!

!
!
!
!
!
!
!
!
!
!
!
!
!

Comparison
Microsoft Remote Desktop Services
versus
Citrix Xenapp

"! #$%&'()*$+!,)-($*$./!01%$/1!21*3/$&!41(5)-1*!51(*6*!#)/()7!81+'&&!
!

!"#$%&'(&)'*+%*+,&
!"#$%&'(&)'*+%*+,&---------------------------------------------------------------------------------------------------&.!
/-!

0*+1'234+5'*&---------------------------------------------------------------------------------------------------&6!

.-!

)'78"15,'*&9541','(+&:%7'+%&;%,<+'8&=%1>54%,&>%1,3,&)5+15?&@%*"88&-----------&A!

6-!

:%(%1%*4%,&----------------------------------------------------------------------------------------------------&/6!

9:9:!
9:":!
9:?:!

;<$6/!/=)*!>$-6%1+/!:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::!?!
;<$6/!0')>$!::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::!?!
@=1!0')>$!%'+'A1%1+/!/1'%!:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::!B!

!"#"!
!"!"!
!"$"!
!"%"!
!"&"!
!"'"!
":H:!
":I:!
":J:!
":9L:!
":99:!
":9":!
":9?:!

C(1*1+/'/)$+!'+>!>1D)51(E!$.!'&&D)-'/)$+*!:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::!F!
G1<!'--1**!/$!'&&D)-'/)$+*!::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::!F!
41(51(!.'(%!-$+.)A6('/)$+!'+>!6*1(!*1**)$+!D$'>!<'D'+-)+A!:::::::::::::::::::::::::::::::::::::::::::!H!
41-6(1!(1%$/1!'--1**!::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::!I!
C()+/)+A!:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::!I!
,'+'A1%1+/!$.!1+5)($+%1+/!::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::!J!
@('+*&$(/!&($/$-$D!::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::!J!
K*1(!&($.)D1!%'+'A1%1+/!::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::!9L!
;>5'+-1>!1+>!6*1(!17&1()1+-1!:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::!9L!
#D)1+/!*$./M'(1!:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::!99!
N+='+-1>!%6D/)%1>)'!'+>!'6>)$!*6&&$(/!::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::!9"!
,$+)/$()+A!$.!1+5)($+%1+/!::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::!9"!
O'(>M'(1!::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::!9"!

&
!

"! !

&

F! #$%&'()*$+!,)-($*$./!01%$/1!21*3/$&!41(5)-1*!51(*6*!#)/()7!81+'&&!
!

.- )'78"15,'*&9541','(+&:%7'+%&;%,<+'8&=%1>54%,&>%1,3,&
)5+15?&@%*"88&
.-/-

E1%,%*+"+5'*&"*2&2%$5>%1F&'(&"88$54"+5'*,&

With Citrix Xenapp you can publish applications in a very easy way with a central
console. This provides the ability to control delivery of applications to users based
on time of day and number of sessions or application instances.(
Application publishing refers to granting users access to applications. Citrix has
always had a mechanism to specify which users get which application as well as
which server can run the application.(

With MS RDS you need to publish applications on each MS RDS server separately, no
easy central administration is available. Also, no advanced properties are available
per published application such as enabling/disabling audio, color settings, printer
mapping timing,(
In Windows Server 2008 R1, once you published an application, the application was
available to everyone. Also, it was assumed the application was available on every
server which means you, the administrator, had to ensure every server had every
application installed.
MS RDS does have some application publishing improvements, but these
improvements are more like filters. Every application is still available to every user,
but you can use these filters to filter out what the end user sees. This is not a
security mechanism as users still have access to the hidden applications.

(
.-.

G%#&"44%,,&+'&"88$54"+5'*,&
With Citrix Xenapp you can use a component called Citrix Web Interface that installs
on top of a web server such as MS IIS. With the Citrix Web Interface Console you can
easily configure access to Citrix farms and configure advanced setups such as
integration of 2-factor authentication. The client view of Web Interface uses
standard HTML and is supported on most modern web browsers including IE 6+,
Mozilla 1+, Firefox 2+, and Safari 2+ as well as some mobile platforms. Citrix Xenapp
supports superior single sign on needing only one click to start a published
application. Citrix Xenapp allows applications to be grouped within folders for easier
organization for multiple user groups.(
Citrix Web interface also allows the automatic distribution of the Citrix client to
client devices: A web-based process walks the user through the process of
automatically detecting the needed client software and then automatically installs
the appropriate client software for the platform used.
Citrix Web Interface allows Self-Service password change: it provides users
notification when their password is about to expire and allows users to change their
domain password directly from their browser. This feature is important for remote
access scenarios and other situations where user devices do not authenticate to the
directory.
The Citrix Web Interface can be easily re-branded, it provides the ability to easily
customize the look and feel of the web application portal through GUI-based
wizards in the management tools.

