Abstract: Disclosed are various embodiments for redacting or modifying content in documents that are provided to users. A user's clearance level can be determined by analyzing the role of the user within the enterprise. A redaction level can be determined from the clearance level. A document or other content can be modified or redacted based upon the redaction level.

Abstract: Techniques for delivering remote applications to servers in an on-demand fashion (i.e., as end-users need them) are provided. In one set of embodiments, these techniques include packaging the installed contents (e.g., executable code and configuration data) of the remote applications into containers, referred to as application packages, that are placed on shared storage and dynamically attaching (i.e., mounting) an application package to a server at a time an end-user requests access a remote application in that package, thereby enabling the server to launch the application.

Abstract: Disclosed are various embodiments for intelligent text recognition based upon a selected pattern detection mode. First, text can be identified in an image. A pattern detection mode can be selected by a user or autonomously. In some instances, the pattern detection mode can be selected based at least in part on a user account. Next, the text can be parsed for occurrences of a pattern associated with the selected pattern detection mode. A list of occurrences of the pattern can be generated from the text and presented to a user. In some instances, a user can train a model to learn a new pattern.

Abstract: Disclosed are various embodiments for automating IT help desk services by utilizing historical IT help desk data to identify potential solutions for incidents. First, a ticket associated with an incident on a client device can be received. Next, a ticket record can be generated by extracting information from the ticket using natural language processing techniques. Next, using the ticket record as a key, a graph database can be queried for one or more similar ticket records. In response to obtaining similar ticket records from the graph database, the graph database can be further queried for solution records related to the similar ticket records by edges. The solution can comprise a set of machine-readable instructions which can resolve the incident when executed.

Abstract: A scanner redirection method for a remote desktop system includes the steps of: transmitting to a client computer, a request to acquire a first image from an image capturing device connected to the client computer; in response to receiving image data from the client computer of a first chunk of the first image and an identifier (ID) of the first chunk, storing the image data of the first chunk and the ID of the first chunk in association with each other; in response to receiving an ID from the client computer of a second chunk of the first image without any associated image data, retrieving image data that is stored in association with the ID of the second chunk; and creating the first image using the image data of the first chunk and the retrieved image data that is stored in association with the ID of the second chunk.

Abstract: Example methods and systems for sensitive information protection during screen sharing on a remote desktop are described. In one example, a computer system may establish a connection between a remote desktop and a client device to allow access to multiple applications supported by the remote desktop. The computer system may obtain configuration information identifying sensitive information that includes at least a particular application from the multiple applications or an information item. Based on the configuration information, the computer system may monitor the particular application or the information item. In response to detecting that (a) screen sharing is enabled for a first user to share a visual representation associated with the remote desktop with a second user and (b) the particular application or the information item being monitored is active, the computer system may perform a remediation action to protect against potential disclosure of the sensitive information.

Abstract: The disclosure provides an approach for on-demand application delivery. Embodiments include determining, by an application delivery component on a computing device, a user logon event. In response to the user logon event, embodiments include receiving, from an application management server separate from the computing device, shortcut information for a set of applications associated with the user and displaying, on the computing device, simulated shortcuts for the set of applications based on the shortcut information. Embodiments include receiving, at the computing device, user input selecting a simulated shortcut of the simulated shortcuts that corresponds to an application of the set of applications.

Abstract: A management service can receive an installation request for a client application from a first client device, where the installation request specifies a second client device on which the client application is to be installed. The management service can identify an operating system associated with the second client device. The management service can request installation of the client application on the second client device from an application catalog service associated with the operating system of the second client device.

Abstract: The disclosure provides techniques for peer to peer communication of a remote display protocol via a real-time communication session between a client device and a remote device. Embodiments include receiving, at a remote device configured to execute a virtual desktop, a request to join a real-time communication (RTC) session with a client device. Embodiments include joining the RTC session with the client device in response to receiving the request. Embodiments include receiving, at the remote device and via the RTC session, data indicative of a remote display protocol for rendering the virtual desktop on a display of the client device. Embodiments include performing, at the remote device, one or more actions based, at least in part, on receiving the data indicative of the remote display protocol.

Abstract: Disclosed are various examples for controlling and managing data access to increase user privacy and minimize intentional or inadvertent misuse of accessed information. Upon detecting a request for an administrator review of a user client device, permission for administrator access can be obtained from a user associated with the user client device. The client device identifier can be obfuscated such that the administrator accessing the data is not provided the actual device identifier. An administrator review session between the user client device and an administrator client device can be established to allow the administrator client device access to the permitted client device data.

