Copyright TechTarget - All rights reserved https://cyber.law.harvard.edu/rss/rss.html Techtarget Feed Generator en Sun, 15 Mar 2026 23:22:04 GMT https://www.techtarget.com/searchvirtualdesktop editor@techtarget.com <p>Remote desktops can be incredibly flexible and fulfill numerous use cases, but they need all the right settings and configurations to make those use cases work.</p> <p>In today's distributed enterprise, remote desktop protocol (<a href="https://www.techtarget.com/searchenterprisedesktop/definition/Remote-Desktop-Protocol-RDP">RDP</a>) remains a foundational technology for delivering secure, scalable access to corporate resources. But as environments grow more complex -- and as attackers increasingly target remote access pathways -- IT leaders must ensure that their RDP configurations are both functional and strategically governed. Misconfigured RDP files, unmanaged endpoints and inconsistent session policies can introduce operational friction and unnecessary risk.</p> <p>To build a resilient, well‑managed RDP strategy, IT administrators should learn all the most common settings for RDP sessions and how to manage the files that control them.</p> <section class="section main-article-chapter" data-menu-title="What are the components of an RDP session?"> <h2 class="section-title"><i class="icon" data-icon="1"></i>What are the components of an RDP session?</h2> <p>Knowing the basics of RDP before editing RDP files for end users is essential for an administrator. A Microsoft remote desktop implementation consists of the following components:</p> <ul class="default-list"> <li><b>RD Connection Broker.</b> This is the load balancer and broker for the environment. The server will check a user's credentials and which remote resources the user has access to. The connection broker <a href="https://www.techtarget.com/searchnetworking/answer/Application-vs-network-load-balancing-Whats-the-difference">also load balances the sessions</a> over the available session hosts.</li> <li><b>RD Licensing.</b> As the name suggests, this is the licensing server for a remote desktop deployment. Each user who signs into the environment needs a valid license to create a session.</li> <li><b>RD Web Access.</b> This server creates a website -- or web server -- for end users to easily access their remote resources. When an end user clicks on a resource, an RDP file is generated for the user to start.</li> <li><b>RD Gateway.</b> This server enables a remote desktop session to be started over the internet. It translates RDP to HTTPS.</li> <li><b>RD Session Hosts.</b> These are the servers that host the resources that end users connect to and start their sessions on.</li> <li><b>RD Virtualization Host.</b> This is an optional component. <a href="https://www.techtarget.com/searchvirtualdesktop/tip/How-to-enable-and-manage-Windows-11-Hyper-V">Organizations that use Hyper-V</a> can choose to set up a VDI with many hosts managed through the RDS console. This function is not used often.</li> </ul> </section> <section class="section main-article-chapter" data-menu-title="What are the different RDP file settings and what do they do?"> <h2 class="section-title"><i class="icon" data-icon="1"></i>What are the different RDP file settings and what do they do?</h2> <p>With the basics of RDP covered, IT administrators should look at the RDP files. The Remote Desktop Client can open RDP files on a computer through MSTSC.exe, and this is where administrators can see the status of different settings. Another way to look at the files as an administrator is with a text editor. Because an RDP file is a non-encrypted configuration file, administrators can easily edit it with text editors. Notepad++ has many extra features like line numbers and easy selections.</p> <p>Figure 1 shows an example of a basic RDP file for a local session to a server named test in Notepad++. Administrators can edit this file, save it and distribute it to the clients.</p> <figure class="main-article-image half-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/understand_rdp_file_settings-h.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/understand_rdp_file_settings-h_half_column_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/understand_rdp_file_settings-h_half_column_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/understand_rdp_file_settings-h.jpg 1280w" alt="A screenshot of the RDP files within a text editor and their various settings. " data-credit="Chris Twiest" height="603" width="280"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 1. The settings for an RDP file that define the session and how it functions. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>As an administrator, it's important to know what most of these options mean for end users, especially if these settings go to users' Microsoft-managed endpoints.</p> <p><b>screen mode.</b> Determines whether the session starts in a window (1) or full screen (2).</p> <p><b>use multimon.</b> &nbsp;Enables the remote session to use multiple monitors.</p> <p><b>desktopwidth.</b> Specifies the <a href="https://www.techtarget.com/searchvirtualdesktop/tutorial/How-to-get-the-right-Hyper-V-window-size-in-Windows-11">session's width</a> in pixels.</p> <p><b>desktopheight.</b> Specifies the session's height in pixels. &nbsp;</p> <p><b>session bpp.</b> Determines the color depth of the session.</p> <p><b>winposstr.</b> Sets the start position of the Remote Desktop Connection window.</p> <p><b>compression.</b> Enables or disables bulk compression for data transmission to the local device.</p> <p><b>keyboardhook.</b> With this option, admins can map the Windows and Alt + Tab key combinations to the remote session or keep them locally.</p> <p><b>audiocapturemode.</b> With this option, admins can enable audio capture -- or microphone -- redirection to the remote session.</p> <p><b>videoplaybackmode.</b> Determines whether administrators use RDP-efficient multimedia streaming for video playback. This can <a href="https://www.techtarget.com/searchvirtualdesktop/tip/Running-GPU-passthrough-for-a-virtual-desktop-with-Hyper-V">offload video GPU work</a> to the local GPU instead of the remote GPU.</p> <p><b>connection type.</b> Steers the maximum used bandwidth the remote session can use.</p> <p><b>networkautodetect.</b> With this option, administrators can autodetect network type and settings from the local client.</p> <p><b>bandwidthautodetect.</b> Enables or disables the autodetection of network bandwidth.</p> <p><b>displayconnectionbar.</b> With this option, admins can enable or disable the connection bar that they would normally see at the top of the Remote Desktop Session.</p> <p><b>enableworkspacereconnect.</b> With this option, admins can determine if a Remote Desktop Session should reconnect when it is disconnected.</p> <p><b>disable wallpaper.</b> Enables administrators to turn off the wallpaper of the remote session, which can improve the session quality.</p> <p><b>allow font smoothing.</b> Turns on ClearType in the RDP session.</p> <p><b>allow desktop composition.</b> Determines if the admin can use the modern Windows interface within the remote desktop session.</p> <p><b>disable full window drag.</b> With this option, admins can disable the content in a window while a user is dragging it, which can improve session performance.</p> <p><b>disable menu anims.</b> With this option, admins can disable menu animations, which improves session performance.</p> <p><b>disable themes.</b> Disables Windows Themes in the remote session.</p> <p><b>disable cursor setting.</b> With this option, admins can disable cursor animations, which will improve session performance.</p> <p><b>bitmapcachepersistenable.</b> Enables the client device to create a cache of bitmaps that are rendered during the session, improving performance.</p> <p><b>full address.</b> This is the fully qualified domain name of the server the admin is trying to connect to. In a full remote desktop deployment, this will have the connection broker address, which then load balances the session.</p> <p><b>audiomode.</b> With this option, admins can disable the local client to play audio from the remote host.</p> <p><b>redirectprinters.</b> Enables or disables the redirection from local printers to the remote session.</p> <p><b>redirectlocation.</b> Enables or disables the redirection of the local device's location service to the remote session.</p> <p><b>redirectcomports.</b> Enables or disables the redirection from local COM ports to the remote session.</p> <p><b>redirectsmartcards.</b> Enables or disables the redirection from local smart cards to the remote session.</p> <p><b>redirectwebauthn.</b> Enables or disables the redirection from local web authentication -- such as Windows Hello -- to the remote session.</p> <p><b>redirectclipboard.</b> Enables or disables clipboard redirection between the local computer and the remote session.</p> <p><b>redirectposdevices.</b> Enables or disables the redirection from local point-of-service devices to the remote session.</p> <p><b>autoreconnection enabled.</b> Enables the RDP session to automatically reconnect on a disconnect.</p> <p><b>authentication level.</b> Determines what happens when authentication to the server fails.</p> <p><b>prompt for credentials.</b> Enables or disables the prompt for authentication.</p> <p><b>negotiate security layer.</b> Determines which level of security is negotiated.</p> <p><b>remoteapplicationmode.</b> Enables RemoteApp mode instead of a desktop.</p> <p><b>alternate shell. </b>If a RemoteApp is configured, this will launch the application instead of the full Windows shell desktop.</p> <p><b>shell working directory.</b> Specifies the working directory of the RemoteApp.</p> <p><b>gatewayhostname.</b> Determines whether a Remote Desktop Gateway is configured in the deployment. &nbsp;</p> <p><b>gatewayusagemethod.</b> Determines whether or not the connection uses an RD Gateway.</p> <p><b>gatewaycredentialssource.</b> Specifies which authentication method is used on the gateway.</p> <p><b>gatewayprofileusagemethod.</b> Selects whether to use the default RD Gateway profile or the user-specified gateway settings.</p> <p><b>promptcredentialonce.</b> With this option, administrators can choose to save the user credentials after they have been entered.</p> <p><b>gatewaybrokeringtype.</b> Determines the type of Gateway server used.</p> <blockquote class="main-article-pullquote"> <div class="main-article-pullquote-inner"> <figure> Ensure your end users never open an unknown RDP file, and never email them an RDP file in the first place. </figure> <i class="icon" data-icon="z"></i> </div> </blockquote> <p><b>use redirection server name.</b> Enables the use of a redirection server for the RD Gateway.</p> <p><b>rdgiskdcproxy.</b> Sets the use of a proxy for the user credentials over Kerberos.</p> <p><b>kdcproxyname.</b> The name of the Kerberos Key Distribution Center proxy server.</p> <p><b>enablerdsaadauth.</b> Decides whether admins can use Microsoft Entra ID to connect to the remote server.</p> <p>There are a lot of options that remote desktop administrators can preconfigure in an RDP file for end users. A good tip for distributing preconfigured RDP files is to <a href="https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blobs-introduction" target="_blank" rel="noopener">use</a> an Azure storage container. Then, use a remediation PowerShell script in Microsoft Intune. This enables central management and a remediation script to check for changes to the RDP files.</p> <p>Lastly, admins need to keep the dangers of RDP files in mind. In October 2024, a Russian cybercrime organization named Midnight Blizzard <a href="https://www.techtarget.com/searchsecurity/news/366614828/Microsoft-warns-of-Midnight-Blizzard-spear-phishing-campaign">sent emails containing an RDP file</a>. The file was configured to connect to their server and had all redirection enabled. When someone clicked on the email's file and connected to the remote session, all local drives, clipboard, printers, etc. would connect to the remote session, which the hacker group controlled. That way, it could easily steal information and deploy ransomware. Ensure your end users never open an unknown RDP file, and never email them an RDP file in the first place.</p> <p>RDP offers flexibility and broad compatibility, but only when IT manages its underlying components and configuration files&nbsp;properly. With the right controls in place,&nbsp;IT leaders can treat&nbsp;RDP as a secure, high‑performance access&nbsp;platform that&nbsp;supports modern enterprise requirements.</p> <p><b>Editor's note: </b><i>This article was updated in March 2026 to improve the reader experience.</i></p> <p><i>Chris Twiest works as a technology officer at RawWorks in the Netherlands, focusing on the future Workspace and Cloud technologies for the end user.</i></p> </section> RDP sessions might seem pretty universal, but IT administrators should make sure they're familiar with all the customizations that RDP files support. https://cdn.ttgtmedia.com/rms/onlineimages/code_g684641103.jpg https://www.techtarget.com/searchvirtualdesktop/tip/What-are-RDP-file-settings-and-how-do-they-work Mon, 09 Mar 2026 16:44:00 GMT <p data-end="1184" data-start="1039">IT teams need to support remote desktop users with whatever peripheral device setup and troubleshooting they need, including multiple monitors.</p> <p data-end="1690" data-start="1191">Users in the financial sector and healthcare -- among many other industries -- are especially accustomed to multiple monitor configurations, putting pressure on IT to adjust the settings to meet user needs. The challenge is getting remote desktops to detect and interact with local hardware when the desktop isn't running locally.</p> <p data-end="1690" data-start="1191">When multiple monitors are not detected correctly in a remote desktop session, users may see only a single display, incorrect display resolutions or performance issues.</p> <section class="section main-article-chapter" data-menu-title="Configuring remote desktop sessions with the Windows App"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Configuring remote desktop sessions with the Windows App</h2> <p>Previously, remote desktops were available through the Remote Desktop app in the Microsoft Store. However, in May 2025, the Windows App replaced the Remote Desktop app, and the transition is not yet complete.</p> <p>It's still possible to access a Windows desktop from another Windows computer with the Microsoft Remote Desktop Connection application, MSTSC.exe. For other platforms, such as macOS, accessing a Windows desktop is only possible with the Windows App. Connecting to a desktop in Microsoft Azure also involves using Windows App from a Windows computer.</p> <p>The Windows App is available in the Microsoft Store, Apple App Store and Google Play Store. Additionally, browser access to remote desktops is <a target="_blank" href="https://windows.cloud.microsoft/" rel="noopener">available</a> through the Windows Cloud portal.</p> <p><iframe title="Which remote desktop connections do different platforms support?" aria-label="Table" id="datawrapper-chart-ZpEwV" src="https://datawrapper.dwcdn.net/ZpEwV/1/" scrolling="no" frameborder="0" style="width: 0; min-width: 100% !important; border: none;" height="524" data-external="1"></iframe> <script type="text/javascript">window.addEventListener("message",function(a){if(void 0!==a.data["datawrapper-height"]){var e=document.querySelectorAll("iframe");for(var t in a.data["datawrapper-height"])for(var r,i=0;r=e[i];i++)if(r.contentWindow===a.source){var d=a.data["datawrapper-height"][t]+"px";r.style.height=d}}});</script> </p> <p>Access to virtual desktops from the Windows App requires a Microsoft work or school account and doesn't work with a personal account.</p> <p>Organizations should consider a phased adoption of the Windows App, balancing legacy RDP support with modern features. This approach maximizes employee productivity, minimizes support overhead and ensures alignment with long-term IT strategy.</p> <h3>Technical considerations for setup</h3> <p>Enabling multiple monitors in Windows App&nbsp;is an option the&nbsp;end user needs to enable&nbsp;on their Windows or Mac device. As an IT administrator, it's not something you can configure on the server side. As such, it might be a good idea to write up a good user instruction manual -- feel free to base it off these instructions.</p> <p>Before IT embarks on this process, it's important to keep the limitations of multiple monitor RDP in mind. While it should be more than enough to have two medium-resolution monitors, RDP supports&nbsp;<a target="_blank" href="https://social.technet.microsoft.com/wiki/contents/articles/31983.remote-desktop-protocol-maximum-supported-resolutions.aspx" rel="noopener">up to</a> 16 displays. Administrators can further reduce this limit. RDP users are also limited to a maximum resolution of 8192 x 8192, though this might vary between environments. IT can also&nbsp;<a href="https://www.techtarget.com/searchvirtualdesktop/tip/Fix-Windows-11-remote-desktop-credentials-that-dont-work">connect through RDP to a virtual desktop</a>&nbsp;on a virtual server with multiple monitors. This will simply create a virtual desktop on the end user's monitors.</p> </section> <section class="section main-article-chapter" data-menu-title="Set up multiple monitors on a remote desktop session"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Set up multiple monitors on a remote desktop session</h2> <p>With the new Windows App, the steps to set up multiple monitors on a remote desktop session are fairly straightforward. However, the process varies depending on the OS in use.</p> <p>In enterprise environments, Windows or macOS are the typical platforms for multi-monitor remote desktop configurations.</p> <h3>How to set up multiple monitors for remote desktop use on Windows</h3> <p>To enable and customize multiple monitor support for a remote desktop session on a Windows device, use the following steps:</p> <ol type="1" start="1" class="default-list"> <li>From the&nbsp;Windows App, select&nbsp;<b>Devices</b>, then find the device you want to configure the display settings for.</li> <li>Select the three dots on the panel representing the device, then click on&nbsp;<b>Settings</b>.</li> <li>Toggle&nbsp;off the <b>Use default settings</b>&nbsp;switch.</li> <li>Under&nbsp;<b>Display Settings</b>, select one of the following options:</li> <ul type="disc" class="default-list"> <li><b>All displays.</b> This setting automatically uses all displays for the device.</li> <li><b>Single display.</b> With this setting, you choose one display to use.</li> <li><b>Select displays.</b> With this setting, you select two or more specific displays to use.</li> </ul> </ol> <p>Additionally, Windows continues to support several traditional and advanced Remote Desktop Connection methods. These can be helpful in environments that use legacy tools, scripting or specialized configurations.</p> <p>The first option is to use the traditional Remote Desktop Connection client. Click on the search bar on the Start menu and type in <em>mstsc /multimon</em>. This will start up the RDP client in a multi-monitor configuration. From here, you can enter the server address, and <a href="https://www.techtarget.com/searchvirtualdesktop/tip/Top-5-remote-desktop-connectivity-problems-and-how-to-prevent-them">it will automatically connect to the server</a>&nbsp;full screen on all your monitors.</p> <figure class="main-article-image half-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/configure_multiple_monitors_1-h.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/configure_multiple_monitors_1-h_half_column_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/configure_multiple_monitors_1-h_half_column_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/configure_multiple_monitors_1-h.jpg 1280w" alt="Screenshot of the display setting of the Remote Desktop Connection agent." data-credit="Chris Twiest" height="327" width="280"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 1. The Remote Desktop Connection agent, showing the option to use all monitors checked off. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>The legacy RDP client also enables multi-monitor support through the UI. Launch the Remote Desktop Connection agent the usual way from the start menu. Then, go to the&nbsp;<b>Display</b>&nbsp;tab and select&nbsp;<b>Use all my monitors for the remote session </b>(Figure 1).</p> <p>The last legacy option is to edit the RDP file directly. This approach is more advanced.</p> <p>You can save the connection setting of the RDP session in the general tab of the RDP client. These settings will then be saved in an RDP file. You can edit this file within the client, or simply with the Notepad app.</p> <p>After opening the RDP file in Notepad, you can change multiple options. But the one that configures multiple monitors is called&nbsp;<b>use multimon:i:1</b>. The number 1 means the option is enabled, and 0 means the option is not enabled.</p> <h3>How to set up multiple monitors for remote desktop use on macOS</h3> <p>To configure multiple monitor support for a remote desktop session on a macOS device, use the following steps:</p> <ol type="1" start="1" class="default-list"> <li>From the&nbsp;Windows App, select&nbsp;<b>Devices</b>, then find the device you want to configure the display settings for.</li> <li>Select the&nbsp;pencil icon on the panel representing the device.</li> <li>Check the box next to&nbsp;<b>Use customized settings</b>.</li> <li>On the&nbsp;<b>Display</b>&nbsp;tab, select the <b>Use all monitors</b> option (Figure 2).</li> </ol> <figure class="main-article-image half-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/multiple_monitors_rd_1-h.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/multiple_monitors_rd_1-h_half_column_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/multiple_monitors_rd_1-h_half_column_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/multiple_monitors_rd_1-h.jpg 1280w" alt="The macOS remote desktop display settings in the Windows App." data-credit="Rob Bastiaansen" height="248" width="280"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 2. The macOS remote desktop display settings. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>Multiple monitors in the macOS Windows App is an all-or-nothing selection. In comparison to Windows, where users can choose which monitors to use, on macOS, users can only choose to use one or all monitors.</p> <p>The 'select displays' feature was available in the Remote Desktop app on macOS. If this option is important for your users, then it's better not to update the app unless Microsoft eventually brings back the feature.</p> <p>To manually enable multi-monitor mode in macOS, edit the RDP file with Text Editor in the same way as editing the RDP file on Windows.&nbsp;<a href="https://www.techtarget.com/searchenterprisedesktop/tip/Set-up-Windows-Remote-Desktop-on-a-Mac-device">For macOS, the same setting for multiple monitor support</a>&nbsp;is called&nbsp;<b>usemultimon:i:1</b>, where 1 means enabled and 0 means disabled.</p> </section> <section class="section main-article-chapter" data-menu-title="Ensuring positive UX on multi-monitor RDP sessions"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Ensuring positive UX on multi-monitor RDP sessions</h2> <p>Enabling multi-monitor access on a remote desktop is the first and most essential step to providing good UX, but IT teams need to account for several other factors.</p> <h3>Using published applications on multiple monitors</h3> <p>Published applications are apps that are loaded from an RDP session, but instead of showing the full remote desktop, the end user can only see the image of the chosen app. This should automatically work on multiple monitor setups. In addition, the end user can drag and drop the application screen to any connected monitor they want.</p> <p>Using published apps also gives more freedom of use on the end user's device because it will appear that the remote applications are running exactly the same as any local applications. This makes switching between these apps feel natural and normal. It's an excellent alternative for users who only need hosted applications and can run a native desktop for work. The method is especially helpful if the end user connects from a capable&nbsp;<a target="_blank" href="https://www.techtarget.com/searchenterprisedesktop/opinion/Windows-apps-are-here-to-stay-and-thats-OK" rel="noopener">Windows device that also hosts local applications</a>.</p> <h3>The 'use selected monitors' option for legacy systems</h3> <p>In legacy RDP clients, sessions automatically detect and use all monitors. However, this might not be the best user experience in certain situations. Consider an example where you have three monitors and want to use local apps on monitor one and use monitors two and three for an RDP session.</p> <p>For computers still running the legacy Remote Desktop app, the 'use selected monitors' option can configure this setup. This option doesn't apply to the Windows App and only works in legacy RDP clients.</p> <p><a href="https://www.techtarget.com/searchvirtualdesktop/tip/How-to-access-and-interact-with-the-RDP-Task-Manager">Running the command MSTSC /L</a>&nbsp;will output the available monitors on the system and show the monitor IDs. In this example, the monitor hosting local apps has ID 0, and the other two monitors have ID 1 and 2. With this information, you can edit the RDP file by adding the&nbsp;<b>selectedmonitors:s:</b>&nbsp;option. The correct configuration in this example would be&nbsp;<b>selectedmonitors:s:1,2</b>&nbsp;together with&nbsp;<b>use multimon:i:1</b>.</p> <blockquote class="main-article-pullquote"> <div class="main-article-pullquote-inner"> <figure> The challenge is getting remote desktops to detect and interact with local hardware when the desktop isn't running locally. </figure> <i class="icon" data-icon="z"></i> </div> </blockquote> </section> <section class="section main-article-chapter" data-menu-title="Troubleshooting multi-monitor remote desktop performance issues"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Troubleshooting multi-monitor remote desktop performance issues</h2> <p>When using multiple monitors for a remote desktop, performance issues can occur. Users might experience slow screen refresh rates, distorted images or video frame drops, for example. In some cases, a user might not be able to connect to a second monitor in the first place. All these issues can hinder user productivity and increase help desk requests.</p> <p>For any problems with multiple monitor remote desktop setups, IT can try a few key troubleshooting steps.</p> <h3>Check for human error</h3> <p>Make sure the Windows App is configured to show the remote desktop on multiple monitors. The user might say they enabled it, but you should look for yourself to confirm they haven't missed something.</p> <h3>Make sure all monitors are working properly with the local OS</h3> <p>If the local setting is to mirror the displays, then both monitors should show the same remote desktop screen. Instead, you can configure the monitors to extend the desktop to the additional displays.</p> <h3>Make sure the remote computer supports multiple monitors</h3> <p>When connecting to a computer running Windows Home, only a single monitor is supported. For multiple monitor support, the computer needs to be running Windows Pro, Enterprise or Windows Server.</p> <p>In general, admins should ensure all remote desktops are configured on supported systems. This minimizes operational risk and prevents <a href="https://www.techtarget.com/searchcio/tip/6-dangers-of-shadow-IT-and-how-to-avoid-them">workarounds that could compromise compliance</a> in regulated industries.</p> <h3>Verify the screen resolution</h3> <p>Another possible fix is to check the screen resolution. Selecting a resolution that's too high in multiple monitors might exceed the maximum total resolution for all combined displays.</p> <h3>Check the available bandwidth</h3> <p>When all monitors are in use and the UX isn't optimal, find out the available bandwidth. The combined resolution might be too high for the network connection.</p> <p>IT decision-makers should also note that high-resolution multi-monitor setups can increase network load, which might require <a href="https://www.techtarget.com/searchnetworking/feature/Top-ten-ways-to-optimize-network-performance">bandwidth investments</a> to maintain consistent performance.</p> <h3>Access the remote desktop from another client</h3> <p>To verify whether the problem is within the remote desktop or within the client, access the remote desktop from another client. If another client does work with multiple monitors, the remote desktop is the most likely source of the problem.</p> <p>If none of these steps solves the issue, restart the remote desktop and try reconnecting. If that doesn't work, try the same process with the client computer.</p> <p>IT can also check the log files for any indication of the possible source of a multi-monitor RDP problem. Logging is enabled by default for the Windows App. On Windows, the logs are located in %temp%\DiagOutputDir\Windows365\Logs.</p> <p>On macOS, you can access the log location from the Windows App menu under Help &gt; Troubleshooting &gt; Logging. In the dialog, you can configure the logging level and open the logs folder.&nbsp;</p> <p><b>Editor's note:</b>&nbsp;<i>This article was originally written by Chris Twiest in June 2023. Rob Bastiaansen updated this article to reflect changes in Microsoft's remote desktop options and troubleshooting steps.</i></p> <p><i>Chris Twiest works as a technology officer at RawWorks in the Netherlands, focusing on the future Workspace and Cloud technologies for the end user.</i></p> <p><i>Rob Bastiaansen is an independent trainer and consultant based in the Netherlands specializing in VMware and Linux. He writes articles for several print and online publications, and is founder of VMwarebits.com, a site dedicated to technical content related to VMware.</i></p> </section> Learn how to set up multiple monitors for remote desktop sessions across Windows App, macOS and legacy RDP clients, plus tips for troubleshooting performance issues. https://cdn.ttgtmedia.com/rms/onlineimages/security_a254815015.jpg https://www.techtarget.com/searchvirtualdesktop/tip/How-to-configure-multiple-monitors-for-remote-desktop-use Fri, 06 Mar 2026 12:11:00 GMT <p>Deploying local desktops may seem simpler, but organizations shouldn't overlook the benefits of desktop virtualization.</p> <p>Desktop virtualization has become a key strategy for organizations that support hybrid work, bring-your-own-device programs and centralized endpoint management. Instead of managing software and operating systems across hundreds or thousands of individual devices, IT teams can deliver desktop environments from centralized infrastructure or cloud platforms.</p> <p>IT teams can deliver virtual desktops in several ways, each with a different hosting model:</p> <ul class="default-list"> <li><strong data-end="1294" data-start="1253">Virtual desktop infrastructure (VDI).</strong> Organizations host virtual desktops on infrastructure they manage internally.</li> <li><strong data-end="1548" data-start="1516">Desktop as a service (DaaS).</strong> A third-party provider hosts the virtual desktops, sometimes managing infrastructure and updates.</li> <li><strong data-end="1831" data-start="1797">Hybrid desktop virtualization.