Workspot Glossary

Term	Definition
AAD	See Entra ID.
Activation	In a Workspot context, this usually refers to an activation email sent by Workspot Control to register a Workspot Client.
Active Directory	A directory and authentication service for Windows domains.
AD	See Active Directory.
Administrator	Usually refers to a Workspot Control Administrator with full administrative permissions.
Agent	Services that run on non-Client Workspot devices. Can be any of: the Workspot Gateway Agent, the Workspot Linux Agent, and the Workspot Windows/Desktop Agent. These run on Managed Gateways, Linux Desktops/Servers, and Windows Desktops/Servers, respectively. They perform a variety of management, monitoring, and maintenance tasks as dictated by Workspot Control.
Alarms	In Workspot Watch, these are the subset of logged events from Workspot products that are listed on the Alarms page.
Android Client	A Workspot Client for Android phones and tablets.
API	Usually refers to the Workspot Control API, a REST API that duplicates most of the functionality of the Workspot Control UI and offers a few API-only commands.
Application	Usually refers to an Application that appears on the user's Workspot Client dashboard. This can be a Workspot Web Application (which runs in the Client's Secure Browser), or Cloud Application (served by a Workspot Application Server).
Application Server	A server running the Workspot Agent and serving applications via Remote Desktop. Can be either in the Cloud or on-premises.
Authorized Ports	The RDP-protocol ports Control is configured to use. This can include the standard port, a non-standard port, or both.
Autolaunch	A Workspot Client option that launches the user's sole Desktop or Application when the Client is opened, without showing the Client dashboard. Disabled when the user has two or more Desktops/Applications to choose from.
Azure AD	See Entra ID.
Azure AD Only	See Entra ID Only.
Beacons	URLs in your corporate network that are only accessible to local devices. Optionally used for location detection by the Workspot Client to determine whether it is on your corporate network.
Bring Your Own Cloud (BYOcloud)	Using Cloud or on-premises hardware that was not obtained through Workspot.
Bring Your Own Computer (BYOC)	Employees using their own devices instead of ones provided by their employer.
Browser License	A per-user license good only for the Workspot Secure Browser. A license entitles the user to run any number of Web Applications simultaneously.
Bulk Operations	On Control's "Manage Cloud App Pool" page, these are actions that can be performed on multiple selected desktops at the same time.
Business Continuity	Used in conjunction with Global Non-Persistent Desktop Pools and Disaster Recovery Pools, which provide protection from outages in different ways.
BYOC	Refers to either "Bring Your Own Computer" or "Bring Your Own Cloud."
BYOcloud	See "Bring Your Own Cloud (BYOcloud)"
Certificates	Digital certificates used in authentication or encryption.
Client	Usually refers to the Workspot Client. A Workspot Client is a program used by an end-user to connect to their Workspot desktops and applications. May also refer the client side of any client-server communication.
Cloud	Used specifically to refer to any remote or on-premises datacenter containing Workspot desktops or application servers, or generally to anything reached via the Internet.
Cloud Application	A Workspot Application running on a server, as opposed to a Web Application running in the Client's Secure Browser.
Cloud Application Server	See Application Server.
Cloud Desktop	See Desktop.
Cluster	See Gateway Cluster.
COGS Alarm	See Cost Alarm.
Command	Workspot Command is the Workspot-internal counterpart to Workspot Control, with functions not available to customers.
Concurrent License	A license to access all types of Workspot Desktops and Applications except Persistent Desktops. Specifically, Non-Persistent Desktops, Cloud Applications, and Web Applications use a Concurrent License. A Concurrent License and the resources associated with it are assigned to a user for the duration of a login session and released afterward. This allows you to have more users than licenses if desired.
Connection	When used strictly, "connection" refers to a single TCP connection, but it generally refers to a TCP connection plus optional UDP stream that makes up the Workspot Client's RDP-protocol connection to a Workspot Desktop or Application. When a connection is lost, it has no immediate effect on the Desktop or Application: the user can reconnect and continue as before.
Connector	See Enterprise Connector.
