您现在访问的是微软AZURE全球版技术文档网站,若需要访问由世纪互联运营的MICROSOFT AZURE中国区技术文档网站,请访问 https://docs.azure.cn.

将本地远程桌面服务移动到 Azure Windows 虚拟桌面方案Move on-premises Remote Desktop Services to Azure Windows Virtual Desktop scenario

Windows 虚拟桌面是一个在云中运行的综合性桌面和 application virtualization 服务。Windows Virtual Desktop is a comprehensive desktop and application virtualization service running in the cloud. 这是 (VDI) 的唯一虚拟桌面基础结构,它提供简化的管理、适用于企业的 Microsoft 365 应用程序的 Windows 10 企业多会话优化,以及对远程桌面服务 (RDS) 环境的支持。It's the only virtual desktop infrastructure (VDI) that delivers simplified management, Windows 10 Enterprise multi-session optimizations for Microsoft 365 Apps for enterprise, and support for Remote Desktop Services (RDS) environments. 在数分钟内部署和缩放 Azure 上的 Windows 桌面和应用程序,并获得内置的安全性和符合性功能。Deploy and scale Windows desktops and applications on Azure in minutes, and get built-in security and compliance features.

迁移选项Migration options 业务成效Outcome
Azure MigrateAzure Migrate 评估和迁移本地 RDS 环境。Assess and migrate on-premises RDS environments.

使用 Azure Windows 虚拟桌面运行工作负荷。Run workloads by using Azure Windows Virtual Desktop.

利用 Windows 虚拟桌面管理 UX管理 Windows 虚拟桌面。Manage Windows Virtual Desktop with Windows Virtual Desktop management UX.

备注

本文重点介绍如何在 Azure 中使用 Windows 虚拟桌面将本地 RDS 环境移至 Azure。This article focuses on using Windows Virtual Desktop in Azure to move an on-premises RDS environment to Azure.

业务驱动因素Business drivers

Contoso IT 团队可与业务合作伙伴密切合作,为 VDI 迁移到 Azure 定义业务驱动因素。Working closely with business partners, the Contoso IT team will define the business drivers for a VDI migration to Azure. 这些驱动程序可能包括:These drivers might include:

  • 当前环境生存期: 数据中心到达租约结束或正在关闭时,其容量不会超出容量。Current environment end-of-life: A datacenter is out of capacity when it reaches the end of a lease or is closing down. 迁移到云可提供几乎无限制的容量。Migrating to the cloud provides virtually unlimited capacity. 当前的软件还可能会达到其生命周期的结束时间,以便升级运行 Contoso 当前 VDI 解决方案的软件。Current software might also be reaching its end of life where it has become necessary to upgrade the software running Contoso's current VDI solution.
  • 多会话 Windows 10 VDI: 在云中,为 Contoso 用户提供一个高度可缩放的、最新的、最新的、在任何设备上都可用的多会话 Windows 10 桌面。Multi-session Windows 10 VDI: Provide Contoso users with the only multi-session Windows 10 desktop virtualized in the cloud that's highly scalable, up to date, and available on any device.
  • 针对 enterprise Microsoft 365 应用进行优化: 通过多会话虚拟桌面方案提供适用于企业体验的最佳 Microsoft 365 应用,为 Contoso 用户提供最高效的虚拟化体验。Optimize for Microsoft 365 Apps for enterprise: Deliver the best Microsoft 365 Apps for enterprise experience, with multi-session virtual desktop scenarios providing the most productive virtualized experience for Contoso's users.
  • 在数分钟内部署和扩展: 通过 Azure 门户中的统一管理,在几分钟内快速虚拟化新式和旧桌面应用程序并将其部署到云中。Deploy and scale in minutes: Quickly virtualize and deploy modern and legacy desktop applications to the cloud in minutes with unified management in the Azure portal.
  • 在 Azure 和 Microsoft 365 上安全高效地工作: 部署一个完整的智能解决方案,为每个人提高创造性和协作性。Secure and productive on Azure and Microsoft 365: Deploy a complete, intelligent solution that enhances creativity and collaboration for everyone. 转到 Microsoft 365 并获得 Office 365、Windows 10 和企业移动性 + 安全性。Shift to Microsoft 365 and get Office 365, Windows 10, and Enterprise Mobility + Security.

