Abstract: Priority reversing data traffic for latency sensitive peripherals, including receiving a connection notification and parameters of a peripheral; identifying, from the parameters, that an interface type associated with the peripheral is a bulk interface, the bulk interface associated with a first communication channel between the IHS and the peripheral and having a first latency; determining, based on the bulk interface type and a data traffic priority associated with the peripheral, that the data traffic associated with the peripheral is priority-inversed; in response to a communication request by an application executing on the IHS for communication with the peripheral, determining that the data traffic associated with the peripheral is priority-inversed, and in response, placing the data traffic in a queue associated with a second communication channel defined between the IHS and the peripheral, the second communication channel having a second latency, wherein the first latency is greater than the second la

Abstract: Priority reversing data traffic for latency sensitive peripherals, including receiving a connection notification and parameters of a peripheral; identifying, from the parameters, that an interface type associated with the peripheral is a bulk interface, the bulk interface associated with a first communication channel between the IHS and the peripheral and having a first latency; determining, based on the bulk interface type and a data traffic priority associated with the peripheral, that the data traffic associated with the peripheral is priority-inversed; in response to a communication request by an application executing on the IHS for communication with the peripheral, determining that the data traffic associated with the peripheral is priority-inversed, and in response, placing the data traffic in a queue associated with a second communication channel defined between the IHS and the peripheral, the second communication channel having a second latency, wherein the first latency is greater than the second la

Abstract: Traffic for USB devices that are connected to a USB-C dock can be adaptively prioritized. When the consumption of the bandwidth of a connection between a computing device and a USB-C dock exceeds a threshold, a filter driver can notify a service. The service can update device priority values for the devices that are connected to the USB-C dock based on applications that are accessing the devices. The service can relay the updated device priority values to the filter driver. The filter driver can then attempt to reduce bandwidth consumption by changing device settings of any device with a lower priority value, and then, if changing device settings is insufficient, may attempt to reduce bandwidth consumption by lowering the priority of the device's traffic.

Abstract: The performance of a wireless dock can be enhanced when a USB mass storage device is connected to the wireless dock. Filter drivers can be loaded on the USB stacks of a computing device and the wireless dock to perform functionality for reducing the number of communications that are sent over a wireless network when a USB mass storage device is connected to the computing device via the wireless dock. This reduction in the number of communications can be accomplished without jeopardizing data integrity or compliance with governing protocols.

Abstract: Individual interfaces of USB composite devices can be blocked. When a USB device is connected to a host system, a filter driver can be loaded on top of the USB hub driver and can be configured to monitor I/O control (IOCTL) requests that are sent as part of the enumeration process. When the filter driver detects that the USB device is a USB composite device, it can selectively modify the descriptors that the USB composite device reports based on the number of interfaces that will not be blocked. This selective modification of the descriptors enables individual interfaces to be blocked without filtering the USB composite class driver which in turn minimizes or eliminates any conflicts that may otherwise exist.

Abstract: An overlay optimizer can enhance the functionality of a write filter using an auxiliary overlay. An overlay optimizer can be loaded above a write filter. Based on the configuration of the write filter's overlay, the overlay optimizer can be configured to implement a volatile or persistent auxiliary overlay and then use the auxiliary overlay to selectively cache artifacts. To minimize the likelihood that the consumption of the write filter's overlay will exceed a critical threshold, the overly optimizer can be provided a list of monitored artifacts. The overlay optimizer can employ the list to selectively move monitored artifacts from the write filter's overlay to the auxiliary overlay when the overlay's consumption reaches a threshold. The overlay optimizer may also selectively allow I/O requests generated by particular applications while redirecting I/O requests generated by other applications.

Abstract: Individual interfaces of USB composite devices can be blocked. When a USB device is connected to a host system, a filter driver can be loaded on top of the USB hub driver and can be configured to monitor I/O control (IOCTL) requests that are sent as part of the enumeration process. When the filter driver detects that the USB device is a USB composite device, it can selectively modify the descriptors that the USB composite device reports based on the number of interfaces that will not be blocked. This selective modification of the descriptors enables individual interfaces to be blocked without filtering the USB composite class driver which in turn minimizes or eliminates any conflicts that may otherwise exist.

Abstract: Keyboard dock verification can be performed. A dock report can be created and stored on a keyboard dock as part of the manufacturing process. The dock report can include device information for the child devices of the keyboard dock. When the keyboard dock is attached to a computing device, a dock manager executing on the computing device can query the keyboard dock to retrieve device information for the keyboard dock's child devices. The dock manager can create a dock report from the retrieved device information. The dock manager can also retrieve the dock report that is stored on the keyboard dock and compare it to the dock report that the dock manager created. If the two dock reports match, the dock manager can determine that the keyboard dock is verified and can allow the keyboard dock, including its child devices, to be enumerated on the computing dock.

Abstract: The amount of data that is written to disk is minimized when an overlay optimizer is used in conjunction with a write filter to prevent the overlay from becoming full. An overlay optimizer minifilter can be used to intercept writes that were initiated by the overlay optimizer's request to commit files cached in the write filter's overlay to thereby extract only the modified portions of the files that are actually stored in the overlay. The overlay optimizer minifilter can then write these modified portions of the files, as opposed to the entire files, in the overlay cache. Directory change notifications are also enabled when a write filter is employed as well as in other multi-volume filter environments.

Abstract: Resource utilization can be intelligently managed in desktop virtualization environments. Utilization of client and server resources can be tracked during sessions that are established to access desktops. Machine learning models can be applied to the client and server resource utilization to create policies that define configuration settings for dynamically optimizing sessions based on the current utilization of resources during the sessions.