Consumption Billing	Most Workspot services are billed annually, but usage-based monthly and hourly billing are also possible.
Control	Workspot Control is the administrative portal used by Workspot customers to manage their Workspot deployments. Users can be added or removed and resources assigned to them, servers and desktops can be created, and so on.
Control Administrator	A user who is authorized to sign into Workspot Control as a Full Administrator, Support Administrator, or Helpdesk Administrator. Workspot documentation assumes a Control administrator is a Full Administrator unless otherwise noted.
Cost Alarm	A Workspot Watch alarm that resource allocation may be consuming resources unnecessarily.
Credential Caching	Refers to Entra ID authentication. The Client can optionally cache signing credentials to reduce the number of times the user has to provide them. Users are still required to sign in if the authentication token has expired or Entra ID finds the cached credentials inadequate for some other reason.
Custom Desktop	A desktop in a Custom Desktop Pool.
Custom Desktop Pool	An ad hoc collection of desktop VMs or physical desktops that are created, maintained, and deleted by the customer through means other than Workspot Control. Control monitors the desktops, assigns users to them, and applies policies as usual. This is useful for Clouds and hypervisors not supported by Workspot, and for other special cases.
Custom Server	An Application Server in a Custom Server Pool.
Custom Server Pool	A ad hoc collection of Application Server VMs or physical servers that are created, maintained, and deleted through means other than Workspot Control. Control monitors the servers, assigns users to them, and applies policies as usual. This is useful for Clouds and hypervisors not supported by Workspot, and for other special cases.
Deallocate	A deallocated VM is one that is shut down and (in a Public Cloud) is not incurring operating costs, just charges for disk space. (A stopped or shut down VM may incur operating costs, depending on the Cloud.)
Dedicated Host	A physical server allocated by a Cloud provider solely to your company's use, as opposed to one where VMs from multiple companies may be allocated. Also called a "sole tenant." May be more consistent with Microsoft BYOL (Bring Your Own License) policies than other options.
Delete Users	When a user is deleted in Control, Control forgets about them. Their resources are no longer associated with them. This has no effect on directory services (AD, Entra ID, etc.). However, the reverse is not true: if a user is deleted in the directory service, they are deleted in Control.
Deployment Rings	Deployment Rings optionally define (in Control) which Windows Client versions to use for different groups of users. The Client will update to the specified version automatically. The "Stable and "Preview" rings are managed by Workspot. Custom rings allow other releases to be specified.
Desktop	A Workspot Desktop is a remotely accessible virtual machine in a Workspot Desktop Pool, running the Workspot Agent service, and accessed by end-users through a Workspot Client. Both Windows and Linux are supported.
Desktop Agent	Also called the Workspot Windows Agent. This is a Windows service that runs on every Workspot Desktop and Application Server. It performs a variety of monitoring, management, and maintenance tasks, as dictated by your Workspot Control configuration.
Desktop Backups	Workspot Desktop Backups are an optional feature in Control.
Desktop Pools	Workspot Desktops are organized into Desktop Pools, which are managed as a unit through Workspot Control.
Device Redirection	Workspot Client devices redirect their keyboard and mouse I/O to the remote Workspot Desktop or Application, and optionally their microphone, Webcam, and other I/O.
Disaster Recovery	A mechanism to allow replacement Desktops to become available if the users' main Desktops become unavailable through a datacenter failure or similar outage. Workspot offers two different Disaster Recovery (DR) types, plus Global Desktops, which achieve the same result more seamlessly.
Disaster Recovery Pool	A pool dedicated to Disaster Recovery.
Enterprise Connector	Workspot Enterprise Connector is a service that Control uses to query your Active Directory Domain Controller for information about users: authentication, account status, group membership, and so on. It is normally installed on a VM in the same datacenter as your Domain Controller, and uses a service account with limited permissions.
Enterprise Licensing	The recommended licensing option, which provides access to the number of users you select. There are multiple license types. The most common are Named Licenses, which allow the user to access Persistent Desktops, Non-Persistent Desktops, Cloud Server Applications, and Web Applications, and Concurrent Licenses, which allow all of these except for Persistent Desktops. There are two levels of Enterprise licensing: Enterprise and Enterprise Plus. Enterprise Plus enables more features.
