Presentation Transcript

1. Remote Desktop Services

   Sudarshan Yadav Sr. Program Manager, Microsoft Email: syadav@microsoft.com
2. Agenda Introduce key roles of Remote Desktop Services How the traditional Terminal Server (now known as Remote Desktop) sessions and Virtual Desktop Infrastructure (VDI) scenarios work side by side Access from anywhere scenarios with RD Gateway
3. Remote Desktop Services in Win2K8 R2 Runs an application or desktop on one computer and presents it on another Remotes user experience via display protocol Is remote resource-agnostic Virtualizing presentation can: Speed some application performance Improve Remote worker efficiency Help Secure Data and Applications
4. Session Based Infrastructure Runs applications on a central server Allows users to share an operating system Isolates users into sessions
5. Virtual Desktop Infrastructure Runs virtual machines on a central server Gives each user their own operating system Personal Temporary
6. What's Available? The RD server runs applications locally and displays them on the client computer. Each user has a separate session RD Server RD Licensing RD Web Access RD Gateway Virtual desktop Server Connection Broker The virtual desktop server hosts the virtual desktops using Hyper-V. Each user has a separate VM Client
7. What Do I See? The RD Web Access server displays remote resources in a Web browser. RD Server RD Licensing RD Web Access The ConnectionBroker runs the publishing service to aggregate the remote resources RD Gateway Virtual desktop server Connection Broker Client
8. How Do I Connect to It? Connection Broker sends incoming connection requests to the right endpoint RD Server RD Licensing RD Web Access RD Gateway Virtual desktop server Connection Broker The RD Gateway server provides secure remote access to the network from the Internet Client
9. How Do I License Access? The RD Licensing Server manages distribution and tracking of the TSCALs required to access remote resources. RD Server RD Licensing RD Web Access RD Gateway Virtual desktop server Connection Broker Client
10. DEMO

    Remote Apps & Shell Integration

    RD Server TSVhost-suds RD Web Access RD-CB Connection Broker RD-CB Publishing the app Client Local Win7 Client
11. Connection Brokering Architecture RD Server Connection Broker 3.Prepare/ Start VM 2.Get Target 4.Return Target Hyper-V TSV TSV TSV RD Redirector VM 5.Redirect To VM 1.Connect Hyper-V 6.Connect to VM TSV TSV TSV VM Client
12. DEMO

    VDI – Personal Domain Desktop

    RD Web Access RD-CB Virtual desktop server TSVhost-suds Connection Broker RD-CB AD Shan-w7s-3 Client Local Win7 Client
13. Connection Brokering in Windows 2008 R2 Session broker was introduced in Windows 2008 Brokered connections to terminal servers Supported extensibility API for replacing connection brokering logic Session Brokering is enhanced in Windows 2008 R2 and is known as Connection broker Brokers connections to both terminal servers and VMs Adds new extensibility to enhance brokering logic, not replace it
14. New Endpoints Physical Desktop RD Server Plug-in Plug-in Brokering Service Plug-in VM VM VM Connection Broker VM Virtual Desktop Server Windows Vista Windows XP Win7 Client
15. New Behavior X Wake On LAN Placing VMs Assigning VMs Physical Desktop RD Server Plug-in Plug-in Brokering Service Plug-in VM VM VM Connection Broker VM Virtual Desktop Server Windows Vista Windows XP Win7 Client
16. New Load Balancing Rules Server stress Originating IP address Time of day RD Server Plug-in Plug-in Brokering Service Plug-in VM VM Connection Broker VM VM Virtual Desktop Server Windows Vista Windows XP Win7 Client
17. Prior to WS08, there were two options for enabling TS access from outside: Open 3389 Set up VPNs Using RD Gateway, you can: Connect using 443 and no VPN Restrict access to certain people Limit the resources they can use Secure Internet Connections
18. How RD Gateway Works Internet Corp LAN DMZ Passes RDP/SSL traffic to TS RD Server Internal Firewall Tunnels RDP over RPC/HTTPS External Firewall Strips off RPC/HTTPS Home RDV Server Internet HTTPS / 443 Hotel RD Gateway Server Other RDP Hosts Eg. Desktops Network Policy Server Business Partner/ Client Site Active Directory DC
19. Connection Authorization Policies What authentication methods are allowed Which users can connect Which computerscan connect
20. Connection Authorization Policies Enable or disable device redirection Control what devicescan be redirected
21. Resource Authorization Policies Control what computers can be connected to by Active Directory Security Group… … or by TSG managed groups Control what ports canbe connected
22. Key Points Centralized computing can take different forms Separate remote users into sessions Separate remote users into virtual machines Microsoft knows centralized computing Support for remote desktops and remote applications isn’t new in Win2K R2… it just adds a new way of organizing centralized computing resources
23. References Terminal Server Home Page http://www.microsoft.com/windowsserver2008/en/us/ts-product-home.aspx Terminal Services Team Blog http://blogs.msdn.com/ts/ Terminal Services Newsgroup http://www.microsoft.com/technet/archive/community/newsgroups/topics/termsvcs.mspx?mfr=true Terminal Services Development Documentation http://msdn.microsoft.com/en-us/library/aa383494(VS.85).aspx Terminal Services App Compat Programming Guidelines http://msdn.microsoft.com/en-us/library/aa383490%28VS.85%29.aspx Windows Server 2008 Terminal Services Resource Kit http://www.microsoft.com/MSPress/books/12716.aspx
24. Feedback / QnA Your Feedback is Important! Please take a few moments to fill out our online feedback form at: << Feedback URL – Ask your organizer for this in advance>> For detailed feedback, use the form at http://www.connectwithlife.co.in/vtd/helpdesk.aspx Or email us at vtd@microsoft.com Use the Question Manager on LiveMeeting to ask your questions now!