Microsoft Remote Desktop Services

Microsoft Remote Desktop Services
Name	Microsoft Remote Desktop Services
Developer	Microsoft
Released	1998
Programming language	C++, C#
Operating system	Microsoft Windows Server
Genre	Remote desktop, application virtualization
License	Commercial proprietary software

Microsoft Remote Desktop Services is a Microsoft server role that provides remote desktop and application virtualization capabilities for Windows environments. It enables users to access full desktops, individual applications, and virtualized resources from diverse client devices, integrating with Windows Server, Active Directory, Hyper-V, and Azure. The technology is widely used in enterprise, healthcare, finance, and education settings to centralize application delivery, support remote work, and simplify management.

Overview

Remote Desktop Services (RDS) offers session-based desktops, virtual desktop infrastructure, and remote application publishing. RDS interacts with Windows Server 2008 R2, Windows Server 2012, Windows Server 2016, Windows Server 2019, and Windows Server 2022 releases and interoperates with client platforms such as Windows 10, Windows 11, macOS, iOS, and Android. RDS integrates with identity and directory services like Active Directory Federation Services and Azure Active Directory for authentication and single sign-on. Organizations often compare RDS to virtualization and desktop delivery solutions from VMware Horizon, Citrix Virtual Apps and Desktops, and Parallels Remote Application Server.

History and development

RDS originated from Windows NT remote management features and evolved through Windows Server Terminal Services and Remote Desktop Protocol enhancements. Early milestones include Terminal Services in Windows Server 2003 and the rebranding to Remote Desktop Services in Windows Server 2008 R2. Subsequent development incorporated RemoteFX for graphics acceleration, integration with Hyper-V for virtual machine hosting, and cloud-focused features aligned with Microsoft Azure services. RDS advancements paralleled developments in protocols such as Remote Desktop Protocol evolution, and competed with alternatives from Citrix Systems and VMware, Inc..

Architecture and components

RDS architecture comprises several server roles and supporting services deployed on Windows Server and hypervisors. Core components include: - Remote Desktop Session Host (RDSH) for session-based desktops and Terminal Services-style application hosting. - Remote Desktop Virtualization Host (RDVH) integrating with Hyper-V to provide virtual desktops. - Remote Desktop Connection Broker (RD Connection Broker) for session load balancing and reconnection, integrating with Active Directory. - Remote Desktop Gateway (RD Gateway) for secure remote access over HTTPS using Network Policy Server and Transport Layer Security. - Remote Desktop Web Access (RD Web Access) for browser-based client access leveraging Internet Information Services. - Remote Desktop Licensing (RD Licensing) for CAL management and license servers. These components connect via the Remote Desktop Protocol and rely on networking features such as Network Load Balancing and storage solutions like Storage Spaces Direct.

Features and functionality

RDS provides features for remote display, peripheral redirection, and resource control. Prominent capabilities include: - Session-based multi-user desktops enabling concurrent user sessions on Windows Server. - Virtual Desktop Infrastructure (VDI) supporting persistent and pooled virtual machines hosted on Hyper-V with integration to System Center Virtual Machine Manager. - RemoteApp publishing to stream individual applications to client desktops, competing with application virtualization from Microsoft App-V and ThinApp. - Multimedia redirection and graphics acceleration leveraging RemoteFX and GPU pass-through for compatibility with NVIDIA GRID and other hardware. - Clipboard, printer, smart card, and USB redirection interacting with Active Directory Certificate Services for smart card authentication. - Device and bandwidth optimization with adaptive codecs, audio/video redirection, and support for High Efficiency Video Coding through client updates.

Deployment and licensing

RDS deployment models range from small single-server installations to large farm architectures distributed across datacenters and cloud regions such as Azure regions. Common deployment patterns involve dedicated RD Session Host farms, RD Gateway for perimeter access, and RD Connection Broker clusters for high availability managed with Windows Failover Clustering. Licensing requires Remote Desktop Services Client Access Licenses (RDS CALs) issued by RD Licensing servers and compliance with Microsoft Volume Licensing programs or Microsoft Cloud Agreement terms. Providers and integrators include Accenture, Deloitte, and managed service operations run by Rackspace and Amazon Web Services partners.

Security and administration

RDS administration leverages tools like Server Manager, Group Policy, and PowerShell for role configuration and automation. Security features include TLS encryption for RDP, RD Gateway tunneling, Network Level Authentication (NLA) integrating with Kerberos and NTLM, and conditional access policies via Azure Active Directory Conditional Access. Administrators integrate RDS with auditing and monitoring solutions such as Microsoft System Center Operations Manager, Splunk, and Azure Monitor to track sessions, performance, and security events. Best practices reference segmentation with Windows Firewall, multi-factor authentication through Azure MFA or third-party providers, and patch management coordinated with Microsoft Update and Windows Server Update Services.

Use cases and integrations

RDS supports remote work, application consolidation, call center terminals, and lab environments for Universities and Healthcare institutions. Enterprises deploy RDS for legacy application support, centralized print and document workflows with Microsoft SharePoint, and specialized workflows integrating with SAP, Oracle Database, and Microsoft SQL Server. Cloud and hybrid scenarios combine RDS with Azure Virtual Network, ExpressRoute, and Azure Bastion for connectivity. Third-party integrations include identity providers such as Okta, endpoint management with Microsoft Intune, and backup/DR solutions from Veeam, Commvault, and Zerto.

Category:Microsoft server software