Enterprise Plus	See Enterprise Licensing.
Entitlement	An entitlement means that a user is allowed to access Workspot resources e without implying that they are currently using any. If the user has an entitlement for a Desktop or Application, its icon appears on the dashboard of their Workspot Client. Control checks for an available license only after they click on the resource.
Entra ID	The new name for Azure Active Directory, a directory service similar to Active Directory.
Entra ID Only	An optional feature that supports Entra ID authentication (and not Active Directory authentication) on Workspot Desktops and Applications.
Events	In the context of Workspot Control, an Event is any message that is logged on the Events page.
Excess Capacity	In the context of Workspot Trends, Excess Capacity is when enough unused system resources exist that there is an implication that a VM is oversized enough to cause extra expense.
First-Time Use (FTU)	Refers to the user registration process the Workspot Client goes through after installation or upon reset.
FTU	See First-Time Use.
Gateway	In a Workspot context, this means a Remote Desktop Gateway used to connect with Workspot resources. Can be either a Managed Gateway or a Legacy (unmanaged) Gateway.
Gateway Agent	A version of the Workspot Agent for Workspot Managed Gateways (also called "Gateway Clusters").
Gateway Cluster	One or more Workspot Managed Gateways used together to handle traffic for the same users and resources.
Gateway Plugin	The Entra ID authentication plugin for Microsoft RD Gateways.
Global Applications	Workspot Applications that run on servers in Application Pools in multiple datacenters for fault tolerance and capacity scaling.
Global Desktops	Workspot Desktops that run in Desktop Pools in multiple datacenters for fault tolerance and capacity scaling.
Golden Image	A desktop or server image with the desired settings, applications, and services already installed and ready to be imported into Workspot Control.
Group	A Workspot Group is a set of users known to Workspot Control that are managed together. For example, they are given the same Security Policy, and most Desktops and Applications are assigned on a per-Group basis. Group membership can be set manually or based on an AD or Entra ID group.
Heat Map	A seven-day table showing the number of running Desktops per 30-minute time period. Used in conjunction with Warmup Policies.
Helpdesk Administrator	A Workspot Control Administrator with a limited ability to make changes.
Hibernation	In the context of Workspot Desktops, this has the same meaning as in Microsoft Windows: the state of the Desktop is saved to hiberfil.sys and the Desktop is shut down. Later, the Desktop can be rebooted and its state restored. The result is like Sleep but slower.
Hourly Pool	A Desktop or Application Server Pool that is billed by the hour. Desktops and Application Servers are not charged for hours they spend shut down.
Identify Provider	A remote authentication service such as Okta or Entra ID.
Idle	In the context of Workspot Desktops and Applications, this is the time since the user's last keyboard press, mouse click, or mouse movement. Idle Timeouts are used by Time Limits Policies to know when to disconnect Desktops and Applications that are not in use. Once disconnected, an idle session is subject to the Time Limits Policy's Sign out, Sleep, Hibernation, or Shutdown settings.
IdP	See Identity Provider.
Image	The bootable snapshot of a virtual machine or template.
iOS Client	The Workspot Client for iPhones and iPads.
Kiosk Mode	The Workspot Client's Kiosk Mode operates without a default Workspot account. Instead, any user can sign into the Client on the local device and see their own Client dashboard. When their session ends, the Client is available for a new user. This is useful in examination rooms in clinics and other shared spaces.
Landing Zone	The network containing your Workspot Desktops and Servers.
Legacy Gateway	A Remote Desktop Gateway used to connect with Workspot resources but is not managed by Workspot Control or running the Workspot Gateway Agent, unlike a Managed Gateway.
Linux Agent	This is a Linux service that runs on every Workspot Linux Desktop or Server and performs a variety of monitoring, operational, and maintenance tasks, as dictated by your Workspot Control configuration.
Linux Client	A Workspot Client for Linux devices.
