DV-B308: Optimizing Windows 8 for Virtual Desktop InfrastructureDoug KlokowSolution ArchitectMicrosoft

Carl LubertiPremier Field EngineerMicrosoft

Session Objectives

Microsoft Guidance for Windows 8 Configuration

Detailed Review of Component Configuration

Recommendations for Performance Testing Approach

Why Windows 8 in VDI?

TouchPerformanceModern AppsUser Experience

Choosing the Right VDI Deployment Type

★

★★

★★★

★★★

★★

★★★

★★

★★

★★★

★★★

★

★

Personalization

Application

Compatibility

Image Management

Cost Effectiveness

Personal VMsSessions Pooled VMs

Good ★ Better ★★ Best

★★★

Key Decisions to Consider

Which Windows Edition for the Guest OS?Windows 8 Professional or Enterprise?

“Remote Computers running Windows 8 Enterprise provide the best user experience and support all management features. Therefore, Windows 8 Enterprise is the only supported edition for use with Windows Server 2012 virtual desktop collections (VDI).”Source: http://blogs.msdn.com/b/rds/archive/2012/11/26/remotefx-features-for-windows-8-and-windows-server-2012.aspx

Feature Windows 8 Pro

Windows 8 Enterprise

Windows 7 Enterprise (with RDP

8.0)

Ability to use RemoteApp

RemoteFX Multi-Touch

Advanced Device Redirection Features (RemoteFX USB & PnP redirection)

User Profile Disk

RemoteFX virtual Graphics Processing Unit (vGPU)

Which Windows Bitwise Edition for the Guest OS?Windows 8 32-bit or 64-bit

32-bit has a smaller footprint on the disk, but can only support 4GB of RAM64-bit may be selected if physical machines will use the 64-bit edition to avoid multiple application compatibility retesting

RecommendationConsider using 64-bit as the default, and 32-bit as optional if technical or business requirements are identified.

Memory AllocationDynamic memory will handle fluctuating demands for memory within a specified range

Recommended Minimum 1GB

Maximum based on workloadSmall -> 1.5 to 2GBMedium -> 2GB to 3GBLarge -> 2GB to 4GB (or more)

Consider using Blade Servers for Extra Large workloads

Memory Usage Comparison

64-bit

32-bit

Disk Size and PartitionsOSDisk drive size of the Virtual Desktop is impacted by the following factors:Pooled versus Personal VDI

Pooled range from 22GB to 40GBPersonal range from 40GB to 65GB

Virtualization Readiness of ApplicationsCompatibility – can the application be virtualized?Performance – Are there adverse performance impacts associated with a virtualized application versus a traditionally installed MSI?If the application is not virtualized, will it be installed local to the guest VM?

Disk PartitionsUsing the default install routine will create a 350MB System Reserved drive to store BitLocker data

Prevent the creation of this partition during OS installation using MDT 2012 to build the image

Utilize the “DoNotCreateExtraPartition=YES” rule to prevent the creation of the “System Reserved” partition.

Or use Scripted DISKPART commands….

OSDisk Size for Windows 864-bit32-bit

Increase of ~2.2 GB when using 64-bit

Notes• These figures are before optimization efforts are complete• Windows Update was not run, so final used space will be slightly

higher

Number of Virtual Processors

Default – 1 Virtual ProcessorMedium Usage – 2 Virtual ProcessorsHeavy Usage – 2 to 4 Virtual Processors

Note: Is you are using the Hyper-V hypervisor, fairshare will balance usage of processors to avoid one client consuming all available physical processor bandwidth

Requirements to Support RemoteFXGPU must support DirectX 11A list of certified GPU’s can be found on the Windows Server Catalog web site – linkAt present there are 6 NVIDIA cards certified for RemoteFX

RDVH or RDSH processor must support SLAT (Second-Level Address Translation)Intel Processors identify this with the term Extended Page Tables (EPT)AMD Processors identify this with the term Nested Page Tables (NPT)

VDI guest VMs must use the Windows 8 64-bit WDDM v1.20 driver to prevent rendering issuesRDVH or RSDH role service must be enabled on the RemoteFX server to provide RemoteFX in client sessions/VMs