Abstract: An overlay optimizer can be configured to accelerate the moving of files from an overlay and to atomically move files from the overlay. To accelerate the moving of files from the overlay, the overlay optimizer can continuously monitor the consumption of the overlay. If the consumption exceeds an optimized threshold, the overlay optimizer can cause the file system cache to be invalidated to thereby release handles to any closed files that are still cached. To move files atomically from the overlay, the overlay optimizer can be configured to handle attempts to open a file by determining whether the file is in the process of being moved from the overlay. If so, the overlay optimizer can detect which stage the move process has reached and can dynamically adapt the move process to enable the attempt to open the file to be completed successfully and in a consistent manner.

Abstract: Resource utilization can be intelligently managed in desktop virtualization environments. Utilization of client and server resources can be tracked during sessions that are established to access desktops. Machine learning models can be applied to the client and server resource utilization to create policies that define configuration settings for dynamically optimizing sessions based on the current utilization of resources during the sessions.

Abstract: USB devices can be redirected from hardware isolated VDI clients. When a VDI client is run in a hardware isolated environment, a notification service can also be run in the hardware isolated environment to enable a USB device that is not accessible within the hardware isolated environment to be redirected to a server on which the VDI client has established a remote session. In some cases, an agent can also be employed in the hardware isolated environment to temporarily redirect the USB device to the hardware isolated environment for use in establishing the remote session before the USB device is redirected to the server. Similar techniques can be employed to redirect a USB device to a hardware isolated environment so that the USB device can be accessed by an application running in the hardware isolated environment.

Abstract: Adaptive state detection can be provided for conferencing solutions. A monitoring service can be executed on the computing system employed by each participant to access a conference. The monitoring service on a presenter computing system can detect when the presenter has commenced sharing his/her screen or application and can identify a schema for performing state detection. The monitoring service shares the schema with the monitoring services on the listener computing systems. As the screen content is shared, the monitoring services can implement the schema to cause state notifications to be provided to the monitoring service on the presenter computing system. The state notifications can represent whether the listener computing systems are receiving the shared screen content and/or to what extent the shared screen content is delayed.

Abstract: Keyboard dock verification can be performed. A dock report can be created and stored on a keyboard dock as part of the manufacturing process. The dock report can include device information for the child devices of the keyboard dock. When the keyboard dock is attached to a computing device, a dock manager executing on the computing device can query the keyboard dock to retrieve device information for the keyboard dock's child devices. The dock manager can create a dock report from the retrieved device information. The dock manager can also retrieve the dock report that is stored on the keyboard dock and compare it to the dock report that the dock manager created. If the two dock reports match, the dock manager can determine that the keyboard dock is verified and can allow the keyboard dock, including its child devices, to be enumerated on the computing dock.

Abstract: Cache hits are increased for URBs that target a redirected USB device. When a virtual bus driver in a VDI environment queues an IRP for an URB that targets the redirected USB device, it can ensure that the IRP and therefore the URB is completed on the same processor that originated the URB. This can be accomplished in both NUMA and non-NUMA multiprocessor environments.

Abstract: A security client can provide security features in write filter environments. To prevent improper modifications to a protected volume, the security client can be employed to differentiate between direct I/O requests and reparsed I/O requests that are directed to a shadow volume and to block any direct I/O requests. Alternatively or additionally, the security client can be configured to determine whether an I/O request that is directed to the shadow volume targets an artifact in the write filter's exclusion list, and if not, block the I/O request. Alternatively or additionally, the security client can be configured to monitor registry operations to determine whether a modifying registry operation targets the write filter's persistent shadow registry hive, and if so, allow the modifying registry operation only if it targets a registry key in the write filter's exclusion list.

Abstract: USB devices can be redirected from hardware isolated VDI clients. When a VDI client is run in a hardware isolated environment, a notification service can also be run in the hardware isolated environment to enable a USB device that is not accessible within the hardware isolated environment to be redirected to a server on which the VDI client has established a remote session. In some cases, an agent can also be employed in the hardware isolated environment to temporarily redirect the USB device to the hardware isolated environment for use in establishing the remote session before the USB device is redirected to the server. Similar techniques can be employed to redirect a USB device to a hardware isolated environment so that the USB device can be accessed by an application running in the hardware isolated environment.

Abstract: A hook driver and a UWP load modifier can be employed on a Windows device to modify the process of loading UWP applications so that both UWP and Win32 applications can be run in kiosk mode without needing to run Windows Explorer in a typical manner. To accomplish this, the UWP load modifier can implement a proxy function that is called when the UWP loader attempts to launch a UWP application. In some configurations, when the proxy function is called, it can start Windows Explorer, cause the UWP application to be launched while Windows Explorer is running and then stop Windows Explorer once the UWP application is launched. In other configurations, when the proxy function is called, it can cause the UWP application to be launched in a separate desktop in which Windows Explorer is running and then, after it is launched, move the UWP application to the default desktop.

Abstract: A security client can efficiently authenticate an application during I/O request handling by maintaining a white list that identifies processes that have been created for authenticated applications. The security client can register to be notified when a process is being created. When such a notification is received, the security client can authenticate the application for which the process is being created and then add an entry to the white list that includes the process identifier of the process being created. Then, when the process subsequently generates I/O requests, the security client can use the white list to quickly determine that the process pertains to an authenticated application and allow the I/O requests to modify protected artifacts.