Loading...
LCA Strategies
Loading...
LCA Strategies
Vendor-neutral strategy, design, and deployment for virtual desktop infrastructure, DaaS, and Cloud PC — so your people work securely from anywhere.
Virtual Desktop Infrastructure has become a strategic control plane for hybrid work, regulatory compliance, contractor onboarding, and BYOD enablement. The right platform depends on your identity footprint, compliance obligations, workload profile, and FinOps maturity — not on a vendor pitch. LCA Strategies provides vendor-neutral guidance across Azure Virtual Desktop, Windows 365 Cloud PC, Citrix DaaS, Omnissa Horizon, Amazon WorkSpaces, Parallels RAS, and self-hosted Microsoft RDS, helping leaders evaluate real total cost of ownership, design secure architectures aligned with Zero Trust principles, and deliver production-ready deployments that their teams actually adopt.
This service is designed for organizations and leaders who are:
Strategy, architecture, and delivery across every major virtual desktop platform.
Objective evaluation of Azure Virtual Desktop, Windows 365, Citrix DaaS, Omnissa Horizon, AWS WorkSpaces, and Parallels RAS against your actual workloads, identity stack, and compliance obligations — with real TCO math, not list prices.
Design secure access with Microsoft Entra Conditional Access, Token Protection, MFA, Global Secure Access, and Defender for Endpoint integration so managed and BYOD devices are evaluated on every session.
HIPAA, SOC 2, PCI DSS, CMMC, and FedRAMP-aligned deployments on Azure, Azure Government, or AWS with documented shared-responsibility boundaries, BAAs, and control mappings.
Right-sized FSLogix profile storage on Azure Files, Azure NetApp Files, or Amazon FSx, paired with gold-image pipelines that keep non-persistent pools fast, patched, and auditable.
Benchmark and tune AVD RDP Shortpath, Citrix HDX, Blast Extreme, and WorkSpaces Streaming Protocol for latency-sensitive, GPU, and multi-monitor workloads — including voice, video, and CAD.
Multi-region desktop resilience, pilot-light host pools, and profile replication strategies that keep users productive through regional outages, ransomware events, and planned maintenance.
A structured engagement process designed to deliver measurable results.
Inventory users, applications, peripherals, compliance requirements, identity stack, and current endpoint footprint. Classify workloads by persistence, GPU, latency, and data sensitivity.
Model three-year TCO across candidate platforms using published list prices, realistic Azure/AWS consumption, FSLogix storage, and licensing. Recommend the right-fit architecture.
Stand up a production-grade pilot with Conditional Access, FSLogix, monitoring, and a representative user cohort. Validate performance, security, and operations against acceptance criteria.
Phased migration, image and update pipelines, Intune/Entra policy, DR runbooks, and knowledge transfer so your team can operate the environment with confidence after go-live.
Measurable outcomes that strengthen your organization and accelerate your mission.
Right-fit platform selected with defensible TCO analysis
Zero Trust access enforced on managed and BYOD endpoints
HIPAA, PCI, CMMC, or FedRAMP alignment documented end-to-end
Predictable per-user economics and FinOps guardrails
Fast, reliable user experience across locations and devices
Disaster recovery and ransomware resilience built in
Virtual Desktop Infrastructure has quietly become the control plane for how modern organizations enable hybrid work, protect regulated data, and onboard contractors. When every corporate application lives inside a brokered session rather than on a laptop that could be lost, stolen, or compromised, the blast radius of an endpoint incident shrinks dramatically — and so does the cost of offboarding, device refresh cycles, and international expansion.
The catch is that the virtual desktop market has become genuinely complex. Microsoft now sells three overlapping products (Azure Virtual Desktop, Windows 365 Business, and Windows 365 Enterprise) with very different pricing models and governance implications. Citrix has repackaged its portfolio. VMware Horizon has spun out to Omnissa. AWS WorkSpaces has split into Personal, Core, Pools, and Secure Browser. The right answer for a 40-person mission-driven nonprofit looks nothing like the right answer for a 4,000-user healthcare system — and vendor sales teams are not incentivized to tell you that.
