Abstract: Display filters, including color filters, can be enabled in collaborative environments. When a user of an end user device desires to have a color filter applied, a windowing system or other source of graphics data can render a frame via a graphics driver. Once the frame is rendered, the graphics driver can enable a collaboration tool to capture the frame and share it via a collaboration solution. Separately from the rendering of the frame, the windowing system can leverage a color filter module to directly apply a color filter to the frame. Once the color filter is applied, the windowing system can cause the frame to be displayed locally. Because the graphics driver is not used to apply the color filter, the color filter will not be applied to any frame that the collaboration tool captures and shares.

Abstract: Display filters, including color filters, can be enabled in collaborative environments. When a user of an end user device desires to have a color filter applied, a windowing system or other source of graphics data can render a frame via a graphics driver. Once the frame is rendered, the graphics driver can enable a collaboration tool to capture the frame and share it via a collaboration solution. Separately from the rendering of the frame, the windowing system can leverage a color filter module to directly apply a color filter to the frame. Once the color filter is applied, the windowing system can cause the frame to be displayed locally. Because the graphics driver is not used to apply the color filter, the color filter will not be applied to any frame that the collaboration tool captures and shares.

Abstract: The loading of a privileged application can be selectively blocked. An application restrictor can be configured to register for notifications whenever an application image is loaded. Then, whenever the application restrictor receives a notification, the application restrictor can evaluate whether the application image that is being loaded is a privileged application. If so, the application restrictor can evaluate the current process's parent tree to determine if an untrusted application is present at any level of the parent tree. The application restrictor will then allow the privileged application to load only when all applications in the parent tree are trusted applications. In this way, untrusted applications can be blocked from accessing a privileged application without blocking trusted applications from accessing the privileged application.

Abstract: The loading of a privileged application can be selectively blocked. An application restrictor can be configured to register for notifications whenever an application image is loaded. Then, whenever the application restrictor receives a notification, the application restrictor can evaluate whether the application image that is being loaded is a privileged application. If so, the application restrictor can evaluate the current process's parent tree to determine if an untrusted application is present at any level of the parent tree. The application restrictor will then allow the privileged application to load only when all applications in the parent tree are trusted applications. In this way, untrusted applications can be blocked from accessing a privileged application without blocking trusted applications from accessing the privileged application.