</strong> Organizations combine elements of VDI and DaaS, hosting some components internally while outsourcing others.</li> <li><strong data-end="2137" data-start="2118">Remote desktop.</strong> Users connect remotely to an existing desktop operating system running on another endpoint.</li> </ul> <p>Regardless of how organizations deliver virtual desktops, several key benefits apply across most virtualization approaches. IT departments and executives who create plans for end-user computing should familiarize themselves with the benefits of desktop virtualization and how to make the most of them.</p> <section class="section main-article-chapter" data-menu-title="1. Centralized management"> <h2 class="section-title"><i class="icon" data-icon="1"></i>1. Centralized management</h2> <p>The most well-known benefit of desktop virtualization is that all desktop management occurs from a central location. Some organizations require users to restart laptops over a few weeks to apply a key update, download a new bit of software or add a new desktop configuration.</p> <p>With virtual desktops, there is no such downtime. The end users don't have access to their desktops until they connect to the virtual desktop host, so any updates or software changes can happen during downtime. Often, IT teams push out these updates when the fewest employees are working, such as overnight or during the weekend.</p> <p>For example, if an organization wants to deploy a new video editing application, its IT team needs to deploy that software. Once the users who need the latest software have logged off for the day, IT teams can alter the virtual desktop image for that user group to include the new virtual application. IT admins can get the virtual app up and running in advance and <a href="https://www.techtarget.com/searchenterprisedesktop/feature/How-to-build-a-virtual-lab-with-Hyper-V">test it in a virtual desktop lab setting before deployment</a>.</p> <p>This process requires a hard reset of the desktop with laptops or PCs running local desktops. It may also cause compatibility issues for users who don't have the right OS version or have made some alterations to the desktop's base settings. This is not likely to happen with every instance, but there's a reason that IT departments try to test software and updates before deploying them.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/benefits_of_desktop_virtualization-f.png"> <img data-src="https://www.techtarget.com/rms/onlineimages/benefits_of_desktop_virtualization-f_mobile.png" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/benefits_of_desktop_virtualization-f_mobile.png 960w,https://www.techtarget.com/rms/onlineimages/benefits_of_desktop_virtualization-f.png 1280w" alt="Chart highlighting the main benefits of desktop virtualization for businesses." height="198" width="560"> <figcaption> <i class="icon pictures" data-icon="z"></i>Desktop virtualization provides benefits such as centralized management, improved scalability, hardware cost savings and easier backup and recovery. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> </section> <section class="section main-article-chapter" data-menu-title="2. Easier to scale and deploy"> <h2 class="section-title"><i class="icon" data-icon="1"></i>2. Easier to scale and deploy</h2> <p>Deploying a new laptop or PC isn't as difficult as it once was. Zero-touch enrollment is now commonplace for many organizations, and <a href="https://www.techtarget.com/searchvirtualdesktop/opinion/11-more-alternative-desktop-and-app-virtualization-vendors">numerous service vendors</a> handle getting properly provisioned devices to end users. And yet, it's still simpler to spin up and deploy virtual desktops to end users.</p> <p>Laptops and PCs with local OSes require someone to load an OS onto the endpoint, connect the user's work accounts, and ensure all required software is present and the desktop is connected to the organization's desktop management platform. For a virtual desktop endpoint, whoever provisions the device only needs to configure the user credentials&nbsp;and ensure it can connect with the desktop virtualization host.</p> <p>Beyond the device itself, organizations don't have to wait for a bulk endpoint seller to get new devices with desktop OSes properly licensed and running on them. Virtual desktop OSes are much easier to create, regardless of what virtualization method an organization is using. If an outside vendor provides these OSes via DaaS, an IT admin has to reach out to the <a href="https://www.techtarget.com/searchvirtualdesktop/tip/Compare-7-desktop-as-a-service-providers">DaaS provider</a> and ask to increase their subscription to take on more users. If an organization runs the desktops in its own VDI, IT teams need to make the changes on the back-end servers to ensure they have the capacity for the new virtual desktops.</p> <blockquote class="main-article-pullquote"> <div class="main-article-pullquote-inner"> <figure> The most well-known benefit of desktop virtualization is that all desktop management occurs from a central location. </figure> <i class="icon" data-icon="z"></i> </div> </blockquote> </section> <section class="section main-article-chapter" data-menu-title="3. Cost savings on endpoint hardware"> <h2 class="section-title"><i class="icon" data-icon="1"></i>3. Cost savings on endpoint hardware</h2> <p>Organizations can also benefit from the cost savings of virtual desktops. A virtual desktop does not require a fully featured endpoint running a locally licensed operating system. Further, <a href="https://www.techtarget.com/searchnetworking/definition/thin-client">thin clients</a> can save organizations on hardware costs because these devices are stripped-down endpoints specializing in hosting virtual desktops. They rely mostly on peripheral devices to support user interaction with the virtual desktop and can be incredibly small and cost-effective.</p> <p>Thin clients are much simpler for admins to manage, so they don't have to spend as much time working on them. And calculating labor hours is a key factor in understanding a technology's <a href="https://www.techtarget.com/searchdatacenter/definition/TCO">total cost of ownership</a>.</p> <p>Virtual desktops can also <a href="https://www.techtarget.com/searchmobilecomputing/feature/Key-benefits-of-enacting-a-BYOD-policy">work for BYOD scenarios</a>, another way organizations can save on hardware. If a user brings their own laptop, there's no need for any hardware purchase.</p> </section> <section class="section main-article-chapter" data-menu-title="4. Accessible through a browser or desktop"> <h2 class="section-title"><i class="icon" data-icon="1"></i>4. Accessible through a browser or desktop</h2> <p>Virtual desktops support BYOD scenarios because they can run within an existing laptop's operating system. The virtual desktop can run in a sandbox within the desktop, ensuring that the security of the underlying OS doesn't threaten the work-related desktop session. The reverse side of this is that IT can prevent the proliferation of corporate data with the proper configurations.</p> <p>This doesn't have to be the main virtual desktop workstation for an end user for it to come in handy. A user relies on a thin client while in the office, but on remote days, they could run the virtual desktop within a secure browser on a personal endpoint. This could also help if users need to travel, as it's much more convenient to pack a laptop than a thin client with numerous peripherals.</p> <p>With the proper virtual desktop agent installed on any desktop OS -- or a secure and functioning browser -- end users can access their resources in various ways even if they don't have their usual workplace endpoint.</p> </section> <section class="section main-article-chapter" data-menu-title="5. IT controls updates and versions of OSes, software and services"> <h2 class="section-title"><i class="icon" data-icon="1"></i>5. IT controls updates and versions of OSes, software and services</h2> <p>Ensuring that all desktops, applications and services are running their latest versions can bring peace of mind to IT teams. The uniformity of different versions improves the security posture of an organization's users and delivers new quality-of-life updates quickly to facilitate productivity.</p> <p>Consider a situation with a significant vulnerability in a key piece of business software -- or even the desktop OS itself. Once there is a patch from the first-party vendor, IT teams must get it distributed as soon as possible.</p> <p>With a PC or a laptop, IT teams may need users to restart their laptops as soon as possible to<a href="https://www.techtarget.com/searchenterprisedesktop/tip/12-best-patch-management-software-and-tools"> apply critical patches</a>. However, virtual desktops take that burden away from the user. Instead, IT can apply the patch to the virtual desktops during off-work hours, and the next time users log on to their OS, they have the latest patches and updates.</p> <div class="youtube-iframe-container"> <iframe id="ytplayer-0" src="https://www.youtube.com/embed/gctocRTgq-U?autoplay=0&amp;modestbranding=1&amp;rel=0&amp;widget_referrer=null&amp;enablejsapi=1&amp;origin=https://www.techtarget.com" type="text/html" height="360" width="640" frameborder="0"></iframe> </div> </section> <section class="section main-article-chapter" data-menu-title="6. Easier backup when major disruptions occur"> <h2 class="section-title"><i class="icon" data-icon="1"></i>6. Easier backup when major disruptions occur</h2> <p>Desktop virtualization enables IT teams to quickly replicate and recreate desktop environments for end users. The need for quick backup can come into play in various situations, such as disaster recovery for large-scale and technical issues that a single user might be experiencing.</p> <p>If a region's data center has an outage, a backup data center should exist at a separate physical location to help IT teams quickly redistribute the desktops. Organizations with a DaaS subscription should confirm via their <a target="_blank" href="https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/scenarios/wvd/eslz-business-continuity-and-disaster-recovery" rel="noopener">provider</a> that they can rely on options like this with the vendor, but this backup option is the industry standard.</p> <p>Things get more complicated regarding VDI backup, as an organization must account for these scenarios with its own data centers and planning. But this shouldn't be a major issue for an organization that is large enough to consider deploying VDI, especially if it's an organization that spans multiple locations across the U.S. or around the world.</p> <p>Consider a scenario where a user has issues with a critical business application or the underlying desktop OS. With a PC or laptop, that user would have to reach out to IT and hope they could successfully handle the issue by directly interfacing with it in person or via remote desktop technology.</p> <p>In the office, IT could give the user a temporary laptop while it works on the user's usual endpoint. The user will likely spend a long time getting all their accounts signed in and ensuring they have all the necessary resources. But, if the worker is remote, it gets even more difficult. A user may have to log off for the day due to the lack of a suitable replacement endpoint.</p> <p>A virtual desktop helps with all these acute user issues because IT could simply terminate the desktop instance and recreate it with all the resources, access and accounts the end user needs.</p> <p>While desktop virtualization introduces its own infrastructure and management considerations, the model continues to appeal to organizations that need stronger security controls, centralized desktop management and flexible access for distributed workforces. As IT teams evaluate strategies such as VDI, DaaS and hybrid desktop delivery models, understanding these benefits can help determine whether desktop virtualization aligns with long-term end-user computing goals.</p> <p><i>John Powers was senior site editor for TechTarget's Enterprise Desktop, Virtual Desktop and Mobile Computing. He graduated from the Philip Merrill College of Journalism at the University of Maryland.</i></p> </section> There are several ways to manage and deliver desktops to end users, and a few of them involve desktop virtualization. Find out what the major benefits of virtualization are. https://cdn.ttgtmedia.com/rms/onlineimages/container_g1074391400.jpg https://www.techtarget.com/searchvirtualdesktop/feature/Benefits-of-desktop-virtualization-for-businesses Fri, 06 Mar 2026 09:57:00 GMT <p data-end="376" data-start="123">When a Windows 11 Remote Desktop session opens to a black screen, users cannot access applications or interact with the system. For IT teams supporting remote desktops, quickly diagnosing the cause of the black screen is essential to restoring access.</p> <p data-end="580" data-start="383">Users can't simply reboot their endpoint to fix the issue as they might with a local desktop. IT admins and help desk teams need a plan to quickly diagnose the root cause and restore the session.</p> <p data-end="838" data-start="587">A black screen in a Windows Remote Desktop session usually occurs when the session cannot properly render the desktop environment. This can occur because of graphics driver problems, interrupted updates, network issues or incorrect display settings.</p> <p data-end="1064" data-start="845">While these six steps can address the most common issues that occur with Remote Desktop Protocol (<a href="https://www.techtarget.com/searchenterprisedesktop/definition/Remote-Desktop-Protocol-RDP">RDP</a>) and Windows 11, many of these troubleshooting steps also apply to Windows 10 and Windows Server 2016, 2019 and 2022.</p> <section class="section main-article-chapter" data-menu-title="1. Review the latest Windows Updates"> <h2 class="section-title"><i class="icon" data-icon="1"></i>1. Review the latest Windows Updates</h2> <p>One of the most common causes of a Windows 11 Remote Desktop black screen is a Windows update that is in progress. When a remote system is performing a Windows update, the remote desktop services get interrupted. This leads to the remote desktop displaying a black screen until the system is done updating and restarts.</p> <p>It's always good to stay on top of the Windows updates and ensure your system runs the latest updates, but new updates can introduce unexpected problems. Windows updates occasionally introduce compatibility issues that affect Remote Desktop Services. This should serve as a reminder for you to always test the latest updates before deploying them to your end users <a href="https://www.techtarget.com/searchenterprisedesktop/tip/Windows-10-updates-to-avoid-and-how-to-address-them">because they could cause issues</a>. You should consider turning off Windows Update service on live production VDI, especially when using any image management technology such as Citrix Machine Creation Services.</p> <p>The best way to handle the Windows Updates is to either put them in the golden image of your desktop host when using an image management system, or update your remote desktop hosts once a month outside of official work hours. This can be as simple as starting up the Windows update services once a month on a Sunday evening and running the updates. You can also use a PowerShell <a target="_blank" href="https://www.powershellgallery.com/packages/PSWindowsUpdate/2.2.0.3" rel="noopener">module</a> to manage Windows Updates.</p> <p>These issues can occur in both traditional remote desktop environments and cloud-hosted desktops such as Azure Virtual Desktop.</p> <div class="extra-info"> <div class="extra-info-inner"> <h3 class="splash-heading">Common causes of a Windows Remote Desktop black screen</h3> <p>Remote Desktop sessions may display a black screen for several reasons. The most common causes include:</p> <ul class="default-list"> <li>Windows updates that interrupt Remote Desktop Services</li> <li>Graphics driver conflicts or outdated GPU drivers</li> <li>Network interruptions or unstable Wi-Fi connections</li> <li>Incorrect display resolution settings</li> <li>Profile loading problems in VDI environments</li> <li>Stuck Remote Desktop Services components</li> </ul> <p>Identifying which of these conditions occurred can help administrators quickly determine the correct troubleshooting step.</p> </div> </div> </section> <section class="section main-article-chapter" data-menu-title="2. Check for issues with the graphics drivers and licenses"> <h2 class="section-title"><i class="icon" data-icon="1"></i>2. Check for issues with the graphics drivers and licenses</h2> <p>Graphics drivers can cause issues with a remote desktop as well. There is an extensive list of known issues on the <a href="https://www.techtarget.com/searchdatacenter/news/366562344/AMD-Instinct-MI300-AI-accelerator-takes-aim-at-Nvidia-GPUs">Nvidia and AMD</a> forums about crashing drivers when using remote desktops. These vendors and others work to get fixes out quickly but it's still helpful for admins to diagnose these issues quickly. Keep your graphics driver up to date on both the host and the client when using a remote desktop.</p> <p>Like with Windows updates, however, new graphics drivers can also break back-end systems and machines. So always test new display drivers before deploying them on your live production environments.</p> <p>In <a href="https://www.techtarget.com/searchvirtualdesktop/definition/virtual-desktop-infrastructure-VDI">virtual desktop infrastructure</a> environments, expired virtual GPU licenses can also cause black screen issues. This is, of course, less common if you use RDP to access a Windows 11 computer elsewhere. However, this issue can occur for enterprise environments that use VDI with virtual GPUs from Nvidia. This can occur with other virtual GPUs, but this example explains the process for Nvidia specifically.</p> <blockquote class="main-article-pullquote"> <div class="main-article-pullquote-inner"> <figure> A black screen in a Windows Remote Desktop session usually occurs when the session cannot properly render the desktop environment. </figure> <i class="icon" data-icon="z"></i> </div> </blockquote> <p>Since the M-series cards, Nvidia requires a virtual GPU license for each user connecting to the card. Nvidia has made a Linux appliance that serves as the GPU licensing server. Every time an end user signs in, a license is assigned to that user. When there are no licenses available, the end user might experience a failing session or a black screen issue when signing in. Nvidia licenses are often a set-and-forget system, and IT teams do not usually have to actively monitor the Linux appliance and the licensing manager.</p> <div class="youtube-iframe-container"> <iframe id="ytplayer-0" src="https://www.youtube.com/embed/_DNxgnINNAY?autoplay=0&amp;modestbranding=1&amp;rel=0&amp;widget_referrer=null&amp;enablejsapi=1&amp;origin=https://www.techtarget.com" type="text/html" height="360" width="640" frameborder="0"></iframe> </div> <p>The licenses could have also expired because <a href="https://www.techtarget.com/searchitoperations/tip/Assign-GPUs-to-virtual-machines-with-VMware-vGPU-mode">these licenses</a> are often applicable for one to three years. IT may need to extend and update the licensing and deploy it to their servers. Make sure to put the end date of the licenses on your maintenance calendar with a reminder four weeks in advance to source new licenses. Also, you should open and check in with the Nvidia license manager once every month to see if there are still enough available and verify that there are no stale licenses.</p> </section> <section class="section main-article-chapter" data-menu-title="3. Test remote desktop connection"> <h2 class="section-title"><i class="icon" data-icon="1"></i>3. Test remote desktop connection</h2> <p>Remote desktop sessions depend heavily on <a href="https://www.techtarget.com/searchvirtualdesktop/tip/Top-5-remote-desktop-connectivity-problems-and-how-to-prevent-them">network stability</a>. This can occur on both internal networks and over internet connections. When users lose the connection to the remote desktop, they can experience a black screen when trying to reconnect.</p> <p>To ensure your users don't experience connection issues, you should advise them to connect to the internet over a wired connection such as ethernet instead of relying on Wi-Fi.</p> <p>Similar connection issues can also affect hosted desktop platforms such as Azure Virtual Desktop or Windows 365, where unstable endpoint connectivity may cause sessions to reconnect to a black screen.</p> <p>If there is no other possibility, ensure that users have access to a strong, stable Wi-Fi connection. End users can always test their connection by using an online speed test. Some monitoring tools such as ControlUp can monitor your end-user environment and see what kind of Wi-Fi connection they are using.</p> <div class="extra-info"> <div class="extra-info-inner"> <h3 class="splash-heading">Quick checks before deeper troubleshooting</h3> <p>Before investigating drivers or profile issues, administrators should confirm a few basic conditions:</p> <ul class="default-list"> <li>The remote system is not currently installing updates</li> <li>The network connection is stable</li> <li>The display resolution settings are compatible</li> <li>The user profile mounted successfully</li> </ul> <p>These quick checks can often resolve a black screen issue without deeper troubleshooting.</p> </div> </div> </section> <section class="section main-article-chapter" data-menu-title="4. Correct any faulty display settings"> <h2 class="section-title"><i class="icon" data-icon="1"></i>4. Correct any faulty display settings</h2> <p>Sometimes all it takes to cause a black screen on a remote desktop is an incorrect resolution setting. Go to the display tab when using the remote desktop client -- located at MSTSC.EXE. Check if the display resolution slider is on the same setting as your remote desktop.</p> <p>Usually, sliding it all the way to the right and selecting full screen will automatically verify that the correct <a href="https://www.techtarget.com/whatis/definition/resolution">resolution</a> is in place. But if you experience issues, you can test setting it to the native resolution of the machine. It can also help to choose a lower resolution than your screen or the remote screen -- for example, 800 x 600 -- to ensure the connection works.</p> </section> <section class="section main-article-chapter" data-menu-title="5. Verify the remote desktop profile settings"> <h2 class="section-title"><i class="icon" data-icon="1"></i>5. Verify the remote desktop profile settings</h2> <p>One issue you may often see is trouble with profiles and underlying profile management technologies, such as FSLogix. When a profile isn't correctly connected, a user can experience a black screen or could be completely disconnected from the session. This can happen when the profile share is inaccessible, or the profile disk has reached its maximum size.</p> <p>Admins can deploy the PreventLoginWithFailure setting, which means the remote desktop will block the login if the profile is not correctly connected. This can result in a strange interaction for your end users, but this way they will know the session is problematic right away and can ask for help. The core of the challenge is to ensure that the profile management technology works and connects quickly. That's why it is essential to monitor your <a href="https://www.techtarget.com/searchnetworking/definition/file-server">file server</a> to determine if there is still enough free storage, and whether user profiles are not hitting their maximum. You should actively monitor your remote desktop profile environment and test every update thoroughly.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/enterprise_desktop-best_practices_rdp_sessions-f.png"> <img data-src="https://www.techtarget.com/rms/onlineimages/enterprise_desktop-best_practices_rdp_sessions-f_mobile.png" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/enterprise_desktop-best_practices_rdp_sessions-f_mobile.png 960w,https://www.techtarget.com/rms/onlineimages/enterprise_desktop-best_practices_rdp_sessions-f.png 1280w" alt="Illustration showing security best practices for protecting Remote Desktop Protocol sessions, including limiting login attempts, using two-factor authentication and enabling Network Level Authentication." height="329" width="559"> <figcaption> <i class="icon pictures" data-icon="z"></i>Security best practices for protecting Remote Desktop Protocol (RDP) sessions include limiting login attempts, enabling two-factor authentication and restricting access to port 3389. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> </section> <section class="section main-article-chapter" data-menu-title="6. Check for stuck RDS components"> <h2 class="section-title"><i class="icon" data-icon="1"></i>6. Check for stuck RDS components</h2> <p>Another issue that can occur in Windows 11 RDP sessions is when Remote Desktop Services become stuck or unresponsive. As an administrator, you can easily fix this by starting services.msc from the Run command. Then, select the option to connect to a different computer. Connect to the machine that has an issue, then select Remote Desktop Services &gt; Restart.</p> </section> <section class="section main-article-chapter" data-menu-title="Why a remote desktop session might show a black screen"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Why a remote desktop session might show a black screen</h2> <p>A black screen usually indicates that the remote desktop session started successfully but failed to load the graphical interface. This can occur because of graphics driver conflicts, display resolution mismatches, profile loading failures or network interruptions during session initialization.</p> <p><strong data-end="246" data-start="228">Editor’s note:</strong> <em>This article was updated to reflect current troubleshooting practices for Windows 11 Remote Desktop environments and to include additional guidance for virtual desktop infrastructure and cloud-hosted desktop platforms. </em></p> <p><em>Chris Twiest works as a technology officer at RawWorks in the Netherlands, focusing on the standardization and automation of IT services.</em></p> </section> Remote desktops provide access to Windows systems but can sometimes display a full black screen. Learn six troubleshooting steps IT admins can use to restore the session. https://cdn.ttgtmedia.com/rms/onlineimages/keyboard_g516059959.jpg https://www.techtarget.com/searchvirtualdesktop/tip/Steps-to-fix-a-black-screen-on-a-Windows-11-remote-desktop Thu, 05 Mar 2026 22:00:00 GMT <p>When Windows 11 Remote Desktop sessions freeze, the impact extends beyond individual users. For IT leaders responsible for endpoint management and hybrid workforce productivity, frozen remote sessions can interrupt access to business-critical applications and delay operational workflows.</p> <p>Problems with the Remote Desktop client -- MSTSC.EXE -- on Windows 11 can lead to freezing and hanging sessions. When sessions hang, employees can lose access to line-of-business applications, internal systems and enterprise data hosted in remote environments.</p> <p>Some general remote desktop best practices, such as making sure remote desktop users have a strong network connection with low latency and accounting for external peripheral hardware, can resolve some of these issues. However, a recent Remote Desktop Protocol (<a href="https://www.techtarget.com/searchenterprisedesktop/definition/Remote-Desktop-Protocol-RDP">RDP</a>) issue has made frozen sessions much more common.</p> <p>This freezing on Windows 11 is tied to the Windows 11 22H2 release. While Microsoft addressed the underlying bug in later cumulative updates, organizations with inconsistent endpoint patch levels or mixed device configurations can still encounter the issue.</p> <section class="section main-article-chapter" data-menu-title="How to fix an RDP session that keeps freezing"> <h2 class="section-title"><i class="icon" data-icon="1"></i>How to fix an RDP session that keeps freezing</h2> <p>Microsoft RDP can <a href="https://www.techtarget.com/searchvirtualdesktop/answer/What-are-the-differences-between-TCP-and-UDP">run on TCP or UDP</a>, with UDP delivering a more stable connection. However, UDP is tied to the Windows 11 22H2 release issue. Remote desktop administrators can disable UDP with Group Policies as a workaround if they cannot apply the KB5022360 update to all of their clients.</p> <p>To do this, create a <a href="https://www.techtarget.com/searchwindowsserver/definition/Group-Policy-Object">Group Policy Object </a>and browse to Computer Configuration &gt; Administrative templates &gt; Windows components &gt; Remote Desktop Services &gt; Remote Desktop Connection client.<b> </b>Here, select the group policy <b>Turn Off UDP On Client </b>and enable the policy (Figure 1).</p> <p>This fix is just a workaround for the underlying problem, however, so running <strong data-end="725" data-start="707">Windows Update</strong> is the preferred and more permanent option.</p> <figure class="main-article-image half-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/windows_remote_desktop_freezing_fix-h.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/windows_remote_desktop_freezing_fix-h_half_column_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/windows_remote_desktop_freezing_fix-h_half_column_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/windows_remote_desktop_freezing_fix-h.jpg 1280w" alt="Group Policy Editor showing the Turn Off UDP On Client setting for the Remote Desktop Connection client." height="158" width="280"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 1. Group Policy setting Turn Off UDP On Client in the Remote Desktop Connection client configuration. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> </section> <section class="section main-article-chapter" data-menu-title="Consider desktop environments beyond traditional RDP"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Consider desktop environments beyond traditional RDP</h2> <p>Many organizations now rely on hosted desktop environments such as <a href="https://www.techtarget.com/searchvirtualdesktop/tip/Comparing-Windows-365-vs-Azure-Virtual-Desktop">Azure Virtual Desktop or Windows 365</a> instead of connecting directly to physical machines. While these platforms still rely on the Remote Desktop Protocol, the infrastructure supporting the connection is managed in the cloud. If freezing issues occur in these environments, administrators should review host session health, client versions and endpoint network conditions to determine whether the issue originates from the endpoint device or the hosted desktop environment.</p> <p>Troubleshooting remote desktops in these environments often starts with the same fundamentals as traditional RDP sessions: validating endpoint connectivity, confirming the client software version and verifying that recent Windows updates have been applied. Administrators should also check platform-specific monitoring tools to determine whether the issue stems from the endpoint device, the session host or the broader remote desktop infrastructure.