Windows Server RDS.
RemoteApp turns a desktop ERP into a streamed app; session-host tuning is the whole job.
Centralizes fat-client workloads like Tally Prime on session hosts: RAID-backed VMs, connection-broker license management, GPO lockdown, and scheduled PowerShell retention jobs. Branches get an app window. Not a server to nurse.
Runs the estates documented in ~/work/unified-it-infrastructure-and-digital-transformation-at-maryana-group and ~/work/rds-migration-tailscale-to-twingate.
The operational story is the certificate pipeline. A win-acme CLI setup with Cloudflare DNS-01 validation renews the RDS TLS certificates without opening port 80 or retraining users to click through warnings, with a custom PowerShell script handling the lifecycle end to end. It kept the central Tally Prime ERP at near-100% uptime. See ~/work/rds-migration-tailscale-to-twingate.
used_in: ~/work/rds-migration-tailscale-to-twingate · ~/work/unified-it-infrastructure-and-digital-transformation-at-maryana-group