F! !

#$%&'()*$+!,)-($*$./!01%$/1!21*3/$&!41(5)-1*!51(*6*!#)/()7!81+'&&! H!
!
!
The Citrix Web interface can be integrated in MS sharepoint services or IBM
websphere.
With MS RDS you can use RD Web Access, but this is a very basic IIS server site. Not a
lot of configuration can be done and 2-factor authentication is not supported. RD
web access doesn't have a real "farm" concept. When you configure a RD Web
access site, your RemoteApps all connect back to a single IP address. So if you want
to have multiple Terminal Servers supporting connections, you need to configure
them in a load balancing group so that they're all available via the same virtual
shared IP address. This might not be that big of a deal, but it also means that all your
Terminal Servers need to have the same RemoteApps installed and should be 100%
identical. .
MS RDS supports single-sign-on but requires certificate signed RemoteApps and
requires more administrative overhead.

MS RDS does not support automatic distribution of a new RDP client via the RD web
access webpage.
MS RDS does not support self-service password change via the RD web access
webpage.
RD web access cannot be rebranded out-of-the-box. Advanced web development
skills are needed to rebrand the look and feel of the RD web access webpage.
(

=%1>%1&("17&4'*(5D31"+5'*&"*2&3,%1&,%,,5'*&$'"2&#"$"*45*D&

.-6-

With Citrix Xenapp you create a real server farm. All servers are connecting to a
central enterprise-level database which is responsible for storing static
configuration data. (

A Citrix farm can consist out of several zones to optimize network traffic and enable
Zone Preference and Failover functionality. This will allow users to connect to Citrix
Xenapp servers closest to them and also where their backend data is located. Zone
Preference and Failover will eliminate the need for publishing the same application
with different names like "Microsoft Word - North America" and "Microsoft Word Europe".
One Citrix Xenapp server in each zone of a Citrix Xenapp farm is automatically
elected to play the role of Data collector, which will gather dynamic information for
its zone so it can calculate server load and load balance ICA sessions across all Citrix
Xenapp servers in an efficient way. Calculation of server load is based on perfmon
counters, this means you can really load balance your servers according to the
system resource load of the servers.
A big advantage is that all the features mentioned above are very easy to setup and
maintain.(
With MS RDS you can use a RD Connection Broker to create some sort of farm
experience (Alle RD Session Host servers belong to the same group). When an
incoming RDP connection is made, the user authenticates to one of the Terminal
Servers, and that server then contacts the server running the connection broker
service to see if that user should be redirected to a different RD session host server
(either because another server has lower load or because the user has an existing
session on another server). If you want high availability on this level, you need to
implement a load balancing solution (a software LB such as MS NLB or a hardware
load balancer). This setup is pretty complex and load balancing of RDP sessions is
only based on session count rather than being able to use any other perfmon

H!

I! #$%&'()*$+!,)-($*$./!01%$/1!21*3/$&!41(5)-1*!51(*6*!#)/()7!81+'&&!
!

!
counters. You also need to implement a connection distribution method for the RD
session host servers, you can use a load balancing solution (a software LB such as MS
NLB or a hardware load balancer) or DNS round robin (but this has shortcomings
regarding service monitoring as it will not check if a server is reachable or not). (
(
.-H-

=%431%&1%7'+%&"44%,,&

With Citrix Xenapp you can use a component called Citrix access gateway, which is a
separate appliance that is used to enable secure remote access to the Citrix Xenapp
farm. (
This solution is very easy to implement, enables easy high availability and gives
great performance.(

With MS RDS you can use RD Gateway to enable secure RDP connections. It's similar
to the IIS-based RPC-over-HTTPS technology from Windows 2003 for external
Exchange users, except of course TS Gateway is "RDP-over-HTTPS." This solution is a
bit harder to implement as you also need to define the correct CAP and RAP policies.(

