Abstract: Systems and methods for unlocking a device remotely from a server, where the device is connected locally to a client, and the server is remote to the client and the device, are provided in accordance with various aspects of the subject technology. In one aspect, a system includes a remote unlocking module configured to monitor, at the server, traffic between a secure application and a virtual bus driver for at least one string descriptor request associated with switching an interface of the device from a first interface type to a second interface type, and to intercept the at least one string descriptor request. The system further includes an agent configured to receive the intercepted at least one string descriptor request, and to send the intercepted at least one string descriptor request from the server to the client over a network.

Abstract: The deployment of a driver or an application on a client device having a write-filter is described. A deployment configuration file is obtained, wherein the deployment configuration file includes a plurality of deployment entries each having information for deployment of one of a driver and an application. A first deployment entry is retrieved from the deployment configuration file, and the deployment configuration file is modified to remove the first deployment entry from the deployment configuration file. The modified deployment configuration file is stored in a location of a memory of the client device that is exempt from a write-filter restriction, wherein the write-filter restriction prohibits a file stored on the client device with the write-filter enabled from persisting across a reboot of the client device. The one of the driver and the application of the first deployment entry is then deployed on the client device while the write-filter is disabled.

Abstract: The deployment and updating of applications and drivers on a client device having a write-filter is described. A first deployment extensible markup language (XML) configuration file is obtained for deploying a first application or driver at the client device. A first application or driver is deployed on the client device based on the first deployment XML configuration file, while the write-filter of the client device is disabled. The write-filter is enablable to prohibit a file stored on the client device with the write-filter enabled from persisting across a reboot of the device. Following the deployment, automatic updating is performed by determining whether an autoupdate is available, obtaining a second deployment XML configuration file for updating the first application or driver, and updating the first application or driver based on the second deployment XML configuration file, while the write-filter is disabled. The automatic updating may be repeated.

Abstract: Examples of methods, systems, apparatus, and machine-readable storage media are provided to facilitate access and control of a remote desktop of a remote machine by a web browser at a client device through a transcoding server without installing proprietary plug-ins or protocols on the client device. A transcoding server may translate user input requests from a web browser into input calls compatible with a remote desktop display protocol. The transcoding server may receive remote desktop drawing commands from the remote machine and translate the remote desktop drawing commands into web browser drawing updates compatible with the web browser. A transcoding server may communicate with a web browser via HTTP and communicate with a remote machine via a remote desktop display protocol. A web browser may be an HTML5 browser. A transcoding server may send drawing coordinates to the web browser via an HTTP header and may use long polling.

Abstract: Managing access restriction to a device is provided. The operations may include determining that a device stack corresponds to a device that is remote to the server and is connected locally to a client that is remote to the server; attaching a device access restriction object on top of the device stack; receiving, at the device access restriction object, an access request to the device; and determining, at the device access restriction object, whether the access request is allowed access to the device.

Abstract: Managing access requests to a device is provided. The operations may include determining that a device stack corresponds to the device that is remote to the server and is connected locally to a client that is remote to the server, the device stack comprising one or more device objects; attaching a device access restriction object on top of the device stack; facilitating restriction of access to the one or more device objects from sessions different from a session associated with the device; receiving, at the device access restriction object, an access request to the device; and determining, at the device access restriction object, whether the access request is allowed access to the device. The access request may be allowed if a session from which the access request is received is a predetermined session.

Abstract: Systems and methods for facilitating unlocking a device connected locally to a client, utilizing a server located remotely from the client and the device, are provided in accordance with various aspects of the subject technology. In one aspect, a system includes a proxy configured to receive, at the client, at least one string descriptor request from the server over a network, where the at least one string descriptor request is associated with switching an interface of the device from a first interface type to a second interface type. The system further includes a stub driver configured to receive the at least one string descriptor request from the proxy, and to direct the at least one string descriptor request to the device.

Abstract: Examples of methods, systems, apparatus, and machine-readable storage media are provided to facilitate access and control of a remote desktop of a remote machine by a web browser at a client device through a transcoding server without installing proprietary plug-ins or protocols on the client device. A transcoding server may translate user input requests from a web browser into input calls compatible with a remote desktop display protocol. The transcoding server may receive remote desktop drawing commands from the remote machine and translate the remote desktop drawing commands into web browser drawing updates compatible with the web browser. A transcoding server may communicate with a web browser via HTTP and communicate with a remote machine via a remote desktop display protocol. A web browser may be an HTML5 browser. A transcoding server may send drawing coordinates to the web browser via an HTTP header and may use long polling.

Abstract: Examples of methods and apparatus are provided for state-based provisioning of a local client having a windows-based embedded image. The apparatus may include a retrieval module of the local client that facilitates locating a remote repository server containing a configuration file and that facilitates obtaining the configuration file from the remote repository server. The apparatus may include a reset check module of the local client that determines whether to reset a previous state of the image based on the configuration file. The apparatus may include an apply settings module of the local client that applies, to the image, one of a first configuration change and a second configuration change based on the determination. The first configuration change may include a configuration update to the previous state of the image. The second configuration change may include a change to the image independent of the previous state of the image.

Abstract: The installation of a disk image onto a client device having a hardware platform of a particular class is described, where the disk image includes a driver-store having a plurality of drivers for a plurality of hardware platforms. The disk image is stored on the client device, and at least one driver from the driver-store is installed on the client device based on the hardware platform of the client device. A device driver configuration file is retrieved, wherein the device driver configuration file identifies one or more drivers associated with a class of hardware platforms, and identifies one or more common drivers shared by two or more of the plurality of hardware platforms. Drivers identified in the device driver configuration file and that are neither associated with the class of the client device, nor associated with the platform of the client device, are removed from the driver-store.