</p> </section> <section class="section main-article-chapter" data-menu-title="How to deploy the latest Windows updates to all remote desktops"> <h2 class="section-title"><i class="icon" data-icon="1"></i>How to deploy the latest Windows updates to all remote desktops</h2> <p>Maintaining consistent Windows update levels across a distributed device fleet can be challenging, especially in hybrid environments where laptops often operate outside the corporate network for extended periods. This is especially true for the common hybrid work environment with laptops that aren't domain-joined but <a href="https://www.techtarget.com/searchwindowsserver/tip/What-should-admins-know-about-Microsoft-Entra-features">Microsoft Entra ID hybrid-joined</a>.</p> <p>Windows administrators used to roll out Windows updates with <a href="https://www.techtarget.com/searchwindowsserver/definition/Windows-Server-Update-Services-WSUS">Windows Server Update Services</a> on all machines, but now they need new methods to ensure all machines have the updates. This is especially important for updates that have a significant effect on performance and UX, such as the update that fixed the freezing issue.</p> <p>Windows Update for Business, which integrates with Microsoft Intune endpoint management, allows administrators to monitor update compliance across Windows devices and verify that clients are running builds that address stability issues. With Windows Update for Business, it's possible to run reports <a href="https://www.techtarget.com/searchenterprisedesktop/tip/How-to-add-and-enroll-devices-to-Microsoft-Intune">on all Intune-enrolled Windows 11 client devices</a> and check if they are running the latest Windows 11 build with the issue fixed. IT administrators should use Intune or a management tool with similar capabilities to Windows Update for Business to <a target="_blank" href="https://learn.microsoft.com/en-us/mem/intune/protect/windows-update-reports" rel="noopener">check</a> the compliance of end-user devices.&nbsp; &nbsp;</p> <p>In hybrid work environments, consistent patching and endpoint configuration management are critical to maintaining reliable remote access experiences for distributed employees.</p> <blockquote class="main-article-pullquote"> <div class="main-article-pullquote-inner"> <figure> Frozen remote sessions can interrupt access to business-critical applications and delay operational workflows. </figure> <i class="icon" data-icon="z"></i> </div> </blockquote> </section> <section class="section main-article-chapter" data-menu-title="How to manage Windows updates to prevent version inconsistency"> <h2 class="section-title"><i class="icon" data-icon="1"></i>How to manage Windows updates to prevent version inconsistency</h2> <p data-end="774" data-start="544">To proactively prevent these version consistency issues, admins can manage Windows update rollouts. This way, if Windows releases a harmful or malfunctioning Windows build, desktop administrators can block it from being installed.</p> <p data-end="1476" data-start="776">Admins should also test every release and Windows update before deploying it within their organization. Make sure a test script can run on a test device when a new update is released and keep the RDP client open for an extended period during testing.</p> <p data-end="1476" data-start="776">While this process can be time-consuming, testing new Windows builds against remote access workflows and critical enterprise applications helps IT teams identify stability issues early and maintain reliable remote connectivity across the organization. As remote access continues to support hybrid work environments, maintaining consistent endpoint configurations and update policies is essential to ensuring remote desktop reliability at scale.</p> <p data-end="1476" data-start="776"><em><strong data-end="268" data-start="250">Editor's note:</strong> This article was updated to reflect current Windows Remote Desktop environments and expanded to include guidance for cloud-hosted desktop platforms. </em></p> <p><i>Chris Twiest works as a technology officer at RawWorks in the Netherlands, focusing on the standardization and automation of IT services.</i></p> </section> Windows 11 Remote Desktop sessions can freeze due to updates, configuration issues or network problems. Learn how IT admins can troubleshoot and prevent RDP freezes. https://cdn.ttgtmedia.com/rms/onlineimages/check_g1268128622.jpg https://www.techtarget.com/searchvirtualdesktop/tip/What-to-do-when-a-Windows-11-remote-desktop-keeps-freezing Thu, 05 Mar 2026 19:25:00 GMT <p>Secure remote access is essential for protecting enterprise workloads, and organizations can't achieve it without strong controls over who can reach critical Windows systems.</p> <p>It's crucial for IT to be able to manage which users have remote desktop access to a Windows machine. Administrators primarily do this through the Remote Desktop Users group in Windows. While it sounds simple enough, there are multiple ways to manage it and several scenarios that can make it more complex.</p> <p>The Remote Desktop Users group controls who can remotely access Windows systems, which makes it a significant security and governance control point. Proper configuration improves operational efficiency, prevents unnecessary privilege escalation and <a href="https://www.techtarget.com/searchnetworking/tip/8-remote-work-security-risks-and-tips-to-mitigate-them">reduces attack surface</a>. IT leaders must understand how to manage access to the group using different tools, as well as the security factors that affect this process.</p> <section class="section main-article-chapter" data-menu-title="Understanding RDP access requirements"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Understanding RDP access requirements</h2> <p>If an admin wants to remotely manage a Windows-based machine, the easiest way to do this is using the Remote Desktop Protocol (RDP) feature that is built into the OS. RDP is available on most editions of Windows, including Windows Pro, Enterprise, Education and Windows Server editions.</p> <p>To be able to access a machine, a user must have Remote Desktop enabled, and the firewall must <a href="https://www.techtarget.com/searchvirtualdesktop/tip/Top-5-remote-desktop-connectivity-problems-and-how-to-prevent-them">allow RDP traffic</a>. They also need a user account that is either an administrator account or part of the Remote Desktop Users group. By default, users who are a part of either of these groups will be authorized to log on remotely to the server.</p> <p>The authentication mechanism differs depending on whether the target machine is joined to a domain, not joined to a domain or joined directly to Entra ID. If the machine is joined to a domain, the target machine also needs to be able to reach a domain controller to authenticate to the machine with that account.</p> </section> <section class="section main-article-chapter" data-menu-title="Managing the Remote Desktop Users group"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Managing the Remote Desktop Users group</h2> <p>There are a few ways to manage access to remote desktop users. If an admin has local access to the machine, they can use the UI or PowerShell. This approach is the easiest for managing access on a per-machine basis.</p> <p>To manage Remote Desktop Users group access with the UI, navigate to Start &gt; Computer Management &gt; Local Users and Groups &gt; Groups. Next, select <b>Remote Desktop Users</b> and define the user or group that should receive access (Figure 1).</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/remote_desktop_users_windows_1-h.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/remote_desktop_users_windows_1-h_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/remote_desktop_users_windows_1-h_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/remote_desktop_users_windows_1-h.jpg 1280w" alt="The 'Computer Management' page in Windows." data-credit="Marius Sandbu"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 1. Configuring the Remote Desktop User group through the Windows UI. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>To <a href="https://www.techtarget.com/searchwindowsserver/tutorial/Learn-to-monitor-group-memberships-with-PowerShell">manage access with PowerShell</a>, type the following command in the PowerShell window:</p> <pre class="language-powershell"><code>Add-LocalGroupMember -Group "Remote Desktop Users" -Member nameofaccount</code></pre> <p>It's also possible to create a group of IT admins and assign them to the Remote Desktop Users group on a selected collection of devices. To do this, use Microsoft Intune.</p> <p>Open the Microsoft Intune admin center portal and navigate to<b> </b>Endpoint security &gt; Account protection. From there, click <b>Create Policy</b>.</p> <p>On the Create a profile page, choose <b>Windows</b> from the first drop-down menu and<b> Local user group membership</b> from the second drop-down menu (Figure 2). Then, click <b>Create</b>.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/remote_desktop_users_windows_2-h.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/remote_desktop_users_windows_2-h_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/remote_desktop_users_windows_2-h_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/remote_desktop_users_windows_2-h.jpg 1280w" alt="The 'Create a profile' page in the Microsoft Intune admin center portal." data-credit="Marius Sandbu"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 2. Specifying the platform and profile type for a Remote Desktop Users group policy. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>Specify a name for the policy, and go into configuration settings and select <b>Remote Desktop Users</b> from the drop-down menu under Local group. Select the users that should be added to the group, then specify any required scope tags and assign the policy to the appropriate group of devices (Figure 3).</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/remote_desktop_users_windows_3-h.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/remote_desktop_users_windows_3-h_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/remote_desktop_users_windows_3-h_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/remote_desktop_users_windows_3-h.jpg 1280w" alt="The 'Create Policy' page in the Microsoft Intune admin center portal." data-credit="Marius Sandbu"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 3. Configuring settings for a Remote Desktop Users group policy. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>Once this policy is deployed, it can take 30 to 60 minutes for it to be applied to the machines.</p> <h3>Managing RDP access for Azure VMs joined to Entra ID</h3> <p>The UI, PowerShell and Intune access management methods work for physical or on‑premises Windows machines. However, if the Windows machine is an Azure VM joined to Entra ID, RDP access requires an additional layer of authorization: Azure role-based access control (RBAC). Even if a user is in the Remote Desktop Users group, they might be unable to log on (Figure 4).</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/remote_desktop_users_windows_4-h.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/remote_desktop_users_windows_4-h_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/remote_desktop_users_windows_4-h_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/remote_desktop_users_windows_4-h.jpg 1280w" alt="A Windows Security credentials error message." data-credit="Marius Sandbu"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 4. Without the proper Azure role assignment, users might receive an error message when trying to log on. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>For machines that are running in Azure and are joined to Entra ID, IT must <a target="_blank" href="https://learn.microsoft.com/en-us/azure/role-based-access-control/role-assignments" rel="noopener">assign</a> the appropriate Azure role.</p> <p>The correct permissions must be configured in Microsoft Azure by assigning one of two roles to the VM. To do this, use Azure RBAC. Go to Virtual machine &gt; Access control &gt; Add role assignment. From there, select either <b>Virtual Machine User Login</b> or <b>Virtual Machine Administrator Login</b> for the user that needs access to the machine (Figure 5).</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/remote_desktop_users_windows_5-h.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/remote_desktop_users_windows_5-h_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/remote_desktop_users_windows_5-h_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/remote_desktop_users_windows_5-h.jpg 1280w" alt="The 'Add role assignment' page in Microsoft Azure." data-credit="Marius Sandbu"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 5. Selecting a role assignment for a VM in Microsoft Azure. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>The Azure agent on the VM will then add the user as a remote desktop user or administrator on the target machine. This also ensures that RBAC is handled by Azure.</p> </section> <section class="section main-article-chapter" data-menu-title="RDP access security considerations"> <h2 class="section-title"><i class="icon" data-icon="1"></i>RDP access security considerations</h2> <p>Even after configuring who can access a machine through the Remote Desktop Users group, admins must ensure that access is secure. By default, RDP does not provide built-in multifactor authentication (MFA). This means that if a bad actor gains access to a user's credentials, they could use RDP to gain unauthorized access to the machine. In <a href="https://www.techtarget.com/searchsecurity/tip/Top-3-ransomware-attack-vectors-and-how-to-avoid-them">many ransomware attacks</a>, for example, attackers use RDP as a method to gain access or move laterally inside the infrastructure.</p> <p>Therefore, it's important for IT departments to implement additional security measures -- such as VPNs with MFA, or RDP gateways that enforce MFA -- to protect RDP connections.</p> <p>IT should strictly limit access to only users and groups who require it for their job functions. This means regularly reviewing and auditing who has RDP access to machines and removing access for users who no longer need it. Admins can actively monitor RDP access using Windows Event Logs or a Security Information and Event Management (SIEM) platform such as Microsoft Sentinel. Active monitoring helps detect suspicious activity and potential security breaches.</p> <p>When <a href="https://www.techtarget.com/searchsecurity/tip/SIEM-implementation-steps-and-best-practices">using any SIEM product</a>, IT should look for the following event IDs:</p> <ul class="default-list"> <li><b>Event ID 4624: An account was successfully logged on.</b> This signals a successful RDP logon. While normal, a high volume of successful logons from unusual IP addresses or at unusual times could indicate compromise. For RDP sessions, look for logon type 10.</li> <li><b>Event ID 4625: An account failed to log on.</b> This signals a failed logon attempt. Frequent occurrences from a single source IP, especially with different usernames, can point to brute-force attacks. Analyze the Failure Reason and Sub Status codes for more details.</li> <li><b>Event ID 4634: An account was logged off.</b> This event shows when an RDP session ends.</li> <li><b>Event ID 4776: The domain controller attempted to validate the credentials for an account.</b> This event is relevant for domain-joined machines and indicates NT LAN Manager authentication attempts.</li> <li><b>Event ID 4870: Remote Desktop Services session reconnected.</b> This event occurs when a user reconnects to an existing RDP session.</li> <li><b>Event ID 4871: Remote Desktop Services session disconnected.</b> This event occurs when a user disconnects from an RDP session without logging off.</li> </ul> <p>SIEM platforms like Microsoft Sentinel let IT create custom rules and alerts to correlate event IDs with other security data, such as geolocation information, <a href="https://www.techtarget.com/whatis/definition/threat-intelligence-feed">threat intelligence feeds</a> and user behavior analytics. This enables sophisticated detection of anomalies. Examples of RDP access anomalies include the following:</p> <ul class="default-list"> <li>Multiple failed RDP logon attempts followed by a successful one from a different IP address.</li> <li>RDP logons from countries or regions where the organization does not operate.</li> <li>Unusual RDP logon times for specific user accounts.</li> <li>Spikes in RDP activity that deviate from baseline behavior.</li> </ul> <p>Regularly reviewing these logs and configuring appropriate alerts within the SIEM platform is vital for maintaining the security of the RDP infrastructure and detecting potential threats promptly.</p> <p>Effective management of the Remote Desktop Users group is essential for controlling who can access Windows systems remotely. Whether access is configured locally, through Intune or through Azure RBAC, organizations must pair access management with strong security controls. Limiting RDP exposure, enforcing MFA and continuously monitoring logon activity are key steps in reducing risk. By combining proper group configuration with layered security, IT teams can maintain operational flexibility without expanding the attack surface.</p> <p><i>Marius Sandbu is a cloud evangelist for Sopra Steria in Norway who mainly focuses on end-user computing and cloud-native technology.</i></p> </section> Managing the Remote Desktop Users group is essential for secure Windows access. IT teams should know how to configure it properly across local, Intune and Azure environments. https://cdn.ttgtmedia.com/rms/onlineimages/security_a385093447.jpg https://www.techtarget.com/searchvirtualdesktop/tip/How-to-configure-the-Remote-Desktop-Users-group-in-Windows Fri, 20 Feb 2026 15:15:00 GMT <p>IT administrators can use Hyper-V on Windows 11 for a variety of business tasks, from testing software and services to securing individual sessions. However, there are several steps they need to take before Hyper-V and any virtual machines are ready to use.</p> <p>Successfully running Hyper-V requires a solid grasp of how it fits into existing security, infrastructure and operational workflows. IT teams must understand Hyper-V for Windows 11, including the prerequisites, how to enable it, and how to set up a VM and network. Additionally, as an administrator, you should learn what Hyper-V can do <a href="https://www.techtarget.com/searchitoperations/answer/Hyper-V-vs-VMware-comparison-What-are-the-differences">compared to other virtualization tools</a> and what features make it stand out.</p> <section class="section main-article-chapter" data-menu-title="Why use Hyper-V on a Windows 11 machine?"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Why use Hyper-V on a Windows 11 machine?</h2> <p>One of the biggest reasons that you might want to use Hyper-V is that it's free and included in your <a href="https://www.techtarget.com/searchenterprisedesktop/tip/What-do-the-different-licenses-for-Windows-11-come-with">Windows 11 Pro or Enterprise license</a>. Other virtualization software often requires you to pay extra. Even if some technologies are free -- for example, VMware Workstation Pro -- you must download and register the software. The enrollment process for Hyper-V is quite straightforward for Windows administrators.</p> <p>Virtualization is most often hosted on specialized servers with <a href="https://www.techtarget.com/searchitoperations/feature/How-to-choose-the-best-CPU-for-virtualization">many CPU cores</a> and plenty of RAM, so why would IT want to run Hyper-V on a Windows 11 machine? There are many good scenarios for this.</p> <h3>Security</h3> <p>Hyper-V is very useful for creating a VM to work within. This way, you can separate work and private software. You can even sandbox the machine on the network to only let it connect to corporate resources.</p> <p>Many viruses or ransomware still come through phishing emails or messenger apps. The risk of viruses and ransomware is much lower if you don't have social media or email on the VM. Also, the chance of spreading it to the company network is lower. IT administrators -- especially those who connect directly from their workstations to servers and the company back end -- should consider doing this from a secure VM.</p> <h3>Lab testing</h3> <p>Another good use of Hyper-V is a lab environment to test changes and updates to software. You can have a VM with company software and install the update first on the VM. Then, you can go through a testing procedure before installing the update on all computers in the corporate network.</p> <p>A major advantage of using Hyper-V is <a href="https://www.techtarget.com/searchitoperations/tip/A-beginners-guide-to-Hyper-V-checkpoints">its ability to create checkpoints</a>, which are snapshots of the VM, and bring the VM directly back to that point. You can quickly test out an update, and if it doesn't work, you can just set back the VM to the checkpoint. Then, it's immediately ready for another test.</p> <h3>Education and training</h3> <p>When engaging with IT training from vendors, you might learn about new tools that your organization doesn't use. Creating a VM on your own workstation to go through the training material can be an easy way to learn hands-on. Checkpoints can quickly reset these training machines to a clean state to let you do a different exercise or retry a lesson.</p> </section> <section class="section main-article-chapter" data-menu-title="Prerequisites for Hyper-V on Windows 11"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Prerequisites for Hyper-V on Windows 11</h2> <p>Running Hyper-V on a Windows 11 machine has the following prerequisites:</p> <ul type="disc" class="default-list"> <li>Windows 11 Pro or Enterprise 64-bit OS.</li> <li>A 64-bit processor with Second Level Address Translation.</li> <li>A minimum of 4 GB of RAM.</li> <li>BIOS-level hardware virtualization support.</li> </ul> <p>To check if a system meets these requirements, start up the Task Manager by right-clicking on the taskbar. In the CPU part of the performance tab, see if the processor has virtualization enabled (Figure 1).</p> <figure class="main-article-image half-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_1-h.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_1-h_half_column_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_1-h_half_column_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_1-h.jpg 1280w" alt="A screenshot of Virtualization turned on in the Windows 11 task manager. " data-credit="Chris Twiest" height="222" width="280"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 1. The CPU section of the Windows 11 task manager performance tab showing Virtualization set to enabled. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>Most modern CPUs and motherboards support virtualization by default, but it might be disabled.</p> <p>You can change the virtualization setting in your machine's BIOS. The best way to do this is to Google your motherboard type or laptop manufacturer for "[brand and model] change BIOS CPU virtualization setting." This should provide manual or guided steps to change the virtualization feature of your CPU.</p> <p>In the performance tab, you can also see if you have enough RAM to use Hyper-V. In Figure 1, there is a total of 15.9 GB, which exceeds the 4 GB needed. If the prerequisites are met, you can enable Hyper-V.</p> </section> <section class="section main-article-chapter" data-menu-title="3 methods to enable Hyper-V on Windows 11"> <h2 class="section-title"><i class="icon" data-icon="1"></i>3 methods to enable Hyper-V on Windows 11</h2> <p>There are three ways to enable Hyper-V. The first method relies on Windows features. First, search for Windows features in the Start menu. This will bring up the features window and let you turn features on or off. Scroll to Hyper-V and check the boxes for Hyper-V (Figure 2). After you click <b>OK</b>, the Hyper-V installation will start. After the installation, a prompt will appear to reboot the machine.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_2-h.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_2-h_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_2-h_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_2-h.jpg 1280w" alt="The Hyper-V option in the Windows Features menu shown to be checked to indicate they are on. " data-credit="Chris Twiest"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 2. The Windows Features menu with Hyper-V selected and the drop-down menus showing. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>You can also use the following command prompt to enable Hyper-V:</p> <pre><span style="font-family: 'courier new', courier, monospace;">DISM /Online /Enable-Feature /All /FeatureName:Microsoft-Hyper-V</span></pre> <p>After this <a href="https://www.techtarget.com/searchenterprisedesktop/definition/Microsoft-Windows-Deployment-Image-Servicing-and-Management-DISM">Deployment Image Servicing and Management</a> command runs, you will be prompted to restart the machine.</p> <p>The last way to enable Hyper-V on your system is to use the following PowerShell command:</p> <pre class="language-powershell"><code>Enable-WindowsOptionalFeature -Online -FeatureName Microsoft-Hyper-V-All</code></pre> <p>After the PowerShell script, you will be prompted to restart the machine.</p> <p>To start using Hyper-V, you'll need to start the Hyper-V Manager. This tool is installed when enabling Hyper-V on the system in the last step. Searching the Start menu for Hyper-V will prompt you to open the manager.</p> </section> <section class="section main-article-chapter" data-menu-title="How to manage Hyper-V on Windows 11"> <h2 class="section-title"><i class="icon" data-icon="1"></i>How to manage Hyper-V on Windows 11</h2> <p>In the Hyper-V Manager, you can create and manage multiple VMs, change global settings and set up virtual networking. If this is your first time using Hyper-V, look over the global settings and check the networking settings to see if they fit your use case.</p> <p>To access the global settings, click on <b>Hyper-V Settings... </b>in the Hyper-V Manager. This option should be under Actions, either on the right side or in the top bar.</p> <figure class="main-article-image half-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_4-h.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_4-h_half_column_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_4-h_half_column_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_4-h.jpg 1280w" alt="The storage location of the Virtual Hard Disks for the Hyper-V VMs." data-credit="Chris Twiest" height="262" width="280"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 3. The Virtual Hard Disks section showing the location of these large files. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>The settings you can change here will affect how the VMs are created. There are two settings that have the most significant effect on your Hyper-V system. First, the virtual hard disk setting is where the <a href="https://www.techtarget.com/searchvirtualdesktop/definition/virtual-hard-disk-VHD">VHDs</a> are created for your VMs. You can browse to a different HDD or SSD location in your system to save these files (Figure 3). The VHD files can grow into large files and require available storage.</p> <p>The second setting to check is Virtual Machines, shown just below the Virtual Hard Disks setting in Figure 3. This is the location where VM configuration files are saved. Most of the time, you should save these in the same location as the VHDs.</p> </section> <section class="section main-article-chapter" data-menu-title="Networking for Hyper-V VMs"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Networking for Hyper-V VMs</h2> <p>The network is an integral part of Hyper-V because it works with virtual network switches, which you can set to different access levels. To access the Virtual Switch Manager, click on <b>Actions</b> in the Hyper-V Manager or on the right-side action pane under Hyper-V settings.</p> <p>Hyper-V will always create a default network switch. This will be an internal switch with NAT enabled.</p> <p>From there, you can create three types of switches: external, internal or private (Figure 4). Understanding the differences between these switches and selecting the correct one for your environment is essential.</p> <h3>Private switch</h3> <p>A private switch allows only communication between VMs on this private switch. It stops communication between the VM and the host.</p> <h3>Internal switch</h3> <p>An internal switch allows communication between all VMs on the switch and connection to the host. It can also communicate with the host and use its internet connection through NAT.</p> <h3>External switch</h3> <p>An external switch requires its own physical network adapter and can be used to separate the Virtual Machine and Host Networks.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_5-h.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_5-h_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_5-h_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_5-h.jpg 1280w" alt="The option to choose an External, Internal or Private virtual switch for the VM." data-credit="Chris Twiest"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 4. The Virtual Switch Manager showing the three types of virtual switches the administrator can create. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> </section> <section class="section main-article-chapter" data-menu-title="How to create a VM with Hyper-V"> <h2 class="section-title"><i class="icon" data-icon="1"></i>How to create a VM with Hyper-V</h2> <p>After enabling Hyper-V and setting up the network and global settings, you can create a VM. Before you begin, <a href="https://www.techtarget.com/searchenterprisedesktop/tutorial/How-to-perform-a-Windows-11-ISO-file-install">you need an ISO of the OS you want to install</a>. This example uses an ISO of Windows Server 2022.</p> <p>To start creating a VM, select Action &gt; New &gt; Virtual Machine in the Action menu (Figure 5).</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_6-h.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_6-h_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_6-h_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_6-h.jpg 1280w" alt="The drop-down menu for Action in Hyper-V Manager showing the option to create a new VM." data-credit="Chris Twiest"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 5. The Action menu showing the path to create a new VM. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>This will bring up the New Virtual Machine Wizard. On the first screen, click <b>Next</b>. Then, specify a name for the VM. You can also choose to store the VM in a different location than the one set in the global settings (Figure 6). After entering a name, click <b>Next</b>.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_7-h.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_7-h_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_7-h_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_7-h.jpg 1280w" alt="The New Virtual Machine Wizard showing the option to choose the storage location of the new VM." data-credit="Chris Twiest"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 6. The section of the VM setup process that specifies the location that Windows 11 will store the VM. