi-factor authentication (MFA). Once users have already entered their MFA to connect to their desktop, will they need to reenter MFA to connect to eCR?
A: Yes, as this login is affected by the remote desktop connection timeout period.
Q: When setting up the Azure Virtual Desktop (AVD), should the password we enter be the same password we would normally enter for eCR?
A: For the beta environment, use your eCR login ID with beta appended to the end, i.e., first.last+beta@organization.com. The password is the same as the previous beta password.
Q: Are password changes going to be reset the same way via the password management tool online?
A: This depends, if you are subscribed to eCR with an email with +beta appended, the reset email may not reach the inbox. If the email does not reach you, please open a Zendesk ticket. If beta was not appended, it should work the same way. It is highly recommended that beta accounts have a different email than the live account associated with it.
Q: Will there be a Conditional Access Policy to re-authenticate two-factor authentication (2FA) at certain intervals?
A: We do not have a policy which requires you to reconfigure the multi-factor authentication (MFA) at certain intervals. However, there is a timeout period for the remote desktop connection itself which will require authentication.
Q: Will the rule for the password to expire every three months go away with the introduction of two-factor authentication (2FA)?
A: No. The password expiration policy will remain in place.
Q: How can I ensure that my organization's data and applications are fully protected when accessed through Azure Virtual Desktop (AVD)? What role does encryption play in securing Azure Virtual Desktop, and what encryption options are available?
A: Your data is more secure than before. The remote desktop clients themselves are encrypted, and the same security policies are in place. Your organization may also choose an added layer of protection by installing encryption software, such as BitLocker, on each machine used to access the Azure Virtual Desktop via the remote desktop client.
Q: With the addition of multi-factor authentication (MFA), will we still be required to provide our Public IP address to connect? If not, will we be able to connect from anywhere?
A: No. Once your agency has migrated to the AVD connection, you no longer need to provide your IP address. You will be able to connect to eCR as long as you have a device with the remote desktop client installed and an internet connection.
Q: Will using personal phones violate HIPAA confidentiality laws?
A: No. The authentication information transmitted relates to the user’s credentials only. Patient information is not transmitted during multi-factor authentication (MFA).
Installation Questions
Q: When should the remote desktop client be installed, and subscribers authenticated? Can it be done ahead of time? Before the cut over for Production environments?
A: The remote desktop client can be installed at any time, and the beta users can subscribe to the workspace and set up the authentication. We will work with you to coordinate a migration date when it is time to migrate your live environment to allow sufficient time to complete the subscribe and authenticate process for each user.
Q: What is the URL for the remote desktop client? The Microsoft Authenticator application?
A: The links are:
- Remote Desktop Client - This link automatically downloads the client.
- MS Authenticator App
Q: Does this install process need to be done on EVERY device used?
A: The subscribe or add process is only once per user account and is not dependent on the device. The remote desktop client does need to be installed and available on EVERY device an eCR user uses to login.
Q: The instructions say that we should "subscribe" not "add" a workspace. Which is it?
A: The different language is due to whether you are connecting using a Windows machine or a Mac. For this use, subscribe and add to accomplish the same thing.
Q: When I try to Subscribe, it prompts me for a Microsoft account, which account should I pick?
A: Select 'Use another account'
Q: We are getting stuck on install, the message shows that no resources are available. What is needed?
A: Please submit a ticket if this is encountered. We will directly work with you to resolve the issue.
Q: I followed the setup instructions to pre-register my LIVE account, but I am getting a message that says "There are currently no resources assigned." What does this mean?
A: This is normal as you will not see an eCR RDP icon until we have migrated your LIVE eCR instance to AVD.
Q: Can you provide a list of URLs this application requires access to, noting specifically any URLs where SSL decryption and re-encryption may encounter an issue? We’ve already found the client has significant compatibility issues with our AV and web filter solutions and will need to modify it accordingly.
A: Here is a list of required URLs that may need to be whitelisted to support the AVD client:
https://learn.microsoft.com/en-us/azure/virtual-desktop/safe-url-list?tabs=azure
Performance & Peripheral Questions
Q: Can this <eCR> be used on an iPad like AWS?
A: Yes
Q: If we can't download to a network drive, where do we download data to, a hard drive?
A: Device and drive redirection remains unchanged, so you will be able to download files as you have in the past.
Q: Will upload/download files to eCR, like pdf files or PowerBi data be the same?
A: Yes. The upload and download of files remain the same because the drive and data redirection remain the same.
Q: Are there any limitations to Windows or Mac versions that might not support AVD workspaces?
A: No. There are no known issues.
Q: Will the eCR app itself be published as a stand-alone application, or will you be publishing a full desktop with just the eCR app inside of it like you showed today?
A: The eCR application will be published in a full desktop.
Q: Will future Microsoft updates to the RDP software break anything?
A: It is highly unlikely that future updates to the Azure Remote Desktop client software will break anything.
Q: Is it possible to prohibit the use of eCR from home?
A: No. If your staff has a device with the Azure Remote Desktop client installed and is subscribed, they will be able to access eCR wherever they have internet access.
Q: Can I control how the eCR remote desktop session displays on workstation? Can I use just one monitor? Can it be displayed across both monitors?
A: Yes, you can control how the remote desktop session displays.
- Double click the icon to open the Remote Desktop window.
- Right click on the eCR application and select “Settings.”
- Toggle the “default settings” off (shown below).
- Use the drop-down to select the desired “Display configuration” - All displays, Single display, Select displays
- Define the remaining “Display Settings” fields as desired.
- Exit and launch the eCR AVD to connect. The eCR application will display per your configuration.
Q: Will signature pads be configured and work the same way?
A: Yes, signature pads will configure and work the same way when accessing eCR via the Azure Remote Desktop client.
Q: For county-issued devices that are shared amongst staff, can different staff sign on to the “signed” out device?
A: Yes. There should be no issue with shared devices once a staff signs out.
Q: How will this affect sites where users must log into multiple devices, for example, the nurses' station and then an exam room?
A: There should be no issues. Staff can sign in or out across multiple devices as before.
Q: We have devices connected via USB and serial connections redirected into the eCR RDP session. Will these devices still be able to communicate with eCR via Azure Virtual Desktop (AVD)? Will there be instructions on how to set up these devices?
A: Device and Drive redirection is still enabled. Instructions are not needed as there should be no changes from the prior setup.
[Back to Top]