RDS architectures with unique Azure PaaS roles Though the standard RDS deployment architectures fit most scenarios, Azure continues to invest in first-party PaaS solutions that drive customer value. Below are some architectures showing how they incorporate with RDS. RDS deployment with Azure AD Domain Services. When connecting, user opens the page via IE, enters credentials into Azure AD, Allows RDP ActiveX control when prompted on RDWeb page, enters credentials into RDWeb, then launches Desktop/RemoteApp.
Remote Desktop Services (RDS) or as it was previously known, Windows Terminal Server, has been the remote access backbone protocol to Windows servers since Windows Server 2003.
The ability to remotely access and interact with the graphical user interface (GUI) on a Windows server is a critical operational function for Windows systems administrators everywhere. For this reason, every Windows server allows up to two concurrent remote desktop connections giving sysadmins the ability to login to a server remotely and manage it.
Click here to download our free ebook and learn more about the top trends for Microsoft Azure
However, this remote access and management capability can do much more for business than merely ease the burden of IT systems management. Giving users the ability to access and work on a remote machine has multiple real business benefits such as reduced costs, improved efficiencies and the option to rapidly deploy and manage advanced end-user applications.
The business benefits of Microsoft Azure RDS
1 – Delivering a single application experience
The Internet has indeed transformed the way we work and communicate. Flexibility is an underlying theme throughout the modern workplace which gives users the freedom to work on a variety of different platforms while engaged on a single task or assignment. However, there are times when users need to use a specific application which only runs on Windows. If the user is on a non-Windows device such as an Apple or Chromebook, working on a Windows-only application is just not possible.
RDS solves this problem as it allows organizations to create a unified remote desktop experience for all users. By configuring an RDS environment, businesses can give users on any platform access to use the specialized application. Also, delivering applications this way also provides standardization and eases management’s burden of making sure every user is on the latest version.
2 – Data security
Working remotely has truly transformed the occupational landscape, but it also creates data security challenges. When all users work in a single location, data security is easier as the organization has direct control over the data storage location and can manage access to the data source. However, when users are accessing data remotely, there is a risk of users copying data to their end-user devices or using public filesharing services which create a serious security risk if left unmanaged.
If organizations choose to deploy RDS as their remote work solution, this data risk is mitigated. All data is stored on servers under the direct management of the organization giving businesses the oversight and control they need over data flow and access.
3 – Processing power
In a world where processing power is increasing on an exponential scale, developers build applications which leverage the additional system resources available. After all, the greater the resources, the better the performance of the application and the more it can accomplish in less time. However, not all end-user devices are capable of running high resource intensive applications. Older devices may struggle to run applications which are CPU and memory intensive, negatively impacting the productivity of the end-user.
Because RDS is server-based, high resource intensive applications can run smoothly. In addition, having a single instance of the application to manage eases the operational burden on the IT team, and the total cost of ownership is much less. For example, if there is a need for additional hardware they can be added to a single server which costs far less than upgrading multiple end-user devices.
4 – Simplified management
Standardization is a crucial principle in IT management as it lightens the administrative burden increasing efficiency while lowering costs. Furthermore, there are real business benefits with adopting simple solutions that have fewer moving parts as these are easier to manage and cost less over time.
Deploying any solution through RDS is an answer which is both standardized and simplified. Administrators can deploy complex solutions in a single instance without the need to manage multiple operating environments. Also, any maintenance needs only to be performed once which dramatically reduces the time and increases security associated with system updates, backups and similar operational tasks.
5 – Reduced costs
Cost reduction is an overarching objective of every organization be it a commercial enterprise or a non-profit. Economic scarcity is a reality every business deals with, and cost reduction allocates more financial resources to invest in strategic initiatives which ultimately ensure the prosperity and survival of the organization.
RDS reduces the overall cost of IT infrastructure. As discussed, it does this directly by minimizing the investment needed in hardware and software and indirectly by reducing overhead costs associated with IT operations.
Azure Rds
6 – Improved redundancy and uptime
Today’s world is dependent on online services, and any downtime has a monumental impact on both the organization and its users. Loss of revenue, loss of productivity and a negative impact on reputation are all real consequences when systems and services go down unexpectedly. To ensure optimal uptime, businesses need to invest in solutions with built-in redundancy to ensure resiliency in mitigating risks which threaten system availability.
As RDS is a server-based solution, organizations can easily configure the platform for maximum uptime by deploying multiple instances of the same RDS solution across several servers. In addition, RDS solutions are implemented in data centers which have the necessary infrastructure redundancy built-in. If a single node or service should fail, the impact will be negligible as the solution remains online and users are still able to work. Although building a redundant RDS solution does increase the overall cost, the additional expenditure is negligible when compared to the investment needed in creating redundancy for an end-user computing environment.
Azure Remote Desktop Services
Azure Remote Desktop Services takes the benefits of RDS and expands the offering by providing RDS on a global enterprise-grade cloud platform.
With the Microsoft Azure platform, organizations can rapidly deploy a cost-effective, redundant and scalable platform to host Windows desktops and applications. Deployment is further simplified with the option of Azure Marketplace offerings or quickstart templates so organizations can get their RDS platform configured and ready to use in a matter of minutes.
As Microsoft manages the underlying infrastructure, choosing to deploy RDS on Azure gives organizations the flexibility and benefits that come with a world-class Infrastructure as a Service offering. The advanced hardware, software, and networking requirements are taken care of, giving organizations the freedom to concentrate on building solutions which are relevant and add value to their business. Also, the pay-per-use model and no upfront capital expenditure makes Azure RDS an affordable option for businesses of any size looking to deploy and manage remote operating environments.
-->Applies to: Windows Server (Semi-Annual Channel), Windows Server 2019, Windows Server 2016
Below are various configurations for deploying Remote Desktop Services to host Windows apps and desktops for end-users.
Note
The architecture diagrams below show using RDS in Azure. However, you can deploy Remote Desktop Services on-premises and on other clouds. These diagrams are primarily intended to illustrate how the RDS roles are colocated and use other services.
Standard RDS deployment architectures
Azure Rds Licensing
Remote Desktop Services has two standard architectures:
- Basic deployment – This contains the minimum number of servers to create a fully effective RDS environment
- Highly available deployment – This contains all necessary components to have the highest guaranteed uptime for your RDS environment
Basic deployment
Highly available deployment
RDS architectures with unique Azure PaaS roles
Though the standard RDS deployment architectures fit most scenarios, Azure continues to invest in first-party PaaS solutions that drive customer value. Below are some architectures showing how they incorporate with RDS.
RDS deployment with Azure AD Domain Services
The two standard architecture diagrams above are based on a traditional Active Directory (AD) deployed on a Windows Server VM. However, if you don't have a traditional AD and only have an Azure AD tenant—through services like Office365—but still want to leverage RDS, you can use Azure AD Domain Services to create a fully managed domain in your Azure IaaS environment that uses the same users that exist in your Azure AD tenant. This removes the complexity of manually syncing users and managing more virtual machines. Azure AD Domain Services can work in either deployment: basic or highly available.
RDS deployment with Azure AD Application Proxy
The two standard architecture diagrams above use the RD Web/Gateway servers as the Internet-facing entry point into the RDS system. For some environments, administrators would prefer to remove their own servers from the perimeter and instead use technologies that also provide additional security through reverse proxy technologies. The Azure AD Application Proxy PaaS role fits nicely with this scenario.
For supported configurations and how to create this setup, see how to publish Remote Desktop with Azure AD Application Proxy.