In some cases virtual desktop administrators control the process of updating through a process of shutting down VMs based on a "master" or "gold" image, unseal that image which is read-only, patch the image, then reseal it and bring it back into production. Regarding updates, Windows 10 utilizes a monthly update rhythm. Removing access to unused features reduces footprint, network bandwidth, and attack surface. There are other settings that "normal" Windows devices may utilize such as Cloud Experience, The Windows Store, and so on. There are some security settings that are not applicable to virtual desktop environments that are not connected to the Internet, and thus not able to participate in cloud-enabled security. That way the VM protection is as current as possible. Those signatures can then be provided to the virtual desktop devices and scheduled to be installed during production, regardless of persistent or non-persistent. For those virtual desktop environments not connected to the Internet, security signatures can be downloaded proactively several times per day, because Microsoft may release more than one signature update per day. Enterprise customers may choose to utilize the built-in to Windows services of Windows Security, which comprises a suite of services that work well connected or not connected to the Internet. In the virtual desktop realm, security is not handled much differently than physical devices. Security and stability are among the highest priorities for Microsoft when it comes to products and services. This article focuses on the Windows base image settings, without reference to other factors in the environment such as host hardware optimization. An in-depth discussion regarding these technologies is outside the scope of this article. There are other types of virtual desktop technology such as Remote Desktop Session (RDS) and the recently released Microsoft Azure Azure Virtual Desktop. That base VM is then optimized by removing unneeded apps, installing Windows updates, installing other updates, deleting temporary files, applying settings, and so on. A default OS installation is performed to the base VM. A virtual machine (VM) would be an ideal place to build the VM, because state can be saved, checkpoints can be made, backups can be made, and so on. The optimization settings could take place on a reference machine. To the user this desktop is little different than other virtual or physical device, other than it is accessed over a network. The non-persistent type does not preserve changes to the virtual desktop operating system from one session to the next. There are variations of virtual desktop implementations such as "persistent", "non-persistent", and "desktop session." The persistent type preserves changes to the virtual desktop operating system from one session to the next. Some implementations of virtual desktop environments use a "base" operating system image, which then becomes the basis for the desktops subsequently presented to the users for work. The network delivery vehicle can be an on-premises network, the Internet, or both. VDI optimization principlesĪ "full" virtual desktop environment can present a complete desktop session, including applications, to a computer user over a network. There are no recommendations in this article that should affect supportability of Windows 10 in a virtual desktop environment. The settings in this article can be applied to other Windows 10 installations, such as version 1909, physical devices, or other virtual machines. Each optimization setting has been carefully reviewed to ensure that there is no appreciable degradation to the user experience. No optimizations should reduce the user experience. With virtual desktop implementations, the smallest possible base, or "gold" image size, can slightly reduce memory utilization on the host system, as well as a small reduction in overall network operations required to deliver the desktop environment to the consumer. A secondary goal is to reduce disk space usage in the base image to the bare minimum. The guiding principles to optimize performance of Windows 10 in a virtual desktop environment are to minimize graphic redraws and effects, background activities that have no major benefit to the virtual desktop environment, and generally reduce running processes to the bare minimum. The information in this guide is pertinent to Windows 10, version 2004, operating system (OS) build 19041. All settings in this guide are suggested optimization settings only and are in no way requirements. This article is intended to provide suggestions for configurations for Windows 10, build 2004, for optimal performance in Virtualized Desktop environments, including Virtual Desktop Infrastructure (VDI) and Azure Virtual Desktop.
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |