PAW Deployment Checklist
A step-by-step deployment checklist for Privileged Access Workstations — covering physical, virtual, Windows 365, and AVD approaches.
About this resource
The PAW Deployment Checklist provides a structured guide for planning and deploying Privileged Access Workstations. It covers all major implementation options and includes pre-deployment requirements, configuration steps, and post-deployment validation.
What’s included
- Pre-deployment requirements — identity readiness, Conditional Access prerequisites, licensing
- Physical PAW checklist — hardware selection, image hardening, device management
- Windows 365 PAW checklist — provisioning policy, Intune profiles, network configuration
- AVD PAW checklist — host pool setup, custom image, session security, networking
- Enforcement checklist — Conditional Access device filters, compliance policies, admin portal scoping
- Validation checklist — testing procedures, sign-in log verification, compliance evidence
How to use it
Select the deployment model that fits your environment and work through the relevant sections. The enforcement and validation sections apply regardless of implementation choice.
Coming soon. This resource is being prepared for download. Check back for updates.