Comparison between WVD / AVD vs. Azure VM + Bastion?

Question

Folks, I am looking for the comparison and the differentiation between deploying:

• Windows Virtual Desktop / Azure Virtual Desktop

https://azure.microsoft.com/en-us/products/virtual-desktop/

• Azure VM secured with Bastion

https://learn.microsoft.com/en-us/azure/virtual-network/quick-create-portal

I wonder what are the different and best usage scenarios for each.

Answer 1

Hello EnterpriseArchitect

Welcome to Microsoft Q&A Platform, thanks for posting your query here.

Adding to previous response/details shared by Ala'a Kalakech, Windows Virtual Desktop or Azure Virtual Desktop is a desktop and app virtualization service that runs on Azure. It allows you to deploy and scale Windows desktops and apps on Azure in minutes and provides a full desktop experience to your users. WVD/AVD also includes built-in security and compliance features, such as multi-factor authentication and conditional access policies.

Here are some of the key features and benefits of WVD/AVD:

• Provides a full desktop experience to users, including access to Windows 10 and Windows 7 desktops and apps.
• Supports remote access from any device, including Windows, Mac, iOS, and Android.
• Offers built-in security and compliance features, such as multi-factor authentication and conditional access policies.
• Enables you to scale your virtual desktop infrastructure up or down based on demand.
• Provides a simplified management experience through the Azure portal.

On the other hand, Azure VM secured with Bastion is a solution for secure remote access to individual virtual machines in Azure. It provides secure and seamless RDP/SSH connectivity to your virtual machines directly from the Azure portal over TLS. When you connect via Azure Bastion, your virtual machines don't need a public IP address, agent, or special client software**.**

Here are some of the key features and benefits of Azure VM secured with Bastion:

• Provides secure remote access to individual virtual machines in Azure**.**
• Eliminates the need for a public IP address, agent, or special client software on the virtual machine**.**
• Offers secure and seamless RDP/SSH connectivity to virtual machines directly from the Azure portal over TLS**.**
• Provides a simplified management experience through the Azure portal.

In terms of best usage scenarios, WVD/AVD is ideal for scenarios where you need to provide a full desktop experience to your users, such as remote work or remote learning. It is also a good choice if you need to scale your virtual desktop infrastructure up or down based on demand.

Azure VM secured with Bastion is ideal for scenarios where you need secure remote access to individual virtual machines in Azure, such as managing virtual machines in a development or test environment. It is also a good choice if you want to eliminate the need for a public IP address, agent, or special client software on the virtual**.**

Hope this helps.