Security
Reader small image

You're reading from  Mastering Windows 365

Product typeBook
Published inSep 2023
PublisherPackt
ISBN-139781837637966
Edition1st Edition
Concepts
Operating Systems
Right arrow
Authors (3):
Christiaan Brinkhoff
Christiaan Brinkhoff
author image
Christiaan Brinkhoff

Christiaan Brinkhoff works as a Principal Program Manager and Community Director for Windows 365 and AVD at Microsoft, in his role at Microsoft, he works on features such as Windows 11, Windows 365 app, Switch and Boot. Christiaan is also an Author (3 books) and Inventor (3 patents). His mission is to drive innovation while bringing Windows 365, Windows, and Microsoft Intune closer together, drive community efforts around virtualization to empower Microsoft customers in leveraging new cloud virtualization scenarios. Christiaan joined Microsoft in 2018 as part of the FSLogix acquisition. He has also been rewarded with the Microsoft MVP, Citrix CTP, and VMware vExpert community achievements - for his continued support in the EUC community.
Read more about Christiaan Brinkhoff

Sandeep Patnaik
Sandeep Patnaik
author image
Sandeep Patnaik

Sandeep is a virtualization veteran with nearly two decades of experience in the industry. He has shipped multiple billion-dollar products and cloud services for Microsoft to a global user base including Windows, Azure Virtual Desktop, and Windows 365. His contributions have earned him multiple patents in this field. Currently, he leads a stellar team that is responsible for building the product strategy for Windows 365 and Azure Virtual Desktop services and shaping the future of end-user experiences for these services.
Read more about Sandeep Patnaik

Morten Pedholt
Morten Pedholt
author image
Morten Pedholt

Morten works as a Cloud Architect for a consultant company in Denmark where he advises and implements Microsoft virtual desktop solutions to customers around the world, Morten started his journey as a consultant over 8 years ago where he started with managing client devices but quickly found a passion for virtual device management. Today Windows 365 and Azure Virtual Desktop are the main areas that are being focused on alongside Microsoft Intune. Based on all the community activities Morten has done in the past years, he got rewarded with the Microsoft MVP award in the category of Windows 365 in March 2022.
Read more about Morten Pedholt

View More author details
Right arrow

Knowing about alternate clients

In addition to Windows 365 clients, users can also use alternate clients to connect to Windows 365. In this section, we will look at alternate clients from Microsoft as well as approved partners.

Microsoft Remote Desktop client

Users can also use the Microsoft Remote Desktop app on Windows, macOS, iOS/iPadOS, and Android to access their Cloud PCs. Here are the instructions to set up the Remote Desktop client:

  1. Download and install the Remote Desktop client from the platform-specific store.
  2. Open the Remote Desktop client.
  3. Select Subscribe or Add Workspace, depending on the client. If you’re asked for a workspace URL, enter the following: https://rdweb.wvd.microsoft.com/api/arm/feeddiscovery.
  4. Enter the Azure AD credentials.
  5. The Cloud PC appears in the list, and it can be double-clicked to launch it.
    6. ...

Meeting endpoint requirements

In this section, we will explore the hardware requirements for accessing a Cloud PC. These requirements differ based on the client, platform, and peripherals. Additionally, we will delve into additional hardware options that can enhance the overall experience, taking it from satisfactory to extraordinary!

One of the major advantages of Cloud PCs is their ability to leverage cloud resources for seamless performance. However, it’s important to note that there are minimal resource requirements on the endpoint side. As your endpoint setup expands, such as with multiple monitors or higher resolutions such as 4K, and the inclusion of specific offloaded workloads such as Teams, the minimum hardware requirements will increase. The Cloud PC experience can be impacted by other applications running on the endpoint. To ensure a smooth experience, it’s always recommended to consult the hardware manufacturer or software developer for any additional...

Delivering a premium experience

In this part of the chapter, we will take the liberty of sharing some technical information at a level that is different from the rest of the chapter. Hopefully, you’ll enjoy geeking out in this section. The Windows 365 experience can be greatly enhanced with the appropriate hardware configuration. Windows 365 connections use RDP. RDP uses the following codecs:

  • Wavelet/Calista Progressive Codec: Primarily used for image encoding.
  • Clear Codec Run-Length Encoding (based on NSCodec): Specifically designed for text encoding.
  • AVC444/H.264: A fullscreen codec that takes advantage of hardware decoding and encoding when available. Commonly utilized with thin clients.
  • AVC420/H.264: A variant of the preceding codec optimized for video playback regions with reduced color space. Used in conjunction with Wavelet and Clear Codec.
  • RDP: Used for the rest of the encoding tasks.

