A company is enabling remote employees to access a full Windows desktop experience hosted in Azure. They want to deliver secure, multi-session Windows desktops and applications to users without managing physical hardware or building their own remote connection infrastructure. Which Azure service should they use?