This document discusses what a VDI-User is, your functionalities as an administrator, and what you should have set up with your Dispel account manager already to enable VDI-Users in your organization.
If you already know what you want to do and are looking for step-by-step how to guides, please refer to one of the following articles:
Troubleshooting (coming soon)
In this article, you will find:
What is a VDI-User?
What does administrating VDI-Users look like?
VDI-User conditions
What should I have set up with my Dispel account manager beforehand?
What is a VDI-User?
A VDI User is a user who can access deployed Dispel Moving Target Defense Networks only through a Virtual Desktop (VDI).
Unlike normal Users, VDI-Users are not able to access associated Moving Target Defense Networks through any means other than the single Virtual Desktop they reserve. For example, even if a VDI-User has the Dispel Application natively downloaded, their credentials will not work--login will only work through the Virtual Desktop registered to them.
What does administrating VDI-Users look like?
As an administrator, you are able to add and remove users, view who is connected, and destroy desktops currently reserved by other users.
Below is a sample flow of administrating VDI-Users:
Administrator works with Dispel to create VDI stacks in an Enclave.
Administrator invites VDI-Users via email, and they create Dispel credentials.
VDI-Users use the Dispel credentials to log into the Console and view the credentials of their automatically reserved VDI.
VDI-Users connect to the Virtual Desktop via RDP using the single use VDI credentials.
Upon finishing work, VDI-Users destroy the virtual desktop.
At any point, the administrator is able to destroy a VDI-User's desktop, and revoke access.
VDI-User Conditions
For VDI-User to work properly, specific requirements need to be met:
The VDI-User must only be in one Dispel Organization.
The VDI-User must only be assigned to a single Enclave at a time.
The Enclave containing the VDI-User should have a single stack of windows VDIs.
At least one VDI must be available for the VDI-User to reserve.
What should I have set up with Dispel beforehand?
During setup with Dispel, you and your Dispel Account Manager should have already determined:
Which Enclaves have VDIs available to VDI users
How many VDIs should be available at any given time
What configuration you would like your VDIs to build with (custom imaging, if any)
How often your VDIs will cycle (e.g. daily, weekly, monthly)