本地到 Windows 虚拟桌面的 RDS 目标RDS on-premises to Windows Virtual Desktop in the cloud goals

考虑到业务驱动因素,Contoso 已为此迁移固定目标:With the business drivers in mind, Contoso has pinned down goals for this migration:

  • 现代化云的虚拟桌面环境。Modernize the virtual desktop environment for the cloud.
  • 充分利用现有 Microsoft 365 许可证。Take advantage of existing Microsoft 365 licenses.
  • 当用户远程工作时,提高公司数据的安全性。Improve security of corporate data when users work remotely.
  • 针对成本和增长优化新环境。Optimize the new environment for cost and growth.

这些目标支持使用 Windows 虚拟桌面的决定,并将其验证为 Contoso 的最佳迁移方法。These goals support the decision to use Windows Virtual Desktop and validate it as the best migration method for Contoso.

在 Azure 中运行 Windows 虚拟桌面的优点Benefits of running Windows Virtual Desktop in Azure

使用 Azure 中的 Windows 虚拟桌面,Contoso 现在可以无缝地快速轻松地运行、管理和缩放其 VDI 解决方案。Using Windows Virtual Desktop in Azure, Contoso can now seamlessly run, manage, and scale its VDI solution quickly and easily. 公司还可以为其用户提供经过优化的多会话 Windows 10 环境。The company also can provide an optimized multi-session Windows 10 environment to its users.

Contoso 将使用 Azure 的规模、性能、安全性和创新来利用现有 Microsoft 365 许可证。Contoso will capitalize on existing Microsoft 365 licenses while using the scale, performance, security, and innovation of Azure.

其他优势包括:Additional benefits might include:

  • 从任何位置访问 Windows 虚拟桌面。Access to Windows Virtual Desktop from anywhere.
  • 针对企业环境优化 Microsoft 365 应用。Optimized Microsoft 365 Apps for enterprise environment.
  • 用于开发/测试环境的 Windows 虚拟桌面。Windows Virtual Desktop for dev/test environments.

解决方案设计Solutions design

固定目标和需求后,Contoso 设计和审查部署解决方案并识别迁移过程。After pinning down goals and requirements, Contoso designs and reviews a deployment solution and identifies the migration process.

当前体系结构Current architecture

将 RDS 部署到本地数据中心。RDS is deployed to an on-premises datacenter. Microsoft 365 已获得授权并被组织使用。Microsoft 365 is licensed and in use by the organization.

建议的体系结构Proposed architecture

  • 同步 Active Directory 或 Azure Active Directory 域服务。Sync Active Directory or Azure Active Directory Domain Services.

  • 将 Windows 虚拟桌面部署到 Azure。Deploy Windows Virtual Desktop to Azure.

  • 将本地 RDS 服务器迁移到 Azure。Migrate on-premises RDS servers to Azure.

  • 将用户配置文件磁盘 (Upd) 转换为 FSLogix 配置文件容器。Convert user profile disks (UPDs) to FSLogix profile containers.

    关系图显示了建议的体系结构。 图1:建议的体系结构。Diagram shows the proposed architecture. Figure 1: Proposed architecture.

解决方案评审Solution review

Contoso 通过组合一系列的优点和缺点来评估建议的设计。Contoso evaluates the proposed design by putting together a list of pros and cons.

注意事项Consideration 详细信息Details
优点Pros Windows 10 企业多会话环境。Windows 10 Enterprise multi-session environment.

基于云,允许从任意位置进行访问。Cloud-based, allowing access from anywhere.

利用 Windows 虚拟桌面环境中的其他 Azure 服务(如 Azure 文件)。Take advantage of other Azure services like Azure Files within the Windows Virtual Desktop environment.

针对 Microsoft 新式桌面进行了优化。Optimized for the Microsoft modern desktop.
缺点Cons 若要完全优化 Azure,Contoso 将不得不重新构建为多用户会话优化的 Windows 10 映像。To fully optimize for Azure, Contoso will have to rebuild Windows 10 images optimized for multiuser sessions.

Windows 虚拟桌面不支持用户配置文件磁盘,因此必须将 Upd 迁移到 FSLogix 配置文件容器。Windows Virtual Desktop doesn't support user profile disks, so UPDs must be migrated to FSLogix profile containers.

