Nicola Ferrini IT PRO Trainer info@nicolaferrini.it Application Virtualization How to deliver Applications in a VDI & RDS scenario Nicola Ferrini IT PRO Trainer info@nicolaferrini.it

Microsoft Virtualization Modes User State Virtualization Folder Redirection Offline files Cloud Computing Server Virtualization Presentation Virtualization Remote Desktop Services Management Desktop Virtualization Application Virtualization

Presentation Virtualization (VDI)

Course 10324A What Is VDI? Module 12: Configuring Virtual Desktop Infrastructure Key deployment scenarios of VDI are persistent virtual machines and pooled virtual machines VDI: Centralizes the storage, execution, and management of Windows desktops Stores and maintains the user work area in the data center Enables technologies such as Hyper-V and Remote Desktop Services 4

Course 10324A Key Benefits of VDI Module 12: Configuring Virtual Desktop Infrastructure Improved access to data and applications from any device Improved data security and compliance Simplified management and deployment of applications Improved business continuity Integrated management of physical, virtual, and session-based desktops Centralized data storage and backup 5

Course 10324A Types of VDI Module 12: Configuring Virtual Desktop Infrastructure Personal virtual desktops Each virtual machine is like a traditional personal computer, where user data, settings, applications, and operating systems are stored, and each user is assigned a personal virtual desktop. Pooled virtual desktops Identically configured virtual machines are in the pool and users can connect to any virtual machine. After users log off, all changes are discarded, so user data must be stored outside the virtual machine. 6

VDI Components in Windows Server 2008 R2 Course 10324A VDI Components in Windows Server 2008 R2 Module 12: Configuring Virtual Desktop Infrastructure Active Directory Remote Desktop Web Access Remote Desktop Connection Broker Remote Desktop Virtualization Host Remote Desktop Session Host Remote Desktop Gateway

RD Connection Broker in VDI Deployments Course 10324A Module 12: Configuring Virtual Desktop Infrastructure RD Connection Broker in VDI Deployments RD Connection Broker enables user connections to connect to an appropriate endpoint Brokering involves: Identifying a virtual machine for the user Preparing the virtual machine for remote connection Sending virtual machine details to a session host server Monitoring user sessions in a virtual desktop pool scenario 8

Configuring Virtual Machines Course 10324A Configuring Virtual Machines Module 12: Configuring Virtual Desktop Infrastructure Supported operating systems: Windows XP Windows Vista Windows 7 Configuring virtual machines for virtual desktops: Joins virtual machines to the domain Configures the Remote Desktop functionality by: Enabling RDP and RPC for RDS Adding VDI users to Remote Desktop Users group Configuring Windows Firewall 9

Demo: Deploying and Accessing Virtual Desktops

Application Virtualization (App-V)

What Is Application Virtualization? Course 10324A What Is Application Virtualization? Module 6: Implementing Microsoft Application Virtualization Application virtualization allows you to run applications on client computers as if they were installed locally Benefits of application virtualization are: Centralized management Scalable infrastructure Accessible applications Remote Desktop Server support Reduced license compliance risks Usage reporting 12

Run applications as a “service” Access anywhere Over the web Portable devices Just in time deployment (Click-to-Run) Installer does not run Instant gratification Simple servicing Update once, deliver everywhere Users automatically stay up to date

Run applications without conflicts 4/19/2017 3:48 AM Run applications without conflicts No changes to system Safely run apps side-by-side No OS decay over time Lower migration costs State separation Store App state separate from OS state State categorized as user versus system User state stored in profile, roams with profile © 2008 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

How Does It Work? App packaged using Sequencer Installation monitored to capture resources All app resources stored in an app image (.SFT) App image placed on server for distribution App streamed to client over network SMB, HTTP(S), RTSP(S) Can leverage DFSR replica and BranchCache Other distribution mechanisms possible (USB) App-V runs app in Virtual Environment (VE) App virtualization layer handles resource requests

Use Microsoft Application Virtualization to stream applications on-demand Advantages: Centralized application management Support for roaming users and making applications available quickly Can run multiple versions of Office on the desktop Previously incompatible applications can run on the same desktop Centralized image simplifies updates, management & helpdesk Limitations: Requires a supporting infrastructure and resources Consider network bandwidth availability for streaming applications Integration into existing infrastructure, such as the patch management process

APP-V Infrastructure

What Is App-V Desktop Client? Requests applications to be streamed Receives the application code Sets up the runtime environment Executes the code locally Application Virtualization Management Server Application Virtualization Desktop Client Network 18 18

Demo Infrastructure…

Demo: Application Virtualization in a VDI scenario

App-V 4.6 Shared Cache for VDI environments In Microsoft Application Virtualization (App-V) 4.6 the Client supports using a shared read-only cache Shared read-only cache enables the Client to use disk space efficiently in a Virtual Desktop Infrastructure (VDI) system You can deploy the App-V Client in a VDI scenario by using a shared read-only cache that has been populated with all the applications required for all users. http://technet.microsoft.com/en-us/library/ee956915.aspx

Presentation Virtualization (RDS)

