Joydeep starts off.<\/p>\n
At the last Ignite, Microsoft committed to making RDS the virtual workspace platform of choice. In WS2016, they added performance, scale, and optimization for the cloud. They considered all of this to be \u201cplatform capabilities\u201d. <\/p>\n
Future Innovations Overview<\/h2>\n\n- Increasing security, by leveraging things like signals from the security graph, MFA.<\/li>\n
- More cloud ready, a second level of cloud enablement on Azure.<\/li>\n
- Windows Apps everywhere<\/li>\n<\/ul>\n
Scott takes over.<\/p>\n
More Secure<\/h2>\n
Secure authentication powered by Intelligent Security Graph:<\/p>\n
\n- Azure AD integration<\/li>\n
- Single sign on, MFA<\/li>\n
- Conditional access<\/li>\n<\/ul>\n
Secure environment powered by modern infrastructure:<\/p>\n
\n- Each tenant in its own sandboxed environment<\/li>\n
- Isolation of infra roles from desktop and app hosts<\/li>\n
- No inbound IP ports \u2013 more on this later in the session.<\/li>\n<\/ul>\n
Demo<\/h2>\n
They\u2019ve been adding AAD integration into the RDS clients. An \u201cenlightened app\u201d is shown, and he\u2019s subscribes to a feed. He signs in, and the normal AAD MFA process kicks in. The RemoteApp client loads and shows the published apps (and published desktop) from the feed.<\/p>\n
This will go live next year, and maybe this AAD functionality will be in all clients by then.<\/p>\n
Environment<\/h2>\n
Normally, gateway, web access are domain joined and public facing. In the same network as connection broker, license server, RDVH and session hosts.<\/p>\n
Going forward with Modern Infrastructure, the RDVH goes away, merged into the broker. A new diagnostics role is added. So, gateway, web access, diagnostics, connection broker and license server are non-domain machines. In an isolated VNet, the domain joined appllication and desktop hosts are joined to Azure AD.<\/p>\n
Multi-tenancy is native to this design. The non-domain stuff has no domain join so it\u2019s multi-tenant. The session\/app hosts are domain joined so they are per-tenant. <\/p>\n
IP-wise, 443 is required to the gateway, but the hosts are not public facing.<\/p>\n
More Cloud Ready<\/h2>\n
Deploy gateway, connection broker, web server, licensing server as Azure App Services roles \u2013 PaaS reduces costs and maintenance. The legacy method will still be supported for on-prem deployments. App and desktop hosts are VMs which integrate with this PaaS deployment via a package. FYI, you can deploy the PaaS stuff in Azure, and do your VM hosts in Azure or on-prem (hybrid RDS deployment).<\/p>\n
![\"WIN_20170926_09_18_07_Pro\"](\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2017\/09\/WIN_20170926_09_18_07_Pro_thumb.jpg\" "\\"WIN_20170926_09_18_07_Pro\\"")
<\/a><\/p>\nDemo<\/h2>\n
He opens the Azure Portal. There are no VMs in the Azure deployment. The infrastructure roles run in App Services. Key Vault is being used to store certificates. The broker DB is using Azure SQL. PaaS is possible because every role is stateless, other than the DB. Scaling out is easy: it\u2019s web apps! You just use the scale out feature of web apps to add instances to the app service plan. You can also using auto-scaling to do it based on demand (rules monitoring CPU usage for scale out and scale in). If you don\u2019t know this stuff, it\u2019s very easy to set up scaling.<\/p>\n
A company called PeopleTech (sounded like that) has built a UI for managing RDS Modern Infrastructure (RDMI). Apparently it\u2019s similar to what RDS in Project Honolulu will look like. <\/p>\n
Sridhar from Citrix<\/h2>\n
Honestly, this isn\u2019t a big deal for me because none of my customers use Citrix, and Citrix\u2019s \u201cAzure\u201d products only work in Enterprise Agreements. This is a marketing pitch so there\u2019s no notes here other than support for Windows 10 S.<\/p>\n
Back to MS with David.<\/p>\n
Demo<\/h2>\n
An MS-owned RDS client for Mac is in public preview. It looks nice. Admins can group desktops logically for easy click-and-login. There\u2019s thumbnails for identifying the desktops. There are options to disable thumbnails (privacy) and for list view (scale). It will support AAD with RDMI. Applications can be in folders. The Mac OS has some limitations \u2013 running published apps don\u2019t get their own native icons in the task bar like they do on Windows, but MS will work around that, including app switching.<\/p>\n
