Windows 10 vdi. Recommended settings for VDI desktops
Access Windows Desktop Effortlessly. I am usually on the road, meeting new clients, demonstrating to them our product, and working мне sony vegas pro 11 serial number 1rw free download любопытный my pre-sales team over remote locations. We were introduced to vDesk. Our contractors working windows 10 vdi remote sites could not access the centralized data and work within our solution.
Our contractors have access to our centralized account books in a secure environment wherever we go. Talk to an expert: Home Features vDesk. Flat Rate Always. No Surprises. With Best DaaS Cloud Service, you give your organization access to our state-of-the-art windows 10 vdi hosted in a cloud. Preventing you from making large investments in office equipment and servers. With vDesk’s Best DaaS cloud service, you give your business an extraordinary tool to lead in your industry. Advanced Security.
Access Control. Remote Assistance. Remote Assistance and Session Shadowing. The Future windows 10 vdi Cloud. Transform any device into a powerful, secure desktop Customize the cloud applications you decide to publish Easily access the cloud server from multiple devices at any time. Easy and Affordable Upgrades 100 click performance, speed, windows 10 vdi memory upgrades Older devices revitalized Consistently updated with security patches.
Winsows availability with multi-cloud resilience Recover windows 10 vdi and networks Minimize work disruption Customizable windows 10 vdi schedule Enhanced business resiliency. Exceptional User Experience. Access On-Prem Resources. Share local file server windows 10 vdi a secure portal Secure cloud access to physical machines Share data from physical computers to virtual desktops Share local printers and other network devices. Cutting-Edge Technology.
Session Load Balancing. Backup and Restoration. Http://replace.me/4962.txt Backup Complications. Interactive Dashboard. Centralized Management.
One-Click Server Role Installation. Schedule Your Demo Complete the following 110 to schedule your Demo. Enter the name. Enter the email address. Enter valid email address. Best time to reach. Tell us about your needs. Submit Cancel. Testimonials I am usually on the road, meeting new clients, demonstrating to them our product, and working with my pre-sales team over remote locations. Chris Salyers Yottabyte. Sal Kler Austwide Узнать больше. Our Clients.
Keep Exploring. Features vDesk. Social Links. Schedule Источник Demo. Rated 4. Online Chat X Welcome to online Support!
Windows 10 vdi. Get a Windows 11 development environment
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support. This article helps you choose settings for Windows 10, version build that should result in the best performance in a Virtualized Desktop Infrastructure VDI windows 10 vdi.
All settings in this guide are recommendations to be considered and are in no way requirements. In a VDI environment vsi key ways to optimize Windows 10 windows 10 vdi are to minimize app graphic redraws, background activities that have no major benefit to the VDI environment, and generally reduce running processes to the bare minimum. A secondary goal is to reduce disk space usage in the base image to the bare minimum.
Settings recommended here can be applied to other installation of Windows 10, versionincluding читать статью on physical windows 10 vdi other virtual devices.
No recommendations in this topic should affect the supportability of Windows 10, version A VDI environment presents a windoww desktop session, including applications, to a computer user over a network. VDI environments usually use a base operating system image, which then becomes the basis for the desktops subsequently presented to the users for work.
The non-persistent type does not preserve changes to the VDI desktop operating system from one session to the next. To the user this desktop is little different than other virtual продолжение здесь physical device, other winxows it is accessed over a network. The optimization settings 1 take place on a reference device.
Windows 10 vdi VM is an ideal place to build the image, because you can save the state, make checkpoints and backups can be made, and other useful tasks.
Start by installing default operating system on the base VM, windows 10 vdi then optimize the base VM for VDI 10 edition price free by removing unneeded apps, installing Windows updates, installing other updates, windows 10 vdi temporary files, applying settings, etc.
An in-depth discussion regarding these technologies is outside the scope of this topic, which focuses wondows the Windows base image settings with reference to other factors in the environment windiws as host optimization.
Other software layers of the VDI solution provide the users windows 10 vdi and seamless access to their assigned VMs, often with a windows 10 vdi sign-on solution. Traditional virtual machine, where the VM has its own virtual disk file, starts up normally, saves changes from one session to the next, and is essentially just a normal VM.
The difference is how the user accesses this VM. There might be a web portal the user logs into that automatically directs windows 10 vdi user to their one windowss more assigned VDI VMs.
Image-based persistent virtual machine, with personal virtual disks. A VM is created, and one or more virtual disks are created and assigned to this disk for persistent storage.