Abstract: A scanner redirection method for a remote desktop computer system, wherein the remote desktop computer system includes a client computer and a remote computer, includes the steps of: transmitting at least one request to the client computer to acquire one or more first images from an image capturing device connected to the client computer; upon receiving a compressed video file that was created by the client computer in response to the at least one request and that was then transmitted by the client computer, applying a video decoding algorithm to expand the compressed video file into a decompressed video file having one or more second images; and providing each of the one or more second images to an application running in the remote computer.

Abstract: Encrypting keystroke data in a multi-session-enabled computing device includes receiving a first control message requesting enabling of keystroke encryption for a protected application executing in a first desktop session. The first control message includes application identification information of the protected application. Keystroke encryption is enabled for keystrokes targeting the first desktop session based on receipt of the first control message. Keystroke data sent to the protected application is encrypted while the protected application maintains keyboard focus in the first desktop session. Unencrypted keystroke data is transmitted to another application of a second desktop session while keystroke encryption is enabled for the protected application in the first desktop session.

Abstract: Disclosed are various embodiments for preventing unauthorized access to materials and topics for meeting invitations and meeting recording. A meeting recording and other meeting data is received in association with a meeting identifier. The meeting recording and the meeting data is provided as input to a machine learning engine to generate labelled recording data. A user-specific recording package is generated to include data limited to the at least one meeting section corresponding to a set of security labels approved for a user account.

Abstract: Systems and methods are described for injecting chaos into an application based on a determination that network traffic will be at the application when the chaos is injected. In an example, a gateway can receive requests for applications in a system. The gateway can be configured to periodically insert a header into an application request that causes a proxy agent associated with the requested application to request chaos instructions from a server. When chaos instructions are requested, the server can determine whether and what kind of chaos to inject into the application. The server can send instructions to the proxy agent, which can inject chaos according to the instructions. A monitoring agent can then monitor traffic around the application to determine whether other applications and system components behave appropriately in response to the injected chaos.

Abstract: Systems and methods are described for providing ways to optimize client performance during screen data streaming. Periods of time a client takes to render frames can be tracked and the frame rendering times can be analyzed to determine when the client performance is insufficient. If the client rendering performance is determined to be insufficient, the encoding method can be dynamically modified in ways preferable for improving the client rendering performance. Different approaches can be utilized for calculating metrics and determining when to modify the encoding method, such as linear interpolation or by taking averages of frame rendering times in a moving sample window.

Abstract: Systems and methods are described for configuring a web page using chain of trust. In an example, a web browser can receive a certificate hierarchy from a web server in response to a request for a web page. The web browser can apply a hash algorithm to one or more digital security certificates in the certificate hierarchy. The web browser can send the hash values to a deployment database that stores mappings of known hash values to website configuration settings. The deployment database can respond with the corresponding configuration settings. The web browser can merge the configuration settings and apply them to the web page prior to rendering the web page on a display.

Abstract: Systems and methods are provided for grouping remote desktop sessions on servers in remote desktop environments according to predicted user logoff times so that sessions with similar predicted logoff times can be placed together on the servers, allowing for more efficient utilization of servers. A user can request a virtual desktop session. Once the request is received, a predicted logoff time for the session can be determined and the session can be placed on one of available host servers based on the predicted logoff time. Different logoff time ranges can be assigned to different servers and sessions can be grouped on the servers according to predicted logoff time.

Abstract: Examples of troubleshooting enterprise information technology problems are described. In some examples, a root cause analysis service configures parameters for a root cause analysis. The parameters include device context features of client devices, which are specified to be analyzed. The root cause analysis service identifies a target issue affecting the client devices and performs the root cause analysis according to the parameters to generate root cause candidate patterns to provide through an interface.

Abstract: The present disclosure relates to dynamic meeting space configuration based on content. A client device can detect an entry of a user into a meeting space and notify a management service of the entry of the user into the meeting space. The client device can receive an access token from the management service and provide an access request for an enterprise resource to an enterprise resource service, where the access request comprises the access token. The client device can receive the enterprise resource from the enterprise resource service. The client device can provide data regarding the security classification of the enterprise resource to an edge device located within the meeting space. The client device can receive, from the edge device, a confirmation that a plurality of internet of things (IoT) devices located within the meeting space have been configured according to the security classification of the enterprise resource.

Abstract: The present disclosure fallback management of managed devices utilizing edge management servers that periodically poll a primary management server. If the primary management server is unreachable, the edge management servers can assume management of a population of managed devices.