Abstract: Disclosed are various implementations for distributing and installing packages in response to user logon events. A logon event associated with a user account is detected for a client device. A query containing a respective user account identifier is sent to a provisioning service to retrieve a set of packages to install on the client device. The set of packages are received from the provisioning service and installed on the client device.

Abstract: Disclosed are various implementations for distributing and installing packages in response to user logon events. A logon event associated with a user account is detected for a client device. A query containing a respective user account identifier is sent to a provisioning service to retrieve a set of packages to install on the client device. The set of packages are received from the provisioning service and installed on the client device.

Abstract: Various examples are described for operating system update management. In some examples, an OS update schedule is generated. The OS update schedule specifies an OS update for a plurality of client devices. A command to deploy the OS update is transmitted to a subset of the client devices. Behavior data is received from the client devices that have applied the OS update. An update incompatibility identified using the behavior data. Instructions to fix the update incompatibility are transmitted to certain client devices.

Abstract: Disclosed are various approaches to automate vulnerability assessment implement policy-based mitigation. A plurality of vulnerability records from respective ones of a plurality of vulnerability feeds are aggregated. Each of the plurality of vulnerability records are stored in a standardized format. A plurality of enterprise-specific severity scores are generated by calculating an enterprise-specific severity score for each of the plurality of vulnerability records. Then, a web page can be created that includes at least a subset of the plurality of enterprise-specific severity scores and respective ones of the plurality of vulnerability records.

Abstract: Disclosed are various approaches to automate vulnerability assessment implement policy-based mitigation. A plurality of vulnerability records from respective ones of a plurality of vulnerability feeds are aggregated. Each of the plurality of vulnerability records are stored in a standardized format. A plurality of enterprise-specific severity scores are generated by calculating an enterprise-specific severity score for each of the plurality of vulnerability records. Then, a web page can be created that includes at least a subset of the plurality of enterprise-specific severity scores and respective ones of the plurality of vulnerability records.

Abstract: Disclosed are various examples for an architecture to distribute Win32 applications. In one example, a specification of a Win32 application and deployment options are received. A specification of target client devices is also received. Respective management agents executed in individual target client devices are directed to install the Win32 application according to the deployment options. Status information from the respective management agents indicating installation success or failure is received. A report is generated based at least in part on the status information.

Abstract: Disclosed are various implementations for distributing and installing packages in response to user logon events. A logon event associated with a user account is detected for a client device. A query containing a respective user account identifier is sent to a provisioning service to retrieve a set of packages to install on the client device. The set of packages are received from the provisioning service and installed on the client device.

Abstract: Disclosed are various approaches to automate vulnerability assessment implement policy-based mitigation. A plurality of vulnerability records from respective ones of a plurality of vulnerability feeds are aggregated. Each of the plurality of vulnerability records are stored in a standardized format. A plurality of enterprise-specific severity scores are generated by calculating an enterprise-specific severity score for each of the plurality of vulnerability records. Then, a web page can be created that includes at least a subset of the plurality of enterprise-specific severity scores and respective ones of the plurality of vulnerability records.

Abstract: Disclosed are various examples for downloading data objects by enforcing a threshold amount of allocated data. A file sync application determines which data objects to download to the client device such that the total amount of downloaded data meets or falls below the threshold amount of allocated data. File system entries for undownloaded data objects are also downloaded and stored in a file system of the client device. If a process attempts to access an undownloaded data object, the file sync application downloads the data object and evicts another data object, if necessary, according to the threshold amount of allocated data.

Abstract: Disclosed are various examples for an architecture to distribute Win32 applications. In one example, a specification of a Win32 application and deployment options are received. A specification of target client devices is also received. Respective management agents executed in individual target client devices are directed to install the Win32 application according to the deployment options. Status information from the respective management agents indicating installation success or failure is received. A report is generated based at least in part on the status information.

Abstract: Disclosed are various examples for downloading data objects by enforcing a threshold amount of allocated data. A file sync application determines which data objects to download to the client device such that the total amount of downloaded data meets or falls below the threshold amount of allocated data. File system entries for undownloaded data objects are also downloaded and stored in a file system of the client device. If a process attempts to access an undownloaded data object, the file sync application downloads the data object and evicts another data object, if necessary, according to the threshold amount of allocated data.