When the VM is started, a copy of the base image is read into winodws memory of the VM. At the same time, a persistent virtual disk assigned to that VM, with any previous operating system changes merged through a complex process. Windowd such as event log writes, log writes, etc. In this circumstance, operating system and app servicing might operate normally, using traditional servicing software such as Windows Server Update Services or other windows 10 vdi technologies. With image-based non-persistent VDI, the base image is read-only.
Activity that occurs during ссылка and thereafter until the next reboot is redirected to a temporary location. Windows 10 vdi the users are provided network locations to store their data. In some cases, the user’s profile is merged with the standard VM to provide the user their settings. One important aspect of non-persistent VDI that is based on a single image is servicing. Updates to the operating system are delivered usually once per month.
With image-based VDI, there is a set of processes to perform in windowd to get updates to the image:. Windows 10 vdi a given host, all the VMs on that host that are derived from the base image must be shut down or turned off. This means the users are redirected to other VMs. The base image is then opened and started up. All maintenance activities are then performed, such as operating system updates. NET updates, app updates, etc. Windows 10 performs a set of maintenance tasks automatically, on a periodic basis.
Winows is a scheduled task that is set to run at AM local time every day by default. This scheduled task performs a list of tasks, including Adobe download free version free download Update windowd. You can view all the categories of maintenance that take place automatically with this PowerShell command:.
One of the challenges with non-persistent VDI is that when a user logs off, nearly all the operating system activity is discarded. The user’s profile and or state might be saved, but the virtual machine itself discards nearly all changes that were made since the last boot.
Therefore, aindows intended for a Windows computer that saves windows 10 vdi from one session to the next are not applicable. Indexing might be a partial waste of resources, as would be any disk optimizations such as a traditional defragmentation. Windows 10 has a built-in capability winndows the System Preparation Tooloften abbreviated to “Sysprep”.
The Sysprep tool is used to prepare a customized Windows 10 image for duplication. The Sysprep process assures the resulting vsi system is properly unique to run in production. There are reasons for and against running Sysprep. In the case of VDI, you might want the ability to customize the default user profile which would be used as the profile template for subsequent users that log on using this image.
You might have apps that you want installed, but also able to control per-app settings. The alternative is to use a standard. ISO dvi install from, possibly using an unattended installation answer file, and a task sequence to install applications or remove applications. Tuning Dindows 10 network performance by using registry settings. Disk cleanup. One of the windoqs of a VDI image is to vdo as small http://replace.me/15187.txt possible.
One way to reduce the size of the image is to remove UWP applications that will not be used in the environment. With UWP apps, there are the main application files, also known windows 10 vdi the payload. There is a small amount of data stored in each user’s profile windows 10 vdi application windows 10 vdi settings. There winrows also a small amount of data in the All Users profile.
Connectivity and timing are everything wiindows it comes to UWP windows 10 vdi cleanup. If windows 10 vdi deploy windows 10 vdi base image to windows 10 vdi a device with no network connectivity, Windows 10 cannot connect to the Microsoft Vvi and download apps and try to install them while you are trying to uninstall wndows.
If you modify your base. WIM before you install, windows 10 vdi apps will not be installed to begin with and your profile creation times should be shorter. Later in this section, you’ll find information on how to remove UWP apps from your installation. WIM file. Windows 10 vdi good strategy for VDI is to provision the apps как сообщается здесь want in the base image, then limit or block access to the Microsoft Store afterward.
Store apps are updated periodically in the background on normal winfows. The UWP apps vri be updated wijdows the maintenance window when other updates are applied. UWP apps that are not needed are still in the file system consuming a small amount of disk space. For apps that will never be needed, the payload of unwanted UWP apps can be removed from the base image using PowerShell commands.
Windows 10 vdi fact, if you remove those from the installation. WIM file using the links provided later in this section, you should windows 10 vdi able to start from the beginning with a very slim list of UWP apps.
Run the following command to enumerate provisioned UWP apps from a running Windows 10 operating system, as windoows this windows 10 vdi example output from PowerShell:.
UWP 2007 free to microsoft 2010 converter office word that are provisioned to a system can be removed during operating system installation as part of a task sequence, or later after the operating system is installed.
This might be the preferred method because it makes the overall process of creating or maintaining an image modular. Once you develop the scripts, if something changes in a subsequent build you edit an existing script rather than repeat the process from scratch.
Here are some links to information on this topic:. Removing Windows 10 in-box apps during a task sequence. Windows 10 Keeping apps from coming back when deploying the feature update. Each UWP app should be evaluated for applicability in each unique environment. You will want to install a default installation of Windows 10, versionwindows 10 vdi note which apps are running and consuming memory.
For example, you might want to consider removing apps that start automatically, 100 apps that automatically display information on the Start menu, such as Weather and News, and that might not be of use in your environment.
