Abstract: A thorough method for restricting which operations (processes) can be run by a user on a single workstation computer or by a user on a session in a multi-user environment, such as Microsoft Windows 2000 Terminal Services. By default, all applications (processes) are disallowed. Only explicitly assigned applications (processes) are allowed to run. The method entails running two software modules in user mode, one of which maintains a list of allowed processes for each user and one of which monitors new processes as they are started. When a new process is started the monitoring module sends the process ID to the list module. The list module checks the ID against its list and kills the process if it is not authorized. This way, only processes created by users are validated as apposed to validating all file I/O (processor intensive). This decreases the processing requirements.

Abstract: The invention provides for a method of optimizing the scheduling of program threads within an operating system based on quality objectives, and a system implementing said method.

Abstract: A protocol, or method, for managing the printers and printer connections for users on a computer network based on the user's group membership, user name, terminal name (client name) and computer name. Network administrators can centrally manage the assignment of user's printers and network printer connections on any networked computer system, including Microsoft Windows NT Terminal Server Edition. Installation of required drivers is dynamic with no interaction with the user.