(
.-I

E15*+5*D&
With Citrix Xenapp you can use enhanced printer driver management to maintain
and manage printer mappings and printer drivers in a very good way. Citrix has
invested a lot of effort to ease printer management as it is crucial in a well working
Citrix environment. A lot of printer-related policies are available to dynamically
manage printer mappings and drivers and a Citrix universal driver can be used that
works very well with 99% of the printer models. Setup is very easy and managed
centrally.(
Citrix Xenapp allows the user to define additional printers available to the Remote
Desktop session and have them be available in the session without requiring the
user to logoff and logon to use the printer. Users can configure settings for clientattached printers and have those settings stored on the client device or in their user
profile.
Citrix Xenapp provides users with access to the printer device settings for their
client-attached printers. The default ACL on redirected printers in Remote Desktop
Services does not allow the user to adjust device settings because it would also
allow the user access to additional settings like driver, port, etc. With custom
security filtering the user can be provided access to manage the printer properties
without exposing the full rights.
Citrix Xenapp provides client-side printing support through the Enhanced MetaFile
(EMF) print format without requiring a printer driver to be installed on the server.
Citrix Xenapp provides client-side printing support on non-Windows clients (e.g.
Macintosh, Linux, etc.)
Citrix Xenapp enables users within a specified IP address range to automatically
access the network printing devices that exist within that same range. This increases
user productivity and lessens the IT support burden.
Citrix Xenapp allows administrators to manage a list of print drivers that can be used
on the server for client-side printers. By supporting both inclusion and exclusion lists
administrators have the ability to only allow known safe!!"#$%&#'!(#!)(!*+(,-!-.(/.
unsafe!!"#$%&#'0

I! !

#$%&'()*$+!,)-($*$./!01%$/1!21*3/$&!41(5)-1*!51(*6*!#)/()7!81+'&&! J!
!
!
Citrix Xenapp allows administrators to choose between the traditional network
printing path or the ICA printing path when using client printer auto-creation for
provisioning of printers. In cases where the client can connect to a network print
server for their local printer this can offer significant reduction in bandwidth and
overall time required to print. Policies provide administrators the control necessary
to ensure this is only applied in situations where it makes sense.
With MS RDS, printing options are very basic and not that advanced and innovative
as the Citrix printing solution.(
There is a universal printer driver method available, called TS easy print. This uses
XPS printing format, this works well but easy print is still based on the singlethreaded print spooler and rendering engine on the server, so you can compare this
universal printer driver solution with generation1 and 2 of the Citrix universal printer
driver solution (Citrix has now a generation 4 universal printer driver).(

9"*"D%7%*+&'(&%*>51'*7%*+&

.-A

With Citrix Xenapp you can use one console to manage your Citrix environment. All
configuration is done in the Citrix console and delegation of control can be used to
make sure that each IT personnel member has proper permissions within the
console. In the console you can see all user sessions, you can see all published
applications and you can use shadowing to take over end users sessions to help
them remotely. A central management console allows administrators to deliver
server resources such as applications, content, and server desktops to thousands
of users from a single wizard-driven console. It provides a centralized mechanism for
publishing applications to groups of servers simply by adding or removing servers
from a group.(

With MS RDS there is no real central console. This is a huge shortcoming as you have
to maintain RD RemoteApps on each server separately and you dont have a central
overview of your farm setup. You can have limited central management of your user
sessions, but you have to create a group of all your RD session hosts servers in a
manual way or import from the RD connection broker.
There are a lot of infrastructure components and management tools to RDS. To set
up and maintain the even the most basic environments takes quite a bit of planning
and infrastructure. Microsoft claims RDS is aimed at low complexity
environments. But, RDS is actually pretty complex to set up and maintain. Citrix still
reigns supreme on management and Enterprise features.

.-J-

!1"*,8'1+&81'+'4'$&
Citrix Xenapp uses ICA protocol which is still a more efficient and better performing
protocol than RDP protocol. Is allows better end user experience as it can benefit from
advanced features such as HDX technology:

High Resolution Graphics Enhancements are included, where Citrix HDX 3D for
Progressive Display plays an important role in providing a rich user experience
regardless of the underlying connection. It improves the delivery of remote
applications that contain photographic bitmaps and highly detailed synthetic
images. If a bitmap looks as if it is probably photographic or highly detailed,
an extra level of lossy JPEG compression is added to reduce the bandwidth
required to transmit the image to the client.

J!

9L! #$%&'()*$+!,)-($*$./!01%$/1!21*3/$&!41(5)-1*!51(*6*!#)/()7!81+'&&!
!