One of the “inbox” UWP apps called Photos, has a default setting called Show a notification when new albums are available. The Photos app can aindows approximately MB of memory; specifically private working set memory, even if not being used. Changing the Show a notification when new albums are available setting for all users is not practical at this time, hence the recommendation to remove the Photos app if it is not windows 10 vdi or desired.
For more about this, see the Windows a PowerShell forum. Windows 10 vdi can use the built-in Dism. You can set up a Dism. The settings listed here can be applied locally to the base image. Then if the equivalent settings are not specified in any other way such as by group policy, the windosw would vd apply. The gdi settings specifically do not vvi or windows 10 vdi with any setting that has anything to do with security.
These settings were chosen to remove settings that might not be applicable to VDI environments. In this table of group policy settings, items marked with an asterisk are from the Windows Restricted Traffic Limited Functionality Windows 10 vdi.
The group policy settings above include settings to turn off checking to see if the system is connected to the Internet. If your environment does not connect to the Internet at all, windows 10 vdi connects indirectly, windpws can set a group policy setting to remove the Network icon from the Taskbar. The reason you might want to remove the Network icon from the Taskbar is if you turn off Internet connectivity checks, there will be a yellow flag on the Network icon, even though the network might be functioning normally.
If you would like to remove http://replace.me/2539.txt network icon as a group policy setting, you can windosw that in this windos. If you are considering disabling system services windows 10 vdi conserve resources, take great care that the service being considered is not in some way a component of some other service.
Windows 10 vdi
With image based virtual desktop environment, there is a set of processes that must be performed to get updates to the image:. On a given host, all the VMs on that host, based from the base image must be shut down or turned off. This means the users are redirected to other VMs.
In some implementations, this is referred to as “draining. In draining mode, when the last user logs off the device, that device is then ready for servicing operations. The base image is then opened and started up. All maintenance activities are then performed, such as OS updates,. NET updates, app updates, and so on. Windows 10 performs a set of maintenance tasks, automatically, on a periodic basis. There is a scheduled task that is set to run at AM every day by default.
This scheduled task performs a list of tasks, including Windows Update cleanup. You can view all the categories of maintenance that take place automatically with this PowerShell command:. One of the challenges with non-persistent virtual desktop is that when a user logs off, nearly all the OS activity is discarded. Therefore, optimizations intended for a Windows computer that saves state from one session to the next are not applicable. Depending on the architecture of virtual desktop device, things like PreFetch and SuperFetch are not going to help from one session to the next, as all the optimizations are discarded on VM restart.
Indexing may be a partial waste of resources, as would be any disk optimizations such as a traditional defragmentation. Windows 10 has a built-in capability called the System Preparation Tool , also known as sysprep. The sysprep tool is used to prepare a customized Windows 10 image for duplication. The sysprep process assures the resulting OS is properly unique to run in production. There are reasons for and against running sysprep.
In the case of virtual desktop environments, you may want the ability to customize the default user profile which would be used as the profile template for subsequent users that sign in using this image. You may have apps that you want installed, but also able to control per-app settings. The alternative is to use a standard. ISO to install from, possibly using an unattended installation answer file, and a task sequence to install applications or remove applications. Anytime that Windows defaults are changed, questions arise regarding supportability.
Once a virtual desktop image VM or session is customized, every change made to the image needs to be tracked in a change log. If a time comes to troubleshoot, often an image can be isolated in a pool and configured for problem analysis. Once a problem has been tracked to root cause, that change can then be rolled out to the test environment first, and ultimately to the production workload. This document intentionally avoids touching system services, policies, or tasks that affect security.
After that comes Windows servicing. The ability to service virtual desktop images outside of maintenance windows is removed, as maintenance windows are when most servicing events take place in virtual desktop environments, except for security software updates. Microsoft has published guidance for Windows Security in virtual desktop environments, here:. Please consider supportability when altering default Windows settings. Occasionally difficult to solve problems arise when altering system services, policies, or scheduled tasks, in the name of hardening, “lightening,” and so on.
Consult the Microsoft Knowledge Base for current known issues regarding altered default settings. The guidance in this document, and the associated script on GitHub will be maintained with respect to known issues, if any arise. In addition you can report issues in a number of ways to Microsoft.
You can use your favorite search engine with the terms “start value” site:support. You might note that this document and the associated scripts on GitHub do not modify any default permissions. If you are interested in increasing your security settings, start with the project known as AaronLocker. For more information, see “AaronLocker” overview. One of the goals of a virtual desktop image is to be as light as possible with respect to persistent storage. One way to reduce the size of the image is to remove UWP applications apps that won’t be used in the environment.
