Abstract: Systems and methods are disclosed for estimating and updating the capacity associated with resources in a virtualized computing environment. A capacity estimation value may be stored in computer memory. The capacity estimation value may estimate how many concurrent sessions a resource in the virtualized computing environment has workload capacity to desirably handle. The system may monitor one or more resource consumption metrics of the resource on an ongoing basis. The capacity estimation value may be updated based on, inter alia, the monitoring. The capacity estimation value may be used when a request is received to create a new session in the resource.

Abstract: One or more aspects of this disclosure may relate to using a configurable server farm preference for an application, desktop or other hosted resource. Additional aspects may relate to moving server farm workloads based on the configurable server farm preference. Further aspects may relate to performing reboot cycles, a reboot schedule and on-demand rebooting. Yet further aspects may relate to staggering individual machine reboot operations over a specified period of time and performing reboot operations such that some machines are available for user sessions during a reboot cycle.

Abstract: One or more aspects of this disclosure may relate to using a configurable server farm preference for an application, desktop or other hosted resource. Additional aspects may relate to moving server farm workloads based on the configurable server farm preference. Further aspects may relate to performing reboot cycles, a reboot schedule and on-demand rebooting. Yet further aspects may relate to staggering individual machine reboot operations over a specified period of time and performing reboot operations such that some machines are available for user sessions during a reboot cycle.

Abstract: One or more aspects of this disclosure may relate to using a configurable server farm preference for an application, desktop or other hosted resource. Additional aspects may relate to moving server farm workloads based on the configurable server farm preference. Further aspects may relate to performing reboot cycles, a reboot schedule and on-demand rebooting. Yet further aspects may relate to staggering individual machine reboot operations over a specified period of time and performing reboot operations such that some machines are available for user sessions during a reboot cycle.

Abstract: One or more aspects of this disclosure may relate to using a configurable server farm preference for an application, desktop or other hosted resource. Additional aspects may relate to moving server farm workloads based on the configurable server farm preference. Further aspects may relate to performing reboot cycles, a reboot schedule and on-demand rebooting. Yet further aspects may relate to staggering individual machine reboot operations over a specified period of time and performing reboot operations such that some machines are available for user sessions during a reboot cycle.

Abstract: An initial server, located in an initial authentication domain, receives a requested operation from a RESTful client system, and generates a redirections list having entries indicating servers located in authentication domains other than the initial domain. The initial server transmits the redirections list back to the client system. The redirections list instructs the client system to perform a command on each of the servers indicated in the redirections list, and may optionally be transmitted with a partial result from the initial server. The client system verifies that partial results in responses from servers in the other authentication domains and from the initial server are of an appropriate result type and number, and then aggregates all the partial results received from all authentication domains into a single final result, which may be displayed to a user of the client system.

Abstract: One or more aspects of this disclosure may relate to using a configurable server farm preference for an application, desktop or other hosted resource. Additional aspects may relate to moving server farm workloads based on the configurable server farm preference. Further aspects may relate to performing reboot cycles, a reboot schedule and on-demand rebooting. Yet further aspects may relate to staggering individual machine reboot operations over a specified period of time and performing reboot operations such that some machines are available for user sessions during a reboot cycle.

Abstract: An initial server, located in an initial authentication domain, receives a requested operation from a RESTful client system, and generates a redirections list having entries indicating servers located in authentication domains other than the initial domain. The initial server transmits the redirections list back to the client system. The redirections list instructs the client system to perform a command on each of the servers indicated in the redirections list, and may optionally be transmitted with a partial result from the initial server. The client system verifies that partial results in responses from servers in the other authentication domains and from the initial server are of an appropriate result type and number, and then aggregates all the partial results received from all authentication domains into a single final result, which may be displayed to a user of the client system.

Abstract: An initial server responds to a request with a redirection object describing the a different server to which the request should be redirected, and providing additional information about authenticating to the other server. The redirection object includes a session check variable indicating whether a forms-based authentication process may need to be performed, a session URI through which the client may determine whether the client was previously authenticated to the other server, and optionally a forms URI through which the client may initiate a forms-based authentication process. If the session check variable indicates that the other server may require forms based authentication, and an authenticated session does not exist between the client and the other server, and the client has a forms URI for the other server, then the client opens a Web browser, and directs the Web browser to the forms URI to complete a forms-based authentication process.

Abstract: The present invention is directed towards methods and systems for performing maintenance on computers included in a group of load balanced computer. A maintenance agent identifies a computers in the group as requiring maintenance, and a second computer as having up-to-date maintenance and a load level below a limit. The load balancer may assign a request to the second computer responsive to the identification. Responsive to a determination that spare capacity from the plurality of computers available to receive requests is above the threshold and that the first computer is idle, the maintenance agent may remove, for maintenance, the first computer from the plurality of computers available to receive requests. The maintenance agent may identify the first computer as having up-to-date maintenance responsive to the maintenance.