迁移过程Migration process

Contoso 将使用 Lakeside 评估工具将 Vm 移到 Azure 中的 Windows 虚拟桌面,并 Azure Migrate。Contoso will move VMs to Windows Virtual Desktop in Azure by using the Lakeside assessment tool and Azure Migrate. Contoso 需要:Contoso will need to:

  • 对其本地 RDS 基础结构运行评估工具,以在 Azure 中建立 Windows 虚拟桌面部署的规模。Run the assessment tool against its on-premises RDS infrastructure to establish the scale of the Windows Virtual Desktop deployment in Azure.

  • 通过 Windows 10 企业多会话或持久虚拟机迁移到 Windows 虚拟桌面。Migrate to Windows Virtual Desktop via either Windows 10 Enterprise multi-session or persistent virtual machines.

  • 根据需要扩展和缩减 Windows 虚拟桌面多会话以管理成本。Optimize the Windows Virtual Desktop multi-session by scaling up and down as needed to manage costs.

  • 虚拟化应用程序并根据需要分配用户,以继续保护和管理 Windows 虚拟桌面环境。Virtualize applications and assign users as needed to continue to secure and manage the Windows Virtual Desktop environment.

    关系图显示了迁移过程。 图2:迁移过程。Diagram shows the migration process. Figure 2: The migration process.

方案步骤Scenario steps

  1. 评估当前 RDS 环境。Assess the current RDS environment.
  2. 在 Azure 中创建 VDI 和新映像,并将 Vm 迁移并保存到 Azure。Create the VDI and new images in Azure and migrate and persist VMs to Azure.
  3. 将 Upd 转换为 FSLogix 配置文件容器。Convert UPDs to FSLogix profile containers.
  4. 将任何持久性 Vm 复制到 Azure。Replicate any persistent VMs to Azure.

步骤1:评估当前的本地环境Step 1: Assess the current on-premises environment

Contoso 将在 Azure 区域中预配 Windows 虚拟桌面服务 East US 2Contoso will provision the Windows Virtual Desktop service in the East US 2 Azure region. 对于 Windows 虚拟桌面,Contoso 可以预配虚拟机、主机池并创建应用程序组。With Windows Virtual Desktop, Contoso can provision virtual machines, host pools, and create application groups. Windows 虚拟桌面还为 Windows 虚拟桌面解决方案中的所有服务器配置可用性集。Windows Virtual Desktop also configures an availability set for all the servers in the Windows Virtual Desktop solution. 使用 Windows 虚拟桌面,Contoso 可以创建一个高可用的 VDI 环境,并根据需要快速扩展和缩减。Windows Virtual Desktop allows Contoso to create a high-available VDI environment and to scale up and down quickly as needed.

备注

Contoso 在评估过程中评审了两个方案:多会话 ( (或专用) 虚拟机的共享) 实例。Contoso reviewed two scenarios during the assessment: multi-session (shared) instances of RDS and persistent (or user-dedicated) virtual machines.

  1. 请确保域服务(Active Directory 或 Azure Active Directory 域服务)与 Azure Active Directory (Azure AD) 同步。Make sure that domain services, either Active Directory or Azure Active Directory Domain Services, are synchronized with Azure Active Directory (Azure AD). 确保可从要连接的 Azure 订阅和虚拟网络访问域服务,以便将部署 Windows 虚拟桌面。Ensure the domain service is accessible from the Azure subscription and virtual network to be connected where Windows Virtual Desktop will be deployed.

    备注

    详细了解如何将本地 Active Directory 与 Azure AD 进行同步 Azure AD ConnectLearn more about Azure AD Connect for synchronizing Active Directory on-premises with Azure AD.

    备注

    了解如何预配 Azure Active Directory 域服务 并将 Azure AD 同步到其中。Learn about provisioning Azure Active Directory Domain Services and synchronizing Azure AD to it.

  2. 创建新 Azure Migrate 项目。Create a new Azure Migrate project.

    显示创建新 Azure Migrate 项目的屏幕截图。 图3:创建新 Azure Migrate 项目。Screenshot that shows creating a new Azure Migrate project. Figure 3: Creating a new Azure Migrate project.

  3. 选择用于评估和迁移服务器的选项,选择 VDI,然后添加工具。Select the option to assess and migrate servers, select VDI, and add a tool.