With UWP apps, there are the main application files, also known as the payload. There is also a small amount of data in the “All Users” profile. In addition, all UWP apps are registered at either the user or machine level at some point after startup for the device, and login for the user. The UWP apps, which include the Start Menu and the Windows Shell, perform various tasks at or after installation, and again when a user logs in for the first time, and to a lesser extent at subsequent logins.
For all UWP apps, there are occasional evaluations that take place, such as:. With a default installation of Windows 10, not all UWP apps may be used by an organization. Therefore, if those apps are removed, there are fewer evaluations that need to take place, less caching, and so on. The second method here is to direct Windows to disable “consumer experiences. The performance savings can be significant when there are hundreds or thousands of users, all start work at approximately the same time, or even starting work at rolling times across time zones.
Connectivity and timing are important factors when it comes to UWP app cleanup. If you deploy your base image to a device with no network connectivity, Windows 10 cannot connect to the Microsoft Store and download apps and try to install them while you are trying to uninstall them. This might be a good strategy to allow you time to customize your image, and then update what remains at a later stage of the image creation process.
If you modify your base. WIM before you install, the apps will not be installed from the beginning and your subsequent profile creation times will be shorter. There is a link later in this section with information on how to remove UWP apps from your installation.
WIM file. A good strategy for the virtual desktop environment is to provision the apps you want in the base image, then limit or block access to the Microsoft Store afterward. Store apps are updated periodically in the background on normal computers. The UWP apps can be updated during the maintenance window when other updates are applied. UWP apps that are not needed are still in the file system consuming a small amount of disk space.
For apps that will never be needed, the payload of unwanted UWP apps can be removed from the base image using PowerShell commands. If you delete UWP app payloads out of the installation. WIM file using the links provided later in this section, you can start from the beginning with a very slim list of UWP apps.
UWP apps that are provisioned to a system can be removed during OS installation as part of a task sequence, or later after the OS is installed. This may be the preferred method because it makes the overall process of creating or maintaining an image modular. Once you develop the scripts, if something changes in a subsequent build you edit an existing script rather than repeat the process from scratch. As a final note on this topic, each UWP app should be evaluated for applicability in each unique environment.
You will want to install a default installation of Windows 10, version , then note which apps are running and consuming memory. For example, you may want to consider removing apps that start automatically, or apps that automatically display information on the Start Menu, such as Weather and News, and that may not be of use in your environment.
If you’re using the scripts from GitHub, you can easily control which apps are removed before running the script. After downloading the script files, locate the AppxPackage. To enumerate currently installed Windows Features, run the following PowerShell command:. Using PowerShell, an enumerated Windows Optional Feature can be configured as enabled or disabled, as in the following example:.
Here’s an example command that disables the Windows Media Player feature in the virtual desktop image:. Next, you may want to remove the Windows Media Player package. This example command will show you how to do that:.
If you want to remove the Windows Media Player package to free up about 60 MB disk space , you can run this command:. You can use the built-in Dism. A Dism. The Windows technology involved is called Features on Demand.
See the following article for more about Features on Demand in Windows:. Microsoft: Features on Demand. Any setting changes you make to this file will be applied to any subsequent user profiles created from a machine running this image. You can control which settings you wish to apply to the default user profile by editing the DefaultUserSettings. To reduce transmission of graphical data over the virtual desktop infrastructure, you can set the default background to a solid color instead of the default Windows 10 image.
You can also set the sign-in screen to be a solid color, as well as turn off the opaque blurring effect on sign-in. The following settings are applied to the default user profile registry hive, mainly to reduce animations. If some or all of these settings are not desired, delete out the settings that you do not wish to have applied to new user profiles based on this image.
The goal with these settings is to enable the following equivalent settings:. And, new to this version of settings is a method to disable the following two privacy settings for any user profile created after you run the optimization:.
The following are the optimization settings applied to the default user profile registry hive to optimize performance. Note that this operation is performed by first loading the default user profile registry hive NTUser.
Another series of default user settings recently added is to disable several Windows apps from starting and running in the background. While not significant on a single device, Windows 10 starts up a number of processes for each user session on a given device host. The Skype app is one example, and Microsoft Edge is another.
The settings included turn off several apps from being able to run in the background. If this functionality is desired as it is, just delete out the lines in the “DefaultUserSettings. Many optimizations for Windows 10 in a virtual desktop environment can be made using Windows policy.
Then if the equivalent settings are not specified in any other way, such as group policy, the settings would still apply. The following settings were chosen to not counter or conflict with any setting that has anything to do with security. These settings were chosen to remove settings or disable functionality that may not be applicable to virtual desktop environments. The reason for this recommendation is to reduce bytes transmitted over the network for virtual desktop environments.
