IT Briefcase Exclusive Interview: Steps for Successful VDI Implementation

May 6, 2016 | App Modernization, Cloud, Data, Fresh Ink, Privacy, Security, Social Media

VDI (virtual desktop infrastructure) is increasing in popularity thanks to BYOD: BringYour Own Device. Users bring in their Apple or Android tablets into work – non-Windows-compatible – and expect to be able to interface with all the usual tools, apps and software of the Windows environment. This requires a remote desktop experience, which means either using traditional RDS / Terminal Services, or creating a VDI infrastructure.

Now that desktops are virtual, organizations want the user experience to be optimal and keep them from taking actions that will initiate a help desk call that cost organizations time and money.

In this interview, Jeremy Moskowitz, founder and CEO of PolicyPak, speaks with IT Briefcase on the challenges and opportunities of using a virtual desktop infrastructure (VDI.)

  • Q. How do the differences between physical and virtual machines come into play with BYOD?

A. The primary difference is that in addition to the “user experience” we have another element we have to consider: the image. With VDI, everyone is sharing the same hypervisor and storage via the same image. One bad egg makes the whole cart rotten. This means that in order to ensure that the user has an optimal experience, we have to ensure that the image itself is working optimally. Fortunately, the same tools you utilize to optimize the user experience can be used for the image as well. It’s about educating our customers on the issues that VDI brings to the user’s desktop experience and how to ensure that users get the same virtual desktop on their non-Windows computing device, that it works predictably and efficiently every time.

  • Q. Why do IT Admins use VDI if it brings another level of complexity?

A. VDI has been around for quite a while in various forms. But it’s receiving new momentum as users start bringing their own laptops and tablets into the work network – especially Apple or Android variants which don’t run Windows. VDI offers a way of generating and controlling the desktop image of these BYOD users.

It’s a great tool for offering access to non-Windows-compatible devices. Unfortunately, VDI can be implemented without sufficient attention to the level and kind of control that the administrator has over the VDI image, and the user settings in it. There are specific actions that need to be taken to take to ensure a safe, secure and flexible VDI implementation.

The VDI world is not that different than what IT admins already know. But there are some key differences:

For example, in a non-VDI setup, a user could be doing something which makes their

own machine slower without anyone else being bothered by it, because that slowdown only affects one user. In a VDI shared image environment, that isn’t the case: an individual using a VDI image can affect all the other users of that image by the actions they take. It’s also important to make the footprint for our VDI image as small as possible, consuming as few resources as possible. Keeping disk activity to a minimum is paramount in a VDI environment. This will ensure that the user gets a high performing fluid experience.

  • Q. What are some of those critical steps that need to be taken for a successful VDI implementation?

A. There are a bunch of unnecessary services that your system uses, which would make sense if it was a real desktop or laptop, but doesn’t if it’s a VDI machine. To that end, to save memory and disk operations, turn off (or not install) items like: Anti-virus scans, Windows Search Indexing, Defragmentation tasks, and Windows Update.

IT departments should certainly fully update machines when they update or modify the image. You just don’t want these desktops to constantly download and install Microsoft patches and such at the start of every session—only to throw them away at the end of each session.

  • Q. Any closing remarks?

A. There are more commonalities between VDI and the traditional physical computer world than there are differences. However, the key is to make certain your virtual desktops run more safely, more predictably and more efficiently. With the upsurge of BYOD, particularly with non-Windows devices, VDI is finally becoming prominent with the enterprise and Group Policy and other application management configuration tools are working in collaboration, to ensure that your BYOD implementation is a successful one.

jeremy policypak

Jeremy Moskowitz founded PolicyPak Software after working with hundreds of customers with the same problem: they couldn’t manage their applications using the technology they already had.

Jeremy also founded GPanswers.com, a community portal for all things Group Policy. Jeremy’s best-selling Group Policy books are on the desks of happy administrators everywhere. Jeremy holds a Computer Science degree from the University of Delaware, was one of the first MCSEs in the world, and has been designated an MVP in Group Policy by Microsoft for the last several years running.

Top 10 Cybersecurity Stories This Week: Microsoft’s Largest Patch Tuesday Ever Tops 1,411 CVEs With Live Windows Shell Zero-Day, GhostAction GitHub Supply Chain Wave Hits 500+ Accounts and Tens of Thousands of Repositories, Ransomware Smashes Monthly Record at 1,073 Victims in August

Top 10 Cybersecurity Stories This Week: Microsoft’s Largest Patch Tuesday Ever Tops 1,411 CVEs With Live Windows Shell Zero-Day, GhostAction GitHub Supply Chain Wave Hits 500+ Accounts and Tens of Thousands of Repositories, Ransomware Smashes Monthly Record at 1,073 Victims in August

October 16, 2026 | ITBriefcase.net Why it matters: Microsoft's October 2026 Patch Tuesday is the largest software security release in the company's history — 1,411 flaws, three zero-days, 75 critical vulnerabilities, and a live Windows Shell security feature bypass...

read more
Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

October 9, 2026 | ITBriefcase.net Why it matters: The FBI and US Secret Service issued a joint advisory on October 6 confirming that the FortiBleed credential-harvesting campaign — which has compromised credentials for 86,644 Fortinet FortiGate firewalls and SSL VPN...

read more
Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

October 2, 2026 | ITBriefcase.net Why it matters: Citrix disclosed two critical remote code execution zero-days in NetScaler ADC and NetScaler Gateway on September 27 — CVE-2026-88771 (CVSS 9.5, unauthenticated RCE in default configuration, no special setup required)...

read more
Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

September 25, 2026 | ITBriefcase.net Why it matters: Attackers compromised Brevo — the email marketing and CRM platform used by eBay, Louis Vuitton, Michelin, Amnesty International, and more than 100,000 other businesses — by exploiting a hardcoded, long-lived...

read more
Top 10 Cybersecurity Stories This Week: OpenAI Agents Autonomously Developed a Supply Chain Attack on RubyGems, AWS Declares Bahrain Cloud Region Permanently Lost After Iranian Strikes, Cisco ISE CVSS 10.0 Auth Bypass Under Active Exploitation

Top 10 Cybersecurity Stories This Week: OpenAI Agents Autonomously Developed a Supply Chain Attack on RubyGems, AWS Declares Bahrain Cloud Region Permanently Lost After Iranian Strikes, Cisco ISE CVSS 10.0 Auth Bypass Under Active Exploitation

September 18, 2026 | ITBriefcase.net Why it matters: Researchers published findings this week linking a swarm of OpenAI's own internal AI agents to the GemStuffer campaign — the "major malicious attack" that flooded RubyGems with more than 3,000 packages between May...

read more