Migrating an enterprise End-User Computing (EUC) environment from Citrix (Virtual Apps and Desktops / Citrix DaaS) to Native Azure Virtual Desktop (AVD) is one of the most impactful cloud transformation projects an organization can execute.
While Citrix provided essential management layers for legacy on-premises farms, AVD eliminates third-party control planes, leverages Windows 11 Multi-Session, and integrates directly with Microsoft Entra ID and Intune—offering a streamlined, cost-effective infrastructure.
This guide provides a complete blueprint for medium-to-large enterprises (2,500 to 5,000 users), including an architectural roadmap, common migration pitfalls, an exact policy mapping table, an Azure sizing calculator, and a detailed cost comparison.
🏛️ 1. Complete Migration Lifecycle Roadmap
PHASE 1: Discovery & Profiling PHASE 2: Landing Zone Setup PHASE 3: Apps & Image Engineering PHASE 4: Migration & Decommissioning
┌────────────────────────────────┐ ┌────────────────────────────┐ ┌────────────────────────────────┐ ┌────────────────────────────────────┐
│ • Inventory Citrix Apps/Farms │ │ • Azure Landing Zone │ │ • Convert to MSIX App Attach │ │ • Wave-based Rollout (500 users) │
│ • Establish User Personas │──>│ • Network (ExpressRoute) │──>│ • Build Golden Images (ACG) │─>│ • User Onboarding & Training │
│ • Map Storage & Peak IOPS │ │ • Identity & Entra ID │ │ • Configure FSLogix Containers │ │ • Decommission Citrix Controllers │
└────────────────────────────────┘ └────────────────────────────┘ └────────────────────────────────┘ └────────────────────────────────────┘
Phase 1: Assessment & Persona Discovery
- Application Inventory: Audit your complete software catalog. Separate standard Win32 desktop applications, web-based tools, heavy client-server tools, and specialized GPU-dependent software.
- Concurrency & Sizing Profiles: Evaluate historical peak concurrent usage rather than total named users. For a 3,500-user organization, peak concurrency typically ranges from 60% to 75% (~2,100–2,600 concurrent sessions).
- Storage IOPS Sizing: Calculate login-storm IOPS demands. Allocate 10 to 15 IOPS per user session during peak login windows (8:00 AM – 9:30 AM).
Phase 2: Azure Landing Zone & Network Topology
- Hybrid Network Mesh: Connect on-premises data centers to Azure using Azure ExpressRoute (with VPN backup) for low-latency line-of-sight access to local databases and Active Directory Domain Controllers.
- Identity Migration: Transition from Active Directory + Citrix FAS (Federated Authentication Service) to Microsoft Entra ID (Azure AD) native authentication with Passwordless / Windows Hello for Business or SAML SSO.
- Control Plane Provisioning: Deploy AVD Workspaces, Host Pools, and Application Groups spread across multiple Availability Zones within your primary Azure region.
Phase 3: Application Delivery & Profile Management
- FSLogix Profile Migration: Migrate legacy Citrix Profile Management (CPM) stores or User Profile Disks (UPDs) into FSLogix Profile Containers hosted on Azure Files Premium or Azure NetApp Files (ANF).
- Application Packaging: Modernize delivery by moving published applications from Citrix StoreFront to MSIX App Attach / App Attach, decoupling application layers from the base OS image.
- Golden Image Pipeline: Build standardized master images using Azure Compute Gallery (ACG) and Azure Image Builder (AIB) pipelines.
Phase 4: Phased Cutover Strategy
- Parallel Coexistence: Maintain both Citrix and AVD side-by-side during a 60-to-90-day transition phase.
- Wave Migration: Migrate users in structured batches (e.g., 500 users per wave), starting with general office staff and concluding with complex power users and developers.
- Citrix Decommissioning: Shut down Delivery Controllers, StoreFront servers, Provisioning Services (PVS/MCS), and NetScaler/ADC appliances once host pools reach 100% capacity.
📐 2. Azure Infrastructure Sizing & Sizing Calculator (3,500 Users)
Below is an architectural sizing model for a 3,500-user enterprise operating at 70% concurrency (2,450 peak concurrent users).
User Persona Breakdown
- Light Users (20% | 490 Concurrent): Call center, data entry, basic web apps.
- Medium Users (60% | 1,470 Concurrent): Knowledge workers, Office 365, Teams, CRM, browser-heavy workflows.
- Heavy/Power Users (20% | 490 Concurrent): Financial analysts, developers, engineers, CAD operators.
📊 Master Sizing & Resource Allocation Matrix
| Parameter | Light Personas | Medium Personas | Heavy/Power Personas | Total / Summary |
| Total Named Users | 700 | 2,100 | 700 | 3,500 Users |
| Peak Concurrent Users (70%) | 490 | 1,470 | 490 | 2,450 Concurrent |
| Target Density Ratio | 6 Users per vCPU | 3 Users per vCPU | 1 User per VM (Personal) | — |
| Azure VM Family | D8s_v5 (8 vCPU / 32GB) | D8s_v5 (8 vCPU / 32GB) | NVv4 or NCasT4_v3 (GPU) | Multi-Session + Personal |
| Users per VM Host | 24 Users / Host | 12 Users / Host | 1 User / Host | — |
| Required Session Host VMs | 21 VMs | 123 VMs | 490 VMs | 634 Total VMs |
| Profile Storage / User | 15 GB (FSLogix) | 30 GB (FSLogix) | 50 GB (FSLogix) | 72.4 TB Total Storage |
| Provisioned Storage IOPS | ~7,350 IOPS | ~22,050 IOPS | ~7,350 IOPS | ~36,750 Peak IOPS |
| Storage Tier | Azure Files Premium | Azure Files Premium | Azure NetApp Files | Ultra/Premium Tiers |
🔄 3. Citrix HDX Policy to Microsoft Intune & AVD RDP Mapping Guide
Transitioning off Citrix requires converting legacy HDX / Citrix Studio Policies into Microsoft Intune Administrative Templates, GPOs, or AVD Custom RDP Properties.
📋 Enterprise Policy Conversion Blueprint
| Policy Objective | Legacy Citrix HDX Policy | Microsoft AVD / Intune Equivalent | Implementation Mechanism |
| Client Drive Redirection | Client Drive Redirection: Allowed | drivestoredirect:s:* | Custom RDP Property / Intune Policy |
| Clipboard Mapping | Client Clipboard Redirection: Enabled | redirectclipboard:i:1 | Custom RDP Property / Intune Policy |
| Display & Multi-Monitor | Display Memory Limit / Display Settings | use multimon:i:1; maxmonitors:i:4 | Custom RDP Property |
| Teams Audio/Video Offloading | HDX RealTime Optimization / Teams Optimization | SlimCore / WebRTC Redirector | Installed on Session Host (msconfom:i:1) |
| Printer Mapping | Citrix Universal Print Driver (UPD) | Universal Print by Microsoft / Printix | Intune Deployment / Cloud Print |
| USB Peripheral Redirection | Client USB Device Redirection: Allowed | devicestoredirect:s:* or usbdevicestoredirect:s:* | Custom RDP Property / Intune Administrative Templates |
| Session Timeouts (Idle) | Session Idle Timer: 60 minutes | Set time limit for active but idle Remote Desktop Services sessions | GPO / Intune Computer Configuration |
| Bandwidth & Graphics | Adaptive Display / Thinwire | Shortpath (UDP) & AVC/H.264 Video Encoding | Enable RDP Shortpath for Managed Networks |
⚠️ 4. Common Technical Pitfalls & Field Mitigations
1. Storage Bottlenecks & Login Storms
- Symptom: Users experience 2-to-3-minute black screens or hung profile loadings between 8:30 AM and 9:00 AM.
- Root Cause: FSLogix profile disks saturating storage IOPS during simultaneous user logins.
- Mitigation:
- Use Azure Files Premium or Azure NetApp Files (ANF) with auto-scaling throughput.