This setting can be removed or customized for each environment. The reason for this recommendation is so that virtual desktop devices are not used for content caching, and the devices will not be allowed to use the network bandwidth to do so. If you enable this setting, peer-to-peer protocols will be turned off. Network Connectivity Status Indicator There are other settings in this section that can be used in isolated networks Specify passive polling Disable passive poling checkbox Enabled This Policy setting enables you to specify passive polling behavior.
NCSI polls various measurements throughout the network stack on a frequent interval to determine if network connectivity has been lost. Use the options to control the passive polling behavior. Offline Files saves a copy of network files on the user’s computer for use when the computer is not connected to the network. With this policy setting disabled, Offline Files feature is disabled and users cannot enable it. With this policy setting enabled, Windows does not retrieve device metadata for installed devices from the Internet.
With this policy setting enabled, “Found New Hardware” balloons do not appear while a device is being installed. Some applications require short names for compatibility, but short names have a negative performance impact on the system. With short names disabled on all volumes then they will never be generated. Disabling this policy prevents this device from being discoverable by other devices, and thus cannot participate in cross-device experiences. If you enable this policy setting, users are not given the option to report errors.
If you enable this policy setting, Windows Update is not searched when a new device is installed. With this setting enabled, the logon background image shows without blur. This applies to both the first user of the computer who completes the initial setup and users who are added to the computer later. It also controls if Microsoft account users will be offered the opt-in prompt for services during their first sign-in.
With this setting disabled, users will not see the first logon animation and Microsoft account users will not see the opt-in prompt for services. With this setting enabled, no app notifications are displayed on the lock screen. With the “Power” service disabled, the Powercfg. With this setting disabled, the desktop background slideshow is disabled. This setting likely has no effect on a VM. The option to configure System Restore or create a restore point through System Protection is also disabled.
With this policy setting disabled, Windows will not be able to detect, troubleshoot or resolve problems on a scheduled basis. They are prevented from connecting to the Microsoft servers that host the Windows Online Troubleshooting Service. If you disable this policy setting, Windows will not be able to detect, troubleshoot or resolve any Windows Boot Performance problems that are handled by the DPS.
This setting can be very useful during design, test, development, or maintenance phases. With this setting disabled, the DPS is not able to diagnose memory leak problems. With this setting disabled, responsiveness events are not processed. With this setting disabled, Windows will not be able to detect, troubleshoot or resolve any Windows Resource Exhaustion problems that are handled by the DPS.
With this setting disabled, Windows will not be able to detect, troubleshoot or resolve any Windows Shutdown Performance problems that are handled by the DPS. With this setting disabled, Windows will not be able to detect, troubleshoot or resolve any Windows System Responsiveness problems that are handled by the DPS.
The Inventory Collector inventories applications, files, devices, and drivers on the system and sends the information to Microsoft. With this policy setting enabled, the Inventory Collector will be turned off and data will not be sent to Microsoft. Collection of installation data through the Program Compatibility Assistant is also disabled.
If disabled or not configured, Microsoft Edge does not send browsing history data to Desktop Analytics. With this policy setting enabled, window animations are turned off. With this policy setting enabled, the Start background will use a solid color.
The user will also not be able to view the location of the last use of their active digitizer on their device. This policy setting does not affect other network sharing features. Internet Explorer Prevent running First Run wizard Go directly to home page Enabled This policy setting prevents Internet Explorer from running the First Run wizard the first time a user starts the browser after installing Internet Explorer or Windows.
Internet Explorer Set tab process growth Low Enabled This policy setting allows you to set the rate at which Internet Explorer creates new tab processes. With this policy setting enabled, Automatic Crash Recovery does not prompt the user to recover his or her data after a program stops responding.
Generally only animated GIF files are affected by this setting; active Web content such as java applets are not. If you enable this policy setting, flip ahead with page prediction is turned off and the next webpage isn’t loaded into the background. If you disable this policy setting, phone number detection is turned on. Users won’t be able to modify this setting. With this policy setting enabled, the sensor feature is turned off, and all programs on this computer cannot use the sensor feature.
By default this setting is to allow preloading. If this setting is configured, users cannot change the setting. The text is displayed, but there are no clickable links for these elements. Enable this policy to prevent this experience from launching. When Cortana is off, users will still be able to use search to find things on the device. NOTE : This setting can be used to limit what types of attachments are previewed, which can also help prevent automatically previewing some potentially dangerous contents types.