!
o

Citrix HDX Broadcast technology optimizes performance of remote applications

presented over high-latency network links (i.e. satellite). The user benefits
from a more usable experience than with Remote Desktop Services alone.
Citrix HDX 3D - Browser Acceleration provides a combination of features that
can automatically disable GIF animations, intercept images and pass them on
before being uncompressed, dynamically re-compress JPEG images, deliver
images in the background, and cache images on the client.

Adobe Flash Performance Optimizations provides improved performance of

web pages containing Flash-based content by improving the compression of
the Flash content. Citrix HDX MediaStream for Flash is specifically designed to
optimize Flash content in web pages to improve the overall experience for
users accessing web sites and applications remotely.
The ICA protocol can be further optimized by using optional Citrix technologies such
as Citrix branch repeater / acceleration plugins which can be very useful in high
latency WAN connections with low network bandwidth.
o

MS RDS uses RDP protocol which improved a lot the last couple of years. Nevertheless,
this protocol is still not as good as the ICA protocol. ICA protocol consumes less
bandwidth and enabled advanced features (HDX technology) that are not included in
the RDP protocol. Advanced display and graphics enhancements are not included in
the RDP protocol, which has a negative impact on end user experience and makes the
RDP protocol less efficient as is consumes more network bandwidth.

.-K-

L,%1&81'(5$%&7"*"D%7%*+&

Citrix Xenapp enterprise and platinum edition include an advanced user profile
management solution, Citrix User Profile Management, to make it easy for IT to
provide a personalized, consistent experience for users every time they log on,
regardless of endpoint devices or locations. Resolves Last Write wins issues across
multiple simultaneous server sessions found in more complex environments.

MS RDS implementations mainly use existing MS user profile management techniques

such as roaming profiles. Roaming profiles are not optimal for a Remote desktop
services environment as they occasionally get corrupt, are not managed thus user
profile size can increase a lot over time and this results in longer user logon times.

.-M

B2>"*4%2&%*2&3,%1&%?8%15%*4%&
Citrix Xenapp has advanced roaming user support. Citrix SmoothRoaming ensure
that applications and data move with your users as they change locations, networks,
or devices, so they can pick up exactly where they left off, without interruption.
Citrix Xenapp allows applications to appear automatically in the start menu or on
the local desktop providing a familiar application access experience for users.
Citrix Xenapp fully supports client-to-server Redirection of File Types: It redirects
requests for a specific document or file type to a Remote Desktop session. For
example, clicking on a Visio document on the client device will launch the
document in a Visio application on the Remote Desktop Sever, instead of a local
application. This is a useful feature in environments where a particular application
may not be installed locally.
Citrix Xenapp fully supports Server-to-client URL redirection:When clicking on URL!'!
1'2,3! 4'! 5667! (#! 56678! +$.-'9! /$)3$.! 4.! 4::+$,4)$(.! #2..$.;! (.! <&=()e Desktop

9L! !

#$%&'()*$+!,)-($*$./!01%$/1!21*3/$&!41(5)-1*!51(*6*!#)/()7!81+'&&! 99!
!
!
Services, the link is opened with the local client browser instead of launching the
browser on the Remote Desktop Session Host. This feature enhances support for
mixed desktop/Remote Desktop Services environments, and ensures that the local
browser and Internet connection is used for web browsing. This can reduce the data
center bandwidth requirements, free processing resources on Remote Desktop
Services, and improve performance for users. In addition, for environments that
track internet usage by IP address, this features preserves the ability to do so using
third-party monitoring products.
Citrix Xenapp supports USB webcams, scanners and can use MS activesync to sync
with client devices.
Citrix Xenapp uses WAN Performance Optimization techniques: Users can
experience significantly improved WAN performance through the automatic
application of the right mix of acceleration techniques based on network conditions,
data flows, and application mix. These gains can be achieved without requiring any
reconfiguration or modification of firewalls, monitoring tools, or applications.
Citrix Xenapp uses a technology called session reliability: When a network
connection issue occurs, the application window remains visible on the client device
and the client continues to accept keystrokes and mouse movement from the user
while session re-connection is attempted in the background. For transient network
issues, such as where users roam between wireless hot spots, the user may not
even know connectivity was lost.
MS RDS only support automated appearance of icons on desktop or start menu
when using windows 7 client or when RD RemoteApps are distributed via MSIs.

