One master image, hundreds of desktops, zero drift
Golden images are the foundation of desktop management at scale. You maintain one master copy of each desktop type — Tophan deduplicates storage so that 100 desktops built from the same golden image consume barely more space than one. Updates happen once, propagate everywhere.
A golden image is a fully configured desktop VM: operating system, applications, settings, security baselines. When users need desktops, Tophan creates linked clones from the golden image. Each clone shares the base layer and only stores its own changes (user data, preferences, runtime state) in a thin differential layer.
Updating is straightforward. Modify the golden image — install patches, add software, change settings — then publish the new version. On next login (or next reboot, depending on policy), users get the updated base. Their personal data layer carries over intact.
Golden images aren’t just convenient — they’re a security boundary. Tophan’s Mythos scan runs monthly (or on-demand) against every deployed desktop, comparing it to the golden source.
Binary verification hashes every system binary and compares against the golden image. Any binary that doesn’t match the known-good copy is flagged — whether it was modified by malware, a careless admin, or a user installing unauthorized software.
CVE scanning checks installed packages against the National Vulnerability Database. You see which desktops have unpatched vulnerabilities, grouped by severity, with direct links to the relevant golden image update needed.
Config drift detection compares system configuration files against the golden baseline. Registry keys, service states, firewall rules, scheduled tasks — anything that deviates from the master is reported with a diff showing exactly what changed and when.
The combination means your fleet stays consistent, patched, and verifiable. Auditors get a single report showing every desktop matches the approved baseline — or a clear list of exactly what doesn’t and why.