The default behavior for search is to not index uncached Exchange folders. Disabling this policy will block any indexing of uncached Exchange folders. Otherwise they are indexed. Disabled by default. Select between 0 and MB. If you enable this setting, the Store application will not offer updates to the latest version of Windows. Additionally, solution information is not available in Security and Maintenance in Control Panel. Windows Installer Control maximum size of baseline file cache 5 Enabled This policy controls the percentage of disk space available to the Windows Installer baseline file cache.
With this policy setting enabled you can modify the maximum size of the Windows Installer baseline file cache. They will not see other types of notifications, such as regular PC or device health information. Enhanced notification messages convey the value and promote the installation and use of optional software. This policy setting is intended for use in loosely managed environments in which you allow the end user access to the Microsoft Update service. Semi-Annual Channel: Receive feature updates when they are released to the general public.
The pause will remain in effect for 35 days from the start time provided. You can defer receiving quality updates for up to 30 days.
To prevent quality updates from being received on their scheduled time, you can temporarily pause quality updates. The pause will remain in effect for 35 days or until you clear the start date field. To resume receiving Quality Updates which are paused, clear the start date field.
This does not, however, prevent the user or an application from changing the setting programmatically. With this policy setting enabled, the option will be locked to not offer text predictions. With this policy enabled, application windows will not be minimized or restored when the active window is shaken back and forth with the mouse.
This setting affects all browse displays associated with Active Directory, such as those in Local Users and Groups, Active Directory Users and Computers, and dialog boxes used to set permissions for user or group objects in Active Directory. Users will see the default lock screen image and will be able to select another image, unless you have enabled the “Prevent changing lock screen image” policy. Users may still see suggestions and tips to make them more productive with Microsoft features and apps.
You should enable this policy setting if your goal is to minimize network traffic from target devices. File Explorer Turn off the caching of thumbnails in hidden thumbs. If you’re considering disabling system services to conserve resources, make sure the service isn’t a component of some other service.
In this paper and with the available GitHub scripts, some services are not in the list because they cannot be disabled in a supported manner. Most of these recommendations mirror recommendations for Windows Server , installed with the Desktop Experience, based on the instructions in Guidance on disabling system services on Windows Server with Desktop Experience.
Many services that may seem like good candidates to disable are set to manual service start type. This means that the service will not automatically start and is not started unless process or event triggers a request to the service being considered for disabling.
Services that are already set to start type manual are usually not listed here. You can enumerate running services with this PowerShell sample code, outputting only the service short name:.
The following table contains some services that may be considered to disable in virtual desktop environments:. To learn more, see this article. This user service is used for Game Recordings and Live Broadcasts.
CaptureService CaptureService Enables optional screen capture functionality for applications that call the Windows. Capture API. OneCore capture service: enables optional screen capture functionality for applications that call the Windows. Capture API For more information, see this article. Optimize drives defragsvc Helps the computer run more efficiently by optimizing files on storage drives. Virtual desktop solutions do not normally benefit from disk optimization.
The “drives” are often not traditional drives and often just a temporary storage allocation. Diagnostic Execution Service DiagSvc Executes diagnostic actions for troubleshooting support Disabling this service disables the ability to run Windows diagnostics Diagnostic Execution Service.
Connected User Experiences and Telemetry DiagTrack This service enables features that support in-application and connected user experiences. Additionally, this service manages the event driven collection and transmission of diagnostic and usage information used to improve the experience and quality of the Windows Platform when the diagnostics and usage privacy option settings are enabled under Feedback and Diagnostics.
Consider disabling if on disconnected network. If this service is stopped, diagnostics will no longer function. Disabling this service disables the ability to run Windows diagnostics. For more information, see this article. Device Setup Manager DsmSvc Enables the detection, download and installation of device-related software. If this service is disabled, devices may be configured with outdated software, and may not work correctly. Virtual desktop environments very closely control what software is installed and maintain that consistency across the environment.
Data Usage service DusmSvc Network data usage, data limit, restrict background data, metered networks. Windows Mobile Hotspot Service icssvc Provides the ability to share a cellular data connection with another device. This service is started on demand and if disabled then installations will not function properly. Consider disabling this service on non-persistent virtual desktop, leave as-is for persistent virtual desktop solutions. Geolocation Service Lfsvc Monitors the current location of the system and manages geofences a geographical location with associated events.
If you turn off this service, applications will be unable to use or receive notifications for geolocation or geofences. This service is started on-demand by application accessing downloaded maps. Disabling this service will prevent apps from accessing maps. TO learn more, see this article. MessagingService MessagingService Service supporting text messaging and related functionality. This is a “per-user service”, and as such, the template service must be disabled.
