Managing and deploying your desktops will also have you jumping through a few hoops. WorkSpaces is compatible with Microsoft Azure Active Directory both for identity management and group policies, and you can roll out software this way, too, but you'll need additional Microsoft tools to do so. For an all-Amazon solution, you'll need to get an Amazon WorkSpaces Application Manager account. This is an additional cost on top of the desktop virtual machines, but it provides the most complete picture of your WorkSpaces desktops and provides tools for software deployment, patching, upgrades, and other management tasks.