Application Virtualization How to deliver Applications in

Application Virtualization
How to deliver Applications in
a VDI & RDS scenario
Nicola Ferrini
IT PRO Trainer
[email protected]
Microsoft Virtualization Modes
Folder Redirection
Offline files
Remote
Desktop Services
Presentation Virtualization
(VDI)
What Is VDI?
Key deployment scenarios of VDI are persistent virtual machines and
pooled virtual machines
VDI:
• Centralizes the storage, execution, and management of Windows
desktops
• Stores and maintains the user work area in the data center
• Enables technologies such as Hyper-V and Remote Desktop
Services
Key Benefits of VDI
• Improved access to data and applications from any device
• Improved data security and compliance
• Simplified management and deployment of applications
• Improved business continuity
• Integrated management of physical, virtual, and session-based
desktops
• Centralized data storage and backup
Types of VDI
Personal virtual desktops
Each virtual machine is like a traditional
personal computer, where user data,
settings, applications, and operating
systems are stored, and each user is
assigned a personal virtual desktop.
Pooled virtual desktops
Identically configured virtual machines
are in the pool and users can connect to
any virtual machine. After users log off,
all changes are discarded, so user data
must be stored outside the virtual
machine.
VDI Components in Windows
Server 2008 R2
• Active Directory
• Remote Desktop Web Access
• Remote Desktop Connection Broker
• Remote Desktop Virtualization Host
• Remote Desktop Session Host
• Remote Desktop Gateway
RD Connection Broker in VDI
Deployments
RD Connection Broker enables user connections to connect to an
appropriate endpoint
Brokering involves:
• Identifying a virtual machine for the user
• Preparing the virtual machine for remote connection
• Sending virtual machine details to a session host server
• Monitoring user sessions in a virtual desktop pool scenario
Configuring Virtual Machines
Supported operating systems:
• Windows XP
• Windows Vista
• Windows 7
Configuring virtual machines for virtual desktops:
• Joins virtual machines to the domain
• Configures the Remote Desktop functionality by:
• Enabling RDP and RPC for RDS
• Adding VDI users to Remote Desktop Users group
• Configuring Windows Firewall
Demo:
Deploying and Accessing Virtual
Desktops
Application Virtualization
(App-V)
What Is Application Virtualization?
Application virtualization allows you to run applications on client
computers as if they were installed locally
Benefits of application virtualization are:
Centralized management
Scalable infrastructure
Accessible applications
Remote Desktop Server support
Reduced license compliance risks
Usage reporting
Run applications as a “service”
• Access anywhere
– Over the web
– Portable devices
• Just in time deployment (Click-to-Run)
– Installer does not run
– Instant gratification
• Simple servicing
– Update once, deliver everywhere
– Users automatically stay up to date
Run applications without conflicts
• No changes to system
– Safely run apps side-by-side
– No OS decay over time
– Lower migration costs
• State separation
– Store App state separate from OS state
– State categorized as user versus system
– User state stored in profile, roams with profile
How Does It Work?
• App packaged using Sequencer
– Installation monitored to capture resources
– All app resources stored in an app image (.SFT)
• App image placed on server for distribution
• App streamed to client over network
– SMB, HTTP(S), RTSP(S)
– Can leverage DFSR replica and BranchCache
– Other distribution mechanisms possible (USB)
• App-V runs app in Virtual Environment (VE)
– App virtualization layer handles resource requests
Use Microsoft Application
Virtualization to stream applications
on-demand
• Advantages:
–
–
–
–
–
Centralized application management
Support for roaming users and making applications available quickly
Can run multiple versions of Office on the desktop
Previously incompatible applications can run on the same desktop
Centralized image simplifies updates, management & helpdesk
• Limitations:
– Requires a supporting infrastructure and resources
– Consider network bandwidth availability for streaming applications
– Integration into existing infrastructure, such as the patch management
process
APP-V Infrastructure
What Is App-V Desktop Client?
• Requests applications to be streamed
• Receives the application code
• Sets up the runtime environment
• Executes the code locally
Network
Application
Virtualization
Desktop Client
Application
Virtualization
Management
Server
Demo Infrastructure…
Demo:
Application Virtualization in a
VDI scenario
App-V 4.6 Shared Cache for
VDI environments
• In Microsoft Application Virtualization (App-V) 4.6 the Client
supports using a shared read-only cache
• Shared read-only cache enables the Client to use disk space
efficiently in a Virtual Desktop Infrastructure (VDI) system
• You can deploy the App-V Client in a VDI scenario by using a
shared read-only cache that has been populated with all the
applications required for all users.
http://technet.microsoft.com/en-us/library/ee956915.aspx
Presentation Virtualization
(RDS)
What Is RDS?
