If you are following me on Twitter then you may have noticed that a few of my friends are reviewing a book I am writing on VDI for PackT. I wanted to write this up as a one shop stop on all you needed to know about implementing Microsoft based VDI using the various Remote Desktop Services server roles in Windows Server 2012R2 with Windows 8.1 as the Virtual desktop OS. You would be forgiven for thinking that the hardest part of this book would be the last chapter Licensing, which I wanted to include precisely because it is widely touted as being hard and because you do need to know this stuff to implement it.
In the course of my research and my day job I have been doing some work with 10Zig and in fact it was as a result of some events we did together that I thought that Microsoft VDI needed to be written up properly and in one place. Prior to this I thought that thin clients were pretty much of a muchness and I certainly didn’t appreciate that they came in different types or how they have come on since I joined Microsoft. So I have asked Kevin Greenway from 10Zig to explain the world of the thin client and how your choice might affect the licensing..
The ever growing debate over which flavour of Thin Client is the right choice in relation to cost, performance, user experience, peripheral support, management, etc, etc, continues to fill blogs and review sites. Recent news from Microsoft on changes to Virtual Desktop Access (VDA) licensing to Windows Embedded throws a really interesting perspective on using a Windows Embedded based Thin Client for Virtual Desktop Infrastructure (VDI).
VDA, Thin Clients and PC’s
As of today if you wanted to use a Thin Client, which includes ‘Zero’, ‘Linux’ or ‘Windows Embedded’ based Thin Clients in conjunction with Virtual Desktop Infrastructure (VDI), you are also required to use Virtual Desktop Access (VDA) licensing. VDA licensing is charged at $100 per year for each device using this license. Couple that with the initial acquisition cost of any of the above types of Thin Clients which all require VDA licensing, the costs suddenly start to rack up and can exceed that of a traditional PC.
The VDA licensing does not apply if you use Microsoft Software Assurance (SA), which also includes some desktop virtualisation rights. Most commonly if a Windows PC is used as your endpoint for connecting to VDI and you have SA, this negates the need for VDA licensing. The downside to this is that by using a Windows PC as an endpoint, this doesn’t leverage any of the true benefits of VDI, most specifically the system administrator is now administering two desktops instead of one. There are options to alleviate this somewhat with products, such as Windows Thin PC*, but what if you want to realise the benefits of Thin Clients? These include Manageability, Ease of Deployment, Small Footprint, Power Savings, and Lifespan due to no moving parts.
*This only applies to repurposing windows OS, not OS agnostic repurposing solutions.
This is where the recent news from Microsoft comes into play.
VDA, Software Assurance and Windows Embedded Thin Clients
If you use Microsoft Software Assurance and you have a Windows Embedded Thin Client (Windows Embedded 7/Windows Embedded 8), then you can now move this into your SA, thus negating the need for VDA licensing. This means the total acquisition cost is potentially lower than equivalent PC’s and even Linux based Thin Clients or Zero Clients due to the Annual Charge of VDA.
Windows Embedded, Linux or Zero
As mentioned there is always the ongoing debate over which flavour of Thin Client is right. One of the biggest arguments against Windows Embedded based Thin Clients has traditionally been the Cost, User Experience (We’ll cover this one in a moment) and Manageability. However the biggest argument for use of Windows Embedded Thin Clients, is that typically the majority of VDI vendors including Microsoft, Citrix, and VMware will focus their efforts primarily around the compatibility, support and feature set available within the Windows version of their clients for connecting to VDI.
You typically see a greater feature set and an earlier adoption of new features within the relevant Windows clients, than you will against say Linux, Android or IOS equivalents. Additionally the ever growing list of peripherals required to either work locally within the Thin Client or be redirected into the VDI session, will typically be more pain free from a Windows based Thin Client, than they will from an equivalent Linux or Zero Client.
More recently we’ve also started to see more and more emergence of client based plugins to redirect Real Time Transport Protocols (RTP/RTVP), such as the Microsoft Lync 2013 VDI plugin, which is only available as a Windows Plugin. We also have the various Media offloading capabilities such as those within the RemoteFX, Citrix HDX and VMware PCoIP stacks, which often still result in a greater tick list of features within these stacks from a Windows Client than their Linux or Zero counterparts.
