+ Post New Thread
Results 1 to 15 of 15
Thin Client and Virtual Machines Thread, VDI Machienes - Hints and Tips in Technical; Just currently setting up a load of Windows 7 VDI machines using VMware view. I know there is a the ...
  1. #1

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,817
    Thank Post
    272
    Thanked 1,138 Times in 1,034 Posts
    Rep Power
    350

    VDI Machienes - Hints and Tips

    Just currently setting up a load of Windows 7 VDI machines using VMware view. I know there is a the VMware optimization guide.

    But apart from that does anybody have there own recommendations as to what they do and why when configuring VDI machines?

    Toby

  2. #2
    jamesfed's Avatar
    Join Date
    Sep 2009
    Location
    Reading
    Posts
    2,207
    Thank Post
    137
    Thanked 345 Times in 291 Posts
    Rep Power
    87
    I always run this guy on our VDIs - AutoIt Tools: VDI Optimizer - AutoItScript

    No clue if it makes a real difference but I like to think so

  3. Thanks to jamesfed from:

    glennda (20th June 2012)

  4. #3

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,817
    Thank Post
    272
    Thanked 1,138 Times in 1,034 Posts
    Rep Power
    350
    Will give it a go and see what i can come up with!

  5. #4

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,817
    Thank Post
    272
    Thanked 1,138 Times in 1,034 Posts
    Rep Power
    350
    @jamesfed - what do you do regarding AV on your VDI machines?

  6. #5
    jamesfed's Avatar
    Join Date
    Sep 2009
    Location
    Reading
    Posts
    2,207
    Thank Post
    137
    Thanked 345 Times in 291 Posts
    Rep Power
    87
    Quote Originally Posted by glennda View Post
    @jamesfed - what do you do regarding AV on your VDI machines?
    We've got Sophos on our VDIs, it updates automatically in the background (live protection) but I've only got it to do scanning on files that are being written.

    Its largely fire and forget though as if you ever have a problem with a VDI desktop you just obliterate it and your VDI setup will create a new one.

  7. #6

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,817
    Thank Post
    272
    Thanked 1,138 Times in 1,034 Posts
    Rep Power
    350
    Quote Originally Posted by jamesfed View Post
    We've got Sophos on our VDIs, it updates automatically in the background (live protection) but I've only got it to do scanning on files that are being written.

    Its largely fire and forget though as if you ever have a problem with a VDI desktop you just obliterate it and your VDI setup will create a new one.
    That's what i'm thinking at the moment - whether its actually worth it at all? Servers are protected using AV so if client gets one - refresh desktop job done.

  8. #7
    jamesfed's Avatar
    Join Date
    Sep 2009
    Location
    Reading
    Posts
    2,207
    Thank Post
    137
    Thanked 345 Times in 291 Posts
    Rep Power
    87
    Quote Originally Posted by glennda View Post
    That's what i'm thinking at the moment - whether its actually worth it at all? Servers are protected using AV so if client gets one - refresh desktop job done.
    Only thing is you have to know something is up with the PC to destroy it - so you could have a virus on a VDI for up to a day (if you have nightly refresh setup) during which it could be silently collecting info about every login to the PC.

    Its paranoia based security but hey why not

    Have you seen my posts about using PCI-E SSDs? With the IO you can get out of them it makes the whole ‘well AV on VDI chews through my disk IO’ argument almost pointless.

  9. #8

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,817
    Thank Post
    272
    Thanked 1,138 Times in 1,034 Posts
    Rep Power
    350
    Quote Originally Posted by jamesfed View Post
    Only thing is you have to know something is up with the PC to destroy it - so you could have a virus on a VDI for up to a day (if you have nightly refresh setup) during which it could be silently collecting info about every login to the PC.

    Its paranoia based security but hey why not

    Have you seen my posts about using PCI-E SSDs? With the IO you can get out of them it makes the whole ‘well AV on VDI chews through my disk IO’ argument almost pointless.
    Yeah I did - I'm doing 7 VDI machines - not sure the IO is going to be to much for SAS drives! I'm no longer in education!

  10. #9
    jamesfed's Avatar
    Join Date
    Sep 2009
    Location
    Reading
    Posts
    2,207
    Thank Post
    137
    Thanked 345 Times in 291 Posts
    Rep Power
    87
    Quote Originally Posted by glennda View Post
    Yeah I did - I'm doing 7 VDI machines - not sure the IO is going to be to much for SAS drives! I'm no longer in education!
    Ahh yeah at 7 it would probably be cheaper on SAS anyways

  11. #10

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,053
    Thank Post
    888
    Thanked 1,728 Times in 1,491 Posts
    Blog Entries
    12
    Rep Power
    453
    Quote Originally Posted by glennda View Post
    That's what i'm thinking at the moment - whether its actually worth it at all? Servers are protected using AV so if client gets one - refresh desktop job done.
    It wouldnt help with stuff on pen drives etc.

  12. #11
    Axel's Avatar
    Join Date
    Apr 2008
    Posts
    239
    Thank Post
    32
    Thanked 43 Times in 32 Posts
    Rep Power
    21
    ....without AV isn't there a risk of propagating the virus all around the organisation, fair point the VM's can be recreated clean - but in theory you would have to delete all VM's at the same time to eradicate the virus...

    ...and as viruses are a definite reality, this scenario is inevitable....?

  13. #12

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,817
    Thank Post
    272
    Thanked 1,138 Times in 1,034 Posts
    Rep Power
    350
    @FN-GM - this company Ban pen drives so that shouldn't be an issue (risk of data leaving site as legal firm).
    @Axel - its 7 machines and if the servers are protected which are the only machines not to be rebuilt.

    The base image wouldn't be switched on so in theory would be clean.

  14. #13
    jamesfed's Avatar
    Join Date
    Sep 2009
    Location
    Reading
    Posts
    2,207
    Thank Post
    137
    Thanked 345 Times in 291 Posts
    Rep Power
    87
    Quote Originally Posted by glennda View Post
    @Axel - its 7 machines and if the servers are protected which are the only machines not to be rebuilt.

    The base image wouldn't be switched on so in theory would be clean.
    Is that only 7 PCs (which are your VDIs) in the entire firm?

  15. #14

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,817
    Thank Post
    272
    Thanked 1,138 Times in 1,034 Posts
    Rep Power
    350
    Quote Originally Posted by jamesfed View Post
    Is that only 7 PCs (which are your VDIs) in the entire firm?
    Yes - its for a small law firm

  16. #15
    jamesfed's Avatar
    Join Date
    Sep 2009
    Location
    Reading
    Posts
    2,207
    Thank Post
    137
    Thanked 345 Times in 291 Posts
    Rep Power
    87
    Quote Originally Posted by glennda View Post
    Yes - its for a small law firm
    Interesting situation then!

    I'd still be concerned about key loggers/ect though which don't 'break your PC' in any obvious way.

SHARE:
+ Post New Thread

Similar Threads

  1. Summer Rebuild: Hints and Tips wanted!
    By Rydra in forum General Chat
    Replies: 10
    Last Post: 8th July 2010, 02:49 PM
  2. Replies: 1
    Last Post: 13th May 2010, 02:31 PM
  3. VLE – Microsoft Learning Gateway – Ideas, Hints and Resource
    By benit2 in forum Virtual Learning Platforms
    Replies: 5
    Last Post: 14th September 2007, 08:18 PM
  4. One||Zero Hints and Tips
    By Ric_ in forum How do you do....it?
    Replies: 18
    Last Post: 15th June 2007, 11:08 AM
  5. Replies: 13
    Last Post: 20th July 2005, 01:47 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •