Abstract: Disclosed are various approaches for authenticating a user through a voice assistant device and creating an association between the device and a user account. The request is associated with a network or federated service. A user account can be implicitly authenticated based on proximity of a client device to the voice assistant device. An association between the user account and the voice assistant device can then be created.

Abstract: Disclosed are various examples for facilitating network speed testing on behalf of a client device that is in communication with a management service. A network testing profile can be obtained which specifies a network testing schedule for execution of a network test with a network testing endpoint. The client device can generate a test result associated with the network testing schedule based upon an exchange of at least one test packet with the network testing endpoint. In an instance in which it is determined that a network speed between the client device and the network testing endpoint fails to meet a threshold, an amount of network bandwidth usage by the client device can be reduced.

Abstract: Disclosed are various examples for audio data leak prevention using user and device contexts. In some examples, a voice assistant device can be connected to a remote service that provides enterprise data to be audibly emitted by the voice assistant device. In response to a request for the enterprise data being received from the voice assistant device, an audio signal can be generated that audibly broadcasts the enterprise data. The audio signal can be generated to audibly redact at least a portion of the enterprise data based at least in part on a mode of operation of the voice assistant device. The voice assistant device can be directed to emit the enterprise data through a playback of the audio signal.

Abstract: A first server can generate user profiles and receive requests from user devices for enrollment in a first server-managed system that includes user groups. The first server can provide a unique key to a user device during an enrolment process based on a user group the user device is assigned to. The first server can include an enrollment notification for the user device in a first notification transmitted to a messaging service. The messaging service can transmit a second notification to the user device, and the user device can request a user profile from a second server based on second server access information included in the second notification. The second server can use the unique key to access user profile information which it transmits to the user device based on the request. The user device can access the user profile from the profile information using the unique key.

Abstract: Disclosed are various embodiments for performing a backup a device and/or performing a wipe or removal of data from a device enrolled with a device management service. In various embodiments, a wipe request is generated by a management service and transmitted to a client device. The wipe request includes commands to backup enterprise data for a particular application, verify that the management service has received the enterprise data, and remove the enterprise data from the client device. The management service determines that the enterprise data is received from the client device and transmits a confirmation that the management service has received the enterprise data. The confirmation causes the client device to remove the enterprise data from the client device.

Abstract: Disclosed are various approaches for sharing uniform resource locators (URLs) and enforcing browser restrictions along with a shared URL. Browser restrictions can be identified by appending commands to the shared URL that instruct the receiving browser to activate certain browser restrictions. Browser restrictions can also be enforced using a URL restriction validator, which is a server process that can facilitate enforcement of browser restrictions along with a shared URL.

Abstract: Disclosed are various embodiments that relate to a system or a method for managing individual actions. In one embodiment, among others, a system includes a client device and program instructions executable in the client device. The program instructions, when executed, cause the client device to identify an action that stores an image in a memory associated with the client device, where the action is executed by way of the client computing device. The program instructions also cause the client device to generate image tags that describe the image. The client device can determine that the image has enterprise content based at least in part on the image tags and perform an enterprise action on the image. The enterprise action can be based on an enterprise category associated with the image tags and an enterprise policy.

Abstract: Disclosed are aspects of a presenter server application that can broker requests to present contents of presenter client applications. The presenter client applications can join a presenter session and make requests to display content on a display device coupled to the presenter server device.

Abstract: Various examples are disclosed for predictive allocation of computing resources based on the predicted location of a user. A computing environment can generate a predictive usage model that predicts a location of a user and allocate computing resources, such as VDI sessions or VMs, to a host device that optimizes latency to the predicted location.

Abstract: Disclosed are various approaches for authenticating a user through a voice assistant device and creating an association between the device and a user account. The request is associated with a network or federated service. A user account can be implicitly authenticated based on proximity of a client device to the voice assistant device. An association between the user account and the voice assistant device can then be created.

Abstract: Disclosed are various embodiments that relate to a system or a method for managing individual actions. In one example, among others, a system includes a client device and program instructions executable in the client device. The program instructions, when executed, cause the client device to identify an action that stores an image in a memory associated with the client device, where the action is executed by way of the client computing device. The program instructions also cause the client device to generate an image tag that describe the image. The client device can determine that the image has enterprise content based on the image tag and determine that a policy applies to the enterprise content. An enterprise action can be performed based on the enterprise policy.