Linux Desktop	A Linux device running the Workspot Agent and acting as a Workspot Desktop as part of a Desktop Pool.
Linux Server	A Linux device running the Workspot Agent and acting as a server as part of an Application Server Pool.
Location Detection	A method used by the Workspot Client to determine whether it is running on your company's internal network. Not to be confused with geolocation.
Locked Down Mode	Not really a mode but s a set of preset values for the Protocol Settings in a Security Policy.
Mac Client	The Workspot Client for macOS devices.
Maintenance Policies	Policies that specify optional one-time or scheduled maintenance windows for Persistent Desktop Pools. Maintenance Policies ensure that the Desktops in the pool are taken out of power-saving modes to be accessible during the maintenance window.
Maintenance Window	The period specified by a Maintenance Policy in Control.
Managed Gateway	A Remote Desktop Gateway managed by Workspot Control on a server running the Workspot Gateway Agent.
Media Extension	A server-side browser plugin that redirects selected URLs from the Workspot Desktop or Application Server to the Client device's browser for better performance.
Migration	Typically refers to moving a Desktop VM from one Pool to another in Control, but can refer to moving resources in other contexts as well.
Monthly Pool	A Desktop or Application Server Pool that is billed by the month. Desktops and Application Servers are not charged for months in which they do not exist.
Multizone Desktop Pools	Pools are normally restricted to a availability zone within a Cloud provider region. Multizone Pools have a home zone but can provision new VMs in the other zones in the region when necessary.
Named License	A license that is assigned permanently (that is, until revoked) to an individual user. Named licenses are required for Persistent Desktops.
Non-Persistent Desktop	A Non-Persistent Desktop is a remote desktop that is assigned to a user only for the duration of a single login session. The desktop becomes available to another user afterward. These use Concurrent Licenses.
On-Premises (on-prem)	A datacenter containing hardware you configure, own, and control rather than resources rented from a Cloud provider.
Passcode	A PIN used to unlock the Workspot Client. Username/password credentials can be used instead.
Passthrough Authentication	Passthrough authentication uses a hardware authentication key such as YubiKey on the Client device to authenticate operations on a remote Workspot Desktop or Application.
Pause	Either sleep or hibernation on a Workspot Desktop.
Pause/Resume Service	The power-management functions in Control that put Workspot Desktops and Servers into power-managed states and bring them back to the running state.
Persistent Desktop	A Workspot Desktop that remains assigned to the same user indefinitely (until the assignment is revoked by Control or the Desktop is deleted). Such Desktops require a Named User License.
Per-User Licensing	A license that is assigned on a per-user basis, not a per-resource basis. With per-user licensing, a user can access any number of Desktops and Applications while consuming a single license.
Physical Managed Gateways (Gateway Clusters)	This is the RD Gateway equivalent of a Custom Server Pool. A Physical Managed Gateway is a manually configured Workspot Managed RD Gateway, as opposed to one that is created via Control. In spite of its name, it may be running on a virtual machine. Such Gateways run the Workspot Gateway Agent and are monitored and to a limited extent managed by Workspot Control. Such Gateways are used with physical servers and hypervisors not supported by Control
Pilot Customer	A customer using a trial (Pilot) deployment of Workspot.
PIN	See passcode.
Policies	In Workspot Control, Policies are a top-level menu category. In general, they are have neither a global nor an individual scope, but apply to multiple users, Pools, Gateways, Clients, etc.
Pool	A group of one or more Workspot Desktops or Application Servers that are managed as a unit. (With Managed Gateways, the term "Cluster" is used instead.)
Posture Check	A set of tests run by the Workspot Client to verify that the local device satisfies the requirements you set in a Security Policy in Control.
Power Management	Actions taken by Control to save energy on Workspot Desktops and Application Servers. These include Sleep, Hibernation, and Shutdown.
Precedence	In Control, this refers to Group precedence. A user can qualify for multiple Groups but can only belong to one. The precedence order determines which one this is.
Preview Ring	A label associated with the version of the Workspot Windows Client recommended for beta testers. It usually has either the current beta release or the current production release, whichever is newer. If configured in Group Policies, members of the Group have their Clients updated to the Preview Ring automatically.
Private Cloud	Applies generally to any deployment that isn't using a Public Cloud, especially one using Nutanix, VMware, or Hyper-V hypervisors.
Protocol Policies	Optional policies that duplicate the functionality of the "Protocol Policies" settings in a Security Policy, but are applied per-Pool instead of per-Group.
Provisioning	The process of creating an individual Desktop, Application Server, or Gateway from a template image.
Proxy	Usually indicates a Web proxy such as Squid. Workspot products support Web proxies.
Public Cloud	One of: Microsoft Azure, Google GCP, Amazon AWS EC2, and Amazon Workspaces Core.
RD Gateway	A Remote Desktop Gateway: that is, an authenticating proxy service that accepts Remote Desktop Protocol (RDP) connections from the Remote Desktop client and authenticates the user before connecting them to the Remote Desktop server. This can take the place of a VPN for connections arriving via the Internet.
RD Gateway Stamping	Another name for for Workspot Managed Gateways.
Region	A geographical area defined by a Cloud provider.
Regional Disaster Recovery	A mechanism to recreate a Workspot Desktop Pool from backups in a different region.
Registration	The act of making a device running a Workspot application or service known to Workspot Control. The Workspot Clients, Workspot Enterprise Connector, Workspot Desktops, Workspot Application Servers, and Workspot Managed Gateways all register themselves with Control, based on credentials or tokens you provide. Registration associates the application or service with your Workspot deployment.
Resume	Restoring a Workspot Desktop from either Sleep or Hibernation.
Role	In Control, this refers to a user's role: Full Administrator, Support Administrator, Helpesk Administrator, or End User. Adminstrators are also end-users.
Secure Browser	See Workspot Browser.
Security Policies	A policy set in Control that is applied to end-users on a per-group basis. It sets authentication options and I/O permissions such as the ability to print or cut and paste from a Workspot Desktop or Application.
Selective Feature	An optional feature for your Workspot deployment. This usually refers to a feature that is not enabled by default. Contact Workspot if you are interested in enabling a selective feature.
Self Service	"Self-service" in the context of Workspot means the ability to create virtual machines with hourly, monthly, or annual billing and to increase the number of such devices on demand. Self-Service billing is an alternative to the more usual Enterprise Plus plan or the older Elite plan.
Self-Registration	The process of a user associating a new installation of the Workspot Client with themselves through signing in with their login credentials or using an emailed code.
Server Scaling	Ramping the number of Application Servers up and down according to the rules in a Server Scaling Policy in Control.
Service Account	Active Directory or Cloud Provider accounts with limited permissions that allow Workspot Control to perform its tasks.
Service Principal	The Azure equivalent to a Service Account. Used by Control to manage an Azure deployment.
Session	A login session on a remote Workspot Desktop or Application Server. This is not the same as a connection: a connection can be dropped and reconnected without affecting the session. A session starts when a user who is not signed into the Desktop or Server signs in and ends when they sign out manually, are signed out due to a Time Limits Policy, the remote device is rebooted, or in several other cases. A user may have several open Applications on the same Application Server, but these represent a single session.
Shared Persistent Desktops	A Workspot Persistent Desktop assigned to more than one named users. Only one user can access the Desktop at a time.
Shutdown	The act of powering down a remote Workspot device so it can be used later, as opposed to rebooting it immediately or deleting it.
Simplified Login	Usually refers to Workspot's Windows Hello support.
Single Tenant Node (STN)	A Cloud provider option where customers rent entire physical servers and all VMs are provisioned on these servers.
Sleep	A power-saving mode where the device's state is retained in memory but lost if the device is shut down or rebooted.
Sole Tenant	A physical server allocated by a Cloud provider solely to your company's use, as opposed to one where VMs from multiple companies may be allocated. Also called a "dedicated tenant" or "dedicated instance."
Stable Ring	A label associated with the version of the Workspot Windows Client recommended for most users. If configured in Group Policies, members of the Group have their Clients updated to the Stable Ring Release automatically.
