Contact

DataEndure | Cybersecurity & IT Resilience Experts

Under Attack?
  • Services
    • Managed Services

      • Cloud Security
      • Email Security
      • Endpoint Security
      • Network Security
      • N-SOC

      Compliance

      • GRC
      • Readiness Assessments
      • Risk Management

      Complimentary Health Checks

      • Network Health Check
      • Resiliency Workshop
      • Security Health Check

      In-Depth Assessments

      • Application Dependency Mapping
      • CISO Assessment
      • Dark Data Assessment
      • Network Assessment
      • Penetration Testing

      Why Layered Defense is Critical

      Layered security is about protecting all vectors that have access into your network, and the network is no longer just inside your datacenter. It's wherever your endpoints, people, data, and assets reside.

      View the Video >>

  • Expertise
    • Security & Compliance

      • Layered Defense Strategy
      • Cyber Threats & Solutions

      Information Management

      • Data Resilience

      Cloud & Data Science

      • Digital Transformation

      Infrastructure

      • Scale and Efficiency

      Network

      • Network Resilience
      What does "good" cybersecurity look like?

      What does "Good" Cybersecurity look like?

      Discover key insights for robust cybersecurity, addressing critical gaps and navigating evolving threats.

      Read the Blog >>

  • Industries
  • Company
    • About Us

      • Leadership
      • News
      • In the Community
      • Careers
      • Contact Us

      Partners

      • Strategic Partners
      • Technology Partners
      • Partner Program
      securing data 40 years since 1984

      Leading the Way Through Change

      Explore over 40 years of industry leadership and lasting impact as we delve into the remarkable history of Data Endure. 

      Learn More >> 

  • Resources
    • Learn

      • Security Advisories
      • Blog
      • Case Studies
      • Podcast
      • Events
      • Videos
      • White Papers

      Connect

      • Contact Us
      • Newsletter Sign Up
      • Partner Program
      The AI Gold Rush: How to Build a Winning On-Prem Strategy

      Watch our Tech Talk Series

      Stay up to date on the latest in cybersecurity with our monthly Tech talk series.

      Watch the Series >>

Home > Cloud & Data Science > VDI Complexities

VDI Complexities

December 15, 2021

Scott Stephenson

Practice Manager, Cloud & Data Science

Originally posted on LinkedIn by DataEndure Cloud and Data Science Practice Manager, Scott Stephenson.

One of the trends the pandemic has helped popularize is the use of virtual desktop infrastructure (VDI).  The centralized management and control of the workstation environment at a time when more users are working away from the corporate office has long been appealing. Additionally, with VDI in the cloud, organizations can reduce their dependence on premises infrastructure and can constrict many of the management and capital costs.  VDI can also be configured to help prevent data loss by limiting what information is allowed from the virtual desktop to the physical machine of the end user.

Unfortunately, the journey to VDI is not as simple as setting up a couple of Desktop Images and calling it a day.

When we decided to migrate to VDI as a corporate solution, we discovered this quickly.

Even though we already had a subscription and had set up Active Directory in the cloud, we quickly discovered that setting up that first host pool required some investigation.  Examples of considerations include the choice of the cloud for the VDI offering (AWS and Azure both have strong VDI solutions), Desktop Operating system (some are better suited for use as a session host than others), the sizing for the session hosts, and the process to develop and obtain an image to be used for those session hosts.  Finally, the setup process can have its own challenges (for example, ensuring that your chosen cloud can navigate to your Active Directory service to join session hosts to the domain.)

When you successfully complete setting up the host pool, there are other considerations to get the environment ready for use, including the following:

  • User Profile Management
    Your users will want to have their profiles (Desktop Icons, Mapped Drives, personalization settings) available regardless of the underlying session host. In Azure, this can be managed using FSLogix, which enables a user profile to be attached to a desktop session.  Setting up the profile storage and proper administrative and end user permissions add to the setup complexity.
  • Application Management
    When managing Desktops, traditionally IT has to manage an image (possibly multiple images) to ensure that users have the right applications installed; in some VDI environments, applications can be mounted to sessions like the user profiles. This can be great for management, as you can control the applications your user community has available in their VDI session, but requires that you can package the Applications (in MSIX, for example), manage the Application storage, and deploy appropriately to the VDI.  Additionally, some applications have configurations that are more challenging to package via the current available toolset.
  • Management Challenges
    Unlike managing individual workstations, managing a pool of hosts which may support several concurrent sessions have some different management needs. For example, detecting and responding to potential performance impact for your users based on a session host that is oversubscribed or undersized.  This consideration is magnified if you have multiple VDI host pools based on geographic, functional, or organizational needs.  Finally, your infrastructure will need maintenance, whether it be patching session hosts with OS security patches (or updating the session host image with those patches), or updating your packaged applications to the current patch level.  Note that you still need to consider security for your infrastructure.  Even though you can configure access to the VDI via a gateway, preventing the need for any of the infrastructure from needing any public IP addresses, your infrastructure still needs to be protected from viruses or malicious behavior.
  • Cost Management Considerations
    Cloud Based VDI solutions do not automatically protect your company’s pocketbook. Key considerations include proper sizing of your session hosts as well as a solution to manage your horizontal scaling (how many hosts you need to operate at any given time based on your concurrent usage, business hours or other factors).  Ensuring the use of reserved instances or even spot instances can save 30% – 70% of the VDI session host costs.  Finally, ensuring that you have selected the right level of storage access can help manage the cost of managing user profiles and applications.

Ultimately, cloud based VDIs can bring a great deal of business value, flexibility, and infrastructure control, but there are a number of challenges to reach the rewards.

If you need assistance to make the transition to a virtual desktop solution, you can reach out to us for help implementing a VDI solution or even managing the cloud based VDI solution for you.

Search

Blog Categories

  • Cloud & Data Science
  • Information Management
  • Infrastructure
  • Network
  • Podcasts
  • Security & Compliance
  • Security Advisories

Get started today!

We're here to help. Talk to us to learn more about how we can help your organization achieve digital resilience with solutions custom-built to meet the needs of your business.

SCHEDULE A MEETING

DataEndure
590 Laurelwood Drive
Santa Clara, CA 95054
800.969.4268

DataEndure © 2026. All Rights Reserved.  Privacy Policy

Follow Us

This website uses cookies to improve your experience. We'll assume you're ok with this, but you can opt-out if you wish. Accept Reject
Privacy & Cookies Policy

Privacy Overview

This website uses cookies to improve your experience while you navigate through the website. Out of these, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may affect your browsing experience.
Necessary
Always Enabled
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Non-necessary
Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.
SAVE & ACCEPT