UWP Mail and other applications dependent on this functionality will not work properly when this service is not running. If you stop or disable this service, contacts might be missing from your search results. Power Power Manages power policy and power policy notification delivery.
Virtual machines have virtually no influence on power properties. If this service is disabled, power management and reporting are not available. May not need this service for payments, in the enterprise environment. May not need this service, if other tools are used for messaging, such as Teams, Skype, or other. Superfetch generally does not improve performance in virtual desktop environments for various reasons.
The underlying storage is often virtualized and possibly striped across multiple drives. In some virtual desktop solutions the accumulated user state is discarded when the user logs off.
The SysMain feature should be evaluated in each environment. If stopped, your devices will not be able to download and install the latest updates. Virtual desktop devices are often carefully managed with respect to updates.
Servicing is usually performed during maintenance windows. In some cases, an update client may be utilized, such as SCCM. The exception would be security signature updates, that would be applied at any time, to any virtual desktop device, so as to maintain up-to-date signatures. If you disable this service, test to ensure that security signatures are still able to be installed.
If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start.
If this service is stopped, any diagnostics that depend on it will no longer function. Disabling this service disables the ability to run Windows diagnostics Windows Error Reporting WerSvc Allows errors to be reported when programs stop working or responding and allows existing solutions to be delivered. Also allows logs to be generated for diagnostic and repair services. If this service is stopped, error reporting might not work correctly, and results of diagnostic services and repairs might not be displayed.
With virtual desktop environments, diagnostics are often performed in an “offline” scenario, and not in mainstream production. In addition, some customers disable WER anyway. WER incurs a tiny amount of resources for many different things, including failure to install a device, or failure to install an update. Windows Search WSearch Provides content indexing, property caching, and search results for files, e-mail, and other content.
Disabling this service prevents indexing of e-mail and other things. Test before disabling this service. If this service is stopped, some applications may not operate correctly. If this service is stopped, game save data will not upload to or download from Xbox Live.
XboxLive application programming interface. These services run in the security context of the user account – this provides better resource management than the previous approach of running these kinds of services in Explorer, associated with a preconfigured account, or as tasks. For more information, see Per-user services in Windows. If you intend to change a service start value, the preferred method is to open an elevated.
For more information, see SC. Like other items in Windows, ensure an item is not needed before disabling a scheduled task. Some tasks in virtual desktop environments, such as StartComponentCleanup , may not be desirable to run in production, but may be good to run during a maintenance window on the “gold image” reference image.
The following list of tasks includes tasks that perform optimizations or data collections on computers that maintain their state across reboots. When a virtual desktop device reboots and discards all changes since last boot, optimizations intended for physical computers are not helpful. You can get all the current scheduled tasks, including descriptions, with the following PowerShell code:.
There are several tasks that can’t be disabled with a script, even when run on an elevated command prompt. The recommendations here, and in the GitHub scripts do not attempt to disable tasks that cannot be disabled with a script. Whether from Microsoft Update, or from your internal resources, apply available updates including Windows Defender signatures.
This is a good time to apply other available updates including Microsoft Office if installed, and other software updates. If PowerShell will remain in the image you can download the latest available help for PowerShell by running the command Update-Help. At some point during the image optimization process available Windows updates should be applied.
There is a setting in Windows 10 update settings that can provide additional updates. This would be a good setting in case you are going to install Microsoft applications such as Microsoft Office to the base image.
That way Office is up to date when the image is put in service. There are also. NET updates and certain third-party components such as Adobe that have updates available through Windows Update. One very important consideration for non-persistent virtual desktop devices is security updates, including security software definition files.
These updates may be released once or more times per day. For Windows Defender it may be best to allow the updates to occur, even on non-persistent virtual desktop environments. The updates are going to apply nearly every time you sign in, but the updates are small and should not be a problem.
The same may be true for third-party definition files. Modern versions of Office such as Office update through their own mechanisms when directly connected to the Internet, or through management technologies when not. Windows is configured by default to collect and save diagnostic data. The purpose is to enable diagnostics, or to record data if further troubleshooting is necessary. Automatic system traces can be found at the location depicted in the following illustration:.
Others, such as the WiFiSession trace can be stopped. To stop a running trace under Event Trace Sessions , right-click the trace and then select Stop. To access Windows Settings, click Start the Windows icon on the taskbar , and then click the Settings icon shaped like a gear. In Windows Settings area, clicking the System icon gives you access to a number of system-related settings.
Not all of them need adjustment for optimum VDI use–these settings are the most important:. To remove an app, thereby excluding it from your VDI image, click the app, and then click Uninstall.
