You must install Microsoft Antimalware for Azure on Azure Virtual Desktop session hosts. What should you do?

Adding an extension to each session host is the correct method for installing Microsoft Antimalware for Azure. Azure extensions are small applications that provide post-deployment configuration and automation, and Microsoft Antimalware is available as an Azure VM extension. This allows for scalable and consistent deployment across multiple session hosts. Enabling Windows 10 security features via GPO is insufficient as it doesn't deploy the specific Azure Antimalware solution. Configuring RDP Properties of the host pool relates to remote access settings, not antimalware deployment. Signing in to each session host and manually installing a Windows feature is inefficient and not scalable for a large AVD environment, and Microsoft Antimalware is an extension, not a standard Windows feature in this context.