!!!!!!!!!!!!! Comparison Microsoft Remote Desktop Services versus Citrix Xenapp

Transcription

1 Comparison Microsoft Remote Desktop Services versus Citrix Xenapp

2 " #$%&'()*$+,)-($*$./01%$/121*3/$&41(5)-1*51(*6*#)/()781+'&& "#$%&'(&)'*+%*+,& "#$%&'(&)'*+%*+,& &. /- 0*+1'234+5'*& &6 9:9: ;<$6//=)*>$-6%1+/:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::? 9:": ;<$6/0')>$::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::? "#" C(1*1+/'/)$+'+>>1D)51(E$.'&&D)-'/)$+*:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::F "" G1<'--1**/$'&&D)-'/)$+*::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::F "$" 41(51(.'(%-$+.)A6('/)$+'+>6*1(*1**)$+D$'><'D'+-)+A:::::::::::::::::::::::::::::::::::::::::::H "%" 41-6(1(1%$/1'--1**::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::I "&" C()+/)+A:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::I "'",'+'A1%1+/$.1+5)($+%1+/::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::J ":I: K*1(&($.)D1%'+'A1%1+/::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::9L ":J: ;>5'+-1>1+>6*1(17&1()1+-1:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::9L ":9L: #D)1+/*$./M'(1:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::99 ":99: N+='+-1>%6D/)%1>)''+>'6>)$*6&&$(/::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::9" ":9":,$+)/$()+A$.1+5)($+%1+/::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::9" ":9?: O'(>M'(1::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::9" 6- :%(%1%*4%,& &/6 & & "

3 F #$%&'()*$+,)-($*$./01%$/121*3/$&41(5)-1*51(*6*#)/()781+'&&.- )'78"15,'*&9541','(+&:%7'+%&;%,<+'8&=%1>54%,&>%1,3,& E1%,%*+"+5'*&"*2&2%$5>%1F&'(&"88$54"+5'*,& ( With Citrix Xenapp you can publish applications in a very easy way with a central console. This provides the ability to control delivery of applications to users based on time of day and number of sessions or application instances.( Application publishing refers to granting users access to applications. Citrix has always had a mechanism to specify which users get which application as well as which server can run the application.( With MS RDS you need to publish applications on each MS RDS server separately, no easy central administration is available. Also, no advanced properties are available per published application such as enabling/disabling audio, color settings, printer mapping timing, ( In Windows Server 2008 R1, once you published an application, the application was available to everyone. Also, it was assumed the application was available on every server which means you, the administrator, had to ensure every server had every application installed. MS RDS does have some application publishing improvements, but these improvements are more like filters. Every application is still available to every user, but you can use these filters to filter out what the end user sees. This is not a security mechanism as users still have access to the hidden applications..-.- G%#&"44%,,&+'&"88$54"+5'*,& With Citrix Xenapp you can use a component called Citrix Web Interface that installs on top of a web server such as MS IIS. With the Citrix Web Interface Console you can easily configure access to Citrix farms and configure advanced setups such as integration of 2-factor authentication. The client view of Web Interface uses standard HTML and is supported on most modern web browsers including IE 6+, Mozilla 1+, Firefox 2+, and Safari 2+ as well as some mobile platforms. Citrix Xenapp supports superior single sign on needing only one click to start a published application. Citrix Xenapp allows applications to be grouped within folders for easier organization for multiple user groups.( Citrix Web interface also allows the automatic distribution of the Citrix client to client devices: A web-based process walks the user through the process of automatically detecting the needed client software and then automatically installs the appropriate client software for the platform used. Citrix Web Interface allows Self-Service password change: it provides users notification when their password is about to expire and allows users to change their domain password directly from their browser. This feature is important for remote access scenarios and other situations where user devices do not authenticate to the directory. The Citrix Web Interface can be easily re-branded, it provides the ability to easily customize the look and feel of the web application portal through GUI-based wizards in the management tools. F