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>This will bring you to the Generation selection screen. For modern OSes such as Windows Server 2022 or Windows 11, you can go with Generation 2 -- older OSes or 32-bit OSes require Generation 1. After selecting the right generation, click <b>Next</b>.</p> <p>Next, assign the VM the right amount of startup memory. If you check the Dynamic Memory box, the VM will not take all the RAM of the host assigned to it; rather, it takes only the memory it is using at the moment (Figure 7). After setting the right amount for your deployment, click <b>Next</b>.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_8-h.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_8-h_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_8-h_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_8-h.jpg 1280w" alt="The New Virtual Machine Wizard enabling the administrator to choose an amount of memory for the VM and whether to use Dynamic Memory. " data-credit="Chris Twiest"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 7. The option to assign startup memory for the new VM. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>On the next screen, select which virtual network switch the VM will connect to. Select the switch you decided on and click <b>Next</b>.</p> <p>After that, you need to configure the VHD for the VM. Select the option to create a new disk. By default, it will choose the location of the global Hyper-V settings to save the virtual hard drive. These VHDX files are dynamic and will only require the storage they use, not their full storage capacity (Figure 8). After setting up the disk, click <b>Next</b>.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_9-h.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_9-h_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_9-h_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_9-h.jpg 1280w" alt="The section of the New Virtual Machine Wizard pertaining to virtual hard disk creation." data-credit="Chris Twiest"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 8. The dynamic VHDX file, which will function as the virtual hard disk for the VM. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>The last thing to do is select the ISO from which you want to install your OS on the VM and click Next &gt; Finish. Now that the VM is created, you can connect to it and install the OS in the VM. To do this, right-click on the VM in the Hyper-V Manager and click <b>Connect</b>.</p> <p>After connecting, you can start the VM by selecting Action &gt; Start or pressing the green power button in the upper left corner (Figure 9).</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_10-h.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_10-h_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_10-h_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_10-h.jpg 1280w" alt="The Virtual Machine Connection interface ready to boot up the VM. " data-credit="Chris Twiest"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 9. A test VM ready to be started up. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>The VM will now boot from the ISO and is ready to install the OS.</p> <p>After the OS installation, you don't need to install extra drivers, as is the case with many other virtualization tools. Because Hyper-V is a Microsoft product, the drivers are already <a target="_blank" href="https://learn.microsoft.com/en-us/windows-hardware/drivers/network/overview-of-hyper-v" rel="noopener">included</a> in the Windows OS.</p> </section> <section class="section main-article-chapter" data-menu-title="How to manage a VM in Windows 11"> <h2 class="section-title"><i class="icon" data-icon="1"></i>How to manage a VM in Windows 11</h2> <p>With a VM up and running, you can perform all administrative tasks from the Hyper-V Manager. In the Hyper-V Manager's Virtual Machines pane, you can see a list of all VMs created in Hyper-V (Figure 10).</p> <figure class="main-article-image half-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_11-h.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_11-h_half_column_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_11-h_half_column_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/how_to_manage_hyperv_in_windows_11-h.jpg 1280w" alt="The Hyper-V Manager interface with one VM that administrators can manage. " data-credit="Chris Twiest" height="68" width="279"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 10. The Virtual Machines section of Hyper-V Manager showing the one VM available to manage. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>By right-clicking on the VM, you can start it, suspend it or shut it down. Hyper-V also enables admins to pause and reset a VM. One other important option that Hyper-V offers is Checkpoints, which are snapshots of the VM that let you reset the VM to the point in time the checkpoint was created.</p> <p>You can create and manage a checkpoint by right-clicking on the VM, where you can select <b>Checkpoint</b> -- which will create a new point in time -- or <b>Revert</b>, which lets you restore an earlier state of the VM.</p> <p><b><i>Editor's note:</i></b><i>&nbsp;This article was updated in February 2026 to reflect technology changes and to improve the reader experience.</i></p> <p><i>Chris Twiest works as a technology officer at RawWorks in the Netherlands, focusing on the future Workspace and Cloud technologies for the end user.</i></p> </section> Hyper-V virtual machines have many use cases in enterprise IT. Windows administrators should follow these steps to create new VMs no matter what their intended use is. https://cdn.ttgtmedia.com/rms/onlineimages/container_g922017556.jpg https://www.techtarget.com/searchvirtualdesktop/tip/How-to-enable-and-manage-Windows-11-Hyper-V Tue, 10 Feb 2026 13:10:00 GMT <p>Organizations that offer Apple endpoints as work devices must address the specific requirements of macOS in any technology implementation. Desktop virtualization is no exception.</p> <p>Many organizations have adopted Windows-based <a href="https://www.techtarget.com/searchvirtualdesktop/definition/virtual-desktop-infrastructure-VDI">VDI</a> and desktop as a service (<a href="https://www.techtarget.com/searchvirtualdesktop/definition/desktop-as-a-service-DaaS">DaaS</a>) to deploy virtual desktops to end users. The Windows virtual desktop can be based on a 1-to-many ratio with a server OS, 1-to-1 with a workstation OS, or 1-to-many with Windows 10 or 11 multi-user workstation OS. Regardless of the VM's OS, the user experiences a familiar Windows desktop after successful authentication.</p> <p>Through <a href="https://www.techtarget.com/searchvirtualdesktop/tip/Compare-7-desktop-as-a-service-providers">DaaS providers</a>, such as Citrix, Microsoft Azure and VMware, users can access Windows-based virtual desktops from any type of Apple device, including an iOS-based iPhone or a macOS-based device such as a MacBook. This type of access is common and has been available for many years. Every end-user device type -- including Google Chromebooks and other Linux-based devices -- can be used, whether in conjunction with a native client or web-based access.</p> <p>macOS maintains a significant presence in enterprise desktop environments, especially in organizations that permit employee device choice. As an extension of this system's familiarity and functionality, some organizations are interested in subscribing to macOS virtual desktops from a DaaS provider. However, Apple's licensing requirements pose a challenge to this possibility.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/benefits_of_desktop_virtualization-f.png"> <img data-src="https://www.techtarget.com/rms/onlineimages/benefits_of_desktop_virtualization-f_mobile.png" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/benefits_of_desktop_virtualization-f_mobile.png 960w,https://www.techtarget.com/rms/onlineimages/benefits_of_desktop_virtualization-f.png 1280w" alt="A graphic highlighting the benefits of desktop virtualization. " height="198" width="560"> <figcaption> <i class="icon pictures" data-icon="z"></i>Desktop virtualization centralizes management and access, but operating system licensing -- especially for macOS -- shapes how fully those benefits can be realized. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <h3>Hosted macOS</h3> <p>In practice, hosted macOS environments are used primarily for development and testing rather than as general-purpose desktops for end users. The concept of hosting macOS works for two distinct cases: macOS development and macOS DaaS for user access. These two functionalities are not interchangeable.</p> <p>Developers creating Apple-focused software can use a virtualized macOS desktop to develop and test the software. For example, an enterprise that provides an editing application may wish to have the application run on both Windows and Mac devices. Within the development environment, this could imply physical devices or VMs. Additionally, a virtual macOS desktop frees developers to work from a Windows device, if necessary.</p> <p>It's easy to create a cloud-based development environment for Windows. Using the cloud minimizes costs and setup work, enhances flexibility and gives developers easy access to the environment. For example, if an error occurs during testing wherein an action programmatically generates an <a href="https://www.techtarget.com/whatis/definition/infinite-loop-endless-loop">infinite loop</a>, developers can gather forensics to fix the problem and then quickly and easily delete the virtual desktop. They can subsequently correct the issue and test again on a newly deployed Windows-based VM within minutes.</p> <p>That type of setup was not available for Mac development until recently. While Mac developers can get mini devices for the lab, cloud-based application development and testing is a better option. However, Apple licensing controls what users can and cannot legally do with macOS software.</p> <h3>Licensing for macOS</h3> <p>Apple has stringent <a target="_blank" href="https://www.apple.com/legal/sla/" rel="noopener">licensing requirements</a> for macOS regarding hardware and shared services. First, macOS must run on designated Apple hardware, as per the licensing agreement. In addition, service providers or other shared services cannot use macOS because Apple doesn't allow virtualized copies or instances of its software in connection with services such as service bureaus, time-sharing or terminal sharing.</p> <p>Apple allows remote desktop connections, though with some limitations. Although users can make multiple connections to a single Mac, only one remote session can control the Apple software; the other connections can only observe the connection. This limited connectivity stipulation severely curbs remote access functionality from both a business and technical perspective.</p> <p>In late 2020, Apple introduced an aspect of licensing wherein service providers could offer hosting services specifically for developers to use. This section of the licensing agreement, called Leasing for Permitted Developer Services, likewise has strict requirements. However, it does legally allow providers such as AWS to <a target="_blank" href="https://aws.amazon.com/pm/ec2-mac/" rel="noopener">offer macOS instances</a> for development purposes. In addition, several smaller providers, such as MacStadium and MacinCloud, also provide cloud-based macOS instances for developers. Conditions for developer usage include lessee agreement, a minimum lease period of 24 hours and "sole and exclusive use and control." Activities covered include building software from source, automated testing and running the tools to carry out these activities.</p> <blockquote class="main-article-pullquote"> <div class="main-article-pullquote-inner"> <figure> A key benefit of Windows-based DaaS is centralization and resource sharing, with an end result of lower costs. </figure> <i class="icon" data-icon="z"></i> </div> </blockquote> <p>The stipulations for Apple use have some ramifications for macOS-based DaaS. <a name="_Hlk101346997"></a><a href="https://www.techtarget.com/searchvirtualdesktop/news/252485353/Security-productivity-key-desktop-virtualization-benefits">Key benefits of DaaS</a> for Windows include centralization and resource sharing, ultimately resulting in lower costs. As macOS licensing requires Apple hardware, disallows service bureau and sharing, and limits connectivity to one controlling session per device, service providers cannot offer macOS DaaS. On-premises deployments of macOS-based virtual desktops are technically possible, but this falls into a gray area of licensing and is costly.</p> <p>Thus, Apple licensing now permits developers to lease macOS from service providers but prohibits access to DaaS for end users. For IT teams, this makes macOS DaaS a licensing constraint rather than a technology gap.</p> <h3>DaaS operating system options</h3> <p>Interest in desktop as a service based on macOS certainly exists, but it is not possible from a legal standpoint. Even if it were, the financial investment and costs would likely raise feasibility questions. There is little indication that Apple plans to change its licensing requirements. Apple derives significant profit from hardware -- closely coupling its hardware and software is its long-standing business model and key to its success. Apple continues to focus on tying OS functionality to its physical devices. Physical devices running iOS and macOS operating systems continue to proliferate. Supporting these Apple devices for remote access to Windows-based virtual desktops, therefore, shows no signs of slowing down.</p> <p>An <a href="https://www.techtarget.com/searchdatacenter/tip/8-things-to-know-when-switching-from-Windows-to-Linux">alternative to Windows-based DaaS is Linux VMs</a>. If an organization seeks an OS other than Windows due to Microsoft's licensing costs or other requirements, Linux is an option worth considering. However, end users are far less familiar with Linux, so involving it in a user-facing technology could cause confusion. Further, some traditional software packages, such as Office 365 and Microsoft 365, aren't available for direct download onto a Linux machine. While there might be some use cases for Linux VMs, they face challenges from an integration and familiarity perspective for most enterprise users.</p> <p>Because <a href="https://www.techtarget.com/searchvirtualdesktop/tip/Benefits-of-multi-user-Windows-10-in-Windows-Virtual-Desktop">multi-user Windows 10 and 11</a> is available only on Microsoft Azure, this functionality is a key feature of Azure Virtual Desktops. Other cloud providers -- including AWS and Google Cloud -- cannot offer multi-user Windows 10 or 11. However, 1-to-1 virtualized Windows 10 and 11 workstations are available. Because Windows OSes are not dependent on native Microsoft hardware, organizations have flexibility and can find ways to cut costs.</p> <p>For most organizations, supporting Macs through Windows-based DaaS remains the most practical option, while true macOS DaaS remains limited by licensing rather than technology.</p> <p><b>Editor's note:</b> <i>This article was updated in January 2026 to improve</i><em>&nbsp;clarity, flow and the overall reader experience.</em></p> When people discuss desktop as a service, it is usually in the context of Windows desktops. For macOS, however, implementing DaaS can be more complicated. https://cdn.ttgtmedia.com/rms/onlineimages/keyboard_g164210754.jpg https://www.techtarget.com/searchvirtualdesktop/tip/Understanding-the-DaaS-options-for-Macs Thu, 22 Jan 2026 10:30:00 GMT <p>Ensuring secure remote access to corporate applications and data is a fundamental requirement for IT teams. However, the methods organizations use to provide that access have evolved. Desktop as a service (<a href="https://www.techtarget.com/searchvirtualdesktop/definition/desktop-as-a-service-DaaS">DaaS</a>) and virtual private network (<a href="https://www.techtarget.com/searchnetworking/definition/virtual-private-network">VPN</a>) are both popular options, but they address different issues and come with distinct advantages and disadvantages.</p> <p>While both give remote users access to an organization's resources, DaaS and VPN differ in user-friendliness, performance, security and manageability. IT administrators should examine the similarities and differences between these two services to determine which one best suits their goals.</p> <h3>What is DaaS?</h3> <p>Desktop as a service gives end users access to a virtual desktop that is hosted in the cloud. With this option, IT admins can manage virtual desktops while the <a href="https://www.techtarget.com/searchvirtualdesktop/tip/Compare-7-desktop-as-a-service-providers">DaaS provider</a> handles the hosting infrastructure setup and management. When end users connect to the virtual desktop, the DaaS provider streams the screen of the virtual desktop over a network to the endpoint devices. The display signal of the desktop is the only data that goes to end users' personal devices.</p> <p>End users might need access to a corporate application that requires a SQL database connection on the corporate network. With DaaS, the virtual desktop already has the application installed. The network the DaaS desktop is on has access to the SQL database. The only thing the end user must do is log into the DaaS offering, start the virtual desktop and open the application. The end user then has fast access to the SQL database because it's on the same network as the virtual desktop.</p> <p>DaaS technology is centralized, allowing organizations to manage all aspects of deployment from a single administrative interface. If IT administrators need to apply an update to desktops or business applications, they can easily do so, and the update will be distributed immediately. Because DaaS gives IT the power to decide when a new version of the application is available to end users, with DaaS image management and virtualization software, the IT admin can run the update only once.</p> <p>Popular DaaS offerings include Amazon Workspaces, Citrix Managed Desktops, Microsoft Azure Virtual Desktop and VMware Horizon Cloud.</p> <p>In addition to DaaS, <a href="https://www.techtarget.com/searchvirtualdesktop/definition/virtual-desktop-infrastructure-VDI">VDI</a> is another option for organizations to deploy virtual desktops. Both give an end user remote access to a virtual desktop and corporate resources, but there are some important <a href="https://www.techtarget.com/searchvirtualdesktop/feature/Compare-desktop-virtualization-options-DaaS-vs-VDI">differences between DaaS and VDI</a>. With VDI, the organization creates, maintains and updates the virtual desktop environment. With DaaS, the DaaS provider handles these responsibilities for the back end and, in some cases, the front end of the deployment.</p> <h3>What is a VPN?</h3> <p>A <a href="https://www.techtarget.com/searchnetworking/definition/virtual-private-network">VPN</a> creates a tunnel, or agent, between two networks, allowing them to connect and transfer data. A business VPN enables end users to <a href="https://www.techtarget.com/searchnetworking/answer/How-do-site-to-site-VPN-configuration-and-remote-access-VPNs-vary">connect to corporate resources</a> such as applications and data. A business VPN works via a <a href="https://www.techtarget.com/searchenterprisedesktop/definition/client">client</a> on end-user personal devices. The client can connect a private network over a public network -- such as the internet -- between that device and the corporate network. Users upload and download data over this connection. The virtual network is created with a <a href="https://www.techtarget.com/searchsecurity/definition/Secure-Sockets-Layer-SSL">secure sockets layer</a> connection and is often end-to-end encrypted, enabling secure access between the networks.</p> <p>Let's return to the example of an end user who needs access to a corporate application that requires a SQL database connection on the corporate network. The user signs into the VPN agent on the personal device, setting up the virtual network tunnel between the device and the corporate network. Because there is then a network connection through the VPN tunnel to the SQL database on the corporate network, the end user can start the corporate application locally from the device and it can reach this data. This makes VPN technology a decentralized approach.</p> <p>With a VPN, every end-user device needs to have the corporate applications installed. The IT administrators must update every device when an application update is required as well. Because of this, VPN use is often combined with <a href="https://www.techtarget.com/searchenterprisedesktop/feature/Understand-how-UEM-EMM-and-MDM-differ-from-one-another">endpoint management tools</a> such as Microsoft Endpoint Manager. With endpoint management software, IT organizations can distribute applications and updates to all devices, often through the internet. With its configuration, IT can also push the VPN agent updates with an endpoint management tool.</p> <p>Security is a significant consideration with VPNs. Users upload and download data when using a VPN, so data can end up on the end-user device. In addition, a VPN gives end users direct access to a part of the corporate network. If the connection gets hacked, for example, when using a weak or old digital certificate, the hacker has access to the company network. <a href="https://www.techtarget.com/searchnetworking/definition/network-segmentation">Network segmentation</a> with VPNs is essential. Common examples of VPN software include Cisco Systems VPN Client, F5 Networks FirePass SSL VPN, NordLayer VPN and OpenVPN.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/key_differences_between_daas_and_vpn-f.png "> <img data-src="https://www.techtarget.com/rms/onlineimages/key_differences_between_daas_and_vpn-f_mobile.png " class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/key_differences_between_daas_and_vpn-f_mobile.png 960w,https://www.techtarget.com/rms/onlineimages/key_differences_between_daas_and_vpn-f.png 1280w" alt="A Venn diagram showing the similarities and differences between DaaS and VPN." height="308" width="560"> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <h3>How are DaaS and VPN different?</h3> <p>Both DaaS and VPN give <a href="https://www.techtarget.com/searchsecurity/Ultimate-guide-to-secure-remote-access">secure remote access to applications and data</a>, but the two options are rather different. The choice increasingly comes down to how much control, isolation and operational overhead an organization is willing to manage internally.</p> <p>VPNs are easy to set up on both the end-user and administrative sides. They enable IT to onboard end users quickly. A new user downloads the VPN client, signs in and accesses the corporate network. With DaaS, the IT organization must give each new user a desktop, profile, home drive folder and other specific items, which might require more setup work than a VPN.</p> <p>A VPN goes into the company network and, in doing so, provides access to applications and data. With corporate data and applications at stake, <a href="https://www.techtarget.com/searchnetworking/tip/How-to-implement-network-segmentation-for-better-security">security considerations include network segmentation</a>, endpoint management and decentralizing applications. VPNs also rely heavily on internet quality for both the speed and the stability of the application. If, for example, an end user loses connection while updating a database, the database can get out of sync, with destructive results. Of course, VPNs require stable internet access as well, but if there are any network issues, a desktop running a VPN can still access local applications, documents and other aspects that don't rely on a secure internet connection.</p> <blockquote class="main-article-pullquote"> <div class="main-article-pullquote-inner"> <figure> Security is a significant consideration with VPNs. Users upload and download data when using a VPN, so data can end up on the end-user device. </figure> <i class="icon" data-icon="z"></i> </div> </blockquote> <p>With DaaS, the virtual desktop is in the corporate network, so data and applications do not leave the network. Users only receive the display from the desktop, making DaaS more secure than a VPN connection. This also means it's less reliant on an internet connection. Protocols such as Citrix HDX, Microsoft RDP and VMware Horizon (formerly View) optimize bandwidth by sending the user only the part of the screen that is updated, and they can scale in quality.</p> <p>A disconnect while updating a database is not a problem with DaaS. The virtual desktop in the data center is talking to the database. Any <a href="https://www.techtarget.com/searchvirtualdesktop/tip/Top-5-remote-desktop-connectivity-problems-and-how-to-prevent-them">disruptions in connectivity</a> between the virtual desktop server and endpoint device will not affect the database update on the server side. When users sign back in after an interruption, they will be back at the same point where they left their sessions. This also lets users switch between personal devices. Users can start a session on a PC, then disconnect in the morning and pick the session back up in the afternoon on a laptop.</p> <h3>Deciding between DaaS and VPN</h3> <p>If an organization needs to make one application on the corporate network available for end users from the internet, for example, DaaS might be too complex, as it creates an entire virtual desktop for each user. But if security is an organization's main concern, then DaaS might be the best option, even for just one application.</p> <p>Organizations should also keep in mind that DaaS and VPN are both technologies for legacy applications and data. For example, if an organization migrates all its data to a cloud platform such as <a href="https://www.techtarget.com/searchcontentmanagement/definition/Microsoft-SharePoint-2016">SharePoint</a> in Microsoft 365, users can automatically access the data through the internet without DaaS or VPN. This is also the case with SaaS applications. Additionally, web applications on the corporate network can be made internet-facing with an authenticated application proxy.</p> <p>As application architectures increasingly shift toward software as a service (SaaS) and browser-based access, many organizations are likely to rely less on DaaS and VPN for their daily operations. However, both technologies will continue to be essential for legacy systems, specialized workloads, and environments with high security or control requirements.</p> <p><b>Editor's note:</b> <i>This article was updated in January 2026 to</i> <em>improve clarity, flow and the overall reader experience.</em></p> <p><i>Chris Twiest works as a technology officer at RawWorks in the Netherlands, focusing on the future Workspace and Cloud technologies for the end user.</i></p> DaaS and VPN both provide remote access to corporate resources, but they differ in important ways that IT leaders should evaluate when choosing between them. https://cdn.ttgtmedia.com/rms/onlineimages/folder-files05.jpg https://www.techtarget.com/searchvirtualdesktop/tip/What-are-the-key-differences-between-DaaS-and-VPN Wed, 21 Jan 2026 04:30:00 GMT <p>Desktop as a service (<a href="https://www.techtarget.com/searchvirtualdesktop/definition/desktop-as-a-service-DaaS">DaaS</a>) has become a popular option for organizations rethinking how employees access corporate desktops and applications. In addition to enabling remote work, DaaS is crucial for security, scalability and operational control. This is especially important as IT teams strive to reduce infrastructure costs while efficiently managing access to enterprise resources.</p> <p>One way to deploy virtual desktops is DaaS, where desktop OSes run inside VMs on servers in a third-party cloud provider's data center. Organizations can also implement <a href="https://www.techtarget.com/searchvirtualdesktop/definition/virtual-desktop-infrastructure-VDI">VDI</a> -- which entails building out their own virtualization infrastructure and running desktop OSes on on-premises servers -- or stick with traditional desktops.</p> <p>DaaS outsources the work of hosting virtual desktops to a third-party provider. It does not require a substantial initial investment like VDI does, so DaaS stands out for its easy and inexpensive setup. Still, IT administrators should weigh the full set of tradeoffs -- not just cost -- to determine whether desktop as a service is the right fit for their organizations.</p> <section class="section main-article-chapter" data-menu-title="Pros of DaaS"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Pros of DaaS</h2> <p>For many organizations, the appeal of DaaS lies in its ability to simplify desktop delivery while shifting infrastructure and operational responsibility to a cloud provider.</p> <h3>Lower upfront costs</h3> <p>One of the most significant advantages of DaaS is that <a href="https://www.techtarget.com/searchvirtualdesktop/answer/What-are-the-biggest-pros-and-cons-of-VDI">it offers lower upfront costs than VDI</a>&nbsp;or regular desktops. VDI requires a costly infrastructure investment to get started, whereas DaaS is typically priced per user. Organizations that want to test virtualization can turn to DaaS and skip the costs and labor of building a VDI when they might want to change their desktop virtualization approach years down the road. The subscription model also makes the costs involved in DaaS more predictable over the long term.</p> <p>DaaS can also reduce license costs by making it easy to provision and deprovision virtual desktops as needed. For startups looking to onboard employees quickly, DaaS can help scale up quickly and inexpensively. Likewise, <a href="https://www.techtarget.com/searchvirtualdesktop/feature/Comparing-DaaS-vs-SaaS-and-how-they-work">the scalability of desktop as a service</a>&nbsp;can have cost benefits for organizations that employ seasonal workers. Once the season is over and these employees leave, the virtual desktops they used can be easily deprovisioned, eliminating license costs for those desktops.</p> <h3>Flexibility</h3> <p>The scalability of DaaS is also beneficial on a logistical level for organizations and their IT teams. If an organization wants to scale up, IT can update the DaaS subscription rather than increasing VDI capacity by adding additional hardware. This is especially helpful for organizations that don't know what scale they want; DaaS can adjust to fluctuations in virtual desktop numbers without requiring any reworking.</p> <p>DaaS also offers flexibility in the <a href="https://www.techtarget.com/searchenterprisedesktop/opinion/DaaS-may-encourage-organizations-to-adopt-Macs-and-Chromebooks">variety of endpoints cloud providers can easily support</a>&nbsp;out of the box. No matter what type of device a user chooses to work on, the desktop environment is identical if it has the necessary display resolution and remote desktop client software. DaaS generally offers the same UX as VDI, but the ability to choose from <a href="https://www.techtarget.com/searchvirtualdesktop/opinion/PC-as-a-service-is-an-alternative-and-a-complement-to-DaaS">a wider range of endpoints</a> and locations to work from and maintain an acceptable desktop environment can result in a better experience for end users.