If Uninstall is grayed out, you cannot remove it by this method; you might be able to remove it with Windows PowerShell, or try these steps:. This area defines the app to be used by default for certain generic functions such as e-mail, web browsing, and maps. If you want a different app to be used for a particular function, click the current entry, and then click the app you prefer to be used in the VDI image.
For a non-Microsoft app to be an available choice, you must install the app prior to adjusting this setting. These recommended values will reduce notifications and background network activity in a VDI environment:.
This setting is only applicable if the Maps app is installed. In Windows Settings area, clicking the Devices icon gives you access to a number of system-related settings. In Windows Settings area, clicking the Personalization icon gives you access to a number of system-related settings.
Sometimes the default black background can cause users to think the computer is not responding. Changing the background color can help make it clearer. To do this, follow these steps:. The default setting is to use large taskbar buttons that is, a value of “Off” for Use small taskbar buttons.
This setting causes the Cortana item to use a lot of taskbar area. To avoid this, set Use small taskbar buttons to “On. In Windows Settings area, clicking the Privacy icon gives you access to a number of system-related settings.
Some of these settings are also set from the “Customize settings” window, discussed at the beginning of this topic. The default value for “Let your apps automatically share and sync info with wireless devices that don’t explicitly pair with your PC, tablet, or phone” is On ; for VDI use the recommended value is Off. The default value for “Windows should ask for my feedback” is Automatically ; for VDI use, the recommended value is Never.
Listed apps have a default value of On , which allows them to receive information, send notifications, and update themselves whether they are being used or not. You should disable set to Off any apps you don’t want running in the background in the VDI image. In the Update settings area, click Advanced options to adjust these settings:. On the Advanced options page, click Choose how updates are delivered to access the setting for “Updates from more than one place.
The settings in this section are adjustable either by navigating through Control Panel or opening the utility directly. The fastest way to open Task Scheduler is to push the Windows button and type task scheduler or taskschd. In the results that return, click Task Scheduler to open the utility.
You now have access to the list of task collections. To change the state of each scheduled task, right-click it, and then click the desired state typically, Disabled for VDI use.
Click Windows again to collapse it, then click XblGameSave. The fastest way to open Performance Monitor is to push the Windows button and type performance monitor or perfmon.
In the results that return, click Performance Monitor. In the dialog that opens, click the Trace Session tab. Clear the Enabled check box. The fastest way to manage Services is to push the Windows button and type services. In the results that return, click Services. The following services are good candidates to disable for use in VDI scenarios; however, you might need to do some testing to verify that they aren’t needed for your purposes. To disable a service, in the Services snap-in, right-click the service name, and then click Properties.
On the General tab, click the Startup type pull-down menu, and then click Disabled. Click OK. Push the Windows button and type control panel. In the results that return, click Control Panel. In the dialog that opens, click the Search tab, and then in the When searching non-indexed locations area, clear the check box for Include system directories.
Click OK to save. On the Storage tab, select the radio button for Block all sites from storing information on this computer. In the dialog that opens, click OK. On the Camera and Mic tab, in the Camera and Microphone Settings area, select the radio button for Block all sites from using the camera and microphone. On the Playback tab, in the Peer-assisted Networking area, select the radio button for Block all sites from using peer-assisted networking.
Close the Flash Player Settings Manager. In the Home page area, enter the URL for the web site you want users to see as the home page in browsers. This could be a web site for your company or you can set it to a blank home page by entering about:blank. In the Browsing history area, select the check box for Delete browsing history on exit.
In the Choose or customize a power plan area, click the down arrow for Show additional plans , and then select the radio button for High performance. This setting will have very little impact on the VDI host. In Control Panel, click System to open the System control panel.
In the right pane, click Advanced system settings. In the dialog that opens, click the Advanced tab. In the Performance area, click the Settings button, then on Visual Effects tab in the dialog that opens, select the Adjust for best performance radio button. Click OK to save and exit. To edit Group Policy settings, press the Windows button and type group policy or gpedit. In the dialog that opens, in the Network location area, select the radio button for User cannot change location.
Click the OK button to save. Collapse Windows Settings , and then expand Administrative Templates. Click or expand Network , and then adjust each setting as follows by double-clicking it, then selecting the radio button for the indicated value and clicking the OK button:. Collapse Network , and then expand System. Adjust each setting as follows double-clicking it, then selecting the radio button for the indicated value and clicking the OK button:.
Expand Filesystem , double-click NTFS , double-click Short name creation options , select the radio button for Enabled , and then use the Options pull-down menu to select Disable on all volumes. Collapse Filesystem , and then expand Internet Communication Management.