4 #$%&'()*$+,)-($*$./01%$/121*3/$&41(5)-1*51(*6*#)/()781+'&& H The Citrix Web interface can be integrated in MS sharepoint services or IBM websphere. ( With MS RDS you can use RD Web Access, but this is a very basic IIS server site. Not a lot of configuration can be done and 2-factor authentication is not supported. RD web access doesn't have a real "farm" concept. When you configure a RD Web access site, your RemoteApps all connect back to a single IP address. So if you want to have multiple Terminal Servers supporting connections, you need to configure them in a load balancing group so that they're all available via the same virtual shared IP address. This might not be that big of a deal, but it also means that all your Terminal Servers need to have the same RemoteApps installed and should be 100% identical.. MS RDS supports single-sign-on but requires certificate signed RemoteApps and requires more administrative overhead. MS RDS does not support automatic distribution of a new RDP client via the RD web access webpage. MS RDS does not support self-service password change via the RD web access webpage. RD web access cannot be rebranded out-of-the-box. Advanced web development skills are needed to rebrand the look and feel of the RD web access webpage..-6- =%1>%1&("17&4'*(5D31"+5'*&"*2&3,%1&,%,,5'*&$'"2&#"$"*45*D& With Citrix Xenapp you create a real server farm. All servers are connecting to a central enterprise-level database which is responsible for storing static configuration data. ( A Citrix farm can consist out of several zones to optimize network traffic and enable Zone Preference and Failover functionality. This will allow users to connect to Citrix Xenapp servers closest to them and also where their backend data is located. Zone Preference and Failover will eliminate the need for publishing the same application with different names like "Microsoft Word - North America" and "Microsoft Word - Europe". One Citrix Xenapp server in each zone of a Citrix Xenapp farm is automatically elected to play the role of Data collector, which will gather dynamic information for its zone so it can calculate server load and load balance ICA sessions across all Citrix Xenapp servers in an efficient way. Calculation of server load is based on perfmon counters, this means you can really load balance your servers according to the system resource load of the servers. A big advantage is that all the features mentioned above are very easy to setup and maintain.( With MS RDS you can use a RD Connection Broker to create some sort of farm experience (Alle RD Session Host servers belong to the same group). When an incoming RDP connection is made, the user authenticates to one of the Terminal Servers, and that server then contacts the server running the connection broker service to see if that user should be redirected to a different RD session host server (either because another server has lower load or because the user has an existing session on another server). If you want high availability on this level, you need to implement a load balancing solution (a software LB such as MS NLB or a hardware load balancer). This setup is pretty complex and load balancing of RDP sessions is only based on session count rather than being able to use any other perfmon H

5 I #$%&'()*$+,)-($*$./01%$/121*3/$&41(5)-1*51(*6*#)/()781+'&& ( counters. You also need to implement a connection distribution method for the RD session host servers, you can use a load balancing solution (a software LB such as MS NLB or a hardware load balancer) or DNS round robin (but this has shortcomings regarding service monitoring as it will not check if a server is reachable or not). (.-H- =%431%&1%7'+%&"44%,,& ( With Citrix Xenapp you can use a component called Citrix access gateway, which is a separate appliance that is used to enable secure remote access to the Citrix Xenapp farm. ( This solution is very easy to implement, enables easy high availability and gives great performance.( With MS RDS you can use RD Gateway to enable secure RDP connections. It's similar to the IIS-based RPC-over-HTTPS technology from Windows 2003 for external Exchange users, except of course TS Gateway is "RDP-over-HTTPS." This solution is a bit harder to implement as you also need to define the correct CAP and RAP policies.(.-i- E15*+5*D& With Citrix Xenapp you can use enhanced printer driver management to maintain and manage printer mappings and printer drivers in a very good way. Citrix has invested a lot of effort to ease printer management as it is crucial in a well working Citrix environment. A lot of printer-related policies are available to dynamically manage printer mappings and drivers and a Citrix universal driver can be used that works very well with 99% of the printer models. Setup is very easy and managed centrally.( Citrix Xenapp allows the user to define additional printers available to the Remote Desktop session and have them be available in the session without requiring the user to logoff and logon to use the printer. Users can configure settings for clientattached printers and have those settings stored on the client device or in their user profile. Citrix Xenapp provides users with access to the printer device settings for their client-attached printers. The default ACL on redirected printers in Remote Desktop Services does not allow the user to adjust device settings because it would also allow the user access to additional settings like driver, port, etc. With custom security filtering the user can be provided access to manage the printer properties without exposing the full rights. Citrix Xenapp provides client-side printing support through the Enhanced MetaFile (EMF) print format without requiring a printer driver to be installed on the server. Citrix Xenapp provides client-side printing support on non-windows clients (e.g. Macintosh, Linux, etc.) Citrix Xenapp enables users within a specified IP address range to automatically access the network printing devices that exist within that same range. This increases user productivity and lessens the IT support burden. Citrix Xenapp allows administrators to manage a list of print drivers that can be used on the server for client-side printers. By supporting both inclusion and exclusion lists administrators have the ability to only allow known safe"#$%&#'(#)(*+(,--.(/. unsafe"#$%&#'0 I