</p> <h3>Broader accessibility</h3> <p>Desktop as a service is available from anywhere, on any device. Because the virtual desktops are hosted in the cloud, they are accessible anywhere, as long as power and internet connectivity are available. With VDI, on the other hand, users must connect to their organization's corporate network directly or via a <a href="https://www.techtarget.com/searchnetworking/answer/What-are-the-differences-between-VPN-and-VDI-services">VPN to access their virtual desktops</a>, which requires further security considerations.</p> <p>The rise of remote work has highlighted the value of DaaS for organizations that want to ensure business continuity amid circumstances such as the COVID-19 pandemic. DaaS's ability to support a variety of endpoints is especially helpful for facilitating remote work. Even if users have PCs at home, they can still access a virtual desktop with DaaS.</p> <p>Some DaaS providers offer browser accessibility. This is a secure and simple way for users to access DaaS. Rather than installing the virtual desktop, a user can log in to a browser-accessible virtual desktop from any supported browser. Some examples of this option include the Web Access feature in Amazon WorkSpaces, Azure Virtual Desktop web client and DesktopReady.</p> <h3>Easier setup and management</h3> <p>Setting up DaaS is easy for IT. The most critical step is <a href="https://www.techtarget.com/searchvirtualdesktop/tip/Compare-7-desktop-as-a-service-providers">choosing the best DaaS provider</a>&nbsp;to meet the organization's needs.</p> <p>DaaS is an easier option for IT after setup as well. <a href="https://www.techtarget.com/searchvirtualdesktop/opinion/Forecasting-VDI-trends-and-the-future-of-the-market">To successfully deploy and maintain VDI</a>, IT departments must have the skill set and sufficient employees to stay on top of updates, data traffic and troubleshooting. DaaS providers have the resources and expertise to reliably address many of these concerns, enabling IT teams to focus on issues specific to their organizations. This can also provide security benefits. IT has less control over security with desktop as a service, but a DaaS provider likely has more up-to-date tools and knowledge, which can help IT manage and prevent any issues.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/virt_desktop-vdi_vs_daas-f.png"> <img data-src="https://www.techtarget.com/rms/onlineimages/virt_desktop-vdi_vs_daas-f_mobile.png" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/virt_desktop-vdi_vs_daas-f_mobile.png 960w,https://www.techtarget.com/rms/onlineimages/virt_desktop-vdi_vs_daas-f.png 1280w" alt="A chart comparing the infrastructure, management and cost differences between VDI and DaaS." height="247" width="560"> <figcaption> <i class="icon pictures" data-icon="z"></i>This shows how VDI and DaaS compare when it comes to infrastructure, management and cost. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> </section> <section class="section main-article-chapter" data-menu-title="Cons of DaaS"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Cons of DaaS</h2> <p>Those same characteristics can introduce tradeoffs around cost, customization and control that become more visible as deployments scale.</p> <h3>Potentially higher long-term costs</h3> <p>While DaaS is less expensive than VDI in terms of initial investments, over time, the subscription costs that come with DaaS might accumulate to be higher than the <a href="https://www.techtarget.com/searchvirtualdesktop/tip/How-do-Citrix-and-VMwares-on-premises-VDI-costs-compare">upfront costs of VDI</a>.</p> <p>Additionally, depending on the licensing models a vendor offers, DaaS can have higher license costs to account for the effort required to host virtual desktops. Most DaaS providers bundle the OS license with the cost of the virtual desktop, but organizations must weigh their options and keep these factors in mind to <a href="https://www.techtarget.com/searchvirtualdesktop/tip/How-to-keep-DaaS-pricing-stable-and-consistent">ensure that desktop as a service is the best approach financially</a>. Pricing for DaaS is still more predictable and consistent than for VDI, but it's not necessarily less expensive in the long term.</p> <h3>Less customizability</h3> <p>Another con of DaaS is that the one-size-fits-all approach also might not be ideal for every organization. Security and compliance regulations vary by organization, so finding a DaaS package that fits perfectly can be difficult. Because organizations build it in-house, <a href="https://www.techtarget.com/searchvirtualdesktop/feature/VDI-applications-maintain-many-use-case-advantages-over-DaaS">VDI enables IT to make more customizations</a> -- such as disabling certain services for users -- to meet compliance standards and ensure VDI security. If an organization with strict compliance regulations wants to use DaaS to implement virtual desktops, choosing a provider that prioritizes these standards is vital.</p> <p>For example, Evolve IP Workspaces is a DaaS provider that is third-party-audited to meet compliance standards, such as HIPAA or <a href="https://www.techtarget.com/whatis/definition/General-Data-Protection-Regulation-GDPR">GDPR</a>. Providers that don't specifically take certain compliance standards into account should allow IT to check compliance measures or control the hypervisors' configurations and customize features.</p> <p>Some DaaS packages won't have everything an organization might want. Different vendors offer different levels of customizability, and some offer more advanced management capabilities than others.</p> <h3>Less control</h3> <p>Desktop as a service offers little control over updates and security in general, which can lead to problems that IT cannot directly address. Many of these issues stem from the hosting concerns that come with using a public cloud. For example, if the public cloud hosting the virtual desktops experiences an outage, an organization's productivity comes to a halt.</p> <p>Security is a significant factor in both the pros and cons of DaaS. Because having all resources in a single location -- such as a DaaS vendor's public cloud -- can help security, DaaS might seem like the most secure desktop virtualization option. Additionally, some organizations might prefer the security a vendor can guarantee rather than trusting IT staff to maintain a perfect security posture. However, some IT teams might be better prepared to handle their organization's unique security strategy than a third-party provider, and admins must <a href="https://searchcloudsecurity.techtarget.com/tip/Top-cloud-security-challenges-and-how-to-combat-them">consider cloud security concerns</a> with DaaS.</p> <p>Not having full control over connectivity can put organizations in situations where they are unable to do anything about it. If there's a connectivity issue, IT has less insight into the network and must wait for the provider to fix it. And while UX might be better and easier to ensure with DaaS, if there are UX issues, the IT team can't handle them directly.</p> <p>For IT leaders, the decision to adopt DaaS is less about whether the technology is effective and more about determining where responsibility and control should reside. While DaaS can alleviate operational burdens and enhance flexibility, it also transfers essential aspects of desktop management to a third party. It is crucial to understand these trade-offs and how they align with the organization's security, access, and long-term infrastructure strategies to make an informed decision.</p> <p><b>Editor’s note:</b> <i>This article was updated in January 2026 to <em>improve clarity, flow and the overall reader experience.</em></i></p> <p><i></i></p> </section> Desktop as a service stands out for its scalability, but IT admins should also keep factors such as customizability in mind when considering their desktop virtualization options. https://cdn.ttgtmedia.com/rms/onlineimages/competition_a299069360.jpg https://www.techtarget.com/searchvirtualdesktop/feature/What-are-the-pros-and-cons-of-DaaS Tue, 20 Jan 2026 13:30:00 GMT <p>Many organizations adopt VDI for streamlined management and greater flexibility. In some sectors, its true strength lies in enhanced security.</p> <p>Organizations in highly regulated industries such as healthcare or finance operate under multiple <a href="https://www.techtarget.com/searchsecurity/tip/IT-security-frameworks-and-standards-Choosing-the-right-one">compliance frameworks</a>. A healthcare organization, for example, might be subject to the overlapping requirements associated with HIPAA, GDPR and other regulatory statutes. These regulations ensure data protection, privacy and accountability through auditable controls.</p> <p>As stringent as these standards might be, however, it's ultimately up to the organization to choose technology that will enable it to meet all the requirements. In some cases, an organization might be able to simplify compliance by <a target="_blank" href="https://omdia.tech.informa.com/om138151/vdi-and-daas-trends-in-the-hybrid-digital-workplace" rel="noopener">adopting VDI</a> rather than relying on traditional endpoint computing.</p> <p>VDI enables users to work from virtual desktops, which are essentially VMs running desktop OSes. These VMs can be hosted on-premises or in the cloud. Users typically access these VMs from thin client devices. This has benefits for both mobility and security.</p> <section class="section main-article-chapter" data-menu-title="Why VDI aligns with regulatory compliance goals"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Why VDI aligns with regulatory compliance goals</h2> <p>In highly regulated industries, failing to comply with data protection standards can lead to significant financial penalties, reputational damage and operational disruptions. VDI offers executives a strategic tool to reduce these risks while supporting business continuity and digital transformation initiatives.</p> <p>In a VDI environment, users do all their work from VMs running desktop OSes. Like virtual servers, these virtual desktops are hosted centrally and fully controlled by the organization. IT teams can then manage desktop configurations consistently, reduce the attack surface and ensure that OSes and apps are configured to meet the organization's regulatory standards.</p> <blockquote class="main-article-pullquote"> <div class="main-article-pullquote-inner"> <figure> No regulatory framework requires the use of VDI, but in many cases, VDI adoption can make it a lot easier to meet regulatory requirements. </figure> <i class="icon" data-icon="z"></i> </div> </blockquote> <p>Another advantage of using virtual desktops is that it eliminates any possibility of users saving sensitive data directly to their own devices. Instead, all corporate data stays within the virtual desktop environment.</p> <p>Using VDI can also simplify audit readiness in regulated industries. Most VDI platforms include built-in <a href="https://www.techtarget.com/searchvirtualdesktop/feature/Monitor-VDI-with-these-top-tools">monitoring and logging tools</a>. This makes it easy for IT to track user activity, enforce policies and maintain evidence of compliance.</p> <p><a name="_Hlk217382148"></a>No regulatory framework requires the use of VDI, but in many cases, VDI adoption can make it a lot easier to meet regulatory requirements.</p> <h3>VDI capabilities that support compliance</h3> <p>Various VDI capabilities directly support compliance. Key capabilities include the following:</p> <ul type="disc" class="default-list"> <li><b>Centralized data management.</b> Data never leaves the virtual desktop environment, meaning users can't transfer it to local devices or removable media.</li> <li><b>Encryption.</b> Virtual desktops encrypt sensitive data while it's in transit and at rest.</li> <li><b>User session isolation.</b> Each user session runs in a dedicated and isolated VM. This means users can safely share a physical endpoint with one another without any chance of leaving behind sensitive data on the device.</li> <li><b>Audit logging.</b> Most VDI platforms support audit logging for user authentication, login and logoff events, resource access and administrative actions.</li> <li><b>Risk avoidance.</b> No data loss or data exposure can occur if a physical device is lost or stolen.</li> <li><b>Incident containment.</b> If a user's session becomes compromised, IT can easily terminate that session without impacting other users.</li> </ul> <h3>Using VDI to handle industry-specific compliance challenges</h3> <p>Some requirements, such as encryption, are almost universally applicable to all regulated industries. At the same time, each sector tends to also have its own unique challenges. In some cases, these challenges stem from specific regulatory standards. In other cases, the challenges relate to common working practices within the industry. VDI can be helpful <a target="_blank" href="https://www.smartcitiesdive.com/news/archive-acc-empowering-public-sector-it-overcoming-security-compliance-and-access-challenges/754773/" rel="noopener">across these environments</a>.</p> <div class="youtube-iframe-container"> <iframe id="ytplayer-0" src="https://www.youtube.com/embed/Ejr7F6iVYuE?autoplay=0&amp;modestbranding=1&amp;rel=0&amp;widget_referrer=null&amp;enablejsapi=1&amp;origin=https://www.techtarget.com" type="text/html" height="360" width="640" frameborder="0"></iframe> </div> <p>In healthcare, for example, clinicians often work from shared workstations. A single clinician might log in from several different locations over the course of their shift. VDI can help make a clinician's work easier -- without creating a HIPAA violation in the process. An organization might create persistent virtual desktops, meaning that each user account is mapped to a specific virtual desktop as opposed to a generic pool of virtual desktops. In other words, the clinician's desktop can follow them from machine to machine as they move throughout the facility. Better still, when a clinician signs out, nothing from the user's session remains on the shared PC. This prevents the accidental exposure of sensitive data.</p> <p>VDI can also be a good fit for organizations in the financial services sector. Because financial institutions are <a href="https://www.techtarget.com/searchsecurity/feature/Top-10-ransomware-targets-in-2021-and-beyond">high-value targets for attackers</a>, regulatory frameworks require them to implement controls preventing data exfiltration. VDI works extremely well for this. Since data never resides directly on a physical endpoint device, a user cannot copy data to removable media. Additionally, VDI meshes well with zero-trust models.</p> </section> <section class="section main-article-chapter" data-menu-title="Best practices for compliance-focused VDI deployments"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Best practices for compliance-focused VDI deployments</h2> <p>Before committing to a VDI adoption, an organization should make sure the investment fits into its overall strategy. Perform a thorough assessment to determine whether VDI can support scalable IT operations and broader business goals.</p> <p>It's also important to consider the total cost of ownership. Licensing and deployment costs for VDI can exceed those of traditional endpoint devices. Conversely, decision-makers should weigh the potential savings from reduced data breach risk and streamlined audit processes.</p> <figure class="main-article-image half-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/virt_desktop-8_vdi_deployment_factors-h.png"> <img data-src="https://www.techtarget.com/rms/onlineimages/virt_desktop-8_vdi_deployment_factors-h_half_column_mobile.png" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/virt_desktop-8_vdi_deployment_factors-h_half_column_mobile.png 960w,https://www.techtarget.com/rms/onlineimages/virt_desktop-8_vdi_deployment_factors-h.png 1280w" alt="List of eight VDI deployment factors." data-credit="Informa TechTarget" height="373" width="279"> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>Next, the organization should choose how to configure the virtual desktops based on both functionality and regulatory requirements. Admins must decide, for example, whether to use <a href="https://www.techtarget.com/searchvirtualdesktop/feature/Understanding-nonpersistent-vs-persistent-VDI">persistent or non-persistent virtual desktops</a>, or a mixture of the two. Likewise, the organization must make sure its VDI platform of choice has a setting for controlling logging retention, and that the platform supports an adequate retention period.</p> <p>Organizations in regulated industries typically need to meet data residency requirements as well. Be sure to host the virtual desktops in locations that satisfy those rules.</p> <p>After confirming that a VDI deployment will meet the organization's compliance requirements, consider performing a pilot deployment. This helps ensure that the virtual desktops perform sufficiently and can fully meet users' needs. A <a href="https://www.techtarget.com/searchvirtualdesktop/tip/Important-end-user-experience-monitoring-metrics-for-VDI">consistent, positive end-user experience</a> is key to functionality.</p> </section> <section class="section main-article-chapter" data-menu-title="Common pitfalls to avoid for VDI compliance"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Common pitfalls to avoid for VDI compliance</h2> <p>While VDI can simplify compliance efforts, there are some common issues IT should avoid.</p> <p>Some IT teams make the mistake of treating VDI adoption as a simple lift-and-shift migration. Use the migration process as an opportunity to ensure that everything is configured properly rather than just trying to create a clone of a physical desktop.</p> <p>Another pitfall is failing to <a href="https://www.techtarget.com/searchcio/tip/Prep-a-compliance-audit-checklist-that-auditors-want-to-see">document controls for auditors</a>. It's important to document all settings and security controls as the team works through the implementation process.</p> <p>Finally, don't overlook monitoring for administrators and other privileged users. Remember, the monitoring requirements don't go away simply because an organization has made the switch to virtual desktops.</p> <p>With careful implementation and monitoring, VDI helps organizations maintain security and operational efficiency. In highly regulated industries, IT leaders should consider it as part of their compliance strategy.</p> <p><i>Brien Posey is a former 22-time Microsoft MVP and a commercial astronaut candidate. In his more than 30 years in IT, he has served as a lead network engineer for the U.S. Department of Defense and a network administrator for some of the largest insurance companies in America. </i></p> </section> Regulatory compliance is a crucial but challenging objective for many organizations. VDI can support compliance goals by strengthening security and simplifying the audit process. https://cdn.ttgtmedia.com/rms/onlineimages/security_g1192070289.jpg https://www.techtarget.com/searchvirtualdesktop/feature/How-VDI-supports-compliance-in-regulated-industries Tue, 30 Dec 2025 14:00:00 GMT <p>When organizations take their desktops to the cloud with desktop as a service (DaaS), they must consider both functionality and cost.</p> <p>Although DaaS adoption can have some financial advantages, without proper planning, costs can spiral out of control. In fact, the cost of using <a href="https://www.techtarget.com/searchvirtualdesktop/feature/Compare-desktop-virtualization-options-DaaS-vs-VDI">virtual desktops in the cloud</a> can sometimes exceed the cost of physical desktops.</p> <p>For a positive ROI, IT must assess current and future desktop requirements, model costs under different licensing scenarios and select a DaaS provider that balances flexibility with predictable pricing.</p> <section class="section main-article-chapter" data-menu-title="1. Know the use cases for DaaS"> <h2 class="section-title"><i class="icon" data-icon="1"></i>1.&nbsp;&nbsp;&nbsp;&nbsp; Know the use cases for DaaS</h2> <p>Before an organization shops for virtual desktops, it's important to determine how many virtual desktops it needs and how it plans to use them. Most <a href="https://www.techtarget.com/searchvirtualdesktop/tip/Compare-7-desktop-as-a-service-providers">DaaS providers</a> offer a variety of virtual desktops, each with their own hardware configuration. A low-end virtual desktop might be budget-friendly, but it probably can't meet the needs of power users. Likewise, a user who spends their entire day using lightweight applications such as Microsoft Word or Outlook probably doesn't need a virtual desktop built on the most powerful hardware.</p> <p>Taking the time upfront to determine how employees will use their virtual desktops makes it easier to figure out what virtual desktop size can meet their needs -- without going overboard. Proper sizing, in turn, maximizes workforce productivity, controls costs and supports long-term scalability. Having this information also makes it easier to get a price quote from DaaS vendors.</p> </section> <section class="section main-article-chapter" data-menu-title="2. Plan for growth"> <h2 class="section-title"><i class="icon" data-icon="1"></i>2.&nbsp;&nbsp;&nbsp;&nbsp; Plan for growth</h2> <p>Although IT admins must initially choose the size of the virtual desktops their organization will use, they should also keep <a target="_blank" href="https://omdia.tech.informa.com/om138151/vdi-and-daas-trends-in-the-hybrid-digital-workplace" rel="noopener">future growth</a> in mind. A flexible DaaS strategy enables organizations to adjust resources in real time while minimizing capital expenditures.</p> <p>Applications tend to become more demanding over time, and users might eventually need additional computing power or memory. Some organizations address this concern by purchasing virtual desktops that are slightly larger than what the users currently need, with the idea that users will eventually "grow into them." While this approach works, it also means paying for hardware resources that the organization might not use right away.</p> <p>Another approach is to talk to the DaaS provider about flexibility. Many providers enable customers to upgrade to larger virtual desktops as their needs change.</p> <p>When planning for growth, make sure that the DaaS provider allows customers to purchase additional virtual desktops at any time, rather than requiring them to wait for the current subscription period to expire. Additionally, any newly purchased virtual desktops should be billed at the same rate as the virtual desktops that the organization is already using, rather than a new rate.</p> </section> <section class="section main-article-chapter" data-menu-title="3. Know how the virtual desktops are licensed"> <h2 class="section-title"><i class="icon" data-icon="1"></i>3.&nbsp;&nbsp;&nbsp;&nbsp; Know how the virtual desktops are licensed</h2> <p>Purchasing virtual desktops in the cloud might not always be as simple as specifying the desired quantity and size of virtual desktops. Some providers license virtual desktops on a per-user basis, requiring each user to have their own virtual desktop.</p> <p>Other providers don't license by user count but instead restrict access so that only one user can log on to a virtual desktop at a time. Organizations that operate multiple shifts can benefit from this model, as users working different shifts never access virtual desktops simultaneously. Then, the organization only needs to license as many virtual desktops as it plans to have in use during a given shift.</p> <p>Although it's less common, there are also providers that support multi-session desktops. This means that two or more clients can connect to a single virtual desktop at the same time. While this approach generally requires more powerful virtual desktop hardware, an organization might be able to license fewer virtual desktops.</p> </section> <section class="section main-article-chapter" data-menu-title="4. Know what's included in the licensing"> <h2 class="section-title"><i class="icon" data-icon="1"></i>4.&nbsp;&nbsp;&nbsp;&nbsp; Know what's included in the licensing</h2> <p>Every DaaS provider offers different licensing models and tiers for IT pros to consider, and it's important to know what the license includes. Understanding licensing models is critical for controlling costs, supporting compliance and avoiding audit penalties.</p> <p>DaaS uses a <a href="https://www.techtarget.com/searchcloudcomputing/definition/consumption-based-pricing-model">consumption-based pricing model</a>, with customers paying only for the resources that they use. Many DaaS providers bill their customers at a flat rate, based on the number and size of virtual desktops they purchase. However, there are DaaS providers that charge extra based on the internet bandwidth, storage and other resources users consume.</p> <p>In addition to the pricing model, admins must consider what services the provider includes. For example, some providers handle patch management as a part of the DaaS subscription, while others don't.</p> </section> <section class="section main-article-chapter" data-menu-title="5. Consider how software licensing affects total cost of ownership"> <h2 class="section-title"><i class="icon" data-icon="1"></i>5.&nbsp;&nbsp;&nbsp;&nbsp; Consider how software licensing affects total cost of ownership</h2> <p>Most DaaS providers focus on offering virtual desktops preloaded with a specific OS. It's ultimately up to clients to license additional software users might need to run on those virtual desktops.</p> <blockquote class="main-article-pullquote"> <div class="main-article-pullquote-inner"> <figure> Organizations can save money by canceling any subscriptions that DaaS renders unnecessary. </figure> <i class="icon" data-icon="z"></i> </div> </blockquote> <p>In some cases, an organization might already have some of the licenses it needs. For example, the Microsoft 365 E3 and E5 subscriptions include licenses for various Office apps, such as Word, Excel and PowerPoint. Some <a href="https://www.techtarget.com/searchenterprisedesktop/tip/Whats-included-in-Microsoft-365-subscription-plans">Microsoft 365 subscriptions</a> also include access to tools, such as Intune, which IT might be able to use to manage virtual desktops.</p> <p>Organizations should also consider whether the management software they currently use will still be helpful or necessary after transitioning to DaaS. While such tools might be capable of managing virtual desktops in the cloud, it's possible that a DaaS offering comes with its own management software, making third-party management tools redundant. Organizations can save money by canceling any subscriptions that DaaS renders unnecessary.</p> <p>SaaS bundles and vendor ecosystem pricing can also help reduce costs. Some virtual desktop platforms are available as <a href="https://www.techtarget.com/searchvirtualdesktop/feature/Comparing-DaaS-vs-SaaS-and-how-they-work">part of larger SaaS software</a> offerings. This can be cost-effective for organizations that already use or plan to adopt other services in the same ecosystem. However, if an organization doesn't need everything that's included in the bundle, it might be better off making an a la carte DaaS purchase.</p> </section> <section class="section main-article-chapter" data-menu-title="6. Lock in DaaS pricing for new users and annual renewals"> <h2 class="section-title"><i class="icon" data-icon="1"></i>6.&nbsp;&nbsp;&nbsp;&nbsp; Lock in DaaS pricing for new users and annual renewals</h2> <p>IT pros should be aware of any possible discounts that could apply to their organization. Discounts might align with their number of users, storage consumption or subscription term. For example, some providers offer a promotional rate to organizations that commit to a three-year subscription instead of the standard one-year term.</p> <p>Locking into a longer subscription can sometimes provide cost benefits beyond just upfront savings. DaaS providers tend to raise their rates over time, so opting for a longer subscription period might help shield an organization from rate hikes.</p> </section> <section class="section main-article-chapter" data-menu-title="7. Ask lots of questions when comparing DaaS vendors"> <h2 class="section-title"><i class="icon" data-icon="1"></i>7.&nbsp;&nbsp;&nbsp;&nbsp; Ask lots of questions when comparing DaaS vendors</h2> <p>Administrators should always ask plenty of questions as they research their DaaS options. In fact, it's a good idea to keep a list of questions on hand. By asking every vendor the same questions, decision-makers can get a comprehensive view of each offering's technical features and pricing model. This makes it easier to conduct an accurate and thorough comparison and get the best possible price.</p> <p><i>Brien Posey is a former 22-time Microsoft MVP and a commercial astronaut candidate. In his more than 30 years in IT, he has served as a lead network engineer for the U.S. Department of Defense and a network administrator for some of the largest insurance companies in America. </i></p> </section> An effective DaaS deployment delivers business agility without unnecessary costs. Evaluate users' virtual desktop needs from the outset to keep DaaS costs stable in the long term. https://cdn.ttgtmedia.com/rms/onlineimages/money_g1021600178.jpg https://www.techtarget.com/searchvirtualdesktop/tip/How-to-keep-DaaS-pricing-stable-and-consistent Fri, 19 Dec 2025 14:30:00 GMT <p>VMC on AWS creates new use cases for running Horizon virtual desktops in the cloud, such as data center expansion and bursting, as well as improvements to cloud-based deployments.</p> <p>VMware Horizon 7 now integrates with VMware Cloud (VMC) on AWS. You can run all your data center components in the cloud if you don't want to invest in on-premises hardware. That might be too big a leap for some organizations, but there are several other use cases you might want to consider.</p> <section class="section main-article-chapter" data-menu-title="New use cases"> <h2 class="section-title"><i class="icon" data-icon="1"></i>New use cases</h2> <p>Data center expansion and bursting enable you to maintain your own on-premises Horizon deployment and temporarily expand your capacity. You can connect both environments using Cloud Pod Architecture (CPA) for seamless management.</p> <p>Another reason you might consider moving virtual desktops to the cloud is application locality. If your virtual desktops are on premises and the applications users need are in the cloud, the distance between them creates latency. But if you put both the desktops and applications in the cloud, users will get better performance because the only traffic over the network will come from the virtual desktops.</p> <p>With a <a href="https://www.techtarget.com/searchdisasterrecovery/news/252454652/Disaster-recovery-to-cloud-popular-in-2018">cloud-based setup</a> for disaster recovery (DR), you only have to pay for a base infrastructure in the cloud as opposed to purchasing and maintaining hardware to create your own DR site. You can then easily and rapidly scale up when needed.</p> </section> <section class="section main-article-chapter" data-menu-title="Horizon with VMC on AWS"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Horizon with VMC on AWS</h2> <p>Certain features of Horizon -- such as App Volumes, which attaches AppStacks to VMs, and Instant Clones -- integrate with vCenter and vSphere. However, you don't get the same level of access to those servers in the cloud as you have on premises. Administrator-level access and root-level permissions to ESXi aren't available on vCenter, so VMware still <a href="https://www.techtarget.com/searchvmware/tip/Explore-VMC-on-AWS-pricing-features-and-use-cases-with-a-trial-run">needs to tweak</a> these features with that level of access.