    显示 VDI Azure Migrate 目标的屏幕截图。 图4:目标 Azure Migrate 目标。Screenshot that shows Azure Migrate goals of VDI. Figure 4: Target Azure Migrate goals.

  4. 为 "迁移作业数据" 设置 "订阅"、"资源组"、"项目名称" 和 "地理位置"。Set the subscription, resource group, project name, and geography for the migrate job data.

    显示将作业数据添加到 Azure Migrate 项目的屏幕截图。 图5:将作业数据添加到迁移。Screenshot that shows adding job data to the Azure Migrate project. Figure 5: Adding job data to the migration.

    重要

    此位置不会部署新的 Windows 虚拟桌面环境。This location isn't where the new Windows Virtual Desktop environment will be deployed. 只有与 Azure Migrate 项目相关的数据存储在此处。Only the data related to the Azure Migrate project will be stored here.

  5. 选择 Lakeside: SysTrack 作为评估工具。Select Lakeside: SysTrack as the assessment tool.

  6. 选择 Azure Migrate: 作为迁移工具的服务器迁移。Select Azure Migrate: Server Migration as the migration tool.

  7. 将工具添加到迁移项目。Add the tools to the migration project.

    显示将工具添加到项目的屏幕截图。 图6:向迁移中添加工具。Screenshot that shows adding tools to the project. Figure 6: Adding tools to the migration.

  8. 通过在 Lakeside 工具中选择 "注册到 Azure Migrate ,开始评估当前环境。Start the assessment of the current environment by selecting Register with Azure Migrate in the Lakeside tool.

    显示 Azure Migrate 的 Lakeside 注册的屏幕截图。 图7:评估当前环境。Screenshot that shows Lakeside registration with Azure Migrate. Figure 7: Assessing the current environment.

  9. Contoso 连接 Azure Migrate 和 Lakeside,并接受任何请求的权限。Contoso connects Azure Migrate and Lakeside, and accepts any requested permissions.

    显示登录以连接 Azure 和 Lakeside 的屏幕截图。 图8:将 Azure 连接到 Lakeside。Screenshot that shows signing in to connect Azure and Lakeside. Figure 8: Connecting Azure to Lakeside.

  10. Contoso 继续使用 Lakeside 工具来创建新的租户,并开始评估当前的本地 RDS 环境。Contoso continues with the Lakeside tool to create a new tenant and start assessing the current on-premises RDS environment. 在仪表板中,Contoso 可以访问部署指南,下载评估客户端以部署到当前环境,并查看从这些代理收集的数据。From the dashboard, Contoso can access the deployment guide, download the assessment client to deploy to the current environment, and review the data collected from these agents.

    屏幕截图显示 Lakeside 仪表板。 图9: Lakeside 仪表板。Screenshot shows the Lakeside dashboard. Figure 9: The Lakeside dashboard.

  11. 捕获了足够数量的数据后,Contoso 会检查评估数据,确定最佳迁移途径。After an adequate amount of data is captured, Contoso reviews the assessment data to determine the best migration path. 此评估数据包括来自桌面数据的原始评估数据以及分为不同用户角色的数据。This assessment data includes the raw assessment data from the desktops data and the data broken into different user personas. 此信息包括:This information includes the:

  • 每个角色中的用户数。Number of users in each persona.

  • 用户使用的应用程序。Applications in use by users.

  • 按用户的资源消耗。Resource consumption by user.

  • 资源利用率按用户角色平均。Resource utilization averages by user persona.

  • VDI 服务器性能数据。VDI server performance data.

  • 并发用户报表。Concurrent user reports.

  • 使用的顶级软件包。Top software packages in use.

    显示 Lakeside 仪表板报表的屏幕截图。Screenshot that shows Lakeside dashboard reports. 图10: Lakeside 仪表板报告。Figure 10: Lakeside dashboard reports.

Contoso 会分析数据,以确定对共用 Windows 虚拟桌面资源和个人 Windows 虚拟桌面资源使用最经济高效的方式。The data is analyzed by Contoso to determine the most cost-effective use of both pooled Windows Virtual Desktop resources and personal Windows Virtual Desktop resources.

备注

Contoso 还需要将应用程序服务器迁移到 Azure,使公司更接近 Windows 虚拟桌面环境,并减少其用户的网络延迟。Contoso will also need to migrate application servers to Azure to get the company closer to the Windows Virtual Desktop environment and reduce network latency for its users.