6 #$%&'()*$+,)-($*$./01%$/121*3/$&41(5)-1*51(*6*#)/()781+'&& J Citrix Xenapp allows administrators to choose between the traditional network printing path or the ICA printing path when using client printer auto-creation for provisioning of printers. In cases where the client can connect to a network print server for their local printer this can offer significant reduction in bandwidth and overall time required to print. Policies provide administrators the control necessary to ensure this is only applied in situations where it makes sense. (.-A- With MS RDS, printing options are very basic and not that advanced and innovative as the Citrix printing solution.( There is a universal printer driver method available, called TS easy print. This uses XPS printing format, this works well but easy print is still based on the singlethreaded print spooler and rendering engine on the server, so you can compare this universal printer driver solution with generation1 and 2 of the Citrix universal printer driver solution (Citrix has now a generation 4 universal printer driver).( 9"*"D%7%*+&'(&%*>51'*7%*+& With Citrix Xenapp you can use one console to manage your Citrix environment. All configuration is done in the Citrix console and delegation of control can be used to make sure that each IT personnel member has proper permissions within the console. In the console you can see all user sessions, you can see all published applications and you can use shadowing to take over end user s sessions to help them remotely. A central management console allows administrators to deliver server resources such as applications, content, and server desktops to thousands of users from a single wizard-driven console. It provides a centralized mechanism for publishing applications to groups of servers simply by adding or removing servers from a group.( With MS RDS there is no real central console. This is a huge shortcoming as you have to maintain RD RemoteApps on each server separately and you don t have a central overview of your farm setup. You can have limited central management of your user sessions, but you have to create a group of all your RD session hosts servers in a manual way or import from the RD connection broker. There are a lot of infrastructure components and management tools to RDS. To set up and maintain the even the most basic environments takes quite a bit of planning and infrastructure. Microsoft claims RDS is aimed at low complexity environments. But, RDS is actually pretty complex to set up and maintain. Citrix still reigns supreme on management and Enterprise features..-j- 1"*,8'1+&81'+'4'$& Citrix Xenapp uses ICA protocol which is still a more efficient and better performing protocol than RDP protocol. Is allows better end user experience as it can benefit from advanced features such as HDX technology: o High Resolution Graphics Enhancements are included, where Citrix HDX 3D for Progressive Display plays an important role in providing a rich user experience regardless of the underlying connection. It improves the delivery of remote applications that contain photographic bitmaps and highly detailed synthetic images. If a bitmap looks as if it is probably photographic or highly detailed, an extra level of lossy JPEG compression is added to reduce the bandwidth required to transmit the image to the client. J

