Abstract: A server implementing a service receives a request from a client computing system and stores the request in a cache, along with a correlation identifier. The server returns a response to the request, along with a correlation identifier (ID). When a trigger input is received, indicating that a problem has been encountered at the client computing system, a diagnostic data generation system on the service accesses the cache and generates diagnostic data for the request corresponding to the correlation ID. The diagnostic data corresponding the correlation ID is then provided to a support data storage system where it can be combined with diagnostic data from the client computing system, to be accessed by a support computing system. This reduces consumption of computing resources, such as processing time, memory initialization and/or network bandwidth.

Abstract: A server implementing a service receives a request from a client computing system and stores the request in a cache, along with a correlation identifier. The server returns a response to the request, along with a correlation identifier (ID). When a trigger input is received, indicating that a problem has been encountered at the client computing system, a diagnostic data generation system on the service accesses the cache and generates diagnostic data for the request corresponding to the correlation ID. The diagnostic data corresponding the correlation ID is then provided to a support data storage system where it can be combined with diagnostic data from the client computing system, to be accessed by a support computing system. This reduces consumption of computing resources, such as processing time, memory initialization and/or network bandwidth.

Abstract: A server implementing a service receives a request from a client computing system and stores the request in a cache, along with a correlation identifier. The server returns a response to the request, along with a correlation identifier (ID). When a trigger input is received, indicating that a problem has been encountered at the client computing system, a diagnostic data generation system on the service accesses the cache and generates diagnostic data for the request corresponding to the correlation ID. The diagnostic data corresponding the correlation ID is then provided to a support data storage system where it can be combined with diagnostic data from the client computing system, to be accessed by a support computing system. This reduces consumption of computing resources, such as processing time, memory utilization and/or network bandwidth.

Abstract: A server implementing a service receives a request from a client computing system and stores the request in a cache, along with a correlation identifier. The server returns a response to the request, along with a correlation identifier (ID). When a trigger input is received, indicating that a problem has been encountered at the client computing system, a diagnostic data generation system on the service accesses the cache and generates diagnostic data for the request corresponding to the correlation ID. The diagnostic data corresponding the correlation ID is then provided to a support data storage system where it can be combined with diagnostic data from the client computing system, to be accessed by a support computing system. This reduces consumption of computing resources, such as processing time, memory utilization and/or network bandwidth.

Abstract: An administrative authority for virtual machines can send one or more delegated policy settings to a virtual machine manager. The virtual machine manager can in turn send management instructions that include the one or more policy settings to one or more virtual machine hosts. As such, a user's request for a virtual machine at a virtual machine host can be granted or denied based on the delegated policy settings. The policy settings can be updated periodically, and can include additional information about starting, stopping, expiring, saving, or even deleting virtual machines by particular users, as well as users accessing from particular locations. In addition, an agent operating at the virtual machine host can monitor and report virtual machine activity, to ensure unauthorized virtual machines are quickly stopped and reviewed until authorized.

Abstract: The embodiments contemplate a system and method for a restriction of virtual machines for a group of one or more users. A predefined policy may include a restriction related to the group, as well as a measure of enforcement to initiate in the event of a violation of the restriction. The measure of enforcement may include a warning message or denial of resources. The restriction may be resource-based, time-based, machine-based, or a combination. The restriction may be a group-level restriction, in which the entire group actions are monitored, or a user-level restriction, in which the user's actions are monitored. In the event a user is assigned to more than one group, the policies of each group are assigned a priority level. The priority level dictates the restriction as well as the measure of enforcement.

Abstract: An administrative authority for virtual machines can send one or more delegated policy settings to a virtual machine manager. The virtual machine manager can in turn send management instructions that include the one or more policy settings to one or more virtual machine hosts. As such, a user's request for a virtual machine at a virtual machine host can be granted or denied based on the delegated policy settings. The policy settings can be updated periodically, and can include additional information about starting, stopping, expiring, saving, or even deleting virtual machines by particular users, as well as users accessing from particular locations. In addition, an agent operating at the virtual machine host can monitor and report virtual machine activity, to ensure unauthorized virtual machines are quickly stopped and reviewed until authorized.

Abstract: The embodiments contemplate a system and method for a restriction of virtual machines for a group of one or more users. A predefined policy may include a restriction related to the group, as well as a measure of enforcement to initiate in the event of a violation of the restriction. The measure of enforcement may include a warning message or denial of resources. The restriction may be resource-based, time-based, machine-based, or a combination. The restriction may be a group-level restriction, in which the entire group actions are monitored, or a user-level restriction, in which the user's actions are monitored. In the event a user is assigned to more than one group, the policies of each group are assigned a priority level. The priority level dictates the restriction as well as the measure of enforcement.