Microsoft Windows Virtual Desktop

Running Servers, Desktops and File Storage

in the Cloud – 6/17

Dennis KlosterSystem Source

Dkloster@syssrc.com

• Introductions – Chris Riley

• Dennis Kloster

- Running Servers, Desktops and File Storage in the Cloud

• Q&A – Chris Riley

Agenda

We Hope You are

Enjoying Your

Pizza!!

If you haven’t received your pizza,

then contact Mike Jones:

mjones@syssrc.com

During the Webinar…

Audio – In presentation mode until end

Control Panel

View webinar in full screen mode

In Chat – Tell us what you hope to learn today?

Feel free to submit written questions

Evaluation just after webinar finish

What is cloudcomputing?

Cloud computing is a model for enabling convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or service provider interaction

Cloud Computing Models

Benefits of the Cloud?

• No longer responsible for the hardware your cloud resources run on

• Easily replicate your resources across geographic sites for redundancy

• Incredible flexibility…. Quickly scale up or down to meet changes in demand.

• Move from capital expense model to operating expense model• No large bills for hardware refreshes!!

Potential downsides to the Cloud

• Dependent on connectivity to the Cloud

• Vendor lock-in: It can be difficult and expensive to move your resources out of the cloud

• Limited control:• Typically have little to no control over hardware or backend software

upgrades

• Very little you can do in the event of a cloud related outage

Amazon Elastic Compute Cloud (EC2)

Amazon Elastic Compute Cloud (EC2)

• Resizable compute capacity

• Complete control of your computing resources

• Reduced time required to obtain and boot new server instancesAmazon

EC2

Amazon EC2 Facts

• Scale capacity as your computing requirements change

• Pay only for capacity that you actually use

• Choose Linux or Windows

• Deploy across AWS Regions and Availability Zones for reliability

• Use tags to help manage your Amazon EC2 resources

Launching an Amazon EC2 Instance via the Management Console

1. Determine the AWS Region in which you want to launch the Amazon EC2 instance.

2. Launch an Amazon EC2 instance from a pre-configured Amazon Machine Image (AMI).

3. Choose an instance type based on CPU, memory, storage, and network requirements.

4. Configure network, IP address, security groups, storage volume, tags, and key pair.

Amazon Machine Image (AMI) Details

An AMI includes the following:

• A template for the root volume for the instance (for example, an operating system, an application server, and applications).

• Launch permissions that control which AWS accounts can use the AMI to launch instances.

• A block device mapping that specifies the volumes to attach to the instance when it is launched.

Instances and AMIs

Select an AMI based on:

• Region

• Operating system

• Architecture (32-bit or 64-bit)

• Launch permissions

• Storage for the root device

AMI

Instances

Instance

Launch instances of any type

Host computer

Host computer

Amazon EC2 Instances

OS, Applications,

and Configuration

AMI

Running or Stopped VM

Instances

AZ

VPC

Region

EBS

S3

EBS Snapshots

S3 Buckets

EBS EBS EBS EBS EBS

AZ

Instances Instances

Amazon EC2 Purchasing Options

On-Demand Instances

Pay by the hour.

Reserved Instances

Purchase, at a significant discount,

instances that are always available

1-year to 3-year terms.

Scheduled Instances

Purchase instances that

are always available on the

specified recurring

schedule, for a one-year term.

Spot Instances

Bid on unused instances,

which can run as long as they are available

and your bid is above the Spot

price.

Dedicated Hosts

Pay for a physical host that is fully

dedicated to running your

instances.

Dedicated Instances

Pay, by the hour, for

instances that run on single-

tenant hardware.