7 9L #$%&'()*$+,)-($*$./01%$/121*3/$&41(5)-1*51(*6*#)/()781+'&& o o o Citrix HDX Broadcast technology optimizes performance of remote applications presented over high-latency network links (i.e. satellite). The user benefits from a more usable experience than with Remote Desktop Services alone. Citrix HDX 3D - Browser Acceleration provides a combination of features that can automatically disable GIF animations, intercept images and pass them on before being uncompressed, dynamically re-compress JPEG images, deliver images in the background, and cache images on the client. Adobe Flash Performance Optimizations provides improved performance of web pages containing Flash-based content by improving the compression of the Flash content. Citrix HDX MediaStream for Flash is specifically designed to optimize Flash content in web pages to improve the overall experience for users accessing web sites and applications remotely. The ICA protocol can be further optimized by using optional Citrix technologies such as Citrix branch repeater / acceleration plugins which can be very useful in high latency WAN connections with low network bandwidth. MS RDS uses RDP protocol which improved a lot the last couple of years. Nevertheless, this protocol is still not as good as the ICA protocol. ICA protocol consumes less bandwidth and enabled advanced features (HDX technology) that are not included in the RDP protocol. Advanced display and graphics enhancements are not included in the RDP protocol, which has a negative impact on end user experience and makes the RDP protocol less efficient as is consumes more network bandwidth..-k- L,%1&81'(5$%&7"*"D%7%*+& Citrix Xenapp enterprise and platinum edition include an advanced user profile management solution, Citrix User Profile Management, to make it easy for IT to provide a personalized, consistent experience for users every time they log on, regardless of endpoint devices or locations. Resolves Last Write wins issues across multiple simultaneous server sessions found in more complex environments. MS RDS implementations mainly use existing MS user profile management techniques such as roaming profiles. Roaming profiles are not optimal for a Remote desktop services environment as they occasionally get corrupt, are not managed thus user profile size can increase a lot over time and this results in longer user logon times..-m- B2>"*4%2&%*2&3,%1&%?8%15%*4%& Citrix Xenapp has advanced roaming user support. Citrix SmoothRoaming ensure that applications and data move with your users as they change locations, networks, or devices, so they can pick up exactly where they left off, without interruption. Citrix Xenapp allows applications to appear automatically in the start menu or on the local desktop providing a familiar application access experience for users. Citrix Xenapp fully supports client-to-server Redirection of File Types: It redirects requests for a specific document or file type to a Remote Desktop session. For example, clicking on a Visio document on the client device will launch the document in a Visio application on the Remote Desktop Sever, instead of a local application. This is a useful feature in environments where a particular application may not be installed locally. Citrix Xenapp fully supports Server-to-client URL redirection:when clicking on URL' 1'2,3 4' 5667 (# $.-'9 /$)3$. 4. 4::+$,4)$(. #2..$.; (. <&=()e Desktop 9L

