pixel_dreams - Fotolia
Virtual desktop vulnerability to malware varies depending on how organizations configure the desktops, but generally they are less prone to malware attacks than traditional PCs.
Virtual desktops are typically hardened to the greatest extent possible. This means if a user comes into contact with malware, the virtual desktop's security configuration would likely make it impossible for the malware to do any harm.
Still, administrators should equip the servers hosting the virtual desktops with antimalware software to prevent malware from penetrating there. Most thin client devices don't need malware protection, but PCs repurposed as thin clients run thick operating systems that could be vulnerable to attacks so those should have malware protection installed as well. Lastly, any Web browser installed on the virtual desktops should be configured to prevent unauthorized add-ins.
One of the main reasons virtual desktops are less prone to malware attacks than traditional desktop PCs is because it's easier to keep them up to date. Think about what it takes to patch and maintain a large number of physical PCs. In recent years, automated maintenance on PCs has become a lot more practical, but it's still anything but perfect. A desktop agent may malfunction. A user may override an impending reboot because she considers it to be disruptive. A number of things can make it more complicated for administrators to ensure they're properly maintaining their physical desktops. As a general rule, it is easier for admins to maintain virtual desktops, because they can change configurations and add updates via the golden image for several virtual desktops rather than updating physical desktops individually.
Finally, most of the virtual desktops in use today are nonpersistent. This means that the virtual desktops reset themselves to a pristine state at the end of each session. Several nonpersistent desktops are usually spun up from the same master image, but end users -- and any malware they run into -- can't affect that base image from their virtual desktop. If a nonpersistent virtual desktop became infected by malware, it would remove the malware at the end of the user's session when it resets.
Why federal agencies approve of VDI security
Guide to desktop monitoring tools
Some malware adapts to virtual machines
Dig Deeper on Virtual desktop management
Related Q&A from Brien Posey
There are some strong PowerShell scripts that can provide backup capabilities. It's important, though, to be mindful of PowerShell's quirks so you ... Continue Reading
Bloatware isn't just annoying -- it can negatively affect OS security, for example. Find out ways to get rid of Windows 10 bloatware once and for all... Continue Reading
Is your Google data protected? Make sure you are backing up G Suite files, because Google doesn't provide the comprehensive protection you'll need to... Continue Reading
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.