Course 10324A What Is RDS? Module 10: Configuring Remote Desktop Services and RemoteApp RDS is presentation virtualization technology that provides access to session-based desktops, virtual machine–based desktops, and applications RDS provides the following benefits: Run an application or an entire desktop on centralized servers Manage session-based desktops, applications, or virtual machine–based desktops on centralized servers Provide an entire desktop, or just application window Provide integration of local and RemoteApp programs Enable secure remote access without establishing a VPN connection Centrally control which RD Session hosts can be accessed, who can access them, and device redirection

RD Virtualization Host RDS Architecture RD Web Access RD Gateway RD Connection Broker Active Directory RD Licensing Server RD Virtualization Host RD Session Host RD Client

RDS & VDI – An Integrated Solution Remote App Servers Hyper-V-based Remote Desktops Authentication Client RemoteApp & Desktop Web Access Server Remote Desktop Gateway Server Remote Desktop Connection Broker

What Is the App-V Client for Remote Desktops? The App-V Remote Desktop Client: Uses a separate installer from the Desktop client Requires putting the Remote Desktop server into install mode to install the client App-v Management Server App-V Remote Desktop Client LAN Remote Desktop Server Network LAN, VPN, Internet Client Computer 26 26

Demo Infrastructure…

Demo: Application Virtualization in a RDS scenario

What Are RemoteApp Programs? Course 10324A What Are RemoteApp Programs? Module 10: Configuring Remote Desktop Services and RemoteApp RemoteApp programs run remotely on RD Session Host server and can integrate with locally running programs A RemoteApp program: Can be accessed remotely through Remote Desktop Connection Displays on the client as if it is running on the local computer Has its own resizable window and entry on the taskbar Can run along with local programs on the client computer Can share a RD session with another RemoteApp program on the same terminal server

What Is RemoteApp and Desktop Connections? Course 10324A Module 10: Configuring Remote Desktop Services and RemoteApp What Is RemoteApp and Desktop Connections? Provides a personalized view of RemoteApp programs, session-based desktops, and virtual desktops The benefits of RemoteApp and Desktop Connections are: RemoteApp programs run from the Start menu on the client Includes published Remote Desktops and Virtual Desktops Changes are automatically reflected on the user’s Start menu Programs are easily accessed through Windows search Does not require domain membership Built on standard technologies You can create a RemoteApp and Desktop Connections configuration file (.wcx) and distribute it to users

Demo: Application Virtualization in a RemoteApp scenario

Accessing RemoteApp Programs from an External Network RD GATEWAY Enables Terminal Services-based (RDP) connections without need for the broader capabilities of VPN Requires Remote Desktop Connection 6.1 Requires Microsoft Network Policy Server Needs to be domain joined DMZ External Firewall Internal Terminal Services Gateway DATACENTER AD/NP Network Policy Server/Domain Controller RDP passed to Terminal Server Validate User Access and Client Health 1 2 3 Terminal Server or Remote PC RDP over RCP/HTTPS RCP/HTTPS Removed Internet Home Mobile Business Branch Office 4 32

RDS Gateway In Action RDP hosts can now be put behind firewall 4/19/2017 3:48 AM RDS Gateway In Action RDP hosts can now be put behind firewall HTTP/S used to traverse firewall AD/NPS/NAP checked before connection allowed New Remote Desktop Connection client required AD/NPS/NAP AD/IAS/NAP checked Vista RDC (TS) client TS Gateway RDP over HTTP/S established to TSG RDP 3389 to host User initiates HTTP/S connection to TS Gateway Terminal Servers or XP/Vista User browses to TS Web Access TS Web Access Internet DMZ Internal Network MICROSOFT CONFIDENTIAL © 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Course 10324A What Is SSO? Module 10: Configuring Remote Desktop Services and RemoteApp Log on once and gain access to remote servers without being asked for credentials again Single log on for RemoteApp and Desktop connections Controlled through Group Policy Prerequisites Windows XP SP3 or newer client Domain membership Right to connect to RD Session Host

Online Resources Application Virtualization http://blogs.technet.com/b/appv/ http://support.microsoft.com/kb/983462/en-us http://technet.microsoft.com/en-us/library/cc843848.aspx http://www.microsoft.com/italy/server/windowsserver2008/panoramica/introduzione-a-microsoft-application-virtualization.mspx Virtual Desktop Infrastructure http://www.microsoft.com/vdi http://technet.microsoft.com/en-us/library/ff710519(WS.10).aspx http://technet.microsoft.com/en-us/library/ff710451(WS.10).aspx Remote Desktop Services http://www.microsoft.com/rds http://technet.microsoft.com/en-us/library/ff710446(WS.10).aspx http://technet.microsoft.com/en-us/library/ff710434(WS.10).aspx

Virtual Labs Application Virtualization TechNet Virtual Lab: Learning App-V Basics TechNet Virtual Lab: Learning App-V Intermediate Skills TechNet Virtual Lab: Learning to Configure App-V for Standalone Client Mode TechNet Virtual Lab Express: Windows 7: Microsoft Application Virtualization (APP-V)

Questions and Answers

Thank You!