The Federate-to-Automate Shift: Modernizing 10,000+ Defense Desktops

How TeraSky replaced localized image sprawl with a unified, template-driven VDI standard across a decentralized footprint.

The Operational Reality

A defense organization operating across dozens of autonomous sub-units relies on virtual desktops as a mission-critical utility. With the estate collectively exceeding 10,000 nodes, it was severely bottlenecked by its own decentralization. Every unit managed its own Omnissa Horizon infrastructure. Local IT teams were buried under “golden-image sprawl”—the manual maintenance of heavy, siloed master images for everyone from administrative staff to software developers.

Because of the strict defense security posture, data could never leave the data center. The organization needed a way to standardize operations, reduce administrative overhead, and support heavy developer workloads—without disrupting active operations or stripping sub-units of their autonomy. Under a sweeping Enterprise License Agreement (ELA), they partnered with TeraSky to engineer a repeatable modernization model.

The Paradigm Shift: From Localized Silos to Automated Workspaces

Instead of tweaking individual environments, TeraSky redesigned how desktops, applications, and user profiles are delivered across the enterprise, shifting the organization from manual infrastructure management to an automated delivery pipeline.

1. Eliminating the “Golden Image” Burden

• The Old Way: Every sub-unit built, patched, and tested dozens of massive master images to cover different software combinations required by different teams.
• The TeraSky Solution: Transitioned the estate to Instant-Clone non-persistent pools paired with App Volumes for real-time application layering. Master images were stripped down to a bare OS blueprint. Applications are now cleanly injected as modular layers at the exact moment a user logs in.

2. Making Profiles Transient but Personal

• The Old Way: Users were tied to static, heavy desktop profiles that were slow to load and labor-intensive to reset when they corrupted.
• The TeraSky Solution: Implemented Dynamic Environment Manager (DEM) alongside Active Directory group assignments. Settings, bookmarks, and preferences are abstracted away from the machine. The desktop is destroyed at logout, but the user’s workspace profile follows them to any node in the nation instantly.

3. Siloed Dark Spots vs. Estate-Wide Observability

• The Old Way: Local branches operated blindly, troubleshooting performance issues reactively without centralized visibility into user experience.
• The TeraSky Solution: Deployed ControlUp natively across the federated infrastructure. This granted both central leadership and local administrators real-time analytics into the digital employee experience, shifting operations from reactive firefighting to proactive tuning.

Tech Stack

Core Platform: Omnissa Horizon, App Volumes, Dynamic Environment Manager (DEM)

Operations & Identity: ControlUp, Active Directory

Tactical Success: Winning Over the Developers

The ultimate validation of this architectural shift was its adoption by the organization’s software developers. Historically, software developers have faced significant friction with non-persistent VDI, as rigid, locked-down images conflict with fluid engineering tools and resource-intensive compilation workflows. By combining high-performance computing pools with dynamic profile abstraction, TeraSky delivered a modern, frictionless workspace that met developer performance demands while keeping source code securely containerized inside the data center.

The Ultimate Impact

By partnering with TeraSky, the defense organization maintained the strict security boundaries of its on-premises datacenters while gaining the operational agility of a cloud-like model. System administrators are no longer bogged down by repetitive image maintenance, allowing them to onboard entire new units in a fraction of the time it took in the past. TeraSky successfully executed this modernization mid-flight across a live, sensitive defense ecosystem—proving that massive scale and extreme decentralization can be unified under a single, elegant architecture.

“Operating across decentralized, autonomous units running security-sensitive operations makes standardization incredibly difficult. TeraSky understood the critical nature of our workloads from day one. By replacing local image silos with an automated, identity-driven profile model, they helped us enforce a rigid security posture while dramatically reducing the burden on our operational teams.”