步骤2:创建用于共用桌面的 Windows 虚拟桌面环境Step 2: Create the Windows Virtual Desktop environment for pooled desktops

Contoso 使用 Azure 门户创建用于汇集资源的 Windows 虚拟桌面环境。Using the Azure portal, Contoso will create a Windows Virtual Desktop environment to use for pooled resources. 稍后,它将执行迁移步骤,将个人桌面连接到相同的环境。Later, it will go through the migration steps to attach personal desktops to the same environment.

  1. Contoso 选择正确的订阅,并创建新的 Windows 虚拟桌面主机池。Contoso selects the correct subscription, and creates a new Windows Virtual Desktop host pool.

    显示预配 Windows 虚拟桌面主机池的屏幕截图。 图11:新的 Windows 虚拟桌面主机池。Screenshot that shows provisioning a Windows Virtual Desktop host pool. Figure 11: A new Windows Virtual Desktop host pool.

  2. 指定订阅、资源组和区域。Specify the subscription, resource group, and region. 然后选择主机池、桌面类型和默认桌面用户的名称。Then select the name for the host pool, desktop type, and default desktop users. "桌面类型" 设置为 " 用",因为 Contoso 从其某些用户的新共享环境开始。Desktop type is set to Pooled because Contoso is starting with a new shared environment for some of its users. 默认桌面用户可以保留为空。Default desktop users can be left blank. 继续配置虚拟机。Move on to configure the virtual machines.

    屏幕截图显示了配置虚拟机的先决条件。 图12:配置虚拟机的先决条件。Screenshot that shows prerequisites for configuring virtual machines. Figure 12: Prerequisites for configuring virtual machines.

    • Contoso 通过选择 " 更改大小 " 或使用默认值来配置 VM 并选择自定义大小。Contoso configures the VM and chooses a custom size by selecting Change size or using the default.
    • 选择 Windows 虚拟桌面作为这些共用桌面的 VM 名称前缀。Windows Virtual Desktop is chosen as the VM name prefix for these pooled desktops.
    • 由于 Contoso 要创建池服务器来使用虚拟机设置的新 Windows 10 企业多会话功能,因此请将 "映像源" 设置为 " "。Because Contoso is creating the pooled servers to use the new Windows 10 Enterprise multi-session functionality for the virtual machine settings, leave the image source set to Gallery. 此选项可让 Contoso 为 Vm 选择 Windows 10 企业多会话映像。This option enables Contoso to select the Windows 10 Enterprise multi-session image for the VMs.
    • 根据 Lakeside 评估中用户的角色,Contoso 将总用户数设置为 150Based on the personas of the users from the Lakeside assessment, Contoso sets the total users to 150.
    • 其他设置包括磁盘类型、Active Directory 域加入 UPN 字段、管理员密码、向其中添加计算机的可选 OU 路径、虚拟网络以及用于添加服务器的子网。Other settings include the disk type, an Active Directory domain join UPN field, an admin password, an optional OU path to which machines are added, the virtual network, and a subnet for adding servers.

    显示配置虚拟机的屏幕截图。 图13:配置虚拟机。Screenshot that shows configuring virtual machines. Figure 13: Configuring virtual machines.

    备注

    Contoso 在此步骤中无法创建新的虚拟网络。Contoso can't create a new virtual network at this step. 在达到此步骤之前,Contoso 应该已创建有权访问 Active Directory 的虚拟网络。Before reaching this step, Contoso should have already created a virtual network that has access to Active Directory.

    备注

    Contoso 不能使用在此步骤中需要多重身份验证的用户帐户。Contoso can't use a user account that requires multi-factor authentication in this step. 如果 Contoso 计划为其用户使用多重身份验证,则出于此目的,需要创建服务主体。If Contoso plans to use multi-factor authentication for its users, it will need to create a service principal for this purpose.

  3. Contoso 对 Windows 虚拟桌面设置进行了一次验证,并创建了共用的 Windows 虚拟桌面虚拟机的新环境。Contoso performs one more validation of the Windows Virtual Desktop settings, and creates the new environment of pooled Windows Virtual Desktop virtual machines.

    显示检查和创建虚拟机的屏幕截图。 图14:检查和创建虚拟机。Screenshot that shows reviewing and creating virtual machines. Figure 14: Reviewing and creating virtual machines.