Next up is the Windows App for the RDP client. A lot of future improvement here are focused on admin usage (needed if it\u2019s ever going to replace MSTSC.EXE). Indicator to see which desktops are connected. Multiple simultaneous connections is supported. You can easily switch desktops and go \u201chome\u201d. A coming feature in the app is to put the desktops into different windows. There will be an option in settings to open each connection as a new window. RDP files can be associated with the App and open the desktop in a new window. For high DPI devices, you will be able to control the resolution and\/or scaling of the display. You\u2019ll also be able to choose to stretch the content but keep the aspect ratio, or stretch the content only. When you create groups, you can move connections between the groups.<\/p>\n
Right now, almost all of this is available now, except multi-window support.<\/p>\n
Next up is the new HTML5 web client. This will support RDMI and classic WS2016 deployments. In the demo, you can see the UI is refreshed and modern. It kind of runs similarly to the Windows Store remote desktop app. When connected, the session is in the browser. When you go full screen, an RDP bar is pinned at the top by default, but you can un-pin it to give more space to the app\/desktop.<\/p>\n","protected":false},"excerpt":{"rendered":"
Speakers: Scott Manchester, Principal Group Program Manager Joydeep Mukherjee, Senior Product Marketing Manager David Belanger, Senior Program Manager Guest speaker: Sridhar Mullapudi, VP of Product Management, Citrix Joydeep starts off. At the last Ignite, Microsoft committed to making RDS the virtual workspace platform of choice. In WS2016, they added performance, scale, and optimization for the … Continue reading “Vison And Upcoming Innovations for Microsoft Remote Desktop Services”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":19881,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"_wpcom_ai_launchpad_first_post":false,"footnotes":""},"categories":[14],"tags":[170,58,204,176,203,134,205,137],"class_list":["post-20525","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-eventnotes","tag-azure","tag-citrix","tag-event","tag-eventnotes","tag-ignite","tag-rds","tag-webapps","tag-windows-server-2016"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t
Scott takes over.<\/p>\n
More Secure<\/h2>\n
Secure authentication powered by Intelligent Security Graph:<\/p>\n
- \n
- Azure AD integration<\/li>\n
- Single sign on, MFA<\/li>\n
- Conditional access<\/li>\n<\/ul>\n
Secure environment powered by modern infrastructure:<\/p>\n
- \n
- Each tenant in its own sandboxed environment<\/li>\n
- Isolation of infra roles from desktop and app hosts<\/li>\n
- No inbound IP ports \u2013 more on this later in the session.<\/li>\n<\/ul>\n
Demo<\/h2>\n
They\u2019ve been adding AAD integration into the RDS clients. An \u201cenlightened app\u201d is shown, and he\u2019s subscribes to a feed. He signs in, and the normal AAD MFA process kicks in. The RemoteApp client loads and shows the published apps (and published desktop) from the feed.<\/p>\n
This will go live next year, and maybe this AAD functionality will be in all clients by then.<\/p>\n
Environment<\/h2>\n
Normally, gateway, web access are domain joined and public facing. In the same network as connection broker, license server, RDVH and session hosts.<\/p>\n
Going forward with Modern Infrastructure, the RDVH goes away, merged into the broker. A new diagnostics role is added. So, gateway, web access, diagnostics, connection broker and license server are non-domain machines. In an isolated VNet, the domain joined appllication and desktop hosts are joined to Azure AD.<\/p>\n
Multi-tenancy is native to this design. The non-domain stuff has no domain join so it\u2019s multi-tenant. The session\/app hosts are domain joined so they are per-tenant. <\/p>\n
IP-wise, 443 is required to the gateway, but the hosts are not public facing.<\/p>\n
More Cloud Ready<\/h2>\n
Deploy gateway, connection broker, web server, licensing server as Azure App Services roles \u2013 PaaS reduces costs and maintenance. The legacy method will still be supported for on-prem deployments. App and desktop hosts are VMs which integrate with this PaaS deployment via a package. FYI, you can deploy the PaaS stuff in Azure, and do your VM hosts in Azure or on-prem (hybrid RDS deployment).<\/p>\n
