Virtual Desktop
Also known as: VDI, virtual machine desktop, DaaS (Desktop as a Service), Citrix, remote desktop infrastructure
Virtual Desktop Infrastructure (VDI) is a technology that hosts desktop environments (operating system, applications, and data) on centralized servers in a data centre, rather than on the user's local device.
Users access their virtual desktop via a thin client, laptop, or any device with a network connection -- seeing the same desktop environment regardless of which device they log in from. VDI centralizes desktop management, improves security (data never leaves the data centre), and enables any-device access. Leading VDI platforms include Citrix Virtual Apps and Desktops, VMware Horizon, and Microsoft Azure Virtual Desktop (AVD).
Virtual Desktop, explained at three levels
At home
A virtual desktop lets you access a full computer -- with all your work software and files -- from any device, over the internet. Instead of your programs and files being on your laptop, they're on a powerful computer in a data centre. You connect to that computer over the internet and see your full work desktop on whatever screen you're using. Log in from home on a tablet, at the office on a desktop, or from a client site on any available computer -- it always looks the same.
At work
Companies use VDI to keep sensitive data secure and to simplify IT management. Because data never leaves the data centre (it's only displayed on the user's screen), lost or stolen devices can't expose sensitive information. IT teams can update software for thousands of employees by changing the server-side desktop image once, rather than updating each individual device. This makes VDI particularly valuable for organizations with strict data security requirements or widely distributed workforces.
At home
VDI versus traditional desktop approaches: dedicated VDI (each user has their own persistent virtual machine, like a personal computer in the cloud) vs. non-persistent VDI (each session starts from a clean 'golden image' with no personal customization saved between sessions). Persistent VDI feels like a personal computer -- settings and files are preserved. Non-persistent VDI is cheaper (one image serves many users) but requires all data to live on shared network drives, not locally, and settings must be managed through profiles.
At work
VDI performance is critically dependent on network quality: because all user interactions (keystrokes, mouse movements) travel to the server and screen updates travel back, any network latency translates directly to perceived desktop responsiveness. High-latency connections (>150ms) make VDI feel sluggish for interactive work. Multimedia redirection (processing video playback on the local device rather than the server) is a VDI optimization that prevents video streaming from consuming server resources and improves playback quality for users.
At home
Desktop-as-a-Service (DaaS) is the cloud-hosted equivalent of on-premises VDI: rather than operating VDI servers in an on-premises data centre, organizations subscribe to a cloud service (Azure Virtual Desktop, Amazon WorkSpaces, Citrix DaaS) that provisions and manages the underlying infrastructure. DaaS eliminates the capital cost and operational complexity of on-premises VDI while enabling rapid scaling (spin up desktops for temporary workers, scale down after project end).
At work
VDI sizing and cost modeling require careful analysis: per-session CPU and RAM requirements vary by user workload type (knowledge worker, power user, developer, CAD user). Overprovisioning VDI capacity wastes significant cost; underprovisioning creates poor user experience. Azure Virtual Desktop and VMware Horizon Cloud include cost optimization tools. Storage costs in VDI are significant -- user profile disks, application packages, and golden images all require managed storage. FSLogix (Microsoft, free for Microsoft 365 subscribers) is the standard for VDI user profile management in Azure Virtual Desktop, dramatically reducing storage requirements compared to traditional roaming profiles.
Real-world examples
At home
Sophie worked as a consultant and frequently needed to access sensitive client systems from different locations. Her firm deployed Azure Virtual Desktop -- she logged into her virtual desktop from any computer using a browser, accessed all her work applications and files, and when she finished, nothing sensitive remained on the device she used. At client sites, she used their computers without any risk of corporate data being left behind.
At work
Thomas managed IT for a healthcare organization where regulations required patient data to never leave controlled infrastructure. VDI was the solution: clinical staff accessed patient records through virtual desktops delivered to thin clients and tablets. The actual data lived on secured servers; the screen output was all that traveled to the device. Compliance audits confirmed zero patient data on user devices.
Common confusions
- Many people confuse VDI with simply remote-controlling another computer (like Remote Desktop to a specific PC) — Remote Desktop Protocol (RDP) connects you to a specific individual computer (a physical machine or VM) that must be powered on and available. VDI provides a virtual desktop from a pool of resources -- each session gets provisioned compute resources dynamically. VDI is designed to scale to thousands of concurrent users; RDP is designed to access specific individual machines. VDI also includes enterprise features for session brokering, load balancing, and profile management absent from simple RDP.
- Some assume VDI eliminates the need for endpoint security since data is on the server — VDI reduces endpoint data exposure but doesn't eliminate endpoint security requirements. The connecting device can still be compromised (keylogger malware captures credentials or screen contents), clipboard bridging can transfer data between the virtual desktop and local device (a configuration that must be actively restricted), and print redirection can move data out of the controlled environment. VDI changes the endpoint security risk profile but doesn't eliminate it -- endpoint protection, clipboard restriction policy, and peripheral access controls are still required.
For analysts
When a client with compliance requirements (healthcare, financial services, legal) is evaluating remote work security, VDI often surfaces as a solution. The key ROI question is: what is the cost of a data breach or compliance violation due to data on a personal or portable device vs. the cost of VDI deployment? For many regulated-industry clients, VDI's security guarantees are worth the premium over standard endpoint management -- but the business case requires quantifying the compliance risk being mitigated.
History & origin
VDI technology emerged from mainframe terminal computing (remote thin clients accessing centralized computing). Citrix (founded 1989) pioneered remote desktop delivery for Windows applications. VMware and Citrix developed the modern VDI model in the 2000s. Initially, VDI was expensive and complex, limiting adoption to highly regulated industries (financial services, healthcare) where data security requirements justified the cost. Cloud-based VDI (Azure Virtual Desktop from Microsoft, Amazon WorkSpaces) reduced the infrastructure cost and complexity significantly in the late 2010s. COVID-19 (2020) created massive demand for VDI as organizations needed to rapidly enable secure remote work for employees without corporate laptops -- any device could access the virtual desktop without corporate data touching personal devices.