Agramont.net

Sr. Product Manager, Enterprise Tech for Accelrys
Welcome to Agramont.net Sign in | Join | Help
in Search

Conrad Agramont's Blog

VDI with MokaFive or MED-V

Today I found an interesting web video from MokaFive’s CTO “John Whaley” on Virtual Desktop (http://www.mokafive.com/solutions/it-administrators.php).  He does a good job explaining the differences between deploying a virtual desktop on a server (such as Microsoft Hyper-V, although he didn’t call out any product) versus deploying a “master image” onto a desktop.  Again, he didn’t call out an one product, but I’m assuming he’s trying to get viewers to lean towards their “Live PC” solution.

John calls out the following Pro and Con’s for a Server based solution:

  1. Pro- Management
  2. Con- No offline
  3. Con- Expensive
  4. Con- User Experience

I can’t disagree with that list, but it obviously lacking some of the disadvantages for the other side (running the virtual machine on the desktop).

  1. Con – Security: This is no different then a regular PC.  If the laptop get’s lost or stolen, how to you ensure that the data is secure or gets wiped.
  2. Con – Bandwidth: Although the user isn’t getting screen refreshes across the wire like in a Server deployed Virtual Desktop solution, you still need to get your updates across the wire.  Again, no different than a typical PC, but now you could get updates for TWO pc’s.  The base OS and the VM.
  3. Con – Hardware: Now that you’re going to run yet ANOTHER OS (remember the base OS) on a single machine, does that PC have the power to do it?  If not, you’ll need to purchase new hardware (there again we have more management and IT headaches) or upgrade the hardware (IT now has to touch a machine…expensive)
  4. Con – Performance: The performance of the Virtual Desktop is now dependant on the underlying hardware.

To be fair here, this is the same kind of issues that you get with any Virtual Desktop solution that runs on the client’s machine.  Another good example of this is a solution from Microsoft called “Microsoft Enterprise Desktop Virtualization” (MED-V).  It leverages Microsoft Virtual PC on the client end to run the “Virtual Desktop”.  By using Microsoft Virtual PC (VPC) alone, you can deploy a Virtual Desktop to a number of machines.  But that doesn’t give you the centralized management out of the box such as MokaFive.  In order to get that level of management, you’ll need to use a combination of Microsoft System Center Configuration Manager and the Microsoft Deployment solution accelerator.  What Microsoft does with MED-V is allow the user to have multiple OS’s running on the same hardware, but the end-user only “sees” the base installed OS and the Shortcuts to the applications running on the OS “under the covers”.  To the end user, they get the best of both worlds (now I hear Hannah Montana in my head due to my daughter Sophia singing all the time….back to article).  The user still gets to use their existing applications PLUS the managed applications provided by IT.  There are a number of good reasons to go this way, you can read more about that from Microsoft (http://www.microsoft.com/windows/enterprise/products/med-v.aspx).

The VDI solution between MokaFive and MED-V are a bit different, except that they both run on the client machine.  So now the REAL questions is, “Is it better to have a Virtual Desktop run on a Server or a Client machine?”  The answer is the favorite for all consultants, like myself.  “It Depends”.  The reason is because it depends on the end-user scenario, budget, hardware, and more.  In reality, you could do both.  By leveraging the Microsoft Desktop Optimization Pack (MDOP), you get access to MED-V as well as “Microsoft Application Virtualization” (APP-V) which simplifies the deployment of applications across traditional PC/OS deployments to terminal servers and virtual desktops.

To close, there are a number of virtual technologies in the market place today and growing focused on Virtual Desktops and how to best handle application deployment, management of the OS, and User State.  You need to first look at your end-user scenarios and then shop around for the right technology.  From experience, I strongly suggest you also take a look at your existing Microsoft licenses.  You may find you already have much, if not all, of the licenses you’ll need in order to do what you want.

Follow me on Twitter: http://twitter.com/agramont/

Comments

 

Daniel Feller said:

Interesting analysis. From what I've seen, if you are serious about VDI you need a solutiont that is capable of hosting virtual desktops in the data center on a hypervisor and you also need to have the capability of deliving a virtual desktop to a physical workstation.  There are benefits/concerns with each, but you need the flexibility to pick the best solution for your different user groups. Plus, many physical workstations are fairly new. If you move those to host-based virtual desktops, you are wasting a lot of good hardware.  With streamed virtual desktops, you can still utilize the hardware.  

Daniel

June 30, 2009 5:34 AM
 

Daniel Feller said:

Interesting analysis. You are correct when saying It depends, because it really does.  From my experiences you need a solution that gives you this option of doing VDI as a virtual server (host-based) and doing VDI as a physical workstations (streamed).  Host-based lets you extend the life of older PCs, while streamed allows you to utilize the hardware of newer PCs but still see the benefits of VDI.  

June 30, 2009 5:37 AM
 

agramont said:

Daniel (@DJFeller) - I agree with this 100%.  I'll even extend that thought.  Many of the techniques used for deploying and optimizing an imaged OS (For VDI) and dynamically deploying applications (Application Virtualization) should also be used for the base client OS as well.  Many times an IT shop will take the shortcut route and just "update" the OS that was deployed on the desktop/laptop/netbook by the OEM.  The great thing about a VDI project (and why it can't get expensive with a consultant) is that it forces the organization to get more automated and that then trickles back down to the rest of the physical machines.  Everybody wins!

June 30, 2009 9:00 AM
 

John Whaley said:

Hey Conrad,

Thanks for the comments on the whiteboard video.  I completely agree that the answer to which is better, server vs. client-based virtualization, is "it depends".  In some cases server makes more sense, for example if you want to repurpose 5-year-old desktops, they won't have the horsepower to run local applications but they would work fine as dumb terminals.  However if you have a highly-mobile workforce with relatively new laptops, client-based virtualization is likely a better match.

One important point about security, when doing client-based virtualization you can wrap the virtual machine in an encryption layer, avoiding the problem of data leakage from a lost laptop.  Our product has built-in encryption, but you can also use an off-the-shelf product like TrueCrypt.  Second, you can send out a "poison pill" on the management console so when the machine happens to have a network connection, it will securely zero the data.

Also, you still need to worry about patching the base OS, whether you are using it for remote display or client-based virtualization.  We see a common use case of work-from-home or contractors who BYOPC, and the company provides a secure managed corporate environment via a virtual machine.

-John

June 30, 2009 6:54 PM
 

traslochi milano said:

Wow nice information you have here.thanks for sharing

November 27, 2009 12:06 AM

Leave a Comment

(required) 
(optional)
(required) 
Submit

About agramont

Conrad Agramont is focused on .NET Development, Virtualization, Windows 7, Windows Server 2008, Virtual Desktop, and Microsoft Business Productivity (Exchange, Office, Live Communications)
For more information on Conrad and Agramont Services, please visit: http://agramontservices.com
Follow Me On Twitter (@agramont)

This Blog

Syndication

News

Add to Technorati Favorites

Community Tools