- Enable FSLogix Cloud Cache and configure local VHD compaction scripts.
- Exclude temporary cache folders (e.g., Teams, Chrome, Edge cache) from FSLogix profile inclusions via
RedirXML.xml.
2. Microsoft Teams Video & Audio Lag
- Symptom: High CPU utilization on session hosts and choppy video calls during large group meetings.
- Root Cause: Media processing occurring inside the virtual desktop instead of offloading to the user’s endpoint.
- Mitigation: Deploy the WebRTC / SlimCore Media Optimization redirector package on all session hosts. Ensure end users access AVD using the native Windows Desktop (MSRDC) Client rather than the HTML5 Web Client.
3. Printing Infrastructure Overhead
- Symptom: Missing local printers, spooler crashes, and large print job queues stalling session hosts.
- Root Cause: Lack of a native universal printer driver in standard RDP environments compared to Citrix UPD.
- Mitigation: Adopt Universal Print by Microsoft or integrate cloud printing solutions such as Printix or ThinPrint. Avoid installing legacy manufacturer-specific print drivers directly onto master multi-session images.
💰 5. Comprehensive Financial Comparison (Citrix vs. Native AVD)
The following financial model compares running a Citrix DaaS layer on Azure versus a Native Azure Virtual Desktop Deployment for a 3,500-User Enterprise operating with 2,450 Peak Concurrent Users.
📊 Monthly Cost Comparison Table
| Cost Component | Legacy Citrix DaaS + Azure Infrastructure | Native Azure Virtual Desktop (AVD) | Monthly Net Savings |
| OS & VDI Licensing | Microsoft 365 E3/E5 (Includes Windows 11 Rights) | Microsoft 365 E3/E5 (Includes Windows 11 Rights) | $0 (Baseline prerequisite for both) |
| Control Plane Licensing | Citrix DaaS Advanced/Premium (~$10–$15 / user / mo) = $35,000 / mo | $0 / mo (AVD Control Plane included with M365) | -$35,000 / mo (Direct license elimination) |
| Compute VMs (Session Hosts) | ~$18,000 / mo (Fixed pool scheduling) | ~$13,500 / mo (AVD Native Autoscale scaling to 0) | -$4,500 / mo (Optimized autoscale efficiency) |
| Storage (FSLogix Profiles) | ~$4,500 / mo (Azure Files Premium / ANF) | ~$4,500 / mo (Azure Files Premium / ANF) | $0 (Identical profile footprint) |
| Networking & Gateways | ~$2,800 / mo (Citrix ADC / NetScaler Gateway VPX) | ~$1,100 / mo (Azure Front Door / Reverse Connect) | -$1,700 / mo (No virtual ADC appliances) |
| Management Server VMs | ~$2,500 / mo (Delivery Controllers, StoreFront, SQL) | $0 / mo (PaaS-managed by Microsoft) | -$2,500 / mo (Zero infrastructure overhead) |
| TOTAL ESTIMATED / MONTH | ~$62,800 / month | ~$23,600 / month | ~$39,200 / month Savings |
| ANNUAL EXPENDITURE | ~$753,600 / year | ~$283,200 / year | ~62% Cost Reduction ($470.4k/yr) |
🔑 Key Cost Optimization Strategies for AVD
- Leverage Windows 11 Multi-Session: Maximize user density per VM host to lower overall compute counts without adding RDS CAL costs.
- Apply Azure Savings Plans / Reserved Instances (RIs): Commit to 1-year or 3-year Compute Savings Plans for baseline host pools to reduce compute fees by up to 65%.
- Deploy AVD Native Autoscale: Dynamically spin down host VMs during off-peak hours, weekends, and holidays.
- License Entitlement Check: Ensure all users possess Microsoft 365 E3/E5, F3, or Business Premium licenses—granting full access to AVD without extra OS licensing costs.
Summary: Migrating from Citrix to native Azure Virtual Desktop simplifies control plane management, improves operational efficiency, and delivers cost savings exceeding 60% for medium-to-large enterprise environments.