Abstract: A method includes (1) receiving a request to share a file stored on a secure network with a target, the request identifying the file and the target, (2) performing a location operation to determine whether the target belongs to the secure network, (3) when a result of the location evaluation operation indicates that the target does not belong to the secure network, performing a sensitivity evaluation operation to determine whether the file identified by the request includes sensitive information, and (4) performing an access control operation, the access control operation (i) rejecting the request when both (a) the result of the location evaluation operation indicates that the target does not belong to the secure network, and (b) a result of the sensitivity evaluation operation indicates that the file includes sensitive information, and (ii) otherwise causing a link to access the file to be provided to the target.

Abstract: Systems and methods are disclosed for estimating and updating the capacity associated with resources in a virtualized computing environment. A capacity estimation value may be stored in computer memory. The capacity estimation value may estimate how many concurrent sessions a resource in the virtualized computing environment has workload capacity to desirably handle. The system may monitor one or more resource consumption metrics of the resource on an ongoing basis. The capacity estimation value may be updated based on, inter alia, the monitoring. The capacity estimation value may be used when a request is received to create a new session in the resource.

Abstract: Systems and methods are disclosed for estimating and updating the capacity associated with resources in a virtualized computing environment. A capacity estimation value may be stored in computer memory. The capacity estimation value may estimate how many concurrent sessions a resource in the virtualized computing environment has workload capacity to desirably handle. The system may monitor one or more resource consumption metrics of the resource on an ongoing basis. The capacity estimation value may be updated based on, inter alia, the monitoring. The capacity estimation value may be used when a request is received to create a new session in the resource.

Abstract: A method includes (1) receiving a request to share a file stored on a secure network with a target, the request identifying the file and the target, (2) performing a location operation to determine whether the target belongs to the secure network, (3) when a result of the location evaluation operation indicates that the target does not belong to the secure network, performing a sensitivity evaluation operation to determine whether the file identified by the request includes sensitive information, and (4) performing an access control operation, the access control operation (i) rejecting the request when both (a) the result of the location evaluation operation indicates that the target does not belong to the secure network, and (b) a result of the sensitivity evaluation operation indicates that the file includes sensitive information, and (ii) otherwise causing a link to access the file to be provided to the target.

Abstract: One or more aspects of this disclosure may relate to using a configurable server farm preference for an application, desktop or other hosted resource. Additional aspects may relate to moving server farm workloads based on the configurable server farm preference. Further aspects may relate to performing reboot cycles, a reboot schedule and on-demand rebooting. Yet further aspects may relate to staggering individual machine reboot operations over a specified period of time and performing reboot operations such that some machines are available for user sessions during a reboot cycle.

Abstract: The present invention is directed towards methods and systems for performing maintenance on computers included in a group of load balanced computer. A maintenance agent identifies a computers in the group as requiring maintenance, and a second computer as having up-to-date maintenance and a load level below a limit. The load balancer may assign a request to the second computer responsive to the identification. Responsive to a determination that spare capacity from the plurality of computers available to receive requests is above the threshold and that the first computer is idle, the maintenance agent may remove, for maintenance, the first computer from the plurality of computers available to receive requests. The maintenance agent may identify the first computer as having up-to-date maintenance responsive to the maintenance.

Abstract: The present invention is directed towards methods and systems for performing maintenance on computers included in a group of load balanced computer. A maintenance agent identifies a computers in the group as requiring maintenance, and a second computer as having up-to-date maintenance and a load level below a limit. The load balancer may assign a request to the second computer responsive to the identification. Responsive to a determination that spare capacity from the plurality of computers available to receive requests is above the threshold and that the first computer is idle, the maintenance agent may remove, for maintenance, the first computer from the plurality of computers available to receive requests. The maintenance agent may identify the first computer as having up-to-date maintenance responsive to the maintenance.

Abstract: A method and system for efficiently deploying (also sometimes referred to as distributing and/or installing) a computer device's software image using a single portable image using an alternate partition for loading the image on the storage (hard drive) along with selected patches chosen for the configuration of the computer. The single image is processed using delta image patching technology to allow the single image to be customized and operable (work on) the particular computer, where the single portable image is adapted to operate on a large number of diverse computer device platforms.

Abstract: Systems and methods are disclosed for estimating and updating the capacity associated with resources in a virtualized computing environment. A capacity estimation value may be stored in computer memory. The capacity estimation value may estimate how many concurrent sessions a resource in the virtualized computing environment has workload capacity to desirably handle. The system may monitor one or more resource consumption metrics of the resource on an ongoing basis. The capacity estimation value may be updated based on, inter alia, the monitoring. The capacity estimation value may be used when a request is received to create a new session in the resource.

Abstract: A method and system for updating or recovering a computer device's software image using a single portable operating system image stored on a bootable, secure partition on local storage (hard drive); a method and system utilizing delta image patching technology to allow the single image to work on a large number of diverse computer device platforms; and a method for distributing software patches and updates via a, secure local partition to ensure patches and updates are applied to well known software images that have not been modified to include malicious software and do not include any other undesirable changes that have been made to the primary, running operating system image.