<\/a><\/p>\nDemo<\/h2>\n
He opens the Azure Portal. There are no VMs in the Azure deployment. The infrastructure roles run in App Services. Key Vault is being used to store certificates. The broker DB is using Azure SQL. PaaS is possible because every role is stateless, other than the DB. Scaling out is easy: it\u2019s web apps! You just use the scale out feature of web apps to add instances to the app service plan. You can also using auto-scaling to do it based on demand (rules monitoring CPU usage for scale out and scale in). If you don\u2019t know this stuff, it\u2019s very easy to set up scaling.<\/p>\n
A company called PeopleTech (sounded like that) has built a UI for managing RDS Modern Infrastructure (RDMI). Apparently it\u2019s similar to what RDS in Project Honolulu will look like. <\/p>\n
Sridhar from Citrix<\/h2>\n
Honestly, this isn\u2019t a big deal for me because none of my customers use Citrix, and Citrix\u2019s \u201cAzure\u201d products only work in Enterprise Agreements. This is a marketing pitch so there\u2019s no notes here other than support for Windows 10 S.<\/p>\n
Back to MS with David.<\/p>\n
Demo<\/h2>\n
An MS-owned RDS client for Mac is in public preview. It looks nice. Admins can group desktops logically for easy click-and-login. There\u2019s thumbnails for identifying the desktops. There are options to disable thumbnails (privacy) and for list view (scale). It will support AAD with RDMI. Applications can be in folders. The Mac OS has some limitations \u2013 running published apps don\u2019t get their own native icons in the task bar like they do on Windows, but MS will work around that, including app switching.<\/p>\n
Next up is the Windows App for the RDP client. A lot of future improvement here are focused on admin usage (needed if it\u2019s ever going to replace MSTSC.EXE). Indicator to see which desktops are connected. Multiple simultaneous connections is supported. You can easily switch desktops and go \u201chome\u201d. A coming feature in the app is to put the desktops into different windows. There will be an option in settings to open each connection as a new window. RDP files can be associated with the App and open the desktop in a new window. For high DPI devices, you will be able to control the resolution and\/or scaling of the display. You\u2019ll also be able to choose to stretch the content but keep the aspect ratio, or stretch the content only. When you create groups, you can move connections between the groups.<\/p>\n
Right now, almost all of this is available now, except multi-window support.<\/p>\n
Next up is the new HTML5 web client. This will support RDMI and classic WS2016 deployments. In the demo, you can see the UI is refreshed and modern. It kind of runs similarly to the Windows Store remote desktop app. When connected, the session is in the browser. When you go full screen, an RDP bar is pinned at the top by default, but you can un-pin it to give more space to the app\/desktop.<\/p>\n","protected":false},"excerpt":{"rendered":"
Speakers: Scott Manchester, Principal Group Program Manager Joydeep Mukherjee, Senior Product Marketing Manager David Belanger, Senior Program Manager Guest speaker: Sridhar Mullapudi, VP of Product Management, Citrix Joydeep starts off. At the last Ignite, Microsoft committed to making RDS the virtual workspace platform of choice. In WS2016, they added performance, scale, and optimization for the … Continue reading “Vison And Upcoming Innovations for Microsoft Remote Desktop Services”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":19881,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"_wpcom_ai_launchpad_first_post":false,"footnotes":""},"categories":[14],"tags":[170,58,204,176,203,134,205,137],"class_list":["post-20525","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-eventnotes","tag-azure","tag-citrix","tag-event","tag-eventnotes","tag-ignite","tag-rds","tag-webapps","tag-windows-server-2016"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t
![\"WIN_20170926_09_18_07_Pro\"](\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2017\/09\/WIN_20170926_09_18_07_Pro.jpg\" "\\"WIN_20170926_09_18_07_Pro\\"")
<\/a><\/p>\n