Transforming Desktop Management

Presentation on theme: "Transforming Desktop Management"— Presentation transcript:

Slide1

Transforming

Desktop Management

with Virtualization

Monica Lam

Professor, Stanford

Founder and Chief Scientist,

MokaFiveSlide2

Desktop Complexity Challenge:

| Copyright 2011 MokaFive, Inc.

2Slide3

A Holistic Approach, with Virtualization

| Copyright 2011 MokaFive, Inc.

3

A

ny time

Any where

Any machine Slide4

Separation of Concern

Characteristic of all intelligent thinking

Focus on one,

knowing that we are only occupying ourselves with one aspect

It is being one- and multiple-track minded simultaneously

The only available technique for effective ordering of one's thoughts.

“On the Role of Scientific Thought”,

Edsger W. Dijkstra, 1974

| Copyright 2011 MokaFive, Inc.

4Slide5

Each user has a personalized desktop

Separating Concerns in Desktop Mgmt

| Copyright 2011 MokaFive, Inc.

5

“C:” drive

iTunes, IM, viruses,

rootkits

Documents, music, pictures, preferences,

User Data & Settings

User Applications

IT Manages consistent desktops

XP / Win7, MS-Office, Anti-virus, Firefox, Viewer, Reader, VPN, etc..

Corporate Apps

Corporate OS

Operating Systems

User Data & Settings

Applications

Bare-metal*

USB

BYOPC

Windows

Mac

iTunes, IMSlide6

Demo

| Copyright 2011 MokaFive, Inc.

6Slide7

5000 desktops

per mgmt. server

Streamlined Rollouts/Updates

| Copyright 2011 MokaFive, Inc.

7

Corporate Desktop

Active Directory

(multi-forest)

MokaFive Live PC

Corporate Desktop

Corporate Desktop

Corporate Desktop

Corporate Desktop

Image StoreSlide8

Corporate Desktop

Streamlined Rollouts/Updates

| Copyright 2011 MokaFive, Inc.

8

Internet

Corporate Network

Corporate Desktop

Corporate Desktop

Corporate Desktop

Corporate Desktop

Image Store

5000 desktops

per mgmt. server

Active Directory

(multi-forest)Slide9

Always in Control

| Copyright 2011 MokaFive, Inc.

9

User Data & Settings

User Applications

Corporate OS

Corporate Apps

UN-REVOKE

KILL

REVOKESlide10

Virtualization

Virtualization

Centralized Updates

Delta Compression

One-Click Subscribe

System/User Separation

Predictive Fetch

Copy Protection

Encryption

Platform: Windows

Run from USB

Platform: Mac

Bypass Virtualization

Single-Sign On

AD Domain

Join Injection

Universal Installer

One-Click Subscribe

System/User Separation

Predictive Fetch

Encryption

Copy Protection

Platform: Windows

MokaFive

3.0

Dec 2010

MokaFive

1.0

May 2008

MokaFive

2.5

Nov 2009

Host Checker

Scrambled IO

USB Unplug Protection

FILO XP Layering

TDSK Format

Alt VMM:

VirtualBox

Tamper-Resistance

Multi-Tenant Server

Printer

Passthrough

FILO 7 Layering

AVG Integration

64-Bit Host Support

64-Bit Guest Support

Shadow

Filesystem

Trace-assisted

Prefetch

Trickle-Back Backup

Platform:

BareMetal

Run from USB

Platform: Mac

Bypass Virtualization

Single-Sign On

AD Domain Join Injection

Universal Installer

Host Checker

Scrambled IO

USB Unplug Protection

FILO XP Layering

TDSK Format

Alt VMM:

VirtualBox

Tamper-Resistance

Multi-Tenant Server

Printer

Passthrough

FILO 7 Layering

AVG Integration

64-Bit Host Support

64-Bit Guest Support

Shadow

Filesystem

Trace-assisted

Prefetch

Trickle-back Backup

Platform:

BareMetal

Centralized Updates

MokaFive Technology

| Copyright 2011 MokaFive, Inc.

10

Security

Manageability

Access Anywhere

Delta Compression

MokaFive

3.7

TodaySlide11

Technologies Behind the Scene

| Copyright 2011 MokaFive, Inc.

11Slide12

What is Layering?

Layering composes file system and registry

across different volumes into a unified view.

| Copyright 2011 MokaFive, Inc.

12

File system

RegistrySlide13

How Does Layering

Work?

Uses a Windows kernel driver

L

oads at a very early point in boot

Handles device drivers, etc.

Layering Policy Engine

Decides where each write should go, based on path match or file type

Default policy: User wins conflicts

Known user data to user layer, all else to app layer

| Copyright 2011 MokaFive, Inc.

13Slide14

Whiteouts

What if user deletes something in the system layer?

To record deletions, use

whiteouts

MS Bob

MS Bob.

WHITEDOUT

14

| Copyright 2011 MokaFive, Inc. Slide15

Benefit #1: Single-Image Management

15

| Copyright 2011 MokaFive, Inc. Slide16

Benefit #2: Rejuvenation

16

| Copyright 2011 MokaFive, Inc. Slide17

Benefit #3: Avoid Windows Rot

17

| Copyright 2011 MokaFive, Inc. Slide18

Other Uses of Layering

Easy and efficient backup and recovery

User data is in separate layer, making backup easy

Deploy thousands of users in minutes

No need for costly sysprep/QuickPrep

steps

Deploy updates in seconds, no matter how large

Just flip disk pointer and reboot. SP1 in 2 seconds!

Compatible with your existing tools/software

No need to

virtualize

or repackage applications

Can use standard software distribution tools| Copyright 2011 MokaFive, Inc. 18Slide19

M5

BareMetal Advantages

1. Single image across all devices

2. Zero-touch update across entire stack3. Rapid start—boots in 15 seconds

4. 2 seconds to apply any update5. TRIM support for consistent SSD performance

6. Simultaneous 3D acceleration across all

LivePCs

7. Built-in layering for user customizations

8. Off-network automated AD domain join

9. Built-in remote desktop support for help desk

10. Dynamic driver detection at boot

11. Built-in compression and AES-256 encryption

12. Automatic security lock on suspend| Copyright 2011 MokaFive, Inc. 19Slide20

VDI (Virtual Desktop Infrastructure)

Virtual machines run in the data center

Users remote login from desktopComparison with LivePCs

(Local execution on client machine) Share same management infrastructure

Virtual machines closer to large databases where applicableRequires constant, high-bandwidth connectivityPoor interactivity (video conference)

High total cost of ownership

| Copyright 2011 MokaFive, Inc.

20Slide21

Comparison with VDI (1000 Users)

| Copyright 2011 MokaFive, Inc.

21Slide22

Summary

| Copyright 2011 MokaFive, Inc.

22