Microsoft Windows Virtual Desktop

Azure VMs

Azure VMs

Azure VMs

Azure VM Sizing Options

• Number of CPUs

• Memory allocated to each Virtual Machine

• Temporary Local Storage

• Allocated Bandwidth for the Virtual Machine

• Maximum Data Disks

Microsoft Windows Virtual Desktop

Desktops in the Cloud……

Virtualization Scenarios

Security

and

regulation

Financial Services

Healthcare

Government

Elastic

workforce

Mergers and acquisition

Short term employees

Contractor

and partner access

Specific

employees

BYOD and mobile

Call centers

Branch workers

Specialized

workloads

Design and engineering

Legacy apps

Software dev test

Virtualization Hosts of the Future

Windows Virtual

Desktop Multi-session

Scalable multi-session

modern Windows user

experience with Windows 10

Enterprise security

Windows 10

Multiple sessions

Win32, UWP

Office 365 ProPlus

Windows Server

RD Session Host

Scalable multi-session

legacy

Windows environment

Windows Server

Multiple sessions

Win32

Office 2019 Perpetual

Windows 10

Enterprise

Native single-session modern

Windows experience

Windows 10

Single session

Win32, UWP

Office 365 ProPlus

Provides virtualization infrastructure as

a managed service

Utilizes Azure Active Directory identity

management service

Deploy and manage VMs in Azure

subscription

Manage using existing tools like

Configuration Manager

Connects to on-premise resources

High Level Architecture

C U S T O M E R S U B S C R I P T I O N

Windows 7

Enterprise

RemoteApp

Web access

Management

Diagnostics Gateway

Broker

Windows 10

Enterprise

M A N A G E D B Y M I C R O S O F T / P A R T N E R

Windows

Server 2012

R2 and up

Windows 10

Enterprise multi-

session

Load balancing

M A N A G E D B Y M I C R O S O F T / P A R T N E R

Compute Storage Networking

Identity Strategies

Options for Required Active Directory

Pros Cons

Spin up a DC in Azure Can sync with on-premises DC with VPN or ExpressRoute All familiar AD Group PoliciesVMs can be stopped to reduce costs

Adds additional management of a VM and Active Directory in Azure

For cloud-based organizations, use Azure AD Domain Services

Don’t have to connect to on-premises resources

AD DS runs continuously with a small fixed charge

For hybrid organizations, use VPN or ExpressRoute and make sure your on-premises DCs can be found in Azure

No AD DS or Domain Controller required in Azure

Latency could be higher delaying user authenticationAssumes on-premises environment

WVD Environment Types

Environment

Types

Workstation OS Running Profile

setting

synced

User can

install

software

Use Case

Physical Laptop or

Desktop

Locally Yes or No Y

“Personal”

Virtual

Desktop

Specific VM

for each user

Single

session

Yes or No Y Developers

Heavy Users

Non-

persistent

Virtual

Desktop

User assigned

to resource

pool

Multi session Yes N

Published

Apps

None – apps

only

Multi session Unique profile

Improved Security with Management

Security through

Azure AD (i.e. MFA,

CA)

Reverse connect

eliminates open

inbound ports to

VMs

Multiple admins

assigned role-based

access

Isolated user

sessions in single and

multi-session

Reduced Attack

Surface

Granular Access Control

Isolated User

Sessions

Azure AD Security

Client Features and Administration

Features Windows Web Android macOS iOS

MFA X X X X X

3rd party plug-ins X

Dynamic Resolution X X X

Multimonitor X X

Teams Coming soon

Bulk Deployment X X

Management Intune, ConfigMgr, GPO

WVD Bandwidth Recommendations• Bandwidth rises with:

• Resolution and frame rate

• Voice or video conferencing

• Real-time communication

• Streaming 4K video

Workload Applications Bandwidth Recommendation

Display resolution @ 30 fps

Task worker Word, Outlook, Excel and Adobe

1.5 Mbps 1024x768

Office worker + PowerPoint and Photo Viewer

3 1280x720

Knowledge worker + Java 5 1920x1080

Power worker + CAD and publishing 15 3840x2160 (4K)

Video always uses hardware acceleration

Smooth playback when moving video window

4K downsampling

Video and Graphics Improvements

0

500

1000

1500

Session (60 seconds)