RDS is presentation virtualization technology that provides access
to session-based desktops, virtual machine–based desktops, and
applications
RDS provides the following benefits:
 Run an application or an entire desktop on centralized servers
 Manage session-based desktops, applications, or virtual
machine–based desktops on centralized servers
 Provide an entire desktop, or just application window
 Provide integration of local and RemoteApp programs
 Enable secure remote access without establishing a VPN
connection
 Centrally control which RD Session hosts can be accessed, who
can access them, and device redirection
RDS Architecture
RD Web
Access
RD Client
RD Gateway
RD Session
Host
RD Connection
Broker
Active Directory
RD Virtualization
Host
RD Licensing Server
RDS & VDI – An Integrated
Solution
Remote App
Servers
Hyper-V-based
Remote
Desktops
Authentication
Client
RemoteApp
&
Remote
Desktop
DesktopServer
Web
Gateway
Access Server
Remote
Desktop
Connection
Broker
What Is the App-V Client for
Remote Desktops?
The App-V Remote Desktop Client:
• Uses a separate installer from the Desktop
client
• Requires putting the Remote Desktop server
into install mode to install the client
App-V Remote
Desktop Client
LAN
Remote Desktop
Server
Client
Computer
Network
LAN, VPN,
Internet
App-v
Management
Server
Demo Infrastructure…
Demo:
Application Virtualization in a
RDS scenario
What Are RemoteApp Programs?
RemoteApp programs run remotely on RD Session Host server and
can integrate with locally running programs
A RemoteApp program:
• Can be accessed remotely through Remote Desktop Connection
• Displays on the client as if it is running on the local computer
• Has its own resizable window and entry on the taskbar
• Can run along with local programs on the client computer
• Can share a RD session with another RemoteApp program
on the same terminal server
What Is RemoteApp and Desktop
Connections?
Provides a personalized view of RemoteApp programs, session-based
desktops, and virtual desktops
The benefits of RemoteApp and Desktop Connections are:
• RemoteApp programs run from the Start menu on the client
• Includes published Remote Desktops and Virtual Desktops
• Changes are automatically reflected on the user’s Start menu
• Programs are easily accessed through Windows search
• Does not require domain membership
• Built on standard technologies
• You can create a RemoteApp and Desktop Connections
configuration file (.wcx) and distribute it to users
Demo:
Application Virtualization in a
RemoteApp scenario
Accessing RemoteApp Programs
from an External Network
• RD GATEWAY Enables Terminal Services-based (RDP) connections
without need for the broader capabilities of VPN
• Requires Remote Desktop Connection 6.1
• Requires Microsoft Network Policy Server
Network
Terminal
Policy
• Needs to be domain joined
Server or
Server/Domai
Remote PC
n Controller
Validate User Access
and Client Health
2
3
1
Home
Mobile
Busines
s
Branch
Office
Internet
External
Firewall
Internal
Firewall
RCP/HTTPS
Removed
Terminal
Services
Gateway
DMZ
4
RDS Gateway In Action
•
•
•
•
RDP hosts can now be put behind firewall
HTTP/S used to traverse firewall
AD/NPS/NAP checked before connection allowed
AD/NPS/NAP
New Remote Desktop Connection
client required
TS Gateway
Vista RDC
(TS) client
AD/IAS/NAP checked
User initiates RDP
HTTP/S
over
connection
HTTP/S to
established
TS Gateway
to TSG
RDP 3389 to host
Terminal Servers
or XP/Vista
User browses to TS Web Access
TS Web
Access
Internet
DMZ
Internal Network
Online Resources
• Application Virtualization
–
–
–
–
http://blogs.technet.com/b/appv/
http://support.microsoft.com/kb/983462/en-us
http://technet.microsoft.com/en-us/library/cc843848.aspx
http://www.microsoft.com/italy/server/windowsserver2008/panora
mica/introduzione-a-microsoft-application-virtualization.mspx
• Virtual Desktop Infrastructure
– http://www.microsoft.com/vdi
– http://technet.microsoft.com/en-us/library/ff710519(WS.10).aspx
– http://technet.microsoft.com/en-us/library/ff710451(WS.10).aspx
• Remote Desktop Services
– http://www.microsoft.com/rds
– http://technet.microsoft.com/en-us/library/ff710446(WS.10).aspx
– http://technet.microsoft.com/en-us/library/ff710434(WS.10).aspx
Virtual Labs
• Application Virtualization
– TechNet Virtual Lab: Learning App-V Basics
– TechNet Virtual Lab: Learning App-V Intermediate Skills
– TechNet Virtual Lab: Learning to Configure App-V for
Standalone Client Mode
– TechNet Virtual Lab Express: Windows 7: Microsoft Application
Virtualization (APP-V)
Questions
and
Answers
Thank You!