Abstract: Example methods and systems for sensitive information protection during screen sharing on a remote desktop are described. In one example, a computer system may establish a connection between a remote desktop and a client device to allow access to multiple applications supported by the remote desktop. The computer system may obtain configuration information identifying sensitive information that includes at least a particular application from the multiple applications or an information item. Based on the configuration information, the computer system may monitor the particular application or the information item. In response to detecting that (a) screen sharing is enabled for a first user to share a visual representation associated with the remote desktop with a second user and (b) the particular application or the information item being monitored is active, the computer system may perform a remediation action to protect against potential disclosure of the sensitive information.

Abstract: The disclosure provides an approach for on-demand application delivery. Embodiments include determining, by an application delivery component on a computing device, a user logon event. In response to the user logon event, embodiments include receiving, from an application management server separate from the computing device, shortcut information for a set of applications associated with the user and displaying, on the computing device, simulated shortcuts for the set of applications based on the shortcut information. Embodiments include receiving, at the computing device, user input selecting a simulated shortcut of the simulated shortcuts that corresponds to an application of the set of applications.

Abstract: A management service can receive an installation request for a client application from a first client device, where the installation request specifies a second client device on which the client application is to be installed. The management service can identify an operating system associated with the second client device. The management service can request installation of the client application on the second client device from an application catalog service associated with the operating system of the second client device.

Abstract: The disclosure provides techniques for peer to peer communication of a remote display protocol via a real-time communication session between a client device and a remote device. Embodiments include receiving, at a remote device configured to execute a virtual desktop, a request to join a real-time communication (RTC) session with a client device. Embodiments include joining the RTC session with the client device in response to receiving the request. Embodiments include receiving, at the remote device and via the RTC session, data indicative of a remote display protocol for rendering the virtual desktop on a display of the client device. Embodiments include performing, at the remote device, one or more actions based, at least in part, on receiving the data indicative of the remote display protocol.

Abstract: Disclosed are various examples for controlling and managing data access to increase user privacy and minimize intentional or inadvertent misuse of accessed information. Upon detecting a request for an administrator review of a user client device, permission for administrator access can be obtained from a user associated with the user client device. The client device identifier can be obfuscated such that the administrator accessing the data is not provided the actual device identifier. An administrator review session between the user client device and an administrator client device can be established to allow the administrator client device access to the permitted client device data.

Abstract: A scanner redirection method for a remote desktop computer system, wherein the remote desktop computer system includes a client computer and a remote computer, includes the steps of: transmitting at least one request to the client computer to acquire one or more first images from an image capturing device connected to the client computer; upon receiving a compressed video file that was created by the client computer in response to the at least one request and that was then transmitted by the client computer, applying a video decoding algorithm to expand the compressed video file into a decompressed video file having one or more second images; and providing each of the one or more second images to an application running in the remote computer.

Abstract: Encrypting keystroke data in a multi-session-enabled computing device includes receiving a first control message requesting enabling of keystroke encryption for a protected application executing in a first desktop session. The first control message includes application identification information of the protected application. Keystroke encryption is enabled for keystrokes targeting the first desktop session based on receipt of the first control message. Keystroke data sent to the protected application is encrypted while the protected application maintains keyboard focus in the first desktop session. Unencrypted keystroke data is transmitted to another application of a second desktop session while keystroke encryption is enabled for the protected application in the first desktop session.

Abstract: Disclosed are various embodiments for preventing unauthorized access to materials and topics for meeting invitations and meeting recording. A meeting recording and other meeting data is received in association with a meeting identifier. The meeting recording and the meeting data is provided as input to a machine learning engine to generate labelled recording data. A user-specific recording package is generated to include data limited to the at least one meeting section corresponding to a set of security labels approved for a user account.

Abstract: Systems and methods are described for injecting chaos into an application based on a determination that network traffic will be at the application when the chaos is injected. In an example, a gateway can receive requests for applications in a system. The gateway can be configured to periodically insert a header into an application request that causes a proxy agent associated with the requested application to request chaos instructions from a server. When chaos instructions are requested, the server can determine whether and what kind of chaos to inject into the application. The server can send instructions to the proxy agent, which can inject chaos according to the instructions. A monitoring agent can then monitor traffic around the application to determine whether other applications and system components behave appropriately in response to the injected chaos.

