Abstract: In one implementation, a network device provides virtual desktop policy control. The network device detects a number of sessions hosted by a virtual desktop interface (VDI) server, and performs a comparison of the number of sessions to a predetermined threshold capacity of the network device. When a request for a new session to be hosted by the VDI server is received at the network device, the new session request is forwarded according to the comparison of the number of sessions to the predetermined threshold capacity. In one example, the new request is forwarded to establish a new VDI session with the VDI server but with limited capabilities. For example, the client device of the new VDI session may have access to a generic desktop set of necessary applications but not all applications otherwise available to the client device.