Enabling RemoteFXOn the Hyper-V ServerConfirm that the WDDM v1.2 driver is selected in the GPU drop downCheck the “Use this GPU with RemoteFX”

CPU-emulated DirectX 11 software GPU

Provides 3-D capabilities to sessions and virtual machines at high scale

Optimized for knowledge worker workloads such as Microsoft Office and web browsing

Provides the highest scale for session host and VDI

RemoteFX vGPU

Provides a virtualized hardware-accelerated DirectX 11 GPU for VDI, optimized for:

Best performance for 3-D graphics-intensive applications

Best experience with full animations and transitions

Best application compatibility, running as a console session in a virtual machine

Options for GPU on server

17

RICH USER

EXPERIENCE

Multiple Display Configurations

Maximum Resolution

Number of Monitors supported

Windows 7 w/SP1 Windows 8

1024 x 768 4 8

1280 x 1024 4 8

1600 x 1200 3 4

1920 x 1200 2 4

2560 x 1600 N/A 2

Antivirus SoftwareOptions

Run agent live in clientsPre-Scan reference virtual machine & create

exceptions

ImpactLogonI/OSAN Performance

BriForum 2012 Session on AntiVirus from Jeroen van de Kamphttp://www.brianmadden.com/blogs/videos/archive/2012/08/01/briforum-2012-chicago-new-insights-a-virtual-reality-check-on-anti-virus-for-vdi-and-windows-8-2012-performance.aspx Microsoft ForeFront 2010 was identified as a “clear winner” based on his testing

Windows Services, Features, Configurations

Windows 8 Service ConfigurationService Name Default Recommended Details

Application Layer Gateway Service

Manual Disabled

This service manages mobile broadband (GSM & CDMA) data card/embedded module adapters and connections by auto-configuring the networks. It is strongly recommended that this service be kept running for best user experience of mobile broadband devices.

Background Intelligent Transfer Service

Manual DisabledVDI infrastructure is usually connected to fast LAN/WAN links to infrastructure servers hosting data

BitLocker Drive Encryption Service

Manual (TS) Disabled BitLocker is not available to be used on a virtual machines

Block Level Backup Engine Service

Manual DisabledService is used to backup data on the workstation – not used for virtual machines

Bluetooth Support Service Manual (TS) Disabled Bluetooth Wireless not supported from a virtual machine

BranchCache Manual ConsiderThis service caches network content from peers on the local subnet.

Computer Browser Manual (TS) DisabledMaintains an updated list of computers on the network and supplies this list to computers designated as browsers.

Device Association Service Manual (TS) DisabledEnables pairing between the system and wired or wireless devices.

Device Setup Manager Manual (TS) Disabled

Enables the detection, download and installation of device-related software. If this service is disabled, devices may be configured with outdated software, and may not work correctly.

Windows 8 Service ConfigurationService Name Default Recommended Details

Diagnostic Policy Service Automatic DisabledThe Diagnostic Policy Service enables problem detection, troubleshooting and resolution for Windows components. If this service is stopped, diagnostics will no longer function.

Diagnostic Service Host Manual Disabled

The Diagnostic Service Host is used by the Diagnostic Policy Service to host diagnostics that need to run in a Local Service context. If this service is stopped, any diagnostics that depend on it will no longer function.

Diagnostic System Host Manual Disabled

The Diagnostic System Host is used by the Diagnostic Policy Service to host diagnostics that need to run in a Local System context. If this service is stopped, any diagnostics that depend on it will no longer function.

Distributed Link Tracking Client Automatic ConsiderTracks NTFS links locally and across the network (but only if the service is also running on the remote system)

Encrypting File System (EFS) Manual (TS) Consider

Provides the core file encryption technology used to store encrypted files on NTFS file system volumes. If this service is stopped or disabled, applications will be unable to access encrypted files.

Extensible Authentication Protocol

Manual ConsiderThe Extensible Authentication Protocol (EAP) service provides network authentication in such scenarios as 802.1x wired and wireless, VPN, and Network Access Protection (NAP).

