Abstract: A gateway device comprising a processor and a memory, the processor is configured to receive a login operation request from an external endpoint, the login operation request including a user identifier and user login credentials of a user. The processor is also configured to construct an authentication request including the user identifier and the user login credentials and transmit the authentication request to an internal directory service. The processor is further configured to receive an authentication response from the internal directory service, the authentication response including an authentication identifier for the user, and store the authentication identifier in the memory, the authentication identifier for use by the processor in pass-through impersonation of the user.

Abstract: In an embodiment, a method includes configuring policy settings, storing the configured policy settings in a common document format and consuming the common document format to implement the configured policy settings. Policy settings are stored in a settings document having a common document format that defines how to implement policy operations on the policy settings, the policy operations including configuration, application, analysis, reporting and auditing. The settings document is processed to implement any of the policy operations.

Abstract: In an embodiment, a method includes receiving a group policy object from an active directory, combining the group policy object and logic for using the group policy object with a virtualized application to provide a virtualized group policy object and delivering the virtualized application and the virtualized group policy object to a targeted computer system.

Abstract: Actions are performed upon a virtualized application based on the geolocation of the endpoint device derived from the Internet connected IP address or connected GPS device. Actions include reporting to a server database, alerting a specified user, or removing end-user access to the virtual application by uninstalling or installing the virtual application based on predefined geofences.

Abstract: In an example embodiment, workflow based procedures are authored, tested and converted to a collection of resource automation scripts with orchestration rules. The scripts and rules are uploaded to a cloud-based provisioning service. The cloud-based provisioning service follows the orchestration rules to coordinate with a provisioning agent installed on a VM host, storage area network (SAN) or other network device to execute a sequence of scripts to provision or tear down resources.

Abstract: A method for managing group policy settings at a client computer system includes storing group policy settings in a local policy cache of the client computer system and applying the group policy settings from the local policy cache to the client computer system. The group policy settings may be acquired from a policy portal over a network connection and the local policy cache of the client computer system updated with the acquired group policy settings. A policy portal may be queried over a network connection to determine an age of group policy settings stored at the policy portal. If the group policy settings in the local policy cache are older than the group policy settings stored at the policy portal, the group policy settings are acquired from the policy portal for updating the local policy cache. If the local policy cache does not contain group policy settings, group policy settings may be acquired from a policy portal for updating the local policy cache.