步骤3:将 Upd 转换为 FSLogix 配置文件容器Step 3: Convert the UPDs to FSLogix profile containers

由于 Windows 虚拟桌面不支持 (Upd) 的用户配置文件磁盘,Contoso 需要通过 FSLogixMigration PowerShell 模块将所有 upd 转换为 FSLogix。Because Windows Virtual Desktop doesn't support user profile disks (UPDs), Contoso needs to convert all the UPDs to FSLogix via the FSLogixMigration PowerShell module.

Contoso 导入 FSLogixMigration 模块后,它将运行以下 PowerShell cmdlet 以从 Upd 迁移到 FSLogix。After Contoso imports the FSLogixMigration module, it runs the following PowerShell cmdlets to migrate from UPDs to FSLogix.

重要

Hyper-v、Active Directory 和 Pester 的 PowerShell 模块是运行 cmdlet 以将 Upd 转换为 FSLogix 的先决条件。The PowerShell modules for Hyper-V, Active Directory, and Pester are prerequisites to running the cmdlets to convert UPDs to FSLogix.

UDP 转换:A UDP conversion:

Convert-RoamingProfile -ParentPath "C:\Users\" -Target "\\Server\FSLogixProfiles$" -MaxVHDSize 20 -VHDLogicalSectorSize 512

漫游配置文件转换:A roaming profile conversion:

Convert-RoamingProfile -ProfilePath "C:\Users\User1" -Target "\\Server\FSLogixProfiles$" -MaxVHDSize 20 -VHDLogicalSectorSize 512 -VHD -IncludeRobocopyDetails -LogPath C:\temp\Log.txt

此时,迁移已启用通过 Windows 10 企业多会话对资源进行缓冲处理。At this point, the migration has enabled using pooled resources with Windows 10 Enterprise multi-session. Contoso 可以开始向将使用 Windows 10 企业多会话的用户部署所需的应用程序。Contoso can begin to deploy the necessary applications to the users who will use Windows 10 Enterprise multi-session.

但现在,Contoso 必须将持久虚拟机迁移到 Azure。But now Contoso must migrate the persistent virtual machines to Azure.

步骤4:将 Vm 复制并保留到 Windows 虚拟桌面Step 4: Replicate and persist VMs to Windows Virtual Desktop

Contoso 迁移过程的下一步是将其持久性虚拟机迁移到 Windows 虚拟桌面。The next step in the migration process for Contoso is to migrate its persistent virtual machines to Windows Virtual Desktop. 为此,Contoso 返回到在进程开始时创建的 Azure Migrate:服务器迁移作业。To do this, Contoso goes back to the Azure Migrate: Server Migration job it created at the beginning of the process.

  1. Contoso 首先在 Azure Migrate:服务器迁移工具中选择 " 发现 "。Contoso starts by selecting Discover in the Azure Migrate: Server Migration tools.

    显示 Azure Migrate:服务器迁移发现选项的屏幕截图。 图15:发现服务器迁移。Screenshot that shows the Azure Migrate: Server Migration Discover option. Figure 15: Discovering a server migration.

  2. Contoso 会将其环境中的设备转换为管理将计算机复制到 Windows 虚拟桌面的设备。Contoso converts an appliance in its environment that's going to manage the replication of the machines to Windows Virtual Desktop. 确保已将目标区域设置为 East US 2 ,其中创建了 Windows 虚拟桌面环境。Ensure that the target region is set to East US 2, where the Windows Virtual Desktop environment was created.

    显示创建用于管理复制的设备的屏幕截图。 图16:转换设备。Screenshot that shows creating an appliance for managing the replication. Figure 16: Converting an appliance.

  3. 复制提供程序将下载、安装和注册到 Azure Migrate 项目,以开始复制到 Azure。The replication provider is downloaded, installed, and registered to the Azure Migrate project to start the replication to Azure.

    屏幕截图,显示了如何下载和配置复制。 图17:复制到 Azure 的先决条件。Screenshot that shows downloading and configuring replication. Figure 17: Prerequisites for replicating to Azure.

  4. 现在已开始将主机复制到 Azure Blob 存储。The replication of the hosts into Azure Blob Storage is now started. Contoso 可以继续进行复制,直到它准备好测试 Vm,然后将其迁移到生产环境中。Contoso can continue to let the replication occur until it's ready to test the VMs and then migrate them into production.