Abstract: The deployment and updating of applications and drivers on a client device having a write-filter is described. A first deployment extensible markup language (XML) configuration file is obtained for deploying a first application or driver at the client device. A first application or driver is deployed on the client device based on the first deployment XML configuration file, while the write-filter of the client device is disabled. The write-filter is enablable to prohibit a file stored on the client device with the write-filter enabled from persisting across a reboot of the device. Following the deployment, automatic updating is performed by determining whether an autoupdate is available, obtaining a second deployment XML configuration file for updating the first application or driver, and updating the first application or driver based on the second deployment XML configuration file, while the write-filter is disabled. The automatic updating may be repeated.

Abstract: An example of a method for facilitating split booting includes executing a base system image file of a system, initializing components of the first computing device, loading the extended system image file, and executing the extended system image file from the first computing device without booting the first computing device. The base system image file and an extended system image file of the system are built from a single executable system image file of the system. An example of a method for building system images includes building, as a single executable file, a system image file of a system and dividing the system image file into a base system image file and an extended system image file. An example of a machine-readable storage medium having code for carrying out the method, an apparatus having the machine-readable storage medium, and an apparatus having means for carrying out the method is disclosed.

Abstract: Computing device deployment and configuration using a mass storage device is provided. A generic computing device is provided to a customer or end user. A mass storage device is used to distribute configuration information to the generic computing device. The configuration information includes customer-specified or ordered software applications or other features. The configuration information can also include updates to the computing device system software. The customer or end user couples the mass storage device to the generic computing device in order to load the configuration information into the computing device. After the configuration information is loaded, the computing device is configured for the customer's use. Further features, such as creating customized images, are also provided.

Abstract: Restricting access to a device from a server, where the device is remote to the server and is connected locally to a client that is remote to the server, is described. The operations may include facilitating interception, at the server, of a function call to create a symbolic link; facilitating determination that the intercepted function call to create the symbolic link corresponds to a device object associated with the device that is remote to the server and is connected locally to a client that is remote to the server; facilitating obtaining configuration data indicating whether access to the device is to be restricted; and facilitating creation of the symbolic link in a local namespace of an object manager namespace of the server, upon obtaining configuration data indicating that access to the device is to be restricted.

Abstract: A method provides network driver injection into a target image to transform the target image to be compatible with one or more source machines, for facilitating operating system streaming over a network. The method may include: facilitating access to a source system registry file of a source machine; facilitating access to a target system registry file of the target image, without copying the target image; determining whether source network interface cards of the source machine are compatible with the target image; and if the source network interface cards are not compatible with the target image, performing network interface driver injection into the target image. The target image may include an operating system. A machine-readable storage medium and apparatus are provided. A method is described for building a program for providing network driver injection into a target image to transform the target image to be compatible with computing machines.

Abstract: System and method for setting up a data communication are disclosed. Method includes facilitating authenticating a module of a client computing device for the data communication. Method includes facilitating authenticating a module of a server for the data communication. Method includes authenticating an encoding for a network-based procedure call interface for the server. Method includes binding the network-based procedure call interface to a protocol for a gateway interface of the server. Method includes facilitating verifying that a message size of a message transmitted to a module of the client computing device or to a module of the server is within a message size range. Method includes facilitating creating a tunnel to a module of the server, wherein the tunnel is for the data communication. Method includes facilitating creating a channel within the tunnel, wherein the channel is for the data communication.

Abstract: System and method for communicating data are disclosed. Method includes facilitating receiving, from a module of a client computing device, a first message in a universal format. Method includes generating a first encoded message by encoding the first message into a network-based procedure call interface associated with a server, based on a stored encoding for the network-based procedure call interface. Method includes facilitating transmitting the first encoded message to a module of the server. Method includes facilitating receiving, from a module of the server, a second message encoded in the network-based procedure call interface associated with the server. Method includes generating a second decoded message by decoding the second message into the universal format, based on the stored encoding for the network-based procedure call interface. Method includes facilitating transmitting the second decoded message to a module of the client computing device.

Abstract: A method for configuring a thin client connected to a communications network includes the thin client sending a request for a network address to an address server. The address server sends an assigned network address back to the thin client together with a location of a configuration server. The thin client sends a request for configuration information to the configuration server. The request for configuration information includes information on the thin client. The configuration server generates a configuration file containing configuration information based on the received thin client information. The configuration file is then sent by the configuration server to the thin client, which uses the configuration file for configuration.

Abstract: A system includes a module to determine a dependency between at least one operating system and at least one application, an interface module to permit an independent selection of an operating system image and an application image, a service to stream a first portion of the application image, and to stream, on-demand, a second portion of the application image, and a memory to store at least one of the operating system image and the application image. The at least one application is compatible with the at least one operating system. Methods and machine-readable medium, and hardware apparatus are provided.

Abstract: Systems and methods for facilitating unlocking a device connected locally to a client, utilizing a server located remotely from the client and the device, are provided in accordance with various aspects of the subject technology. In one aspect, a system includes a proxy configured to receive, at the client, at least one string descriptor request from the server over a network, where the at least one string descriptor request is associated with switching an interface of the device from a first interface type to a second interface type. The system further includes a stub driver configured to receive the at least one string descriptor request from the proxy, and to direct the at least one string descriptor request to the device.