Dynamic and intelligent virtual desktop management
Systems and methods are provided for dynamically optimizing and configuring various aspects of virtual desktops in virtual desktop infrastructure. Data collectors can be installed on and operate on various components in the virtual desktop infrastructure, such as on the virtual desktops running on the server, on the virtual desktop clients running on user devices, and on the connection server. The data collectors can operate to collect various types of information from corresponding components, such as application usage data and status, device performance, networking environment and speed, application or system crash data, and so on. The collected data can be logged, tracked, and analyzed to perform various actions on the virtual desktop.
1. A method for dynamic virtual desktop management, comprising:
establishing a virtual desktop on a virtual desktop server and establishing a connection between a virtual desktop client running on a client device and a virtual desktop agent running in the virtual desktop server, the virtual desktop client being configured to receive inputs from a user on the client device and to convey the received user inputs to the virtual desktop agent to be effectuated in the virtual desktop, and wherein the virtual desktop client is further configured to present a graphical user interface (GUI) of the virtual desktop that is streamed to the virtual desktop client to the user on the client device;
by a client data collector running on the client device, collecting client device telemetry data on the client device, the client device telemetry data comprising:
client device network connection parameters;
client device computing resource parameters;
by a virtual desktop data collector running on the virtual desktop, collecting telemetry data on the virtual desktop, the virtual desktop telemetry data comprising:
virtual desktop computing resource parameters; and
by a decision-making module, configuring features on the virtual desktop based on the client device telemetry data and the virtual desktop telemetry data.
2. The method of claim 1 , further comprising:
based on the client device network connection parameters and a predefined policy, determining by the decision-making module that the client device is on an unsecure network; and
in response to determining that the client device is on an unsecure network, blocking screen capture of the virtual desktop GUI.
3. The method of claim 1 , further comprising:
based on the client device network connection parameters and a predefined policy, determining by the decision-making module that the client device is on an unsecure network; and
in response to determining that the client device is on an unsecure network, enabling an anti-keylogger in the virtual desktop.
4. The method of claim 1 , further comprising:
based on the client device computing resource parameters and a predefined policy, determining by the decision-making module that the client device has insufficient resources for multimedia redirection; and
in response to determining that the client device has insufficient resources for multimedia redirection, disabling multimedia redirection in the virtual desktop.
5. The method of claim 1 , further comprising:
based on the client device network connection parameters and a predefined policy, determining by the decision-making module a value for a size of a clipboard used for clipboard redirection in the virtual desktop; and
setting the size of the clipboard used in clipboard redirection on the virtual desktop to the determined value.
6. The method of claim 1 , further comprising:
based on the client device network connection parameters and a predefined policy, determining by the decision-making module that the client device is on an unsecure network; and
in response to determining that the client device is on an unsecure network, denying a user login to the virtual desktop.
7. The method of claim 1 , further comprising:
by the client data collector running on the client device, collecting user application usage information in the client device;
by the virtual desktop data collector running on the virtual desktop, collecting user application usage information in the virtual desktop; and
based on combined user application usage in the client device and in the virtual desktop, determining an order for organizing applications in the virtual desktop.
8. A computing device for dynamic virtual desktop management, comprising:
at least one processor; and
memory including instructions that, when executed by the at least one processor, cause the computing device to perform the steps of:
establishing a virtual desktop on a virtual desktop server and establishing a connection between a virtual desktop client running on a client device and a virtual desktop agent running in the virtual desktop server, the virtual desktop client being configured to receive inputs from a user on the client device and to convey the received user inputs to the virtual desktop agent to be effectuated in the virtual desktop, and wherein the virtual desktop client is further configured to present a graphical user interface (GUI) of the virtual desktop that is streamed to the virtual desktop client to the user on the client device;
by a client data collector running on the client device, collecting client device telemetry data on the client device, the client device telemetry data comprising:
client device network connection parameters;
client device computing resource parameters;
by a virtual desktop data collector running on the virtual desktop, collecting telemetry data on the virtual desktop, the virtual desktop telemetry data comprising:
virtual desktop computing resource parameters; and
by a decision-making module, configuring features on the virtual desktop based on the client device telemetry data and the virtual desktop telemetry data.
9. The computing device of claim 8 , wherein the memory further includes instructions that when executed by the at least one processor, cause the computing device to perform the steps of:
based on the client device network connection parameters and a predefined policy, determining by the decision-making module that the client device is on an unsecure network; and
in response to determining that the client device is on an unsecure network, blocking screen capture of the virtual desktop GUI.
