Abstract: Disclosed are various examples for establishing encrypted channels or tunnels within a TCP or other communication session between a tunnel endpoint and tunnel client, on a client device. A tunnel endpoint on the client device can determine an encryption key based upon whether a client device is in compliance with encryption policies of the enterprise.

Abstract: Disclosed are various examples for facilitating sharing of activity on a display of a client device. The client device can be enrolled as a managed device with a management service. A display sharing profile can be created that specifies a whitelist and/or a blacklist of applications. Whitelisted applications are permitted to have activity occurring on the display shared with a display sharing applications. Blacklisted applications are not permitted to share activity with the display sharing application. The display sharing profile can be enforced by a management component or a display sharing application.

Abstract: Examples relate to the configuration of network connections for computing devices. In some examples, a computing device determines that a network is inaccessible through a first network connection provided by a network access node. The computing device determines that the network is accessible through a first computing device that provides a second connection to the network. The computing device generates gateway configuration data for a second computing device based on an address for the first computing device. The computing device transmits the gateway configuration data to the second computing device to cause the second computing device to use the first computing device as a gateway.

Abstract: Disclosed are examples of managing devices through secondary communication channels. In some examples, a management component detects an impediment with a data communication channel for a device. The data communication channel can be a primary communication channel through which the device communicates with a management service. The management component detects an event associated with the device to report to the management service. The management component generates a message specifying the event, and the management component transmits the message to the management service through the secondary communication channel.

Abstract: Disclosed are examples that relate to searching for audio in multimedia files. A transcript specification can be obtained from a file manager that provides restricted access to files associated with an enterprise. The transcript specification can include transcript data representing audio for multiple time segments of a multimedia file. A search result can be generated for a search query. The search result can indicate that the search query matches the transcript data for a particular time segment of the multimedia file. The particular time segment of the multimedia file can be retrieved from the file manager.