In this video, I configure an Azure Network Connection for Windows 365 Cloud PCs, enabling private network access, firewall routing, and on premises connectivity.

What's covered:

- What Azure Network Connection allows Cloud PCs to do (private endpoints, VPN, ExpressRoute)

- Prerequisites before creating an Azure Network Connection (subscription, resource group, VNET and subnet)

- Required permissions for the Windows 365 service (Reader on subscription, Network Contributor on resource group and VNET)

- Assigning the Reader role to Windows 365 at the Azure subscription level

- Assigning the Network Contributor role to Windows 365 on the resource group and virtual network

- How role inheritance works across resource group and VNET

- Creating an Azure Network Connection in Microsoft Intune using Microsoft Entra Join

- How health checks work during the connection setup and what the temporary network interface is for

- Reviewing health check results and how to retry failed checks

- Updating an existing provisioning policy to use the new Azure Network Connection

By the end of this video your Cloud PCs will be securely connected to private Azure resources and ready for advanced network scenarios.