</p> <p>At VMworld 2018 in Barcelona, Spain, VMware announced that features such as App Volumes and Instant Clones will become available with the upcoming releases of Horizon 7.7 and App Volumes 2.15. VMware <a href="https://www.techtarget.com/searchvirtualdesktop/feature/Get-to-know-the-latest-VMware-Horizon-7-features">doesn't plan to support</a> several other features, such as Linked Clones and Security Servers, either because they are obsolete, because there are technical limitations or just because the features don't make sense in an AWS environment.</p> <blockquote class="main-article-pullquote"> <div class="main-article-pullquote-inner"> <figure> Data center expansion and bursting enable you to maintain your own on-premises Horizon deployment and temporarily expand your capacity. </figure> <i class="icon" data-icon="z"></i> </div> </blockquote> <p>VMware also announced improvements to cloud-based and on-premises deployment management with the VMware Horizon Cloud Service. For those admins interested in deploying a hybrid cloud, this is good news, as it will <a href="https://www.techtarget.com/searchcloudcomputing/feature/Cloud-management-platforms-offer-a-unified-approach-to-hybrid-IT">unify their management</a>.</p> </section> <section class="section main-article-chapter" data-menu-title="How to get started"> <h2 class="section-title"><i class="icon" data-icon="1"></i>How to get started</h2> <p>The last feature announced in Barcelona was an automated installation procedure for Horizon 7 with VMC on AWS. Until that arrives, you still have to install Horizon in the traditional way, which means setting up the same series of servers in the cloud as you would on premises. The required services include Active Directory (AD), a domain name service, Dynamic Host Configuration Protocol and Key Management Servers for Windows activation, and possibly Microsoft SQL Server for the event database.</p> <p>To start, install a few Windows servers in your software-defined data center (SDDC) and get those up and running.</p> <p>You can deploy a hybrid cloud with the use of CPA, which also enables you to connect two Horizon instances from separate data centers. In this case, you must set up a connection between your on-premises data center and VMC on AWS.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/HorizonCPAwithVMConAWS.png"> <img data-src="https://www.techtarget.com/rms/onlineimages/HorizonCPAwithVMConAWS_mobile.png" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/HorizonCPAwithVMConAWS_mobile.png 960w,https://www.techtarget.com/rms/onlineimages/HorizonCPAwithVMConAWS.png 1280w" alt="Horizon CPA" height="316" width="560"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure A. Horizon CPA with VMC on AWS </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>When integrating two data centers, you can set up the connection between the two Horizon environments. To connect to VMC on AWS, you must take a few additional steps.</p> <p>Part of setting up the link from the cloud environment to your on-premises data center is getting the virtual private network (VPN) to run with the correct firewall rules. This enables you to connect your two AD instances. It also permits users to connect to either of your Horizon environments to access their virtual desktops, which offers a seamless experience.</p> <p>This becomes especially important when setting up a DR environment; if done properly, users won't even realize they aren't working in their normal production environment.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/SDDC-6.1-1024x508.png"> <img data-src="https://www.techtarget.com/rms/onlineimages/SDDC-6.1-1024x508_mobile.png" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/SDDC-6.1-1024x508_mobile.png 960w,https://www.techtarget.com/rms/onlineimages/SDDC-6.1-1024x508.png 1280w" alt="SDDC connectivity options" height="279" width="559"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure B. VMC on AWS SDDC connectivity options </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>If you have NSX, you can easily <a href="http://www.virtualizationblog.com/learning-nsx-step-by-step-configuring-ssl-vpn-plus-on-vmware-nsx-edge-gateway/" target="_blank" rel="noopener">set up the Edge VPN</a> from there. If you don't have NSX, then you can run a separate appliance as a stand-alone client to set up the VPN.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/VMCSDDCVPN.png"> <img data-src="https://www.techtarget.com/rms/onlineimages/VMCSDDCVPN_mobile.png" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/VMCSDDCVPN_mobile.png 960w,https://www.techtarget.com/rms/onlineimages/VMCSDDCVPN.png 1280w" alt="VPN setup" height="304" width="560"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure C. VMC on AWS SDDC VPN setup </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>The other part of setting up the VPN must happen within the SDDC configuration, as shown in Figure C above.</p> </section> Take advantage of Horizon 7 with VMC on AWS for a better hybrid cloud user experience, new use cases, and several different options for installation, deployment and integration. https://cdn.ttgtmedia.com/visuals/searchSQLServer/microsoft_server_admin/sqlserver_article_001.jpg https://www.techtarget.com/searchvmware/tip/Integrating-VMC-on-AWS-with-Horizon-7-leads-to-new-use-cases Fri, 21 Nov 2025 14:33:00 GMT <p>In just a few years, MSIX app attach has evolved a lot.&nbsp;</p> <p>As Microsoft updates its app delivery ecosystem, app attach has become the strategic direction for app deployment in Azure Virtual Desktop (AVD). This shift enables organizations to simplify app management, reduce infrastructure complexity and extend virtualized app delivery into hybrid and cloud environments.</p> <p>With these changes, IT teams can have greater flexibility and control over application lifecycle management. Organizations should evaluate the latest updates to app attach as an opportunity to refresh their IT strategy and optimize licensing and infrastructure costs.</p> <section class="section main-article-chapter" data-menu-title="Recent changes to Microsoft app virtualization"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Recent changes to Microsoft app virtualization</h2> <p>In April 2023, Microsoft announced that <a href="https://www.techtarget.com/searchvirtualdesktop/definition/Microsoft-App-V-Microsoft-Application-Virtualization">App-V</a> as a product was no longer in development and would reach its end of life (EOL) in 2026. However, in November 2024, the company announced the following changes:</p> <ul type="disc" class="default-list"> <li>The previous EOL announcement for the App-V client was <a target="_blank" href="https://learn.microsoft.com/en-us/microsoft-desktop-optimization-pack/app-v/appv-support-policy" rel="noopener">revoked</a>.</li> <li>The deprecation of the App-V Sequencer was revoked.</li> <li>App-V Server will still reach its EOL on the same date.&nbsp;</li> <li>The app attach feature in AVD would now support delivering both MSIX packages and&nbsp;App-V packages.&nbsp;</li> <li>The original MSIX app attach feature would be deprecated on June 1, 2025.&nbsp;</li> <li>The new app attach would feature integrations from third-party vendors, enabling package delivery through additional third-party software that integrates with the Azure Console for AVD.</li> </ul> <p>As a result of these changes, the main delivery method for App-V packages will be through app attach, so organizations that still use App-V can continue to do so with app attach in AVD.&nbsp;</p> </section> <section class="section main-article-chapter" data-menu-title="What is app attach?"> <h2 class="section-title"><i class="icon" data-icon="1"></i>What is app attach?&nbsp;</h2> <p>App attach is a feature that delivers MSIX-, App-V- and AppX-based applications to <a name="_Hlk211871018"></a>AVD VMs.&nbsp;App-V is a virtualized application format, and AppX is mostly a wrapper for Universal Windows Platform apps.</p> <p>MSIX, in its simplest form, is a packaging format for Windows apps. It offers an updated and improved packaging experience and lifecycle management compared with the traditional Microsoft Installer (MSI) format. It also maintains the functionality of current app packages and installation files. In addition, MSIX introduces new features for packaging and deploying Win32, Windows Presentation Foundation and Windows Forms apps.&nbsp;</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/how_microsoft_app_v_works-f.png"> <img data-src="https://www.techtarget.com/rms/onlineimages/how_microsoft_app_v_works-f_mobile.png" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/how_microsoft_app_v_works-f_mobile.png 960w,https://www.techtarget.com/rms/onlineimages/how_microsoft_app_v_works-f.png 1280w" alt="A diagram explaining of how App-V interacts with OSes to deliver apps to end users." data-credit="Informa TechTarget" height="269" width="560"> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>IT can also configure MSIX-packaged applications to operate within a container called AppContainer. Within this container, both the main app process and its child processes operate, letting them run isolated through file system and registry virtualization similar to what App-V provided. This lets IT pros have multiple versions of the same app running on the same machine without causing any conflicts if they need to read or write to the same set of files or registry.</p> <p>Every AppContainer application can access the global registry. However, it only writes to its individual virtual registry and application data directory. This ensures that the data is removed upon app uninstallation or reset. The virtual registry and file system of an AppContainer app remain inaccessible to other applications on the same host.&nbsp;</p> </section> <section class="section main-article-chapter" data-menu-title="How app attach works in AVD"> <h2 class="section-title"><i class="icon" data-icon="1"></i>How app attach works in AVD</h2> <p>App attach uses a unique format for its package definitions, differing from the standard MSIX format. This ensures that apps become available to users quickly when they log into a Windows VDI session. Specifically, the package format is a Windows disk partition or volume that is remotely mounted rather than copied into the user's virtual machine and then integrated into the environment.&nbsp;</p> <p>App attach adds no new capabilities when it comes to delivering standard MSIX packages, other than the speed of getting the package ready for the user. Additionally, Microsoft designed the feature to <a href="https://www.techtarget.com/searchvirtualdesktop/tip/Azure-Virtual-Desktop-best-practices-for-management">work with AVD</a> to provide app streaming.</p> <div class="youtube-iframe-container"> <iframe id="ytplayer-0" src="https://www.youtube.com/embed/l9JkLhvaKA8?autoplay=0&amp;modestbranding=1&amp;rel=0&amp;widget_referrer=null&amp;enablejsapi=1&amp;origin=https://www.techtarget.com" type="text/html" height="360" width="640" frameborder="0"></iframe> </div> <p>IT can assign app attach packages across any host pool or session host and distribute them to multiple host pools. One of the benefits of app attach is that it now supports both common identity options: either Active Directory (AD)- or Entra ID-joined. This enables IT to handle app deployment without the need for any AD domain controllers.&nbsp;</p> <p>App attach works by storing app images on an SMB version 3 file share, which gets mounted on each session host at user sign-in. This setup is flexible in terms of storage, so IT isn't limited to a specific storage type. The recommendation from Microsoft is to use Azure Files since it's compatible with both Microsoft Entra ID and AD Domain Services (<a href="https://www.techtarget.com/searchwindowsserver/definition/Microsoft-Active-Directory-Domain-Services-AD-DS">AD DS</a>).&nbsp;</p> <p>An alternative option is Azure NetApp Files, but it requires session hosts to be joined to AD DS, since it doesn't support Entra ID.&nbsp;</p> <p>Each host in AVD mounts the application images from the file share. This means that each host needs to have <a href="https://www.techtarget.com/searchwindowsserver/definition/NTFS">NTFS</a> and share permissions to read objects from the file share.&nbsp;</p> <p>For instance, if an admin plans to use AVD app attach with Entra ID-joined devices, they only need to assign the "Reader and Data Access" role to both AVD and Azure Resource Manager Provider service principals.&nbsp;</p> <p>When planning to deploy this for a production environment, IT must take the following measures:&nbsp;</p> <ul type="disc" class="default-list"> <li>Make sure the file share is in the same Azure region as the session hosts.</li> <li>If using Azure Files, make sure the storage account is also in the same region as the session hosts.</li> <li>Exclude the disk images containing the apps from antivirus scans such as Defender, since they're read-only.</li> <li>Make sure the storage and network fabric can deliver sufficient performance.</li> <li>Avoid using the same file share for FSLogix profile containers.</li> </ul> <p>The integration process of an MSIX application on a VDI host involves three steps: mounting, staging, and registering. For single-user OSes, these steps are performed for each package individually. In a multi-user OS, the mounting and staging might be omitted for packages that are already added for another user. Once the app is registered, it operates within the same MSIX container as it would if deployed using the traditional MSIX format. This approach lets the app function as though it were natively installed.&nbsp;</p> <h3>App attach implementation requirements</h3> <p>MSIX offers support for other Windows OSes, including Windows Server and <a href="https://www.techtarget.com/whatis/feature/Windows-11-vs-Windows-10-What-are-the-differences">Windows 10 and 11</a> for both single-session and multi-session configurations. However, the app attach feature specifically requires Windows 10 or 11.</p> <table class="main-article-table"> <thead> <tr style="text-align: center;"> <td><b>Operating system</b></td> <td><b>MSIX support</b></td> <td><b>App attach support</b></td> </tr> </thead> <tbody> <tr> <td>Windows Server 2019</td> <td>Yes</td> <td>No</td> </tr> <tr> <td>Windows Server 2022</td> <td>Yes</td> <td>No</td> </tr> <tr> <td>Windows 10 and 11 Single Session</td> <td>Yes</td> <td>Yes</td> </tr> <tr> <td>Windows 10 and 11 Multisession</td> <td>Yes</td> <td>Yes</td> </tr> </tbody> </table> <p>For app attach, IT can use the new Composite Image File System (CimFS), VHDX or virtual hard disk (VHD) for disk images, though Microsoft does not recommend using VHD. Mounting and unmounting CimFS images is also significantly faster than VHD and VHDX. In addition, these processes consume less CPU and memory.&nbsp;Microsoft specifically recommends using CimFS for app images if the session hosts are running Windows 11. However, there is not much tooling available for the use of CimFS. It also circumvents the 256-character path limit that VHD/VHDX has, which commonly affects apps such as those bundled with a Python distribution.</p> <p>In all three of the formats, the MSIX files are stored uncompressed using app attach, unlike the original MSIX package, where they are compressed. Therefore, on average, applications take up 2.5 times the storage that the MSIX packages do on the file share that they are stored on.</p> <p>However, one of the strengths of app attach is that it does not require any additional infrastructure, just storage. Other app layering and virtualization services have some infrastructure requirements.&nbsp;</p> </section> <section class="section main-article-chapter" data-menu-title="The future of app attach"> <h2 class="section-title"><i class="icon" data-icon="1"></i>The future of app attach</h2> <p>App attach will most likely become the default service to deploy applications to AVD. The news of App-V support in app attach made it easier for organizations to postpone the job of converting their existing App-V applications, since not all apps can be directly converted to the new MSIX format.&nbsp;</p> <p>Even with higher levels of compatibility due to the changes made in the MSIX format with the release of Windows 11 version 24H2, some are still struggling with old apps.&nbsp;</p> <p>This is also why Microsoft has started to <a target="_blank" href="https://learn.microsoft.com/en-us/azure/virtual-desktop/app-attach-partner-solutions" rel="noopener">allow</a> third-party vendors to build integrations on top of app attach. It helps with app compatibility, but it also provides more control mechanisms to handle app distribution more dynamically. The following vendors are now able to integrate with app attach:&nbsp;</p> <ul type="disc" class="default-list"> <li>Liquidware FlexApp.</li> <li>Numecent Cloudpager.</li> <li>Omnissa App Volumes.</li> </ul> <p>One of the upsides of using a third-party vendor is support for non-Azure platforms and the ability to run on physical devices. They also provide higher compatibility rates compared with traditional MSIX-based apps. Another feature is support for application grouping. This enables, for instance, two given apps to interact in their own virtual environment, which is useful for apps that have some form of integration.&nbsp;</p> <p>MSIX-based apps also need to be signed with a code certificate, which can be from a trusted certificate authority or self-signed certificate, which must be trusted by the host pools. This process is much simpler with third parties that do not have the same requirement.&nbsp;</p> <h3>What do these changes mean for organizations?</h3> <p>Because app attach <a href="https://www.techtarget.com/searchwindowsserver/tip/What-are-the-Microsoft-Entra-ID-benefits-for-on-prem-admins">supports Entra ID</a> and doesn't require dedicated infrastructure, it provides a cost-efficient way to deliver applications for AVD.&nbsp;</p> <p>With Microsoft's strategy of only supporting App-V for AVD-based environments, it's clear that the company wants to push existing App-V customers to move their VDI workloads to Azure as well.&nbsp;While the features it provides might work for many organizations, others have requirements or a complex list of apps that require third-party tools.</p> <p>These developments show Microsoft's intent to make app attach the standard for application delivery in AVD, giving organizations a scalable foundation for workspace management.</p> <p><b>Editor's note:</b> <i>This article was originally published in 2024 and was updated in 2025 to improve the reader experience.</i></p> <p><i>Marius Sandbu is a cloud evangelist for Sopra Steria in Norway who mainly focuses on end-user computing and cloud-native technology.</i></p> </section> With app attach, IT can deploy and perform various management tasks for Windows applications. MSIX app attach has been deprecated, but the new feature brings new capabilities. https://cdn.ttgtmedia.com/rms/onlineimages/books_g1158413597.jpg https://www.techtarget.com/searchvirtualdesktop/tip/Compare-MSIX-App-Attach-to-other-app-layering-tools Mon, 03 Nov 2025 17:00:00 GMT <p>Desktop as a Service (DaaS) is a cloud computing offering in which a third party hosts the back end of a virtual desktop infrastructure (<a href="https://www.techtarget.com/searchvirtualdesktop/definition/virtual-desktop-infrastructure-VDI">VDI</a>) deployment.</p> <p>DaaS allows authorized end users who have a reliable internet connection to connect to a <a href="https://www.techtarget.com/searchvirtualdesktop/definition/virtual-desktop">virtual desktop</a> in the cloud from almost any type of computing device. Essentially, the user's PC, <a href="https://www.techtarget.com/searchnetworking/definition/thin-client">thin client</a>, tablet or smartphone becomes an access point that can connect remotely to a virtual desktop hosted by the <a href="https://www.techtarget.com/searchitchannel/definition/cloud-service-provider-cloud-provider">cloud service provider</a>. End users typically access their virtual desktop(s) through a web browser or dedicated client application provided by the DaaS vendor.</p> <p>DaaS offerings are designed to provide authorized users with the same responsive performance, personalized settings and seamless access to applications and files as in-house VDI deployments. With DaaS, however, the desktop operating systems (<a href="https://www.techtarget.com/whatis/definition/operating-system-OS">OSes</a>) and apps run inside virtual machines (<a href="https://www.techtarget.com/searchitoperations/definition/virtual-machine-VM">VMs</a>) that are hosted on <a href="https://www.techtarget.com/whatis/definition/server">servers</a> managed by the cloud service provider.</p> <section class="section main-article-chapter" data-menu-title="How does desktop as a service work?"> <h2 class="section-title"><i class="icon" data-icon="1"></i>How does desktop as a service work?</h2> <p>DaaS can be purchased through a subscription model that bundles infrastructure, OS licensing and (sometimes) <a href="https://www.techtarget.com/searchenterprisedesktop/definition/desktop-management">desktop management</a> services. In most cases, DaaS runs on a multi-tenant architecture in the cloud. Each tenant (customer) is logically isolated so their data, applications and policies remain secure and separate. In business settings, users might need to use credentials that are tied to an identity and access management (<a href="https://www.techtarget.com/searchsecurity/definition/identity-access-management-IAM-system">IAM</a>) system like <a target="_blank" href="https://www.microsoft.com/en-us/security/business/identity-access/microsoft-entra-id" rel="noopener">Microsoft Entra ID</a> (formerly Azure Active Directory) in order to access their virtual desktop(s).</p> <p>On the back end, the DaaS environment consists of several interconnected components. The management layer, which can also be called the <i>control plane</i> or <i>connection broker</i>, is responsible for provisioning or assigning desktops, monitoring their use and enforcing <a href="https://www.techtarget.com/searchsecurity/feature/How-to-create-a-data-security-policy-with-template">security policies</a>. Virtual machines provide the actual desktop environments, and <a href="https://www.techtarget.com/searchstorage/tip/Comparing-4-decentralized-data-storage-offerings">cloud storage systems</a> retain user files, profiles and settings.</p> <p>As with on-premises VDI, cloud desktop services use a <a href="https://www.techtarget.com/searchenterprisedesktop/definition/Remote-Desktop-Protocol-RDP">remote desktop protocol</a> like Microsoft RDP, <a target="_blank" href="https://www.citrix.com/glossary/what-is-hdx.html" rel="noopener">Citrix HDX</a> or <a target="_blank" href="https://blogs.vmware.com/euc/2016/09/story-of-vmware-blast.html" rel="noopener">VMware Blast</a> to stream virtual desktops to <a href="https://www.techtarget.com/whatis/definition/endpoint-device">endpoint devices</a>. This type of protocol continually sends the visual output of the user's desktop to the user's device while also capturing the user's keyboard strokes, mouse clicks and touchscreen gestures.</p> </section> <section class="section main-article-chapter" data-menu-title="VDI vs. DaaS"> <h2 class="section-title"><i class="icon" data-icon="1"></i>VDI vs. DaaS</h2> <p>VDI and DaaS are often confused because both involve delivering virtual desktops to end users, but they're deployed and managed in very different ways.</p> <p>VDI <a href="https://www.techtarget.com/searchvirtualdesktop/definition/desktop-virtualization">desktop virtualization</a> deployments run in an organization's own <a href="https://www.techtarget.com/searchdatacenter/definition/data-center">data center</a> or on <a href="https://www.techtarget.com/searchcloudcomputing/tip/Top-public-cloud-providers-A-brief-comparison">public cloud</a> infrastructure and are self-managed by the organization's own information technology (IT) staff.</p> <div class="youtube-iframe-container"> <iframe id="ytplayer-0" src="https://www.youtube.com/embed/Nz9r3HxI8qI?si=Tq5FtHlXjv-k3M0w?autoplay=0&amp;modestbranding=1&amp;rel=0&amp;widget_referrer=null&amp;enablejsapi=1&amp;origin=https://www.techtarget.com" type="text/html" height="360" width="640" frameborder="0"></iframe> </div> <p>In contrast, desktop as a service (<a href="https://www.techtarget.com/searchvirtualdesktop/definition/desktop-as-a-service-DaaS">DaaS</a>) is VDI technology that's delivered as a managed cloud service. Desktop as a service provides many of the same advantages that virtual desktop infrastructure does without requiring a significant upfront investment in compute, storage and network infrastructure.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/virt_desktop-vdi_vs_daas-f.png"> <img data-src="https://www.techtarget.com/rms/onlineimages/virt_desktop-vdi_vs_daas-f_mobile.png" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/virt_desktop-vdi_vs_daas-f_mobile.png 960w,https://www.techtarget.com/rms/onlineimages/virt_desktop-vdi_vs_daas-f.png 1280w" alt="This image compares VDI and DaaS infrastructure, management and cost." height="247" width="560"> <figcaption> <i class="icon pictures" data-icon="z"></i>VDI is self-managed and typically runs in an organization's own data center, while DaaS is a managed cloud service that provides virtual desktops through a subscription model. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>It should be noted that if an organization runs its own VDI deployment on public cloud infrastructure, it's still VDI, not DaaS. It only becomes DaaS if the cloud provider or a third-party managed service provider (<a href="https://www.techtarget.com/searchitchannel/definition/managed-service-provider">MSP</a>) is responsible for running the VDI infrastructure <a href="https://www.techtarget.com/searchitchannel/Guide-to-building-and-executing-an-MSP-business-model">as a managed service</a>.</p> </section> <section class="section main-article-chapter" data-menu-title="Use cases for desktop as a service"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Use cases for desktop as a service</h2> <p>Desktop as a service is widely used in scenarios where scalability and centralized management are important concerns. DaaS is particularly attractive for large enterprises, <a target="_blank" href="https://github.com/yanirs/established-remote" rel="noopener">remote-first companies</a> and organizations in industries that have high compliance and/or data security requirements. Popular use cases for DaaS include:</p> <ul class="default-list"> <li><b>Improving security. </b>When properly configured, DaaS can <a href="https://www.techtarget.com/searchsecurity/tip/Cybersecurity-risk-management-Best-practices-and-frameworks">help mitigate many of the security risks</a> associated with physical devices, including risks posed by lost or stolen laptops, malware infections or insecure <a href="https://www.techtarget.com/searchdatabackup/definition/removable-media">removable media</a>. Common DaaS security features include multifactor authentication (<a href="https://www.techtarget.com/searchsecurity/definition/multifactor-authentication-MFA">MFA</a>), encryption, conditional access policies and the ability to restrict data transfers to specific types of endpoints or storage media.</li> <li><b>Providing better business continuity.</b> Desktop as a service <a href="https://www.techtarget.com/searchdatabackup/tip/Use-backup-and-business-continuity-planning-to-protect-data">supports business continuity</a> by allowing users to log in from anywhere. If a local office or data center experiences a disaster, work can continue from another location that still has power and internet connectivity.</li> <li><b>Supporting shift work.</b> DaaS deployments allow multiple employees on different work shifts to securely share the same physical computing device. Essentially, the physical computing device becomes a wired or <a href="https://www.techtarget.com/searchmobilecomputing/definition/access-point">wireless access point</a> that allows the user to connect to a cloud-hosted virtual desktop.</li> <li><b>Supporting remote and hybrid work.</b> DaaS makes it easier and safer for remote and hybrid employees to use corporate desktops and apps on personal computing devices.</li> <li><b>Supporting contractors and seasonal workers.</b> DaaS allows organizations to quickly provision desktops for temporary workers without having to purchase new hardware or build out additional infrastructure.</li> <li><b>Facilitating compliance in regulated industries.</b> Healthcare, finance, government and legal organizations often use DaaS to manage sensitive data in the cloud. This deployment model helps organizations meet compliance regulations, such as the Health Insurance Portability and Accountability Act (<a href="https://www.techtarget.com/searchhealthit/definition/HIPAA">HIPAA</a>), the Payment Card Industry Data Security Standard (<a href="https://www.techtarget.com/searchsecurity/definition/PCI-DSS-Payment-Card-Industry-Data-Security-Standard">PCI-DSS</a>) and/or the General Data Protection Regulation (<a href="https://www.computerweekly.com/opinion/GDPRs-7th-anniversary-in-the-AI-age-privacy-legislation-is-still-relevant">GDPR</a>), while also reducing security risks on devices.</li> <li><b>Allowing Mac users to run Windows. </b>DaaS gives Mac users the ability to work in a Windows environment without needing to use dual boot, Boot Camp or local virtualization software.</li> <li><b>Reducing hardware costs.</b> Because DaaS runs in the cloud, end users can use older PCs or <a href="https://www.techtarget.com/searchvirtualdesktop/tip/Evaluating-tablets-as-thin-clients-in-the-enterprise">tablets as thin clients</a>. This can extend the hardware's lifecycle while also helping to keep an organization's capital expenditures (<a href="https://www.techtarget.com/whatis/definition/CAPEX-capital-expenditure">Capex</a>) line items as low as possible.</li> </ul> </section> <section class="section main-article-chapter" data-menu-title="Advantages and disadvantages of DaaS"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Advantages and disadvantages of DaaS</h2> <p>Like any technology, desktop as a service has both <a href="https://www.techtarget.com/searchvirtualdesktop/feature/What-are-the-pros-and-cons-of-DaaS">advantages and disadvantages</a>. For example, while DaaS reduces the need for organizations to buy and maintain additional hardware and infrastructure for each new remote employee, a positive user experience (UX) depends on whether the remote worker has a reliable internet connection and sufficient <a href="https://www.techtarget.com/searchnetworking/definition/bandwidth">bandwidth</a>.</p> <p>Here are some additional pros and cons of using desktop-as-a-service technology:</p> <h3>Advantages of DaaS</h3> <ul class="default-list"> <li>Cloud service providers make it easy to scale virtual desktop deployments up or down as needed.</li> <li>DaaS lets users work from a computing device of their choosing.</li> <li>DaaS subscriptions can help organizations shift desktop delivery from a Capex to an Opex expense.