Screen watermarks with remote desktop, Citrix and VDI

The usual question about remote environments is simple: which end draws the watermark? The answer decides whether it helps in your architecture.

Updated:

There are two screens, not one

In a remote or virtual desktop architecture the work happens in a session on a host, and the resulting picture is streamed to the endpoint in front of the user.

So there are two screens: the virtual display inside the session, and the physical display on the device the user is sitting at. Where the watermarking software runs decides which of the two it covers.

Watermark drawn inside the session

When the watermark is produced inside the session, it becomes part of the picture and travels with the stream to the endpoint.

The result is that the watermark appears whether the user captures the screen on their own device or photographs the monitor with a phone. For remote architectures this is usually the arrangement you want.

Watermark drawn on the endpoint

When the software runs on the user endpoint instead, it covers that physical display. A remote session window shown on that display is generally overlaid as well.

The limit here is administrative rather than technical: with outsourced staff or personal devices you may have no right to install software on the machine, which rules the endpoint approach out.

What to confirm before you commit

Supported platforms and versions, for both the session host operating system and the endpoint.

How licensing is counted: per physical device, per session, or per concurrent user. In a virtual desktop estate the difference is significant.

Multiple monitors and display scaling, since users frequently run dual screens or high-resolution scaling.

Resource impact on a shared host, and whether it stays within acceptable limits.

One thing that is easy to forget

Even with the technical arrangement settled, the phone in an outsourced agent’s pocket does not go away. The purpose of a screen watermark is to make that photo carry traceable detail, not to prevent it being taken.

For remote and outsourced work, update contract terms and workspace rules alongside the technical measure so the two reinforce each other.

More guides

Back to all guides

Running remote desktop or VDI?

Describe your architecture in the notes field when you apply, and the sales team will confirm the applicable edition and licensing.