Abstract: Systems and methods are described for providing ways to optimize client performance during screen data streaming. Periods of time a client takes to render frames can be tracked and the frame rendering times can be analyzed to determine when the client performance is insufficient. If the client rendering performance is determined to be insufficient, the encoding method can be dynamically modified in ways preferable for improving the client rendering performance. Different approaches can be utilized for calculating metrics and determining when to modify the encoding method, such as linear interpolation or by taking averages of frame rendering times in a moving sample window.

Abstract: Systems and methods are described for configuring a web page using chain of trust. In an example, a web browser can receive a certificate hierarchy from a web server in response to a request for a web page. The web browser can apply a hash algorithm to one or more digital security certificates in the certificate hierarchy. The web browser can send the hash values to a deployment database that stores mappings of known hash values to website configuration settings. The deployment database can respond with the corresponding configuration settings. The web browser can merge the configuration settings and apply them to the web page prior to rendering the web page on a display.

Abstract: Systems and methods are provided for grouping remote desktop sessions on servers in remote desktop environments according to predicted user logoff times so that sessions with similar predicted logoff times can be placed together on the servers, allowing for more efficient utilization of servers. A user can request a virtual desktop session. Once the request is received, a predicted logoff time for the session can be determined and the session can be placed on one of available host servers based on the predicted logoff time. Different logoff time ranges can be assigned to different servers and sessions can be grouped on the servers according to predicted logoff time.

Abstract: Examples of troubleshooting enterprise information technology problems are described. In some examples, a root cause analysis service configures parameters for a root cause analysis. The parameters include device context features of client devices, which are specified to be analyzed. The root cause analysis service identifies a target issue affecting the client devices and performs the root cause analysis according to the parameters to generate root cause candidate patterns to provide through an interface.

Abstract: The present disclosure relates to dynamic meeting space configuration based on content. A client device can detect an entry of a user into a meeting space and notify a management service of the entry of the user into the meeting space. The client device can receive an access token from the management service and provide an access request for an enterprise resource to an enterprise resource service, where the access request comprises the access token. The client device can receive the enterprise resource from the enterprise resource service. The client device can provide data regarding the security classification of the enterprise resource to an edge device located within the meeting space. The client device can receive, from the edge device, a confirmation that a plurality of internet of things (IoT) devices located within the meeting space have been configured according to the security classification of the enterprise resource.

Abstract: The present disclosure fallback management of managed devices utilizing edge management servers that periodically poll a primary management server. If the primary management server is unreachable, the edge management servers can assume management of a population of managed devices.

Abstract: A scanner redirection method for a remote desktop computer system that includes a client computer, a first virtual machine (VM), and a second VM, includes the steps of: receiving by the first VM from the second VM, a first request for an image, wherein the first request for the image is directed to virtual image capturing software in the first VM; in response to the first request for the image being directed to the virtual image capturing software, transmitting by the first VM to the client computer, a second request for the image, wherein the second request for the image is directed to an image capturing device connected to the client computer; and upon receiving the image from the client computer, transmitting by the first VM to the second VM, the image received from the client computer.

Abstract: The present disclosure relates to peer-to-peer (P2P) updating of offline client devices by an online client devices. Client devices can be enrolled with a management service as managed devices. If a device lacks the ability to contact the management service, an online client device that is in communication with the offline client device can deliver updates to software, policies, or other data.

Abstract: The present disclosure relates to peer-to-peer (P2P) secure mode authentication. A secondary client device can request access to an enterprise resource. The secondary client device can establish a P2P communication channel with a primary client device during a P2P secure mode. The secondary client device can determine a proximity of the computing device to the client device and generate proximity data based at least in part on the proximity of the computing device to the client device. The secondary client device can receive an authorization to access the enterprise resource based at least in part on the proximity data and access the enterprise resource by loading the enterprise resource within a sandboxed environment.

Abstract: Systems and methods are described herein for creating enterprise workflows for an enterprise user. In an example, a user can access a workflows tool in a management application. The user can select a trigger event from a list of available trigger events. In response to the selection, the workflows tool can display a list of available actions. The user can select an action. The user can also select other enrolled user devices for executing the workflow. The management application can send the selections to a server. The server can send workflow connectors for the selected trigger event and action to the selected user devices. The workflow connections can include instructions for detecting the trigger event and instructions for performing the action. The management application can install the workflow connectors and begin executing the workflow.

Abstract: Disclosed are various embodiments for loaning an electronic device. In some embodiments, the recipient of the electronic device can check out or check in the electronic device. In other embodiments, the electronic device can be enrolled in a device management system and receive a package file from a directory service. In some other examples, the electronic device can be reimaged using a refresh payload.