10. The computing device of claim 8 , wherein the memory further includes instructions that when executed by the at least one processor, cause the computing device to perform the steps of:
based on the client device network connection parameters and a predefined policy, determining by the decision-making module that the client device is on an unsecure network; and
in response to determining that the client device is on an unsecure network, enabling an anti-keylogger in the virtual desktop.
11. The computing device of claim 8 , wherein the memory further includes instructions that when executed by the at least one processor, cause the computing device to perform the steps of:
based on the client device computing resource parameters and a predefined policy, determining by the decision-making module that the client device has insufficient resources for multimedia redirection; and
in response to determining that the client device has insufficient resources for multimedia redirection, disabling multimedia redirection in the virtual desktop.
12. The computing device of claim 8 , wherein the memory further includes instructions that when executed by the at least one processor, cause the computing device to perform the steps of:
based on the client device network connection parameters and a predefined policy, determining by the decision-making module a value for a size of a clipboard used for clipboard redirection in the virtual desktop; and
setting the size of the clipboard used in clipboard redirection on the virtual desktop to the determined value.
13. The computing device of claim 8 , wherein the memory further includes instructions that when executed by the at least one processor, cause the computing device to perform the steps of:
based on the client device network connection parameters and a predefined policy, determining by the decision-making module that the client device is on an unsecure network; and
in response to determining that the client device is on an unsecure network, denying a user login to the virtual desktop.
14. The computing device of claim 8 , wherein the memory further includes instructions that when executed by the at least one processor, cause the computing device to perform the steps of:
by the client data collector running on the client device, collecting user application usage information in the client device;
by the virtual desktop data collector running on the virtual desktop, collecting user application usage information in the virtual desktop; and
based on combined user application usage in the client device and in the virtual desktop, determining an order for organizing applications in the virtual desktop.
15. A non-transitory computer readable storage medium for dynamic virtual desktop management comprising one or more sequences of instructions, the instructions when executed by one or more processors causing the one or more processors to execute the operations of:
establishing a virtual desktop on a virtual desktop server and establishing a connection between a virtual desktop client running on a client device and a virtual desktop agent running in the virtual desktop server, the virtual desktop client being configured to receive inputs from a user on the client device and to convey the received user inputs to the virtual desktop agent to be effectuated in the virtual desktop, and wherein the virtual desktop client is further configured to present a graphical user interface (GUI) of the virtual desktop that is streamed to the virtual desktop client to the user on the client device;
by a client data collector running on the client device, collecting client device telemetry data on the client device, the client device telemetry data comprising:
client device network connection parameters;
client device computing resource parameters;
by a virtual desktop data collector running on the virtual desktop, collecting telemetry data on the virtual desktop, the virtual desktop telemetry data comprising:
virtual desktop computing resource parameters; and
by a decision-making module, configuring features on the virtual desktop based on the client device telemetry data and the virtual desktop telemetry data.
16. The non-transitory computer readable storage medium of claim 15 , further comprising instructions that when executed by the one or more processors cause the one or more processors to execute the operations of:
based on the client device network connection parameters and a predefined policy, determining by the decision-making module that the client device is on an unsecure network; and
in response to determining that the client device is on an unsecure network, blocking screen capture of the virtual desktop GUI.
17. The non-transitory computer readable storage medium of claim 15 , further comprising instructions that when executed by the one or more processors cause the one or more processors to execute the operations of:
based on the client device network connection parameters and a predefined policy, determining by the decision-making module that the client device is on an unsecure network; and
in response to determining that the client device is on an unsecure network, enabling an anti-keylogger in the virtual desktop.
18. The non-transitory computer readable storage medium of claim 15 , further comprising instructions that when executed by the one or more processors cause the one or more processors to execute the operations of:
based on the client device computing resource parameters and a predefined policy, determining by the decision-making module that the client device has insufficient resources for multimedia redirection; and
in response to determining that the client device has insufficient resources for multimedia redirection, disabling multimedia redirection in the virtual desktop.
19. The non-transitory computer readable storage medium of claim 15 , further comprising instructions that when executed by the one or more processors cause the one or more processors to execute the operations of:
based on the client device network connection parameters and a predefined policy, determining by the decision-making module a value for a size of a clipboard used for clipboard redirection in the virtual desktop; and
setting the size of the clipboard used in clipboard redirection on the virtual desktop to the determined value.
20. The non-transitory computer readable storage medium of claim 15 , further comprising instructions that when executed by the one or more processors cause the one or more processors to execute the operations of:
based on the client device network connection parameters and a predefined policy, determining by the decision-making module that the client device is on an unsecure network; and
in response to determining that the client device is on an unsecure network, denying a user login to the virtual desktop.