</li> <li>In some cases, DaaS can help reduce licensing costs per user by allowing an application to be installed once in the user's cloud desktop and accessed from any device the service-level agreement (SLA) permits.</li> <li>Administrators can quickly disconnect a compromised device from the service through the cloud management platform or the organization's IAM system.</li> <li>DaaS can help simplify <a href="https://www.techtarget.com/searchdisasterrecovery/feature/Disaster-recovery-glossary-Terms-to-know">disaster recovery</a> by consolidating user data in the cloud.</li> </ul> <h3>Disadvantages of DaaS</h3> <ul class="default-list"> <li>If the end user's internet connection is unreliable, they might experience lag, <a href="https://www.techtarget.com/searchunifiedcommunications/definition/jitter">jitter</a> or lose access to their desktop.</li> <li>Some application vendors impose restrictions on how their software can be used in virtualized environments.</li> <li>Microsoft licenses for virtualized environments can be complex, especially when third-party DaaS providers are involved.</li> <li>Persistent desktop services are generally more expensive than nonpersistent ones because they require more resources.</li> </ul> </section> <section class="section main-article-chapter" data-menu-title="Persistent vs. nonpersistent DaaS desktops"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Persistent vs. nonpersistent DaaS desktops</h2> <p>Many DaaS providers support both persistent and nonpersistent desktops so organizations can match the right desktop type to different user needs and workloads.</p> <p>A <i>persistent</i> desktop saves all changes the user makes during a session, and the next time the user logs in, they are sent the same VM with all their changes intact. Persistent desktops provide end users with a highly personalized experience, but they require additional <a href="https://www.techtarget.com/searchstorage/definition/cloud-storage">cloud storage</a>, which can add to the cost of a subscription.</p> <p>In contrast, a <i>nonpersistent</i> desktop gives the user a fresh instance of the base desktop image each time they log in. When the user logs out, the desktop is reset to its original state and any changes are discarded. Nonpersistent desktops are easier and cheaper to manage at scale because they <a href="https://www.techtarget.com/searchvirtualdesktop/tip/How-to-create-and-manage-Azure-Virtual-Desktop-golden-images">use a single golden image</a>. Once an update, software patch or configuration change has been made to the golden image, it will be applied to all future user sessions.</p> </section> <section class="section main-article-chapter" data-menu-title="DaaS providers"> <h2 class="section-title"><i class="icon" data-icon="1"></i>DaaS providers</h2> <p>Organizations need to do their homework before selecting a DaaS provider. Not all DaaS services offer the same pricing, performance, security or compliance features, so decision-makers need to ensure the vendor and subscription tier they choose meet both the users' and organization's needs.</p> <p>The comparison table below provides an overview of the different factors organizations should consider before they select a DaaS provider.</p> <table class="main-article-table"> <thead> <tr> <td> <p><span style="color: #ecf0f1;"><b>Vendor / Product</b></span></p> </td> <td> <p><span style="color: #ecf0f1;"><b>Hosting</b></span></p> </td> <td> <p><span style="color: #ecf0f1;"><b>Requirements </b></span></p> </td> <td> <p><span style="color: #ecf0f1;"><b>Licensing</b></span></p> </td> <td> <p><span style="color: #ecf0f1;"><b>Setup</b></span></p> </td> <td> <p><span style="color: #ecf0f1;"><b>Support</b></span></p> </td> </tr> </thead> <tbody> <tr> <td> <p><b>Amazon WorkSpaces</b></p> </td> <td> <p>AWS public cloud (multi-region)</p> </td> <td> <p>AWS account</p> </td> <td> <p>OS license bundled; BYOL for Microsoft apps possible; hourly or monthly subscription pricing</p> </td> <td> <p>Minimal setup, auto-provisioned via AWS console</p> </td> <td> <p>Standard AWS Support plans (Basic, Developer, Business, Enterprise) -- charged separately</p> </td> </tr> <tr> <td> <p><b>Azure Virtual Desktop (AVD)</b></p> </td> <td> <p>Microsoft Azure cloud</p> </td> <td> <p>Azure subscription; Microsoft 365 or Windows license; Azure AD integration</p> </td> <td> <p>Eligible Microsoft 365/Windows licenses cover internal users; external users require additional access pricing; Azure resources billed separately</p> </td> <td> <p>Moderate setup -- requires Azure infra and identity integration</p> </td> <td> <p>Microsoft Unified Support or pay-as-you-go Azure support tiers</p> </td> </tr> <tr> <td> <p><b>Omnissa Horizon Cloud</b> <i>(formerly VMware Horizon Cloud)</i></p> </td> <td> <p>Omnissa cloud + hybrid deployment options</p> </td> <td> <p>Horizon subscription; enterprise IT team for deployment</p> </td> <td> <p>Subscription-based; costs vary by package (Standard, Advanced, Enterprise); Microsoft licensing rules apply</p> </td> <td> <p>Higher setup effort; best for enterprises that need hybrid cloud services</p> </td> <td> <p>Omnissa enterprise support (successor to VMware Global Support Services)</p> </td> </tr> <tr> <td> <p><b>Dizzion Frame</b> <i>(formerly Nutanix Frame)</i></p> </td> <td> <p>Dizzion cloud or customer cloud (AWS, Azure, GCP)</p> </td> <td> <p>Dizzion subscription</p> </td> <td> <p>Licensing bundled with subscription; flexible hybrid deployment supported</p> </td> <td> <p>Low to moderate setup -- browser-based management simplifies provisioning</p> </td> <td> <p>Direct support from Dizzion (24/7 options available), often bundled into subscription</p> </td> </tr> <tr> <td> <p><b>Citrix DaaS</b> <i>(formerly Citrix Virtual Apps and Desktops Service)</i></p> </td> <td> <p>Citrix Cloud service on Azure, AWS, GCP, or hybrid</p> </td> <td> <p>Citrix Cloud subscription; enterprise identity system</p> </td> <td> <p>Subscription-based; integrates with Microsoft licensing for Windows; supports SaaS, VDI, and hybrid deployments</p> </td> <td> <p>Moderate to high setup depending on architecture; strong use in regulated industries</p> </td> <td> <p>Citrix Standard and Premium Support packages; enterprise SLAs available</p> </td> </tr> </tbody> </table> <p><i>Learn </i><i>more about Omnissa, the company that took over VMware's end-user computing division, and <a href="https://www.techtarget.com/searchvirtualdesktop/opinion/Who-owns-Omnissa-and-whats-next-for-this-vendor">find out what's expected next</a> for this vendor's subscription licensing model and product offerings.</i></p> </section> Desktop as a service (DaaS) is a cloud computing offering in which a third party hosts the back end of a virtual desktop infrastructure (VDI) deployment. https://cdn.ttgtmedia.com/visuals/digdeeper/5.jpg https://www.techtarget.com/searchvirtualdesktop/definition/desktop-as-a-service-DaaS Wed, 15 Oct 2025 00:00:00 GMT <p>To find the right VDI software for their organization, IT administrators must understand how tools from vendors such as Citrix and Omnissa differ.</p> <p>Omnissa Horizon (formerly VMware Horizon) and Citrix Virtual Apps and Desktops (CVAD) are two major platforms that offer virtual desktop infrastructure. <a href="https://www.techtarget.com/searchvirtualdesktop/opinion/VMware-EUC-is-now-Omnissa-What-we-know-so-far">Omnissa is a new company</a> formed after Broadcom's acquisition of VMware. Broadcom sold VMware's end-user computing division to an investment company for it to continue under the name <i>Omnissa</i>.</p> <p>VMware and Citrix have been prominent VDI providers for years. As the VDI landscape evolves and VMware Horizon takes on a new name, IT needs to know what each platform has to offer today and how their differences can affect management.&nbsp;</p> <section class="section main-article-chapter" data-menu-title="VDI deployment options for Citrix and Omnissa"> <h2 class="section-title"><i class="icon" data-icon="1"></i>VDI deployment options for Citrix and Omnissa</h2> <p>One of the most important considerations for choosing a VDI provider is knowing which deployment options are available. Before diving into feature details, admins must weigh on-premises capabilities and cloud integration in the context of their infrastructure needs.</p> <p>Citrix's and Omnissa's platforms are both feature-rich and able to support on-premises, cloud and hybrid deployments. Still, differences in their approaches can help determine which platform is the best fit for an organization.</p> <h3>On-premises and cloud support from Citrix</h3> <p>In addition to Citrix's XenServer hypervisor, CVAD supports many different hypervisors, such as Nutanix AHV and <a href="https://www.techtarget.com/searchvmware/definition/VMware-ESXi">VMware ESXi</a>. Citrix also supports a wide range of cloud platforms, including Microsoft Azure, AWS, IBM Cloud, Oracle Cloud and Google Cloud. This provides customers with a flexible choice for both on-premises deployments and cloud deployments.</p> <p>Additionally, Citrix offers desktop as a service (<a href="https://www.techtarget.com/searchvirtualdesktop/definition/desktop-as-a-service-DaaS">DaaS</a>) that can integrate with on-premises environments. With Citrix DaaS, organizations can choose between a deployment that runs entirely in the cloud and a hybrid deployment with management components in the cloud and virtual desktops in a customer's data center. The hybrid approach eliminates the need to maintain the management and control plane on premises. This enables IT to instead focus on managing virtual desktop resources.</p> <h3>On-premises and cloud support from Omnissa</h3> <p>Omnissa Horizon is still tightly integrated with the VMware vSphere hypervisor, ESXi. Until recently, the platform didn't support any other hypervisors. Currently, Omnissa has an agreement with Broadcom that allows it to keep shipping ESXi and vSAN with its products. However, Omnissa Horizon can run virtual machines on Hyper-V and recently <a target="_blank" href="https://www.omnissa.com/insights/blog/omnissa-horizon-8-support-for-nutanix-ahv/" rel="noopener">added</a> limited support for Nutanix AHV.</p> <p>As for cloud support, Omnissa offers Horizon Cloud Service Next-Gen. This DaaS deployment enables organizations to run virtual desktops through approved <a target="_blank" href="https://techzone.omnissa.com/resource/horizon-cloud-service-next-gen-architecture#introduction" rel="noopener">infrastructure</a> providers, including Amazon WorkSpaces Core and Microsoft Azure IaaS.</p> <p>Organizations seeking to use cloud technology might find that Citrix DaaS or CVAD is their best option. Citrix has a long history in this market and offers broad support for major cloud providers. Hypervisor compatibility also isn't really a concern with Citrix products.</p> <p>Omnissa, on the other hand, has yet to prove itself as a cloud-first vendor. For on-premises deployments, Omnissa Horizon might be more suitable because of its tight integration with VMware vSphere components such as ESXi and vSAN. The ESXi hypervisor continues to have a strong reputation in the industry for its stability and performance. In the next few years, the question will be whether Omnissa can provide the same features, stability and performance on other hypervisors.</p> </section> <section class="section main-article-chapter" data-menu-title="Comparing the technical features of Citrix and Omnissa"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Comparing the technical features of Citrix and Omnissa</h2> <p>From a technical perspective, Citrix's and Omnissa's desktop virtualization products are similar. While the components of each platform have their own characteristics, both vendors show comparable performance across the full list.</p> <p>The following table outlines the vendors' different features.</p> <table class="main-article-table"> <thead> <tr style="height: 18px;"> <td style="width: 150.25pt;"></td> <td style="width: 150.25pt;">Citrix</td> <td style="width: 150.3pt;">Omnissa</td> </tr> </thead> <tbody> <tr style="height: 55px;"> <td style="width: 150.25pt;"> <p><b>On-premises VDI offering</b></p> </td> <td style="width: 150.25pt;"> <p>Citrix Virtual Apps and Desktops</p> </td> <td style="width: 150.3pt;"> <p>Omnissa Horizon</p> </td> </tr> <tr style="height: 55px;"> <td style="width: 150.25pt;"> <p><b>DaaS offering</b></p> </td> <td style="width: 150.25pt;"> <p>Citrix DaaS</p> </td> <td style="width: 150.3pt;"> <p>Omnissa Horizon Cloud Service Next-Gen</p> </td> </tr> <tr style="height: 55px;"> <td style="width: 150.25pt;"> <p><b>Remote display protocol</b></p> </td> <td style="width: 150.25pt;"> <p>HDX</p> </td> <td style="width: 150.3pt;"> <p>Blast Extreme</p> </td> </tr> <tr style="height: 55px;"> <td style="width: 150.25pt;"> <p><b>Client support </b></p> </td> <td style="width: 150.25pt;"> <p>- Citrix Workspace app for Windows, Linux, macOS, iOS, Android or ChromeOS</p> <p>- HTML5 browser</p> <p>- All leading thin clients</p> </td> <td style="width: 150.3pt;"> <p>- Omnissa Horizon client for Windows, Linux, macOS, iOS, Android or ChromeOS</p> <p>- HTML5 browser</p> <p>- All leading thin clients</p> </td> </tr> <tr style="height: 55px;"> <td style="width: 150.25pt;"> <p><b>Virtual desktop OSes</b></p> </td> <td style="width: 150.25pt;"> <p>Windows, Linux</p> </td> <td style="width: 150.3pt;"> <p>Windows, Linux</p> </td> </tr> <tr style="height: 55px;"> <td style="width: 150.25pt;"> <p><b>Authentication </b></p> </td> <td style="width: 150.25pt;"> <p>- Active Directory required</p> <p>- Smart card and MFA through Citrix Workspace app</p> <p>- Login through Storefront Portal</p> </td> <td style="width: 150.3pt;"> <p>- Active Directory required</p> <p>- Smart card and MFA through Horizon client</p> <p>- Login through Workspace One Access Portal</p> </td> </tr> <tr style="height: 55px;"> <td style="width: 150.25pt;"> <p><b>Remote Desktop Services support</b></p> </td> <td style="width: 150.25pt;"> <p>Available through Citrix Virtual Delivery Agent</p> </td> <td style="width: 150.3pt;"> <p>Available through Omnissa Horizon Agent</p> </td> </tr> <tr style="height: 55px;"> <td style="width: 150.25pt;"> <p><b>Remote access</b></p> </td> <td style="width: 150.25pt;"> <p>Citrix Gateway</p> <p>Remote PC Access for physical resources</p> </td> <td style="width: 150.3pt;"> <p>Unified Access Gateway</p> </td> </tr> <tr style="height: 55px;"> <td style="width: 150.25pt;"> <p><b>Supported cloud environments</b></p> </td> <td style="width: 150.25pt;"> <p>Microsoft Azure, Windows 365 Cloud PC, AWS, IBM Cloud, Oracle Cloud, Google Cloud</p> </td> <td style="width: 150.3pt;"> <p>Microsoft Azure, Windows 365 Cloud PC, Amazon WorkSpaces Core, Google Cloud</p> </td> </tr> <tr style="height: 55px;"> <td style="width: 150.25pt;"> <p><b>App layering</b></p> </td> <td style="width: 150.25pt;"> <p>Citrix App Layering</p> </td> <td style="width: 150.3pt;"> <p>App Volumes</p> </td> </tr> <tr style="height: 55px;"> <td style="width: 150.25pt;"> <p><b>Profile and policy management</b></p> </td> <td style="width: 150.25pt;"> <p>Citrix Profile Management</p> </td> <td style="width: 150.3pt;"> <p>Dynamic Environment Manager</p> </td> </tr> </tbody> </table> <p>Both vendors use an adaptive remote display protocol -- HDX for Citrix, and Blast Extreme for Omnissa -- to adjust for high-latency, low-bandwidth connections. Citrix's adaptive display feature and Omnissa's codec switching feature both automatically apply the right codec for video, image or text encoding. For security, Citrix and Omnissa offer similar authentication and remote access options.</p> <p>Depending on the hypervisor or cloud provider, both Citrix and Omnissa support vGPU acceleration for graphics processing. They also support conferencing software optimization, multimedia processing and peripheral connections such as printers and USB devices.</p> <p>Because both vendors offer a comprehensive feature set, the key thing for organizations to evaluate is whether either product meets all of their requirements. There are so many different use cases for virtual desktops that no one platform can fit them all.</p> <h3>Supported clients and access methods</h3> <p>Citrix and Omnissa both support Windows, Linux, macOS, iOS, Android and ChromeOS devices. Major <a href="https://www.techtarget.com/searchvirtualdesktop/feature/How-to-pick-the-best-thin-client-OS-for-an-organization">vendors in the thin client market</a>, such as iGel, Dell and HP, also support both platforms. Additionally, both platforms enable users to access virtual resources from a web browser.</p> <p><a href="https://www.techtarget.com/searchvirtualdesktop/definition/Remote-Desktop-Session-Host-RDSH">Microsoft Remote Desktop Session Host</a> access and app publishing are available with Citrix and Omnissa. This provides seamless access to Windows-based applications from any device.</p> <h3>Management and monitoring</h3> <p>CVAD and Citrix DaaS have separate management consoles. Likewise, Omnissa Horizon Cloud Service Next-Gen also has a separate management console from on-premises Horizon environments.</p> <p>In terms of management capabilities, Citrix has more advanced monitoring and analytics features through <a href="https://www.techtarget.com/searchvirtualdesktop/feature/Monitor-VDI-with-these-top-tools">tools like Director</a> and Analytics. Omnissa Horizon does integrate with VMware Aria Operations, but IT decision-makers have to wait to see how integration with VMware products might evolve in the future. For serious monitoring and troubleshooting, most Omnissa Horizon customers use additional third-party software.</p> <p>Organizations wanting to implement virtual desktops should first decide between on-premises VDI or cloud-based DaaS. Citrix and Omnissa have very different support for cloud environments or hypervisors. When planning an on-premises deployment, the hypervisor that the organization already uses can also guide the choice between CVAD and Omnissa Horizon.</p> <p><b>Editor's note:</b><i> This article was originally written by Chris Twiest in October 2022. Rob Bastiansen wrote an updated version in September 2025 to reflect changes in the VDI market and improve the reader experience.</i></p> <p><i>Rob Bastiaansen is an independent trainer and consultant based in the Netherlands specializing in VMware and Linux. He writes articles for several print and online publications, and is founder of VMwarebits.com, a site dedicated to technical content related to VMware.</i></p> <p><i>Chris Twiest works as a technology officer at RawWorks in the Netherlands, focusing on the future Workspace and Cloud technologies for the end user.</i></p> </section> Citrix Virtual Apps and Desktops and Omnissa Horizon -- formerly VMware Horizon -- can simplify VDI management for IT. Discover the key differences between the vendors' offerings. https://cdn.ttgtmedia.com/rms/onlineimages/competition_a110169470.jpg https://www.techtarget.com/searchvirtualdesktop/tip/Comparing-the-features-of-Citrix-and-VMwares-VDI-software Wed, 24 Sep 2025 00:00:00 GMT <p>I was eager to attend Omnissa One 2025 this week to see how the company would lay out its vision at an in-person event more than a year after its launch party­ -- an event that I thought missed the mark. This year, it did not disappoint.</p> <p>At last year's event, I felt like Omnissa could've done a better job of focusing on the practical questions that customers had regarding the transition from VMware to Broadcom to Omnissa, as well as the current state -- and direction of -- its products. Instead, it focused on broad-strokes AI that left a lot of questions on the table.</p> <p>This week, that all changed, and Omnissa not only answered the questions many people had -- it took a few moments to throw some barbs at "monopolistic pricing schemes," "licensing," and "bloated tools." It's language I hadn't heard the company use before, which indicates that things are a bit different now.</p> <p>Here's a look at a few of my key takeaways. You can check the <a target="_blank" href="https://www.omnissa.com/insights/" rel="noopener">Omnissa blogs</a> for all the announcements.</p> <section class="section main-article-chapter" data-menu-title="Workspace One is now decoupled from MDM"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Workspace One is now decoupled from MDM</h2> <p>One of my big questions heading into this was, "How can Omnissa continue to be successful with Workspace One amidst Intune adoption?" This has long been a challenge for any company that isn't Microsoft, but being part of VMware opened up some opportunity for a quid pro quo to carve out room for competition. Without the VMware parts, the dynamic surely changed.</p> <p>The answer is, in American football parlance, an end-around. The challenges came from conflicts in using the MDM APIs in Windows, so the solution was to decouple Workspace One from MDM. This is shocking if you go back to the AirWatch days, but it makes sense. Plus, it frees Omnissa up to implement its roadmap without having to navigate some rather large roadblocks. This also means anyone can run it on any device, even on devices with <a href="https://www.techtarget.com/searchwindowsserver/tip/SCCM-vs-Intune-A-closer-look-at-the-capabilities-of-each">Intune or Config Manager</a> -- a significant change from the Workspace One of the VMware era.</p> <p>Finally, this next-gen approach to endpoint management actually enables Workspace One to work with Horizon, including building VMs and host pools using Workspace One with Freestyle. (The trick to make MDM work with virtual desktops? Don't use MDM!)</p> </section> <section class="section main-article-chapter" data-menu-title="Workspace One will manage servers, too"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Workspace One will manage servers, too</h2> <p>Though I primarily cover endpoint devices and stay out of the data center, there are some indications that organizations are starting to think about the servers that they manage as though they were endpoints, at least in terms of management and security. It appears Omnissa is picking up on this, too, and at the event, the company announced that server management with Workspace One is in limited availability.</p> </section> <section class="section main-article-chapter" data-menu-title="Autonomous endpoint management"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Autonomous endpoint management</h2> <p>It's still early days for autonomous endpoint management (AEM). There is a lot to be written on the topic, but it aligns perfectly with one of the main initiatives at the intersection of endpoint management and security: consolidation.</p> <p>Consolidation was a core theme throughout the keynote, and a big part of the consolidation story for Omnissa is its Autonomous Workspace vision. With it, the company is entering the autonomous endpoint management fray alongside the likes of Adaptiva, NinjaOne, <a href="https://www.techtarget.com/searchenterprisedesktop/opinion/Tanium-aims-to-be-first-with-autonomous-endpoint-management">Tanium</a> and more. While the actual AEM term was conspicuously absent, I got clarification later that Omnissa views it as a component of Autonomous Workspace, which includes other things like apps, virtual desktops and even servers.</p> <p>Like everyone building AEM technology, this is a mix of vision and reality. The most tangible autonomous capability shown was Workspace One Vulnerability Defense, which ingests vulnerability data, prioritizes it based on risk level, and deploys automations with a degree of autonomy.</p> <p>(This seems like the logical first entry point, and NinjaOne is doing the same thing with its recently announced Autonomous Patch Management.)</p> <p>There's a lot more to unpack here, but AEM is an area I've recently conducted research into, and 96% of organizations expressed some level of interest, deployment, or piloting of AEM. This high level of interest is tied to many factors, which boil down to four key themes:</p> <ul type="disc" class="default-list"> <li>Efficiency and automation.</li> <li>Security and risk mitigation.</li> <li>Intelligence and decision-making.</li> <li>Compliance and visibility.</li> </ul> <p>Still, if I had to sum up the interest in AEM with one word, it would be "consolidation." There are too many tools. Too many alerts. Too many signals. Too much data. Too many processes. AEM represents a way to get a grip on all of that, increasing visibility, decreasing mean time to repair, and improving the processes and workflows that comprise endpoint management and security.</p> <p>Stay tuned to this space!</p> </section> <section class="section main-article-chapter" data-menu-title="App Volumes is a core pillar of Omnissa"> <h2 class="section-title"><i class="icon" data-icon="1"></i>App Volumes is a core pillar of Omnissa</h2> <p>I've been a big fan of app management in general, and App Volumes specifically, for many years. Historically, App Volumes was treated as an offshoot of Horizon, which makes sense given it was only used in virtual desktops. Version 4 represented a large upgrade that eliminated many of the problems that plagued it in earlier versions, and since then, Omnissa has continued to build out the product.</p> <p>Today's App Volumes includes new features like Apps on Demand and a broader set of tools to help with the entire application lifecycle. With the <a target="_blank" href="https://www.omnissa.com/insights/blog/omnissa-new-offering-apps-essentials/" rel="noopener">release</a> of Apps Essentials, it's decoupled from Horizon, so anyone -- even Citrix customers -- can get the benefits without having to buy/deploy the full Horizon stack.</p> <p>At Omnissa One, the team finally announced that App Volumes would work for physical devices in the coming months, and, given its ability to package, deploy and update apps, you can see where this will factor into the broader Autonomous Workspace vision.</p> </section> <section class="section main-article-chapter" data-menu-title="Conclusion"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Conclusion</h2> <p>There is a lot more to unpack, like what Omnissa has done with digital employee experience, the capabilities in Freestyle, how Omnissa views AI -- and is using it in intentional ways, not just <a href="https://www.techtarget.com/whatis/feature/AI-washing-explained-Everything-you-need-to-know">AI washing</a> things -- and the entirely new ModStack architecture upon which everything is going to be built.</p> <p>The key takeaway for me, though, is that Omnissa has a clear, sharp direction now -- something I wasn't able to say a year ago. It seems to have the right pieces to address the top concerns that I observe at the intersection of endpoint management and security. Omnissa is not alone, so its ability to execute on the plan and deliver products that work and show immediate value will be critical, but it sure is an interesting time in this space.</p> <p><i>Gabe Knuth is the principal analyst covering end-user computing for Enterprise Strategy Group, now part of Omdia. </i></p> <p><i>Enterprise Strategy Group is part of Omdia. Its analysts have business relationships with technology vendors.</i></p> </section> Omnissa One 2025 highlighted developments like App Volumes for physical devices and server management in Workspace One. This is a big shift from previous vague announcements. https://cdn.ttgtmedia.com/rms/onlineimages/strategy_g1192721749.jpg https://www.techtarget.com/searchenterprisedesktop/opinion/Omnissa-found-its-voice-in-the-post-VMware-era Thu, 18 Sep 2025 10:00:00 GMT <p>The device as a service (DaaS) model offers PCs, smartphones and other mobile computing devices as a paid service. Device as a service eases the IT needs of a company by outsourcing the hardware, software and device management to an external provider. Subscribing to a provider lets an organization update its equipment at the end of the lease period without incurring the costs normally associated with a device refresh.</p> <p>DaaS is considered part of the <a href="https://www.techtarget.com/searchcloudcomputing/definition/XaaS-anything-as-a-service">anything as a service</a>. The trend for using these services has grown fast, starting with only one percent of PCs shipped as part of a DaaS program in 2014. Based on Grand View Research's <a target="_blank" href="https://www.grandviewresearch.com/industry-analysis/device-as-a-service-market-report" rel="noopener">market forecast</a>, the global DaaS market size was valued at $83 billion in 2022 and is expected to grow to $757 billion by 2030.</p> <section class="section main-article-chapter" data-menu-title="How does DaaS work?"> <h2 class="section-title"><i class="icon" data-icon="1"></i>How does DaaS work?</h2> <p>DaaS services for software and hardware management include device backups, asset tracking, security and end-of-life disposal. Devices offered as a service include hardware, such as PCs, laptops, desktops, tablets and mobile phones.</p> <p>Device-as-a-service vendors provide a contract stating the hardware, software, services and lengths of time covered by their services. Payment is normally on a per-device basis. Some <a href="https://www.techtarget.com/searchitchannel/definition/OEM">original equipment manufacturers</a> offer DaaS with a limited number of choices from their overall device lineup. Users can't replace hardware they're using from a vendor when they wish. Typically, a contract states two, three or five-year timelines for device replacement.</p> <p>Devices typically come with the software the organization needs already installed. Usually, vendors also include an upgrade path for patches and updates.</p> </section> <section class="section main-article-chapter" data-menu-title="Three pillars of DaaS"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Three pillars of DaaS</h2> <p>The following three areas make up DaaS services:</p> <ol class="default-list"> <li><b>Device fulfillment.</b> DaaS providers supply businesses with the latest technology, preconfigured and ready to use. This lets DaaS customer skip large <a href="https://www.techtarget.com/whatis/definition/CAPEX-capital-expenditure">capital expenditures</a>.</li> <li><b>Device services.</b> This covers the ongoing support, maintenance, security updates and other IT management capabilities needed to keep devices operational.</li> <li><b>Device recovery.</b> This includes the secure collection, refurbishment or <a href="https://www.techtarget.com/searchenterprisedesktop/tip/How-to-securely-recycle-enterprise-computers">disposal of outdated devices</a> while protecting any sensitive business data stored on those devices.</li> </ol> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/it_channel-daas_characteristics.png"> <img data-src="https://www.techtarget.com/rms/onlineimages/it_channel-daas_characteristics_mobile.png" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/it_channel-daas_characteristics_mobile.png 960w,https://www.techtarget.com/rms/onlineimages/it_channel-daas_characteristics.png 1280w" alt="List of key characteristics of device as a service offerings" height="353" width="520"> <figcaption> <i class="icon pictures" data-icon="z"></i>The flexibility to scale up or down makes the device as a service model an appealing option for small businesses. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> </section> <section class="section main-article-chapter" data-menu-title="DaaS pricing models"> <h2 class="section-title"><i class="icon" data-icon="1"></i>DaaS pricing models</h2> <p>DaaS services offer different pricing models. The most common models include the following:</p> <ul class="default-list"> <li><b>Subscription-based. </b>Businesses pay a monthly, quarterly, yearly or other type of recurring fee.