8 #$%&'()*$+,)-($*$./01%$/121*3/$&41(5)-1*51(*6*#)/()781+'&& 99 Services, the link is opened with the local client browser instead of launching the browser on the Remote Desktop Session Host. This feature enhances support for mixed desktop/remote Desktop Services environments, and ensures that the local browser and Internet connection is used for web browsing. This can reduce the data center bandwidth requirements, free processing resources on Remote Desktop Services, and improve performance for users. In addition, for environments that track internet usage by IP address, this features preserves the ability to do so using third-party monitoring products. Citrix Xenapp supports USB webcams, scanners and can use MS activesync to sync with client devices. Citrix Xenapp uses WAN Performance Optimization techniques: Users can experience significantly improved WAN performance through the automatic application of the right mix of acceleration techniques based on network conditions, data flows, and application mix. These gains can be achieved without requiring any reconfiguration or modification of firewalls, monitoring tools, or applications. Citrix Xenapp uses a technology called session reliability: When a network connection issue occurs, the application window remains visible on the client device and the client continues to accept keystrokes and mouse movement from the user while session re-connection is attempted in the background. For transient network issues, such as where users roam between wireless hot spots, the user may not even know connectivity was lost. MS RDS only support automated appearance of icons on desktop or start menu when using windows 7 client or when RD RemoteApps are distributed via MSI s. MS RDS has limited client-to-server redirection of file types support, this is only possible when distributing RD RemoteApps with MSI packages. Server to client URL redirection is not supported. MS RDS does not support USB webcams, scanners and cannot use MS activesync to sync with client devices. MS RDS does not have built-in WAN performance optimization technology. MS RDS can reconnect to disconnected sessions but it has no advanced reconnection technique (Session Reliability) that keeps the session alive when a network interruption occurs..-/n- )$5%*+&,'(+O"1%& Citrix Xenapp has a broad client support. There is integrated support for a lot of client platforms: All windows x86 and x64 platforms, Macintosh platforms, apple iphone, google android, windows mobile, java platforms, EPOC/symbian platforms and UNIX/LINUX platforms. Citrix Panning (scrolling) and Scaling (magnification) technology provides an improved user experience when viewing full-screen Windows applications on small form-factor devices since many applications in today'=4#-&)4#&.()"&'$;.&")('2::(#))3&',#&&.#&'(+2)$(.4%4$+4*+&(.=(*$+& "&%$,&'0>'$.;',#(++$.;4."=4;.$?$,4)$(.)echniques on the device enables the user to use these applications in their native form without the need for customized applications that support the small form-factor.( MS RDS only supports the client on windows x86 and x64 platforms. Limited support is available for Macintosh clients. A lot of RDS features require the windows 7 RDS client and are not available on windows xp and windows vista clients. 99

9 9" #$%&'()*$+,)-($*$./01%$/121*3/$&41(5)-1*51(*6*#)/()781+'&&.-//- P*C"*4%2&73$+57%25"&"*2&"325'&,388'1+& Citrix Xenapp uses enhanced Audio Codecs which provides CD quality audio using a very small amount of bandwidth. Support for multi-media collaboration software such as Office Communication Server and Voice over IP softphones within serverbased sessions. Support for Video Conferencing in Hosted Sessions is available which enables the ability to use video conferencing applications within server hosted sessions. Citrix Xenapp can benefit from advanced features such as HDX technology (explained earlier) to give better end user experience, especially regarding multimedia, graphics and audio. MS RDS has no enhanced multimedia and audio support. Performance and end user experience of multimedia applications within an RDP session are mainly poor..-/.- 9'*5+'15*D&'(&%*>51'*7%*+& Citrix Xenapp enterprise and platinum edition include Citrix monitoring software, called edgesight. Citrix edgesight is a performance and availability management solution for XenDesktop, XenApp and endpoint systems. EdgeSight monitors applications, devices, sessions, license usage, and the network in real time, allowing users to quickly analyze, resolve, and proactively prevent problems( MS RDS has no monitoring software included in the Remote Desktop services package. MS SCOM can be used at an extra price, but it does not supply enhanced monitoring tasks such as end-to-end monitoring..-/6- Q"12O"1%& Citrix Xenapp runs on both x86-bit and x64-bit hardware. Citrix Xenapp 6 however only runs on Windows 2008 R2 (which is 64-bit only), but you can still use Citrix Xenapp 5 on Windows 2008 R1 32-bit or Windows bit OS. This is very important if you consider to offer applications that can t run on 64-bit and are still needed or even business critical.( MS RDS included with Windows 2008 R2 contains a lot of improvements. If you want to use Windows 2008 R2 then you need 64-bit hardware. Windows 2008 R2 is only 64-bit and all the applications need to be compatible with 64-bit. You can still use Windows 2008 R1 32-bit and windows 2003 R2 32-bit, but MS RDS included with these OS versions contain less features and functionalities and are not really suitable for larger environments. 9"

10 #$%&'()*$+,)-($*$./01%$/121*3/$&41(5)-1*51(*6*#)/()781+'&& 9? 6- :%(%1%*4%,& The following articles have been used as reference to help writing this document: Citrix Xenapp on Microsoft Remote Desktop Services: Feature Analysis Is Windows Server 2008 R2 Terminal Services a Citrix Killer? Do you need Citrix or is Terminal Server enough? 9?