Abstract: Access to peripherals can be managed in a containerized environment. A management service can be employed on a computing device to detect when a container is created. When a container is created or a peripheral is connected, the management service can determine that an application running within the container should be allowed to access a peripheral. The management service can then interface with a peripheral mapper running within the container to enable the application to access the peripheral. A peripheral access manager can also be employed to isolate the peripheral to the container.

Abstract: Adaptive state detection can be provided for conferencing solutions. A monitoring service can be executed on the computing system employed by each participant to access a conference. The monitoring service on a presenter computing system can detect when the presenter has commenced sharing his/her screen or application and can identify a schema for performing state detection. The monitoring service shares the schema with the monitoring services on the listener computing systems. As the screen content is shared, the monitoring services can implement the schema to cause state notifications to be provided to the monitoring service on the presenter computing system. The state notifications can represent whether the listener computing systems are receiving the shared screen content and/or to what extent the shared screen content is delayed.

Abstract: An application can be installed, updated or reconfigured without disabling a write filter. When a package is to be deployed to a client terminal to install, update or reconfigure an application, an overlay optimizer can be instructed to start a session. During the session, the overlay optimizer can analyze I/O requests to identify any I/O request that pertains to the deployment of the package. The overlay optimizer can then redirect the identified I/O requests to a session overlay that the overlay optimizer has created for the session rather than passing the I/O requests to the write filter. As a result, the artifacts that are affected by the deployment of the package will be stored in the session overlay rather than the write filter's overlay. Once the session is completed, the overlay optimizer can copy the artifacts from the session overlay to the write filter's overlay and commit them.

Abstract: Reverse authentication can be performed in a VDI environment to enable an authentication device to gain access to a client without requiring that the authentication device's drivers be installed on the client. When an authentication device is connected to the client while the client is locked or not logged in, the authentication device can be redirected to a virtual appliance on which the authentication device's drivers are installed. The authentication device can then be used to authenticate the user via the virtual appliance. When authentication is successful, the virtual appliance can send the resulting authentication information back to the client to enable the user to be logged in to the client. Additionally, the virtual appliance can return the authentication device to the client. The client can then employ the authentication information to establish a remote session on a server and redirect the authentication device to the remote server.

Abstract: A disk-based write filter can include a filter driver that is loaded below the file system driver to thereby provide write filter functionality at the disk level, and a supporting driver that is loaded above the file system driver. When an excluded file is opened, the supporting driver can obtain the file's disk sector information and provide it to the filter driver to cause the filter driver to pass through I/O requests that target sectors defined in the file's disk sector information. When the excluded file is closed, the supporting driver can again obtain the file's disk sector information and provide it to the filter driver to allow the filter driver to identify any additional sectors that may have been allocated to the file. The filter driver can copy any such sectors from an overlay to disk and commence passing through I/O requests that target these sectors.

Abstract: Peripherals may be dynamically provisioned to containers. A peripheral arbitrator may be run in the host operating system environment to detect when containers are started. When a container is started, the peripheral arbitrator may determine which peripherals an application running in the container may use or require. The peripheral arbitrator may then identify any available peripherals matching the application's peripheral requirements and provision the peripherals to the container to thereby make the peripherals accessible to the application. In some instances, the peripheral arbitrator may use a trust score to determine whether to provision available peripherals to a container.

Abstract: Embodiments of systems and methods for managing an Information Handling System (IHS) using a workspace orchestration system are described. In an illustrative, non-limiting embodiment, an IHS may include computer-executable instructions to, for each of a plurality of workspaces instantiated on the IHS, upon receiving a request to launch a web application from an online server; determine one or more native APIs that the web application is restricted from using. When the web application request access to one of the restricted native APIs, the instructions reject the request, and when the web application request access to one of a web API, the instructions accept the request. The web API and the native API are associated with the same peripheral device.

Abstract: An information handling system includes a plurality of containerized applications, a container service, a hardware device, and a host processor to initialize a host service. The container service is associated with the containerized applications. The hardware device is virtualized to the containerized applications. The host processor identifies the hardware device that is virtualized to the containerized applications. The host processor receives a power notification from the container service. Based on the power notification, the host processor changes a power state of the hardware device.

Abstract: Priority reversing data traffic for latency sensitive peripherals, including receiving a connection notification and parameters of a peripheral; identifying, from the parameters, that an interface type associated with the peripheral is a bulk interface, the bulk interface associated with a first communication channel between the IHS and the peripheral and having a first latency; determining, based on the bulk interface type and a data traffic priority associated with the peripheral, that the data traffic associated with the peripheral is priority-inversed; in response to a communication request by an application executing on the IHS for communication with the peripheral, determining that the data traffic associated with the peripheral is priority-inversed, and in response, placing the data traffic in a queue associated with a second communication channel defined between the IHS and the peripheral, the second communication channel having a second latency, wherein the first latency is greater than the second la

Abstract: Priority reversing data traffic for latency sensitive peripherals, including receiving a connection notification and parameters of a peripheral; identifying, from the parameters, that an interface type associated with the peripheral is a bulk interface, the bulk interface associated with a first communication channel between the IHS and the peripheral and having a first latency; determining, based on the bulk interface type and a data traffic priority associated with the peripheral, that the data traffic associated with the peripheral is priority-inversed; in response to a communication request by an application executing on the IHS for communication with the peripheral, determining that the data traffic associated with the peripheral is priority-inversed, and in response, placing the data traffic in a queue associated with a second communication channel defined between the IHS and the peripheral, the second communication channel having a second latency, wherein the first latency is greater than the second la