Abstract: Disclosed are various embodiments for restricting usage of a mobile device when a user is driving a vehicle. In one embodiment, it is determined that a mobile device is in use by a driver of an active vehicle. A functionality of the mobile device is then restricted based at least in part on determining that the mobile device is in use by the driver of the active vehicle. For example, a touch screen of the mobile device may be disabled, and the use of a hands-free interface may be made mandatory.

Abstract: Disclosed are various examples for facilitating network speed testing on behalf of a client device that is associated with an enterprise. In a client device that can be a managed device managed by a management service, a network testing profile can be obtained which specifies a testing schedule as well as a network testing endpoint with which network testing can be conducted. Results of the network speed test can be transmitted to the management service, which can determine if the network speed implicates a compliance rule associated with the client device or an enterprise with which the client device is associated.

Abstract: Disclosed are various embodiments for performing a backup a device and/or performing a wipe or removal of data from a device enrolled with a device management service. In various embodiments, a wipe request is generated by a management service and transmitted to a client device. The wipe request includes commands to backup enterprise data for a particular application, verify that the management service has received the enterprise data, and remove the enterprise data from the client device. The management service determines that the enterprise data is received from the client device and transmits a confirmation that the management service has received the enterprise data. The confirmation causes the client device to remove the enterprise data from the client device.

Abstract: Disclosed are various embodiments for restricting usage of a mobile device when a user is driving a vehicle. In one embodiment, it is determined that a mobile device is in use by a driver of an active vehicle. A functionality of the mobile device is then restricted based at least in part on determining that the mobile device is in use by the driver of the active vehicle. For example, a touch screen of the mobile device may be disabled, and the use of a hands-free interface may be made mandatory.

Abstract: Disclosed are various embodiments that relate to a system or a method for managing individual actions. In one embodiment, among others, a system includes a client device and program instructions executable in the client device. The program instructions, when executed, cause the client device to identify an action that stores an image in a memory associated with the client device, where the action is executed by way of the client computing device. The program instructions also cause the client device to generate image tags that describe the image. The client device can determine that the image has enterprise content based at least in part on the image tags and perform an enterprise action on the image. The enterprise action can be based on an enterprise category associated with the image tags and an enterprise policy.

Abstract: Disclosed are various examples of transmitting management commands to a device using a short message service (SMS) message or voice call. A device may lack network connectivity with a management service. Network capabilities of the device may be disabled or impaired. The management service can generate a SMS message or voice call that includes the management command. The SMS message or voice call can be transmitted to the client device over a cellular network. The SMS message or voice call can include an authentication string with which the authenticity of the SMS message or voice call can be verified. The device can then execute the management command.

Abstract: Remotely causing a backup and a wipe of data from a device enrolled with a management service is described. A client device may receive a communication generated from a remote computing device that causes performance of a backup of data associated with predefined criteria and performance of a wipe of the data associated with the predefined criteria. The device may perform the backup of the data by communicating the data to the remote computing device over a network. Further, the device may perform the wipe of the data by removing the data associated with the predefined criteria in response to a confirmation that the data has been received by the remote computing device. Data not associated with the predefined criteria may be retained on the client device.

Abstract: In an example implementation of the disclosed technology, a method includes accessing, by a management agent associated with a client device, a profile associated with a requested resource, wherein the profile comprises at least one profile criterion. The method also includes evaluating the profile criterion based, at least in part, on status information associated with the client device to determine any processing restrictions associated with the requested resource. The method also includes, responsive to receiving an indication that the resource is subject to a server-device processing restriction, requesting access to the resource from a remote server and receiving an instance of a user interface for interacting with the resource.

Abstract: Disclosed are various examples for facilitating network speed testing on behalf of a client device that is associated with an enterprise. In a client device that can be a managed device managed by a management service, a network testing profile can be obtained which specifies a testing schedule as well as a network testing endpoint with which network testing can be conducted. Results of the network speed test can be transmitted to the management service, which can determine if the network speed implicates a compliance rule associated with the client device or an enterprise with which the client device is associated.