    • 当虚拟机开始在 Azure 中运行时,Contoso 确保在每台计算机上安装 Windows 虚拟桌面 VM 代理As machines start running in Azure, Contoso makes sure to install the Windows Virtual Desktop VM agent on each machine.
    • 作为安装的一部分,请输入 Windows 虚拟桌面环境的注册令牌,以将服务器与正确的环境相关联。As a part of the installation, enter the registration token for the Windows Virtual Desktop environment to associate the server with the correct environment.
  5. 可以使用以下命令获取注册令牌:The registration token can be obtained by using the following commands:

    Export-RDSRegistrationInfo -TenantName "Contoso" -HostPoolName "ContosoWVD" | Select-Object -ExpandProperty Token > .\registration-token.txt
    

    备注

    Contoso 还可以通过使用 msiexec 命令并传入注册令牌作为变量来自动执行此过程。Contoso can also automate this process by using msiexec commands and passing in the registration token as a variable.

  6. 作为最终迁移之前的最后一步,Contoso 在 Azure Windows 虚拟桌面设置中选择 " 用户 " 项,以将服务器映射到其各自的用户和组。As the last step before the final migration, Contoso selects the Users item in the Azure Windows Virtual Desktop settings to map the servers to their respective users and groups.

    显示将 Windows 虚拟桌面资源分配给用户和组的屏幕截图。 图18:最终迁移之前的最后一步。Screenshot that shows assigning Windows Virtual Desktop resources to users and groups. Figure 18: The last step prior to the final migration.

将主机池分配给用户后,Contoso 将完成这些计算机的迁移,并继续将其余本地 VDI 主机迁移到 Azure。After host pools are assigned to users, Contoso finalizes the migration of those machines and continues to gradually migrate the rest of the on-premises VDI hosts to Azure.

查看部署Review the deployment

现在,在 Azure 中运行虚拟机和应用程序服务器,Contoso 现在需要完全操作并确保部署的安全。With the virtual desktops and application servers now running in Azure, Contoso now needs to fully operationalize and secure the deployment.

安全性Security

Contoso 安全团队查看 Azure Vm 以确定任何安全问题。The Contoso security team reviews the Azure VMs to determine any security issues. 若要控制访问,团队需审查 VM 的网络安全组 (NSG)。To control access, the team reviews the network security groups (NSGs) for the VMs. Nsg 用于确保仅允许应用程序访问的流量。NSGs are used to ensure that only traffic allowed to the application can reach it. 此团队还会考虑使用 Azure 磁盘加密和 Azure Key Vault 来保护磁盘上的数据。The team also considers securing the data on the disk by using Azure Disk Encryption and Azure Key Vault.

有关详细信息,请参阅 Azure 中 IaaS 工作负荷的最佳安全方案For more information, see Security best practices for IaaS workloads in Azure.

业务连续性和灾难恢复Business continuity and disaster recovery

对于业务连续性和灾难恢复 (BCDR) ,Contoso 使用 Azure 备份来备份 Vm 上的数据,以确保数据安全。For business continuity and disaster recovery (BCDR), Contoso backs up the data on the VMs by using Azure Backup to keep data safe. 有关详细信息,请参阅 AZURE VM 备份概述For more information, see An overview of Azure VM backup.

许可和成本优化Licensing and cost optimization

  • Microsoft 365 许可证 用于桌面部署。Microsoft 365 licenses are used for the desktop deployments.
  • Contoso 将启用 Azure 成本管理 + 计费 ,以帮助监视和管理 azure 资源。Contoso will enable Azure Cost Management + Billing to help monitor and manage the Azure resources.
  • Contoso 为其 Vm 提供了现有的许可,并将利用应用程序服务器的 Azure 混合权益。Contoso has existing licensing for its VMs and will take advantage of the Azure Hybrid Benefit for application servers. Contoso 将对现有的 Azure VM 进行转换,以利用此定价的优势。Contoso will convert the existing Azure VMs to take advantage of this pricing.

结论Conclusion

在本文中,Contoso 将其 RDS 部署移到托管在 Azure 中的 Windows 虚拟桌面。In this article, Contoso moved its RDS deployment to Windows Virtual Desktop hosted in Azure.