Furthermore, RDP incorporates different profiles, which...

Implementing protocol enhancements

Another critical element for providing enhanced end user experiences is the protocol used to deliver content. In this section, we will delve into new RDP enhancements, end user network enhancements, and improvements to Microsoft Teams workloads that are bandwidth-heavy.

RDP Shortpath

Cloud PCs can use RDP Shortpath to establish connections over the User Datagram Protocol (UDP). We covered RDP Shortpath in detail in Chapter 2, so please hop on over there for a refresher on what it is and why is it important. If your network’s firewall blocks UDP traffic, RDP Shortpath will not be able to establish a data flow and will instead use TCP-based reverse connect transport. Let’s have a look at the raw data differences. Start by looking at the following screenshot to see what a connection to a Cloud PC with TCP looks like.

Figure 5.45 – Cloud PC utilizing a TCP-based connection

Figure 5.45 – Cloud PC utilizing a TCP-based connection

Now look at when the connection...

Utilizing graphics enhancements

In this section, we will explore various graphics enhancements, delving into the diverse defaults across protocols and vendors. By understanding these differences, you will gain insights into optimizing graphics quality while considering resource utilization on Cloud PC endpoints.

RDP profiles

When it comes to graphics enhancements for improved end user experiences, it is important to consider the impact of default settings on both quality and resource utilization. Each protocol has its own set of defaults that influence these factors. Notably, default graphics quality settings vary among different vendors, leading to variations in performance and visual output.

For instance, RDP, used by Windows 365, prioritizes image quality and maintains 100% fidelity without compromising color accuracy (a.k.a. 4:4:4 chroma subsampling). On the other hand, many video codecs utilize 4:2:2 chroma subsampling (instead of 4:4:4) to optimize content, but this...

Summary

In the chapter, you’ve learned everything about enabling users to access their Cloud PCs from any device in a secure way, as well as about optimizations available to deliver premium experiences. We went deep into the new, modern user experiences that you get when choosing Windows 365 that are different from any other virtualization solutions on the market. We hope you liked it!

In the next chapter, you will learn how to secure Cloud PCs.

Questions

  1. What hardware do you need for Windows 365 Boot?
  2. What are the hardware requirements for Microsoft Teams as part of Cloud PCs?
  3. How can you optimize an endpoint to deliver an outstanding end user experience?

Further reading

Please take advantage of the following resources to learn more:

Meeting endpoint requirements

In this section, we will explore the hardware requirements for accessing a Cloud PC. These requirements differ based on the client, platform, and peripherals. Additionally, we will delve into additional hardware options that can enhance the overall experience, taking it from satisfactory to extraordinary!

One of the major advantages of Cloud PCs is their ability to leverage cloud resources for seamless performance. However, it’s important to note that there are minimal resource requirements on the endpoint side. As your endpoint setup expands, such as with multiple monitors or higher resolutions such as 4K, and the inclusion of specific offloaded workloads such as Teams, the minimum hardware requirements will increase. The Cloud PC experience can be impacted by other applications running on the endpoint. To ensure a smooth experience, it’s always recommended to consult the hardware manufacturer or software developer for any additional...

Delivering a premium experience

In this part of the chapter, we will take the liberty of sharing some technical information at a level that is different from the rest of the chapter. Hopefully, you’ll enjoy geeking out in this section. The Windows 365 experience can be greatly enhanced with the appropriate hardware configuration. Windows 365 connections use RDP. RDP uses the following codecs:

  • Wavelet/Calista Progressive Codec: Primarily used for image encoding.
  • Clear Codec Run-Length Encoding (based on NSCodec): Specifically designed for text encoding.
  • AVC444/H.264: A fullscreen codec that takes advantage of hardware decoding and encoding when available. Commonly utilized with thin clients.
  • AVC420/H.264: A variant of the preceding codec optimized for video playback regions with reduced color space. Used in conjunction with Wavelet and Clear Codec.
  • RDP: Used for the rest of the encoding tasks.