Abstract: Priority reversing data traffic for latency sensitive peripherals, including receiving a connection notification and parameters of a peripheral; identifying, from the parameters, that an interface type associated with the peripheral is a bulk interface, the bulk interface associated with a first communication channel between the IHS and the peripheral and having a first latency; determining, based on the bulk interface type and a data traffic priority associated with the peripheral, that the data traffic associated with the peripheral is priority-inversed; in response to a communication request by an application executing on the IHS for communication with the peripheral, determining that the data traffic associated with the peripheral is priority-inversed, and in response, placing the data traffic in a queue associated with a second communication channel defined between the IHS and the peripheral, the second communication channel having a second latency, wherein the first latency is greater than the second la

Abstract: Traffic for USB devices that are connected to a USB-C dock can be adaptively prioritized. When the consumption of the bandwidth of a connection between a computing device and a USB-C dock exceeds a threshold, a filter driver can notify a service. The service can update device priority values for the devices that are connected to the USB-C dock based on applications that are accessing the devices. The service can relay the updated device priority values to the filter driver. The filter driver can then attempt to reduce bandwidth consumption by changing device settings of any device with a lower priority value, and then, if changing device settings is insufficient, may attempt to reduce bandwidth consumption by lowering the priority of the device's traffic.

Abstract: The performance of a wireless dock can be enhanced when a USB mass storage device is connected to the wireless dock. Filter drivers can be loaded on the USB stacks of a computing device and the wireless dock to perform functionality for reducing the number of communications that are sent over a wireless network when a USB mass storage device is connected to the computing device via the wireless dock. This reduction in the number of communications can be accomplished without jeopardizing data integrity or compliance with governing protocols.

Abstract: Individual interfaces of USB composite devices can be blocked. When a USB device is connected to a host system, a filter driver can be loaded on top of the USB hub driver and can be configured to monitor I/O control (IOCTL) requests that are sent as part of the enumeration process. When the filter driver detects that the USB device is a USB composite device, it can selectively modify the descriptors that the USB composite device reports based on the number of interfaces that will not be blocked. This selective modification of the descriptors enables individual interfaces to be blocked without filtering the USB composite class driver which in turn minimizes or eliminates any conflicts that may otherwise exist.

Abstract: An overlay optimizer can enhance the functionality of a write filter using an auxiliary overlay. An overlay optimizer can be loaded above a write filter. Based on the configuration of the write filter's overlay, the overlay optimizer can be configured to implement a volatile or persistent auxiliary overlay and then use the auxiliary overlay to selectively cache artifacts. To minimize the likelihood that the consumption of the write filter's overlay will exceed a critical threshold, the overly optimizer can be provided a list of monitored artifacts. The overlay optimizer can employ the list to selectively move monitored artifacts from the write filter's overlay to the auxiliary overlay when the overlay's consumption reaches a threshold. The overlay optimizer may also selectively allow I/O requests generated by particular applications while redirecting I/O requests generated by other applications.

Abstract: Individual interfaces of USB composite devices can be blocked. When a USB device is connected to a host system, a filter driver can be loaded on top of the USB hub driver and can be configured to monitor I/O control (IOCTL) requests that are sent as part of the enumeration process. When the filter driver detects that the USB device is a USB composite device, it can selectively modify the descriptors that the USB composite device reports based on the number of interfaces that will not be blocked. This selective modification of the descriptors enables individual interfaces to be blocked without filtering the USB composite class driver which in turn minimizes or eliminates any conflicts that may otherwise exist.

Abstract: Keyboard dock verification can be performed. A dock report can be created and stored on a keyboard dock as part of the manufacturing process. The dock report can include device information for the child devices of the keyboard dock. When the keyboard dock is attached to a computing device, a dock manager executing on the computing device can query the keyboard dock to retrieve device information for the keyboard dock's child devices. The dock manager can create a dock report from the retrieved device information. The dock manager can also retrieve the dock report that is stored on the keyboard dock and compare it to the dock report that the dock manager created. If the two dock reports match, the dock manager can determine that the keyboard dock is verified and can allow the keyboard dock, including its child devices, to be enumerated on the computing dock.

Abstract: The amount of data that is written to disk is minimized when an overlay optimizer is used in conjunction with a write filter to prevent the overlay from becoming full. An overlay optimizer minifilter can be used to intercept writes that were initiated by the overlay optimizer's request to commit files cached in the write filter's overlay to thereby extract only the modified portions of the files that are actually stored in the overlay. The overlay optimizer minifilter can then write these modified portions of the files, as opposed to the entire files, in the overlay cache. Directory change notifications are also enabled when a write filter is employed as well as in other multi-volume filter environments.

Abstract: Resource utilization can be intelligently managed in desktop virtualization environments. Utilization of client and server resources can be tracked during sessions that are established to access desktops. Machine learning models can be applied to the client and server resource utilization to create policies that define configuration settings for dynamically optimizing sessions based on the current utilization of resources during the sessions.

Abstract: An overlay optimizer can be configured to accelerate the moving of files from an overlay and to atomically move files from the overlay. To accelerate the moving of files from the overlay, the overlay optimizer can continuously monitor the consumption of the overlay. If the consumption exceeds an optimized threshold, the overlay optimizer can cause the file system cache to be invalidated to thereby release handles to any closed files that are still cached. To move files atomically from the overlay, the overlay optimizer can be configured to handle attempts to open a file by determining whether the file is in the process of being moved from the overlay. If so, the overlay optimizer can detect which stage the move process has reached and can dynamically adapt the move process to enable the attempt to open the file to be completed successfully and in a consistent manner.