Let’s shift back to the topic of User Experience. Whilst adopting VDI one of the easiest ways to get user buy-in is ensuring that their use experience, including access and entry remains the same as it has been with a PC. You want to ensure ultimately that the user only has access to their VDI desktop, not the local operating system. This way there is no retraining involved, or risk that the user can access/break the local operating system. The end goal is that you want their access device to serve simply as a launch pad to their VDI desktop, whilst also leveraging the performance that they achieved from their local PC.
This is where Windows Embedded 8 really comes into great effect. Windows Embedded 8 includes some really great features including HORM (Hibernate Once, Resume Many) for shrinking boot speeds, as well as Unified Write Filter (UWF) for protecting Disk Volumes/Folders/Registry. Embedded Lockdown Manager is also available for Windows Embedded 8 and includes several lockdown features. Examples of features include Keyboard Filter, Gesture Filter, USB Filter and most prolifically the Shell Launcher. The Shell Launcher can be configured to provide the user with a launch pad to their desired VDI session and restricts access to the underlying local operating system.
There are several management tools available for managing Windows Embedded 8, including Microsoft based and 3rd Party tools such as those provided by 10ZiG Technology within Windows Embedded 8 based Thin Clients (5818V/6818V) and the Enterprise Free 10ZiG Manager.
[added 12/05/14 by Andrew] the official Microsoft guidance on licensing Windows 8 embedded can be found here.
To conclude this exciting news from Microsoft regarding the addition of Windows Embedded into Software Assurance (SA) and negating the need for Virtual Desktop Access License (VDA), thus dramatically reducing the overall acquisition cost per Thin Client device against a PC. Additionally the adoption of new and exciting features into Windows Embedded 8 heralds a potential shift in the VDI/Thin Client space towards Windows Embedded 8.
Couple it all together with HORM, UWF, ELM and Client offload techniques powered by modern multi core CPU Thin Clients such as those from 10ZiG Technology (5818V/6818V). We are now equipped with what is fast becoming a Hybrid of traditional Thin Client and PC Technology into one.
It’s an interesting space to watch in the ever evolving world of VDI and Thin Client Technology.
For more on VDI there’s some great content on the Microsoft Virtual Academy.
Ok windows embed; but what if you have zero or Linux is? You have to pay vda!
Andrew, I've spent a lot of time at Directions on Microsoft writing about VDI licensing. As a Microsoft employee, I believe you have access to the articles through the Microsoft library. Our work includes several flowcharts and real world examples of how customers use VDI and the correct ways to license it. If you have any questions, please feel free to contact me (firstname.lastname@example.org)
This is quite confusing article, you are not specifying the TCO compared to a Linux Thin client. In addition you have not mentioned that this benefit applies only to a specific high end edition of Windows Embedded 8.1. Can you provide an example of applicable licenses and acquisition cost? Appreciate your writeup.
Sandler, I am sorry about this, the link to licensing brief covers the detail. However ROI we can't help with as that's going to spend on what organisation and plans you are eligible for which so I suggest you contact to your licensing specialist to help with this.
Can you clarify what licenses are required if you have to connect from a WES 7 thin client. As per the Microswoft site, you first need to upgrade to 8.1 Industry Pro/enterprise and then only you are eligible for SA.
Yes - there is a short window of opportunity that's closing soon to attach just the SA portion but other that that - going forward after that you will have to get the Windows Embedded Upgrade license w/SA. The actual name of the upgrade license to apply
to your existing OEM Win Embedded Thin Client is "Windows Embedded 8.1 Enterprise Upgrade" --- so this is the license that's currently eligible for the inclusion of SA.
I blogged about it recently as well and made a reference to this blog post by Andrew Fryer...
So because you have to buy the Win Embedded Upgrade license with SA (by the way this is similar to how you acquire SA on conventional Windows Desktop PCs) --- the costs are the same as VDA over the first few years. When you get start getting into the end of
your initial agreement and after renewing just the SA portion - this is when is start seeing the cost savings as the SA annual pricing is quite a bit less expensive than VDA (annual pricing).
In my above post where I mentioned my blog posting and in it made a reference to this blog posting by Andrew Fryer ---- I've changed the link address to:
Hi Can anybody refer me to the Microsoft document that detail this changes ? My Ms reseller is adamant that the changes are only related to Win 8 RT devices
he's wrong follow the links in this post and /or refer him to me. for example 10zig is an embeeded client and this applies to those