Furthermore, RDP incorporates different profiles, which...

Implementing protocol enhancements

Another critical element for providing enhanced end user experiences is the protocol used to deliver content. In this section, we will delve into new RDP enhancements, end user network enhancements, and improvements to Microsoft Teams workloads that are bandwidth-heavy.

RDP Shortpath

Cloud PCs can use RDP Shortpath to establish connections over the User Datagram Protocol (UDP). We covered RDP Shortpath in detail in Chapter 2, so please hop on over there for a refresher on what it is and why is it important. If your network’s firewall blocks UDP traffic, RDP Shortpath will not be able to establish a data flow and will instead use TCP-based reverse connect transport. Let’s have a look at the raw data differences. Start by looking at the following screenshot to see what a connection to a Cloud PC with TCP looks like.

Figure 5.45 – Cloud PC utilizing a TCP-based connection

Figure 5.45 – Cloud PC utilizing a TCP-based connection

Now look at when the connection...

Utilizing graphics enhancements

In this section, we will explore various graphics enhancements, delving into the diverse defaults across protocols and vendors. By understanding these differences, you will gain insights into optimizing graphics quality while considering resource utilization on Cloud PC endpoints.

RDP profiles

When it comes to graphics enhancements for improved end user experiences, it is important to consider the impact of default settings on both quality and resource utilization. Each protocol has its own set of defaults that influence these factors. Notably, default graphics quality settings vary among different vendors, leading to variations in performance and visual output.

For instance, RDP, used by Windows 365, prioritizes image quality and maintains 100% fidelity without compromising color accuracy (a.k.a. 4:4:4 chroma subsampling). On the other hand, many video codecs utilize 4:2:2 chroma subsampling (instead of 4:4:4) to optimize content, but this...

Summary

In the chapter, you’ve learned everything about enabling users to access their Cloud PCs from any device in a secure way, as well as about optimizations available to deliver premium experiences. We went deep into the new, modern user experiences that you get when choosing Windows 365 that are different from any other virtualization solutions on the market. We hope you liked it!

In the next chapter, you will learn how to secure Cloud PCs.

Questions

  1. What hardware do you need for Windows 365 Boot?
  2. What are the hardware requirements for Microsoft Teams as part of Cloud PCs?
  3. How can you optimize an endpoint to deliver an outstanding end user experience?

Further reading

Please take advantage of the following resources to learn more:

lock icon
The rest of the chapter is locked
Previous Chapter
Chapter 9 of 16
Next Chapter
You have been reading a chapter from
Mastering Windows 365
Published in: Sep 2023Publisher: PacktISBN-13: 9781837637966
© 2023 Packt Publishing Limited All Rights Reserved
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Sign up now
undefined
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Start free trial
Renews at ₹800/month. Cancel anytime

Authors (3)

author image
Christiaan Brinkhoff

Christiaan Brinkhoff works as a Principal Program Manager and Community Director for Windows 365 and AVD at Microsoft, in his role at Microsoft, he works on features such as Windows 11, Windows 365 app, Switch and Boot. Christiaan is also an Author (3 books) and Inventor (3 patents). His mission is to drive innovation while bringing Windows 365, Windows, and Microsoft Intune closer together, drive community efforts around virtualization to empower Microsoft customers in leveraging new cloud virtualization scenarios. Christiaan joined Microsoft in 2018 as part of the FSLogix acquisition. He has also been rewarded with the Microsoft MVP, Citrix CTP, and VMware vExpert community achievements - for his continued support in the EUC community.
Read more about Christiaan Brinkhoff

author image
Sandeep Patnaik

Sandeep is a virtualization veteran with nearly two decades of experience in the industry. He has shipped multiple billion-dollar products and cloud services for Microsoft to a global user base including Windows, Azure Virtual Desktop, and Windows 365. His contributions have earned him multiple patents in this field. Currently, he leads a stellar team that is responsible for building the product strategy for Windows 365 and Azure Virtual Desktop services and shaping the future of end-user experiences for these services.
Read more about Sandeep Patnaik

author image
Morten Pedholt

Morten works as a Cloud Architect for a consultant company in Denmark where he advises and implements Microsoft virtual desktop solutions to customers around the world, Morten started his journey as a consultant over 8 years ago where he started with managing client devices but quickly found a passion for virtual device management. Today Windows 365 and Azure Virtual Desktop are the main areas that are being focused on alongside Microsoft Intune. Based on all the community activities Morten has done in the past years, he got rewarded with the Microsoft MVP award in the category of Windows 365 in March 2022.
Read more about Morten Pedholt