MS RDS has limited client-to-server redirection of file types support, this is only
possible when distributing RD RemoteApps with MSI packages. Server to client URL
redirection is not supported.
MS RDS does not support USB webcams, scanners and cannot use MS activesync to
sync with client devices.
MS RDS does not have built-in WAN performance optimization technology.
MS RDS can reconnect to disconnected sessions but it has no advanced reconnection technique (Session Reliability) that keeps the session alive when a
network interruption occurs.

.-/N- )$5%*+&,'(+O"1%&

Citrix Xenapp has a broad client support. There is integrated support for a lot of
client platforms: All windows x86 and x64 platforms, Macintosh platforms, apple
iphone, google android, windows mobile, java platforms, EPOC/symbian platforms
and UNIX/LINUX platforms. Citrix Panning (scrolling) and Scaling (magnification)
technology provides an improved user experience when viewing full-screen
Windows applications on small form-factor devices since many applications in
today!'!=4#-&)!4#&!.()!"&'$;.&"!)(!'2::(#)!)3&!',#&&.!#&'(+2)$(.!4%4$+4*+&!(.!=(*$+&!
"&%$,&'0!>'$.;!',#(++$.;!4."!=4;.$?$,4)$(.!)echniques on the device enables the user
to use these applications in their native form without the need for customized
applications that support the small form-factor.(

MS RDS only supports the client on windows x86 and x64 platforms.
Limited support is available for Macintosh clients.
A lot of RDS features require the windows 7 RDS client and are not available on
windows xp and windows vista clients.

99!

9"! #$%&'()*$+!,)-($*$./!01%$/1!21*3/$&!41(5)-1*!51(*6*!#)/()7!81+'&&!
!

.-//- P*C"*4%2&73$+57%25"&"*2&"325'&,388'1+&

Citrix Xenapp uses enhanced Audio Codecs which provides CD quality audio using a
very small amount of bandwidth. Support for multi-media collaboration software
such as Office Communication Server and Voice over IP softphones within serverbased sessions. Support for Video Conferencing in Hosted Sessions is available
which enables the ability to use video conferencing applications within server
hosted sessions.
Citrix Xenapp can benefit from advanced features such as HDX technology
(explained earlier) to give better end user experience, especially regarding
multimedia, graphics and audio.

MS RDS has no enhanced multimedia and audio support. Performance and end user
experience of multimedia applications within an RDP session are mainly poor.

.-/.- 9'*5+'15*D&'(&%*>51'*7%*+&

Citrix Xenapp enterprise and platinum edition include Citrix monitoring software,
called edgesight. Citrix edgesight is a performance and availability management
solution for XenDesktop, XenApp and endpoint systems. EdgeSight monitors
applications, devices, sessions, license usage, and the network in real time, allowing
users to quickly analyze, resolve, and proactively prevent problems(

MS RDS has no monitoring software included in the Remote Desktop services

package. MS SCOM can be used at an extra price, but it does not supply enhanced
monitoring tasks such as end-to-end monitoring.

.-/6- Q"12O"1%&

Citrix Xenapp runs on both x86-bit and x64-bit hardware. Citrix Xenapp 6 however
only runs on Windows 2008 R2 (which is 64-bit only), but you can still use Citrix
Xenapp 5 on Windows 2008 R1 32-bit or Windows 2003 32-bit OS. This is very
important if you consider to offer applications that cant run on 64-bit and are still
needed or even business critical.(

MS RDS included with Windows 2008 R2 contains a lot of improvements. If you want
to use Windows 2008 R2 then you need 64-bit hardware. Windows 2008 R2 is only
64-bit and all the applications need to be compatible with 64-bit.
You can still use Windows 2008 R1 32-bit and windows 2003 R2 32-bit, but MS RDS
included with these OS versions contain less features and functionalities and are not
really suitable for larger environments.

9"! !

#$%&'()*$+!,)-($*$./!01%$/1!21*3/$&!41(5)-1*!51(*6*!#)/()7!81+'&&! 9?!
!
!

6- :%(%1%*4%,&
The following articles have been used as reference to help writing this document:

Citrix Xenapp on Microsoft Remote Desktop Services: Feature Analysis

http://www.citrix.com/site/resources/dynamic/salesdocs/XenApp6onRDS.pdf

Is Windows Server 2008 R2 Terminal Services a Citrix Killer?

http://blog.xcentric.com/2009/08/04/is-windows-server-2008-r2-terminal-servicesa-citrix-killer/

Do you need Citrix or is Terminal Server enough?

http://www.brianmadden.com/blogs/brianmadden/archive/2005/09/20/do-youneed-citrix-or-is-terminal-server-enough.aspx

9?!