Average Encoding Time (ms)

4kDownSampled 4kNative

0

5

10

15

Session (60 seconds)

Output Frames / Second (fps)

4kDownSampled 4kNative

Device Redirection

High-level redirection of camera

Less network bandwidth vs. USB

camera redirection

Increased video framerate, up to 30 fps

Redirect multiple cameras

Improved printing messages

Built-in Windows client first to adopt

FSLogix

Technologies

With the acquisition of FSLogix, eligible customers will get access to

three core pieces of technology

Profile ContainerReplacement for roaming profiles and folder redirection. Dramatically speeds up

logon and application launch times.

• Includes Office 365 Container, which roams Office cache data (Outlook OST, OneDrive

cache, Skype for Business GAL, etc.) and Windows Search DB with user in virtual desktop

environments.

App MaskingMinimize number of gold images by creating a single image with all applications.

Excellent app compatibility with no packaging, sequencing, backend

infrastructure, or virtualization.

Java RedirectionHelps protect the enterprise from vulnerabilities of multiple installed versions of

Java by mapping specific versions to individual apps or websites.

• Pay only for the virtual machines (VMs), storage, and networking when using the

service.

• Pick VM and storage options to match your use cases.

• Purchase one-year or three-year Azure Reserved Virtual Machine Instances, for

up to 72% savings versus pay-as-you-go pricing.

Azure Consumption

Are You Licensed for WVD?

Pay only for the virtual machines (VMs), storage, and networking consumed when workstations are using the service

Options such as one-year or three-year Azure Reserved Virtual Machine Instances with monthly payment options, can

save up to 72% versus pay-as-you-go pricing

ServerAccess Server workloads with

WVD with RDS CAL license with

active Software Assurance (SA)

ClientAccess Windows 10 single and multi

session and Windows 7 with WVD with:

• Microsoft 365 E3/E5

• Microsoft 365 A3/A5/Student Use

Benefits

• Microsoft 365 F1

• Microsoft 365 Business

• Windows 10 Enterprise E3/E5

• Windows 10 Education A3/A5

• Windows 10 VDA per user

Microsoft Windows Virtual Desktop

AWS Workspaces

AWS Workspaces

• Your personal desktop in the cloud; lessens need for profile management

• Can tie into your existing Active Directory

• Lots of different hardware options, including vGPUs for high end graphic needs

• Windows licensing can be built into the cost or you can BYOL (you must commit to running at least 200 Amazon WorkSpaces in a given AWS region each month)

Microsoft Windows Virtual Desktop

Cloud Based File Services

AWS FSx• Storage capacity $0.13 per GB per month

• Throughput capacity $2.20 per MBps per month

• Backup storage $0.05 per GB per month (Simple backups built into the offering)

• Nothing runs on premise (no appliance or Windows server to manage

• No local file caching

• Built in data deduplication (depending on the file type AWS claims 30%-80% storage reduction is average)

• Uses SSD drives= sub-millisecond performance. Great if you have applications that require fast access to file shares. (applications would need to run in AWS in order to benefit from this)

• Integrates with Active Directory

AWS Storage Gateway

• Data written to AWS storage by your gateway $0.01 per GB (file)

• Volume storage $0.023 per GB-month of data stored (volume)

• Requires an appliance on site (something else to manage and it consumes local resources)

• Local file caching (may give better performance for on-prem)

• Limited to 10 shares per storage gateway (file)

• Integrates with Active Directory

Azure Files

• Choose between standard files (HDD based hardware) and premium files (SDD based hardware)

• Pricing starts at $.06 per GB for standard files and $.24 for premium files. (cost can go up on depending on level of redundancy you need)

• Accessible via SMB

• Integrates with Active Directory

• Azure File Sync can be used to replicate Azure Files to an on-site file server

Kindly complete the survey at the end of this webinar. We will use your feedback to help us

improve.

THANK YOU!