Personalised recommendations for you

Based on your interests and search pattern

Attacking and Exploiting Modern Web Applications

Attacking and Exploiting Modern Web Applications

Attacking and Exploiting Modern Web Attacks will help you understand how to identify attack surfaces and detect vulnerabilities. This book takes a hands-on approach to implementation and associated methodologies and equips you with the knowledge and skills needed to effectively combat web attacks.

BookAug 2023338 pages
Automotive Cybersecurity Engineering Handbook

Automotive Cybersecurity Engineering Handbook

This Automotive Cybersecurity Engineering Handbook untangles the complexities of building secure automotive products and helps you to comply with cybersecurity standards. It provides practical tools, tips, and techniques coupled with real-world examples to enable you to create cyber-resilient automotive products with ease.

BookOct 2023392 pages
Official Google Cloud Certified Professional Cloud Security Engineer Exam Guide

Official Google Cloud Certified Professional Cloud Security Engineer Exam Guide

This book will help you to design, develop, and operate security controls on Google Cloud as well as discover best practices for relevant security domains, including identity and access management, network, and data.

BookAug 2023496 pages
Cloud Penetration Testing for Red Teamers

Cloud Penetration Testing for Red Teamers

The advent of cloud networks and the AWS, Azure, and GCP platforms has revolutionized how companies of all sizes in all industries do business online. This book will help you meet the emerging demand for pentesting as it guides you through the tools, techniques, and security measures used by pentesters and red teamers in the 2020s and beyond.

BookNov 2023298 pages
ISACA Certified in Risk and Information Systems Control (CRISC®) Exam Guide

ISACA Certified in Risk and Information Systems Control (CRISC®) Exam Guide

ISACA Certified in Risk and Information Systems Control (CRISC®) Certification Guide is an enterprise IT risk management professional’s dream. With its in-depth approach and various self-assessment exercises, this book arms you with knowledge of every single aspect of the certification, and is a fantastic career companion after you’re certified.

BookSep 2023316 pages5
Burp Suite Cookbook

Burp Suite Cookbook

Burp Suite is an immensely powerful and popular tool for web application security testing. This book provides a collection of recipes that address vulnerabilities in web applications and APIs. It offers guidance on how to configure Burp Suite, make the most of its tools, and explore into its extensions.

BookOct 2023450 pages
Building and Automating Penetration Testing Labs in the Cloud

Building and Automating Penetration Testing Labs in the Cloud

This hands-on guide will help you design and build a variety of penetration testing labs that mimic modern cloud environments running on AWS, Azure, and GCP. In addition to these, you will explore a number of practical strategies on how to manage the complexity, cost, and security risks involved when setting up vulnerable cloud lab environments.

BookOct 2023562 pages
Ethical Hacking Workshop

Ethical Hacking Workshop

As cyber-attacks grow and APT groups advance their skillset, you need to be able to protect your enterprise against cyber-attacks. In order to limit your attack surface, you need to ensure that you leverage the same skills and tools that an adversary may use to hack your environment and discover the security gaps. This book will teach you how to think like a hacker, use state-of-the-art hacking tools, and protect yourself and your organizaiton.

BookOct 2023220 pages
Windows Forensics Analyst Field Guide

Windows Forensics Analyst Field Guide

This book contains step-by-step processes to guide you in any investigation related to Windows OS. You’ll find out how to acquire evidence using multiple tools as well as examine and analyze the collected artifacts, while discovering multiple techniques used in real-world forensic incidents.

BookOct 2023318 pages
Implementing DevSecOps Practices

Implementing DevSecOps Practices

This book is a comprehensive, hands-on guide for individuals new to DevSecOps who want to implement DevSecOps practices successfully and efficiently. With its help, you’ll be able to shift security toward the left, enabling you to merge security into coding in no time.

BookDec 2023258 pages