</li> <li><b>Use-based.</b> Costs are based on actual device use, which can allow organizations to scale their technology needs without overpaying for unused resources.</li> <li><b>Bundled.</b> This approach combines hardware, software and IT support into a single pricing package.</li> <li><b>Full cycle.</b> This covers the entire <a href="https://www.techtarget.com/searchenterprisedesktop/feature/How-to-create-an-effective-PC-lifecycle-policy">lifecycle of a device</a> from purchase to end-of-life recycling and disposal.</li> <li><b>Customizable.</b> This tailored approach lets organizations mix and match hardware and services based on their needs.</li> <li><b>Hardware-based.</b> Customers get new hardware, delivery and setup without the need for upfront purchases.</li> <li><b>Service-based.</b> This approach includes services such as maintenance, repairs and technical support.</li> </ul> </section> <section class="section main-article-chapter" data-menu-title="What are the benefits of DaaS?"> <h2 class="section-title"><i class="icon" data-icon="1"></i>What are the benefits of DaaS?</h2> <p>Device as a service can bring various benefits, mostly for smaller <a href="https://www.techtarget.com/searchcio/definition/startup">startup</a> organizations. These benefits include the following:</p> <ul class="default-list"> <li>Organizations can scale devices up and down as needed, although scaling down can often only be done at the end of the contract period.</li> <li>Costs are changed from capital expenditures to <a href="https://www.techtarget.com/whatis/definition/OPEX-operational-expenditure">operating expenses</a>.</li> <li>IT staff's workload is reduced because device configuration is no longer required.</li> <li>DaaS includes automatic device management, such as patches and updates.</li> <li>It gives startups the ability to acquire a collection of devices without the normal, high upfront cost.</li> <li>It's a good option for smaller companies that lack in-house IT expertise.</li> <li>DaaS gives organizations the option of trading up for newer devices at the end of the contract period.</li> </ul> </section> <section class="section main-article-chapter" data-menu-title="Drawbacks of the DaaS model"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Drawbacks of the DaaS model</h2> <p>Although many potential benefits are associated with the device-as-a-service model, organizations should consider the possible disadvantages. They include the following:</p> <ul class="default-list"> <li>The organization never actually owns the devices, even though it is paying for them in perpetuity.</li> <li>Despite vendor claims to the contrary, the total cost of ownership can be higher in some cases.</li> <li>Because vendors service and maintain devices, <a href="https://www.techtarget.com/searchcio/definition/data-privacy-information-privacy">privacy</a> can be a concern.</li> <li>DaaS might not be an option in certain regulated industries.</li> <li>Device selection can be limited to certain models.</li> </ul> </section> <section class="section main-article-chapter" data-menu-title="Common DaaS options"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Common DaaS options</h2> <p>Two primary examples of device-as-a-service offerings are from HP and Lenovo. HP offers HP Managed Device Services, which has device options ranging from commercial notebooks, desktops and specialized devices. It has even expanded to offering hardware outside of HP's hardware, such as Apple Macs, iPhones and iPads.</p> <p>Lenovo also has a DaaS initiative called Lenovo TruScale Device as a Service. It offers customers a range of devices such as PCs, tablets, smartphones and video conferencing and collaboration tools.</p> </section> <section class="section main-article-chapter" data-menu-title="Who uses DaaS?"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Who uses DaaS?</h2> <p>DaaS is used in a variety of businesses and industries. The most common include:</p> <ul class="default-list"> <li>Enterprises.</li> <li>Startups and small and medium businesses.</li> <li>Healthcare providers.</li> <li>Online and brick-and-mortar retailers.</li> <li>Educational institutions.</li> <li>Financial service providers.</li> <li>Governments agencies.</li> </ul> </section> <section class="section main-article-chapter" data-menu-title="Device as a service vs. desktop as a service"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Device as a service vs. desktop as a service</h2> <p>Device as a service shares the DaaS acronym with <a href="https://www.techtarget.com/searchvirtualdesktop/definition/desktop-as-a-service-DaaS">desktop as a service</a>, which can be confusing when using the acronym. With device as a service, physical hardware is offered to customers under a subscription model. This can include PCs, tablets, smartphones and other physical devices.</p> <p>Desktop as a service is a cloud computing offering where a third party offers a virtual desktop running on a cloud-based <a href="https://searchservervirtualization.techtarget.com/definition/virtual-machine">virtual machine</a> (VM). The desktop-as-a-service provider hosts the back end of a <a href="https://www.techtarget.com/searchvirtualdesktop/definition/virtual-desktop-infrastructure-VDI">virtual desktop infrastructure</a> deployment, and the guest operating system runs inside a VM on a physical server that resides in the cloud service provider's data center.</p> <p>Desktop-as-a-service providers bill their customers monthly, based on the number of virtual desktops they're using. In contrast, device-as-a-service providers usually require an annual or multiyear commitment.</p> <p><i>Device as a service is often compared to PC as a service. </i><a href="https://www.techtarget.com/searchenterprisedesktop/tip/PCaaS-vs-DaaS-learn-the-difference-between-these-services"><i>Learn the difference between DaaS and PCaaS</i></a><i>.</i></p> </section> The device as a service (DaaS) model offers PCs, smartphones and other mobile computing devices as a paid service. https://cdn.ttgtmedia.com/visuals/digdeeper/6.jpg https://www.techtarget.com/searchvirtualdesktop/definition/device-as-a-service Thu, 11 Sep 2025 14:09:00 GMT <p>A graphics processing unit (GPU) is a computer <a href="https://www.techtarget.com/whatis/definition/microchip">chip</a> that renders graphics and images by performing rapid mathematical calculations. GPUs are used for both professional and personal computing. Originally, GPUs were responsible for the rendering of 2D and <a href="https://www.techtarget.com/whatis/definition/3-D-three-dimensions-or-three-dimensional">3D</a> images, animations and video, but now they have a wider use range.</p> <p>Like a central processing unit (<a href="https://www.techtarget.com/whatis/definition/processor">CPU</a>), a GPU is also a chip component in computing devices. One important difference is that the GPU is specifically designed to handle and accelerate graphics workloads and display graphics content on a device such as a PC or <a href="https://www.techtarget.com/searchmobilecomputing/definition/smartphone">smartphone</a>.</p> <p>An electronic device with an <a href="https://www.techtarget.com/whatis/definition/embedded-device">embedded</a> or discrete GPU can smoothly render 3D graphics and video content, making it suitable for gaming and other visual applications. Over time, technological improvements have resulted in more flexible and programmable GPUs that can be used for many more applications and workloads other than gaming. GPUs are now used for creative content production, video editing, high-performance computing (<a href="https://www.techtarget.com/searchdatacenter/definition/high-performance-computing-HPC">HPC</a>) and artificial intelligence (<a href="https://www.techtarget.com/searchenterpriseai/definition/AI-Artificial-Intelligence">AI</a>).</p> <section class="section main-article-chapter" data-menu-title="What does a GPU do?"> <h2 class="section-title"><i class="icon" data-icon="1"></i>What does a GPU do?</h2> <p>In the early days of computing, the CPU performed the calculations required for graphics applications, such as the rendering of 2D and 3D images, animations and video. As more graphics-intensive applications were developed, however, their demands put a strain on the CPU and decreased the computer's overall performance.</p> <p>Today, a GPU is a specialized computing system that performs these tasks:</p> <ul class="default-list"> <li>Handles graphics-related tasks in lieu of the CPU.</li> <li>Performs graphics calculations very quickly.</li> <li>Uses <a href="https://www.techtarget.com/searchdatacenter/definition/parallel-processing">parallel processing</a> to increase processing performance.</li> <li>Delivers graphic content to the computer display.</li> <li>Frees up the CPU to handle all other processing tasks.</li> </ul> </section> <section class="section main-article-chapter" data-menu-title="How does a GPU work?"> <h2 class="section-title"><i class="icon" data-icon="1"></i>How does a GPU work?</h2> <p>GPUs work by using parallel processing, where multiple processors handle separate parts of a single task. A GPU will also have its own <a href="https://www.techtarget.com/searchstorage/definition/RAM-random-access-memory">RAM</a> to store the data it is processing. This RAM is designed specifically to hold the large amounts of information coming into the GPU for highly intensive graphics use cases.</p> <p>For graphics applications, the CPU sends instructions to the GPU for drawing the graphics content on a screen. The GPU executes the instructions in parallel and at high speeds to display the content on the device -- a process known as the graphics or rendering <a href="https://www.techtarget.com/whatis/definition/pipelining">pipeline</a>.</p> <div class="youtube-iframe-container"> <iframe id="ytplayer-0" src="https://www.youtube.com/embed/_DNxgnINNAY?autoplay=0&amp;modestbranding=1&amp;rel=0&amp;widget_referrer=null&amp;enablejsapi=1&amp;origin=https://www.techtarget.com" type="text/html" height="360" width="640" frameborder="0"></iframe> </div> </section> <section class="section main-article-chapter" data-menu-title="Are GPUs and graphics cards the same?"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Are GPUs and graphics cards the same?</h2> <p>GPU and graphics card are two terms that are sometimes used interchangeably. However, there are some important distinctions between the two. The main difference is that the GPU is a specific unit within a graphics card, among other components. The GPU is what performs the image and graphics processing. The graphics card presents images to the display unit.</p> <h3>GPU use cases: What GPUs are used for today</h3> <p>GPUs are widely used for PC gaming, allowing for smooth, high-quality graphics rendering. Modern GPUs are also adapted to a wider variety of tasks than they were originally designed for, partially because they are more programmable than they were in the past. That's why GPUs are now also used to <a href="https://www.techtarget.com/searchenterpriseai/feature/CPUs-vs-GPUs-for-AI-workloads">accelerate AI workloads</a> and for machine learning (<a href="https://www.techtarget.com/searchenterpriseai/definition/machine-learning-ML">ML</a>).</p> <p>Some of the most popular applications of GPUs include:</p> <ul class="default-list"> <li><b>Rendering real-time 2D and 3D graphics</b>. These devices perform complicated mathematical calculations using <a href="https://www.techtarget.com/whatis/definition/algorithm">algorithms</a> that convert moving bits into <a href="https://www.techtarget.com/whatis/definition/pixel">pixels</a> on displays.</li> <li><b>Video editing and video content creation</b>. When used for video content creation and editing, GPUs deliver high-resolution images and videos, enhanced video effects using AI, and provide sufficient RAM to handle the computational requirements of video content.</li> <li><b>Video game graphics.</b> Video game GPUs perform the same kinds of complex calculations using parallel processing as for other graphics tasks, and deliver images and videos by managing tasks such as shading, lighting and texturing, each of which is needed for realistic game visuals.</li> <li><b>Accelerating AI/ML applications.</b> GPUs have the processing power needed to support the massive computations and algorithms used in AI and ML applications, such as image recognition and <a href="https://www.techtarget.com/searchenterpriseai/definition/face-detection">facial detection</a> and <a href="https://www.techtarget.com/searchenterpriseai/definition/facial-recognition">recognition</a>.</li> <li><b>Training deep learning neural networks</b>. GPUs have thousands of smaller core memory units that work in parallel to provide the matrix processing needed for <a href="https://www.techtarget.com/searchenterpriseai/definition/deep-learning-deep-neural-network">deep learning</a> training and <a href="https://www.techtarget.com/searchenterpriseai/definition/neural-network">neural networks</a>.</li> <li><b>Cryptomining. </b>GPUs support cryptocurrency mining, especially for coins that employ Proof of Work (<a href="https://www.techtarget.com/whatis/feature/Proof-of-work-vs-proof-of-stake-Whats-the-difference">PoW</a>) mechanisms for establishing consensus; they also use parallel processing to perform multiple <a href="https://www.techtarget.com/searchdatamanagement/definition/hashing">hash</a> functions.</li> </ul> </section> <section class="section main-article-chapter" data-menu-title="Types of GPUs"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Types of GPUs</h2> <p>Generally, there are three types of GPUs:</p> <ul class="default-list"> <li><b>Integrated GPU. A</b>n integrated GPU is built into the computer's <a href="https://www.techtarget.com/whatis/definition/motherboard">motherboard</a> or could be integrated with the CPU. Systems with integrated GPUs are generally small and light because less space is required to incorporate the GPU. The use of an internal GPU also reduces system power consumption. When buying a system with an internal GPU, care must be taken as the internal GPU may not be upgradeable. If buying a gaming computer, the GPU is an essential part of the device and should be carefully researched.</li> <li><b>Discrete GPU.</b> This is a physically separate GPU and is mounted separately from the CPU and other peripherals on the motherboard. While such devices typically offer far more processing power than an integrated GPU, they also increase power usage and generate additional heat, which may necessitate additional cooling. Discrete GPUs are used for resource-intensive, high-performance applications such as 3D games.</li> <li><b>Hybrid GPU.</b> A hybrid GPU arrangement can take different forms, such as combining an integrated GPU with a discrete GPU in the same system, with one used for normal graphics and the discrete unit for high-performance requirements. Another approach is to combine discrete graphics performance with specialized accelerators, such as for AI applications.</li> </ul> </section> <section class="section main-article-chapter" data-menu-title="What is a cloud GPU?"> <h2 class="section-title"><i class="icon" data-icon="1"></i>What is a cloud GPU?</h2> <p>Taking advantage of the convenience, <a href="https://www.techtarget.com/searchdatacenter/definition/scalability">scalability</a> and costs of <a href="https://www.techtarget.com/searchcloudcomputing/definition/cloud-computing">cloud computing</a> services, users can obtain the GPU functionality they need by obtaining it from a cloud vendor. All three major cloud services, AWS, Microsoft Azure and Google Cloud, offer virtual machines (<a href="https://www.techtarget.com/searchitoperations/definition/virtual-machine-VM">VMs</a>) with built-in GPU speed and functionality. Cloud GPU services are typically used in compute-intensive situations involving AI, video game development and <a href="https://www.techtarget.com/whatis/definition/Bitcoin-mining">bitcoin mining</a>. As with any activity involving cloud services, cybersecurity must be carefully managed.</p> </section> <section class="section main-article-chapter" data-menu-title="GPU vs. CPU"> <h2 class="section-title"><i class="icon" data-icon="1"></i>GPU vs. CPU</h2> <p>A GPU might be found integrated with a CPU on the same electronic circuit, on a graphics card or in the motherboard of a PC or <a href="https://www.techtarget.com/whatis/definition/server">server</a>. GPUs and CPUs are fairly similar in construction. However, CPUs are used to respond to and process the basic instructions that drive a computer, while GPUs are designed specifically to quickly render high-resolution images and video.</p> <p>Essentially, CPUs are responsible for interpreting most of a computer's commands, while GPUs perform more complex mathematical and geometric calculations to focus on graphics rendering and other applications that require intensive calculations.</p> <p>Both processors have different numbers of cores and transistors. The core can be thought of as the processor within the processor. Each core can process its own tasks, or <a href="https://www.techtarget.com/whatis/definition/thread">threads</a>. A CPU uses fewer cores and performs tasks sequentially. A GPU, in contrast, might have hundreds or thousands of cores, which allow for parallel processing and lightning-fast graphics output.</p> <p>A single-core CPU usually lacks the capability for parallel processing, but <a href="https://www.techtarget.com/searchdatacenter/definition/multi-core-processor">multicore processors</a> can perform calculations in parallel by combining more than one CPU onto the same chip. GPUs can also contain more transistors than a CPU.</p> <p>In addition, a CPU has a higher <a href="https://www.techtarget.com/whatis/definition/clock-speed">clock speed</a>, meaning it can perform an individual calculation faster than a GPU, so it is often better equipped to handle basic computing tasks.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/enterprise_ai-cpu_vs_gpu_chips.png"> <img data-src="https://www.techtarget.com/rms/onlineimages/enterprise_ai-cpu_vs_gpu_chips_mobile.png" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/enterprise_ai-cpu_vs_gpu_chips_mobile.png 960w,https://www.techtarget.com/rms/onlineimages/enterprise_ai-cpu_vs_gpu_chips.png 1280w" alt="CPU vs. GPU chips" height="370" width="560"> <figcaption> <i class="icon pictures" data-icon="z"></i>While their architectures and technologies are similar, CPUs and GPUs perform discrete functions, with GPUs focused on calculation-intensive computations. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p><i>Data centers use three processing units: CPU, GPU, and DPU. Each has unique functions that can be combined to enhance data center performance. Explore </i><a href="https://www.techtarget.com/searchdatacenter/tip/How-do-CPU-GPU-and-DPU-differ-from-one-another"><i>how CPU vs. GPU vs. DPU differ from one another</i></a><i>.</i></p> </section> A graphics processing unit (GPU) is a computer chip that renders graphics and images by performing rapid mathematical calculations. https://cdn.ttgtmedia.com/visuals/digdeeper/6.jpg https://www.techtarget.com/searchvirtualdesktop/definition/GPU-graphics-processing-unit Fri, 05 Sep 2025 13:00:00 GMT <p>Virtual desktop clients play a crucial role for any organization that uses VDI, Desktop as a Service, or cloud desktops because it is what allows an end user to connect to and use their virtual desktop.</p> <p>This client is designed to access, not run the virtual desktop OS, meaning it sends keyboard and mouse inputs to the virtual desktop and receives screen refreshes. Most of the actual computing occurs on the server that is hosting the virtual desktop.</p> <p>Offloading compute and storage from the endpoint device to a server reduces the hardware requirements for end user devices. In fact, an endpoint device does not necessarily have to meet the minimum hardware requirements for the OS and applications that the user works with, because that software is running on a backend server, not on the client device itself.</p> <section class="section main-article-chapter" data-menu-title="Deciding between thin and thick clients"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Deciding between thin and thick clients</h2> <p>Managing and delivering virtual desktops is a significant task for IT administrators to take on, but sometimes choosing the right endpoint for accessing the virtual desktop can go a long way for the user experience.</p> <p>One key decision surrounding virtual desktop delivery is whether end users access their resources via a <a href="https://www.techtarget.com/searchnetworking/definition/thin-client">thin client</a> or a PC running thin client software. Such PCs are commonly referred to as thick clients. Both types of endpoints have their benefits and drawbacks, so IT admins and executives should be sure they know the pros and cons of using both thin and thick clients.</p> </section> <section class="section main-article-chapter" data-menu-title="Differences between thin clients and thick clients"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Differences between thin clients and thick clients</h2> <p>Thin clients and thick clients -- sometimes referred to as <i>fat clients</i> -- differ across numerous categories, such as hardware cost, licensing and maintenance. Each organization will have different needs and preferences regarding which functions are most important.</p> <h3>Security</h3> <p>One of the primary benefits of <a href="https://www.techtarget.com/searchvirtualdesktop/tip/Evaluating-tablets-as-thin-clients-in-the-enterprise">using thin client hardware</a> compared to thick client hardware is security. Thin client devices may not even be equipped with an internal hard drive and removable media ports, which means <a href="https://www.techtarget.com/searchsecurity/feature/Explore-7-data-loss-prevention-tools-for-utmost-security">users can't copy data from within the network to removable media</a>. While it is true that some thin client devices do contain a small amount of internal storage, this storage is almost always reserved for use by the device's internal OS and cannot be used for data storage or for installing applications directly onto the device.</p> <p>Because thin client machines typically do not have an accessible hard drive, there is very little risk of malware infecting the client itself, though under the right circumstances the virtual desktop operating system could be infected.</p> <p>Although <a href="https://www.techtarget.com/searchvirtualdesktop/opinion/Is-it-time-for-a-new-name-for-thin-clients">a desktop PC can function as a thin client computer</a>, the thin client software typically resides on top of a normal OS. As such, the device would be susceptible to many of the same types of security risks as it would be if it were operating as a regular PC within the virtual environment.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/virt_desktop-thin_vs_thick_vs_zero_clients-f.png"> <img data-src="https://www.techtarget.com/rms/onlineimages/virt_desktop-thin_vs_thick_vs_zero_clients-f_mobile.png" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/virt_desktop-thin_vs_thick_vs_zero_clients-f_mobile.png 960w,https://www.techtarget.com/rms/onlineimages/virt_desktop-thin_vs_thick_vs_zero_clients-f.png 1280w" alt="An illustration comparing thin, thick and zero clients" height="342" width="560"> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <h3>Startup costs</h3> <p>Initial deployment costs are a major consideration for some organizations. While it is true that thin client hardware typically has a very low price tag, the cost of deploying thin clients may be much higher than that of deploying PCs. For example, organizations that already own PCs can reuse them, which will cut down significantly on hardware costs. At the same time, organizations that start from scratch will see lower costs with thin client hardware. Some thin client devices cost as little as $300 or less out of the box. Organizations can opt for even greater savings if they purchase refurbished devices, but this may not be worth the hassle from a support perspective.</p> <h3>Software licensing costs</h3> <p>When comparing thin clients to thick clients to determine which platform is a better fit, an organization absolutely must consider software licensing costs. Traditional PCs acting as thick clients are almost always required to run a full OS, such as Windows 10 or Windows 11. This is in addition to licensing the client software and any other software that might be installed locally on the PC. As such, an organization could end up being forced to pay for two operating system licenses for each device. One of these licenses covers the local OS while the other applies to the operating system running on the virtual desktop.</p> <p>A dedicated thin client device may come with its own light weight operating system. This could be a Linux kernel, or perhaps a copy of Windows Embedded. This can reduce licensing costs, since the organization would only be responsible for licensing the OS that is running on the virtual desktop.</p> <p>Thin client devices could potentially incur licensing costs that thick clients do not. Some vendors offer management software for thin client devices, and this management software is often licensed on a per device basis. However, some vendors bundle the management license into the device's cost.</p> <p>Licensing requirements can vary widely depending on the virtual desktop operating system that in use are using and on how the virtual desktops are being hosted. Windows 365, Microsoft's cloud desktop offering, for example, is licensed on a per user basis, not a per device basis. However, depending on which tier is in use, there may be additional licensing requirements, such as Microsoft Intune, or Entra ID Premium.</p> <h3>Maintenance costs</h3> <p>One of the big selling points of thin client hardware is that it reduces maintenance costs. Thin client devices are essentially proprietary PCs that only have their most basic components in place. As such, IT doesn't have to perform much maintenance. There are almost no moving parts, so thin client devices also tend to last a long time. However, when a problem does occur, there might be nothing that admins can do to fix it. IT may have to replace the device.</p> <p>Conversely, it is usually easier to fix hardware problems that occur on a PC. Admins can replace the failed component, typically for much less than the cost of <a href="https://www.techtarget.com/searchvirtualdesktop/feature/VDI-hardware-comparison-Thin-vs-thick-vs-zero-clients">replacing an entire thin client device</a>.</p> <blockquote class="main-article-pullquote"> <div class="main-article-pullquote-inner"> <figure> Zero clients offer the lowest per device cost, fastest boot times, and smallest attack surface of any of the client types. </figure> <i class="icon" data-icon="z"></i> </div> </blockquote> <p>Of course, this is only taking hardware maintenance into account. PCs need consistent maintenance at the software level. For example, IT must routinely install patches to keep a PC's OS, applications, and antivirus software up to date.</p> <h3>Power consumption</h3> <p>When comparing thin and thick client's power consumption, thin clients tend to consume far less power than PCs. Of course, power consumption varies among makes and models, but organizations can count on thin clients generally being far more <a target="_blank" href="https://www.scribd.com/document/505807953/Energy-Study" rel="noopener">energy efficient</a> if that's a concern for organizations.</p> <h3>Flexibility</h3> <p>Flexibility is the category in which PCs are finally able to make up some ground. It's clear that thin client devices tend to have more advantages than PCs in virtual desktop environments, but in a business environment, the flexibility provided by PCs could make up for all these disadvantages.</p> <p>For example, consider an organization that goes through a corporate buyout. The organization already has a VDI platform in place, but the organization that completed the acquisition uses mainframes. Because some users have to connect to the VDI environment and the mainframe, it is necessary to replace the existing thin client hardware with PCs.</p> <p>One option is to link the PCs' network cards to the VDI environment while a secondary network card links to a mainframe gateway. Users could then run a dual monitor configuration with one screen displaying the VDI session and the other showing the mainframe session.</p> <p>This functionality and level of flexibility are not possible without dedicated thin client hardware and is just one scenario showcasing how the flexibility of PCs helps organizations.</p> <div class="youtube-iframe-container"> <iframe id="ytplayer-0" src="https://www.youtube.com/embed/gctocRTgq-U?si=_5vQSfj9cYXSDFGx?autoplay=0&amp;modestbranding=1&amp;rel=0&amp;widget_referrer=null&amp;enablejsapi=1&amp;origin=https://www.techtarget.com" type="text/html" height="360" width="640" frameborder="0"></iframe> </div> </section> <section class="section main-article-chapter" data-menu-title="What are zero clients and are they an option?"> <h2 class="section-title"><i class="icon" data-icon="1"></i><br>What are zero clients and are they an option?</h2> <p><a href="https://www.techtarget.com/searchvirtualdesktop/definition/zero-client">Zero clients</a> are a lot like thin clients, but they take things just a step further. While a thin client typically contains an embedded, lightweight operating system and some minimal hardware resources to support that OS, a zero client has no local operating system at all -- though they do contain firmware. Instead, these devices are configured to connect to a specific virtual desktop platform by using a platform specific protocol such as PC over IP or HDX.</p> <p>Zero clients offer the lowest per device cost, fastest boot times, and smallest attack surface of any of the client types. Because zero clients do not include an OS, there is no internal storage device, and thus, nothing that can be infected by malware.</p> <p>The low cost, simplicity, and security associated might on the surface seem to be ideal. However, this convenience and security comes at a cost. Zero clients lack any sort of flexibility. These clients are designed to do one job, and they cannot be repurposed to do something else. As such, zero clients are often a great choice for organizations that have very clearly defined goals for their endpoints. However, they probably aren't going to be the best choice for use in a highly dynamic environment.</p> <p><em>Brien Posey is a former 22-time Microsoft MVP and a commercial astronaut candidate. In his more than 30 years in IT, he has served as a lead network engineer for the U.S. Department of Defense and a network administrator for some of the largest insurance companies in America.</em></p> </section> How do thin and thick clients compare for licensing or flexibility? These endpoints have their role in the enterprise, but they fit into organizations in very different ways. https://cdn.ttgtmedia.com/rms/onlineimages/competition_a110169470.jpg https://www.techtarget.com/searchvirtualdesktop/tip/Weighing-the-pros-and-cons-of-thin-clients-vs-thick-clients-for-VDI Tue, 02 Sep 2025 00:00:00 GMT 60 webmaster@techtarget.com