Family Safety Manual DisabledThis service is a stub for Windows Parental Control functionality that existed in Vista. It is provided for backward compatibility only.

Windows 8 Service ConfigurationService Name Default Recommended Details

Fax Manual DisabledEnables you to send and receive faxes, utilizing fax resources available on this computer or on the network.

Function Discovery Resource Publication

Manual Disabled

Publishes this computer and resources attached to this computer so they can be discovered over the network. If this service is stopped, network resources will no longer be published and they will not be discovered by other computers on the network.

File History Service Manual (TS) ConsiderProtects user files from accidental loss by copying them to a backup location

Home Group Listener Manual DisabledUsed to establish Home Groups, not used with virtual machines in a corporate environment

Home Group Provider Manual (TS) DisabledUsed to establish Home Groups, not used with virtual machines in a corporate environment

Internet Connection Sharing (ICS)

Disabled DisabledProvides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network.

Microsoft Account Sign-in Assistant

Manual (TS) ConsiderEnables user sign-in through Microsoft account identity services. If this service is stopped, users will not be able to logon to the computer with their Microsoft account.

Windows 8 Service ConfigurationService Name Default Recommended Details

Microsoft iSCSI Initiator Service Manual Disabled iSCSI will not be used on virtual desktops

Microsoft Software Shadow Copy Provider

Manual Disabled

Manages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed. If this service is disabled, any services that explicitly depend on it will fail to start.

Network List Service Manual AutomaticIdentifies the networks to which the computer has connected, collects and stores properties for these networks, and notifies applications when these properties change.

Offline Files Manual (TS)Disabled – REQUIRES

GPO

The Offline Files service performs maintenance activities on the Offline Files cache, responds to user logon and logoff events, implements the internals of the public API, and dispatches interesting events to those interested in Offline Files activities and changes in cache state.

Optimize Drives Manual DisabledHelps the computer run more efficiently by optimizing files on storage drives.

Sensor Monitoring Service Manual (TS) Consider

Monitors various sensors in order to expose data and adapt to system and user state. If this service is stopped or disabled, the display brightness will not adapt to lighting conditions. Stopping this service may affect other system functionality and features as well.

Secure Socket Tunneling Protocol Service

Manual DisabledThis service publishes a machine name using the Peer Name Resolution Protocol. Configuration is managed via the netsh context 'p2p pnrp peer'

Shell Hardware Detection Automatic Disabled Provides notifications for AutoPlay hardware events.

Windows 8 Service ConfigurationService Name Default Recommended Details

SNMP Trap Manual Disabled

Receives trap messages generated by local or remote Simple Network Management Protocol (SNMP) agents and forwards the messages to SNMP management programs running on this computer. If this service is stopped, SNMP-based programs on this computer will not receive SNMP trap messages. If this service is disabled, any services that explicitly depend on it will fail to start.

SSDP Discovery Manual Disabled

Discovers networked devices and services that use the SSDP discovery protocol, such as UPnP devices. Also announces SSDP devices and services running on the local computer. If this service is stopped, SSDP-based devices will not be discovered. If this service is disabled, any services that explicitly depend on it will fail to start.

Telephony Manual DisabledProvides Telephony API (TAPI) support for programs that control telephony devices on the local computer and, through the LAN, on servers that are also running the service.

Themes Automatic Consider Provides user experience theme management.

UPnP Device Host Manual Disabled

Allows UPnP devices to be hosted on this computer. If this service is stopped, any hosted UPnP devices will stop functioning and no additional hosted devices can be added. If this service is disabled, any services that explicitly depend on it will fail to start.

Volume Shadow Copy Manual Consider

Manages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start.

Windows 8 Service ConfigurationService Name Default Recommended Details

Windows Backup Manual Disabled Provides Windows Backup and Restore capabilities.

Windows Color System Manual DisabledThe WcsPlugInService service hosts third-party Windows Color System color device model and gamut map model plug-in modules.

Windows Connect Now - Config Registrar

Manual DisableWCNCSVC hosts the Windows Connect Now Configuration which is Microsoft's Implementation of Wi-Fi Protected Setup (WPS) protocol.