Support Administrator	A Workspot Control Administrator with a moderate ability to make changes.
Survey	The Workspot Client can optionally ask users to rate and comment on their Workspot experience at the end of each connection. This is configured in Control and the results are viewed in Trends.
Teams Plugin	Teams VDI Plugin integration with Workspot Control, Workspot Clients, and Workspot Application Servers for better performance.
Template	A system image used to create other system images, such as Workspot Desktops, Application Servers, and Managed Gateways.
Thin Client	In the context of Workspot, this usually refers to a simple computer running the Windows or Linux Client.
Third-Party Identify Provider (IdP)	An authentication service external to the customer such as Entra ID or Okta.
Time Limits Policy	A policy set in Control that sets timeouts on users' Workspot connections and sessions, and controlling idle disconnect, power-saving modes, and maximum session length.
Token	Usually means a string that uniquely identifies a Desktop, Gateway, or Pool to Control.
Trends	Workspot Trends monitors the end-user experience in a variety of ways, including user surveys and resource usage on desktops and applications.
Two-Subscription Model	The use of one Cloud provider subscription for Workspot resources managed by Control (Desktops, Application Servers, and Gateways) and another for file servers, domain controllers, and other non-Workspot resources.
Unmanaged Gateway	A Remote Desktop Gateway that is not managed by Workspot Control or running the Workspot Gateway Agent, unlike a Managed Gateway.
USB redirection	Redirecting a local USB device so it appears local to the Workspot Desktop or Application. This is automatic for some resources (keyboards, mice, microphones, and Webcams) but others, such as scanners, may require additional configuration.
VDI	"Virtual Desktop Infrastructure." Usually refers to a virtual machine running a Windows or Linux desktop.
Virtual Network	A network that appears to be a physical network with its own addressing and routing but is constructed on top of an underlying physical network.
Vnet Peering	Connecting multiple virtual networks as if they were a single network.
VPN	Virtual Private Network. The Workspot Client has a built-in clientless F5 SSLVPN and is compatible with external VPNs: that is, if you connect to your corporate network with a VPN application, the Client can use it to connect as if it were connected directly.
Wake	Resume from a power-saving mode (sleep, hibernation, or shutdown).
Wallpaper	The background image shown by the Workspot Client. You can upload a custom wallpaper image.
Warmup Policies	A schedule that specifies the minimum number of Non-Persistent Desktops in a Pool that must be running at the start of a time period. The schedule covers a week in thirty-minute increments. If fewer desktops are available than the Warmup Policy calls far, more are booted or provisioned. If more are available, idle desktops are paused, shut down, or deleted.
Watch	Workspot Watch monitors your entire Workspot deployment.
Web Apps (Web Applications)	Web Applications are displayed in the Workspot Client as if they were Cloud Applications, but are run locally in the Client's Secure Browser instead of remotely on a Workspot Application Server. The user experience with the two kinds of Applications is similar.
Web Client	A Workspot Client that runs inside a supported Web browser and provides most of the functionality of Workspot's other Clients.
WebApp	Can mean either the Workspot Web Client or a Workspot Web Application.
Webex Plugin	The Cisco Webex VDI Plugin integration with Workspot Control, Workspot Clients, and Workspot Application Servers for better performance.
Windows Agent	This is a Windows service that runs on every Workspot Desktop and Application Server and performs a variety of monitoring, operational, and maintenance tasks, as dictated by your Workspot Control configuration. Also called the Workspot Desktop Agent.
Windows Client	The Workspot Client for Microsoft Windows. Supported on both desktop versions of Windows and Windows Server.
Workspaces Core	A version of the Amazon AWS Cloud services.
Workspot Browser	A secure browser built into the Workspot Client that runs Web Applications.
Workstation	A Workspot Desktop with GPU support.
Zoom Plugin	The Zoom VDI Client and Zoom Media Plugin integration with Workspot Control, Workspot Clients, and Workspot Application Servers for better performance.
Zulu	A version of Java by Azul. Java is required by the Workspot Enterprise Connector.