LCA Strategies brings a vendor-neutral perspective to these decisions. We do not resell desktops, and we are not paid on platform commissions. Our only incentive is to help you pick the architecture that actually fits your compliance obligations, identity stack, and budget — and then to deliver it in a way your team can operate after we are gone.
Common questions about VDI, DaaS, Windows 365, and virtual desktop strategy.
Virtual Desktop Infrastructure (VDI) refers to customer-owned compute — on-premises or in your own cloud subscription — running virtual desktops brokered by software the customer operates. Desktop-as-a-Service (DaaS) is a vendor-operated control plane that orchestrates desktops, which may still run in your own cloud account. Windows 365 Cloud PC is a fixed-price per-user subscription where Microsoft operates the entire stack, so the customer simply assigns a SKU to a licensed user. The right model depends on how much control you want, how predictable you need your monthly spend to be, and how much operational capacity your team has.
It depends heavily on the platform and your workload profile. Microsoft publishes Azure Virtual Desktop access rights at $5.50 per user per month for Apps and $10 per user per month for Apps plus Desktops, but those figures are access rights only — the dominant cost is typically the underlying Azure compute, storage, FSLogix profile share, and bandwidth, which frequently runs several times the access line. Windows 365 Cloud PC publishes all-inclusive list prices starting around $28 per user per month for the entry-level SKU. Citrix DaaS and Omnissa Horizon Cloud SaaS pricing is generally quote-only. We build TCO models against your actual user profile so you are comparing like-for-like numbers rather than marketing list prices.
For most small businesses that are already standardized on Microsoft 365, Windows 365 Business is typically the fastest path to a secure, predictable virtual desktop. It has a simplified setup, a hard cap of 300 users, no Intune requirement, and a fixed all-inclusive monthly price per user. Organizations that need more control over compute placement, want to use Azure Reserved Instances, or already have FinOps maturity may be better served by Azure Virtual Desktop. We help small business clients evaluate both so the decision is grounded in their actual constraints.
Yes — but compliance posture is driven by the cloud boundary and the contractual instruments you put in place, not by the virtual desktop software alone. Azure and AWS both offer HIPAA-eligible services with signed Business Associate Agreements, SOC 2 and PCI attestations, and FedRAMP-authorized environments for regulated workloads. We design deployments with documented shared-responsibility boundaries, Conditional Access and MFA enforcement, encryption at rest and in transit, session recording where required, and control mappings that your auditors can actually follow.
This is one of the strongest use cases for virtual desktops. A vendor-operated or customer-managed virtual desktop keeps all corporate data inside the control plane rather than on an unmanaged endpoint, which dramatically shrinks the data-loss surface for BYOD, offshore contractors, and M&A integrations. With Conditional Access, device compliance policies, and Token Protection, you can evaluate every session against current posture and revoke access instantly when a contract ends — without ever touching the user's personal device.
The decision comes down to four factors: your existing identity and cloud footprint, your compliance obligations, your workload profile (persistent vs. non-persistent, GPU, multi-monitor, latency-sensitive), and your operational capacity. Organizations deep in Microsoft 365 typically default to AVD or Windows 365. Organizations with a large AWS footprint or specific Linux desktop needs often prefer WorkSpaces. Enterprises with complex legacy application portfolios, strict user-experience requirements, or a heavy HDX investment may still be best served by Citrix or Omnissa. We walk clients through a structured scoring framework so the choice is defensible rather than opinion-driven.
Explore other ways we can support your organization.
Strategic guidance for leaders navigating growth, complexity, or change.
Full-time technology leadership for critical transitions when you need it now.
Stronger systems, smarter workflows, and aligned teams that work with purpose.
Get Started
Vendor-neutral guidance across Azure Virtual Desktop, Windows 365, Citrix DaaS, Omnissa Horizon, and AWS WorkSpaces — from pilot to production.
Let's talk about a virtual desktop strategy that fits your compliance requirements, your identity stack, and your budget — without vendor lock-in.