Windows Defender Automatic (TS)Consider – REQUIRES

GPOHelps protect users from malware and other potentially unwanted software

Windows Error Reporting Service

Manual (TS) DisabledAllows errors to be reported when programs stop working or responding and allows existing solutions to be delivered. Also allows logs to be generated for diagnostic and repair services.

Windows Media Player Network Sharing Service

Manual DisabledShares Windows Media Player libraries to other networked players and media devices using Universal Plug and Play

Windows Search Automatic (Delayed) ConsiderProvides content indexing, property caching, and search results for files, e-mail, and other content.

WLAN AutoConfig Manual DisabledThe WLANSVC service provides the logic required to configure, discover, connect to, and disconnect from a wireless local area network (WLAN) as defined by IEEE 802.11 standards.

WWAN AutoConfig Manual Disabled

This service manages mobile broadband (GSM & CDMA) data card/embedded module adapters and connections by auto-configuring the networks. It is strongly recommended that this service be kept running for best user experience of mobile broadband devices.

Windows 8 ConfigurationsConfiguration Name Function

Configure Event log size/retention

Set event log sizes to minimum size and configure retention to overwrite when needed, reduces overhead for event logging (especially in pooled VM scenarios)

Disable Hard Disk timeouts, increase disk I/O timeout, disable NTFS last access timestamp, disable System Restore, disable hibernation, perform a disk cleanup

Reduce I/O load when writes happen, allow longer writes, and clean up disk before Sysprep process

Disable unneeded scheduled tasks

36 scheduled tasks associated with disabled services or services not useful in virtual environment

Reconfigure boot (quiet boot/no animation), Disable UAC secure desktop prompt, set visuals to a minimum

Reduce overhead on vGPU and/or vCPU

Resources

Automation ToolsVDI Optimizer (AutoIT) by Jonathan Bennett

Creates a VBScript that can then be run on the machine to configure the settings as defined.The last release date was Aug of 2010, and there are no current plans to update to support Windows 8.

Optimization Resources for VDI

Focused on Windows 7Useful to review tested configuration settingsStrong correlation to Windows 8

http://social.technet.microsoft.com/wiki/contents/articles/4495.list-of-resources-on-windows-7-optimization-for-vdi.aspx?wa=wsignin1.0

Automation ToolsMicrosoft Script

PFE Windows 8 VDI Scripthttp://blogs.technet.com/b/jeff_stokes/archive/2013/04/09/hot-off-the-presses-get-it-now-the-windows-8-vdi-optimization-script-courtesy-of-pfe.aspx

Memory Usage Comparison

After:

Before:

Demo – Win8 VDI Script

Performance Tools

Windows ADK (Assessment and Deployment Kit)Windows Performance Recorder monitors Windows client performanceCommand Line: XPERFhttp://msdn.microsoft.com/en-us/library/hh162977.aspx

Performance ScenariosSteady State Performance TrackingSystem Boot TracingFast StartupShutdownReboot CycleStandby/ResumeHibernate/Resume

Xperf for the layman (Blog Post)

http://blogs.technet.com/b/jeff_stokes/archive/2013/03/16/xperf-for-the-layman-performance-analysis-unchained-windows-assessment-toolkit-revealed.aspx

Windows ADKWindows Performance Analyzer allows for the review and analysis of the performance logs collected by the WPR

Recommended ToolsMicrosoft Assessment and Planning Toolkit v8

Hardware/Software inventorySome performance assessmentLimited value for VDI planning

Recommended Performance ToolsLogin VSILiquidwareLabs Stratusphere FITLakeside Software SysTrack

Evaluation

Complete your session evaluations today and enter to win prizes daily. Provide your feedback at a CommNet kiosk or log on at www.2013mms.com.Upon submission you will receive instant notification if you have won a prize. Prize pickup is at the Information Desk located in Attendee Services in the Mandalay Bay Foyer. Entry details can be found on the MMS website.

We want to hear from you!

Resources

http://channel9.msdn.com/Events

Access MMS Online to view session recordings after the event.

Thanks!