Abstract: A memory optimizer service can be used to provide adaptive memory optimization. The memory optimizer service can be executed on a thin client or other user device to detect when low memory conditions exist. When it detects a low memory condition, the memory optimizer service can obtain process memory information for processes executing on the thin client and use the process memory information to calculate a trim amount to apply to the working set of processes with the highest amount of private bytes in their working sets. These trim amounts can be proportional to the amounts of private bytes and in sum can equal a total desired reduction in memory consumption.

Abstract: A memory optimizer service can be used to provide adaptive memory optimization. The memory optimizer service can be executed on a thin client or other user device to detect when low memory conditions exist. When it detects a low memory condition, the memory optimizer service can obtain process memory information for processes executing on the thin client and use the process memory information to calculate a trim amount to apply to the working set of processes with the highest amount of private bytes in their working sets. These trim amounts can be proportional to the amounts of private bytes and in sum can equal a total desired reduction in memory consumption.

Abstract: Source devices can be secured using a display device filter. When a display device is connected to a source device, a display device filter can identify the display device and determine whether it is a trusted display device. If the display device filter determines that the display device is not trusted, it can take a number of actions to minimize the likelihood of harm to the source device. These actions may include preventing the source device from booting, shutting down the source device, locking the source device, blocking access to other devices, and/or notifying an administrator. In this way, a malicious user can be prevented from gaining access to the source device.

Abstract: Multilevel redirection can be performed in a VDI environment. When a user establishes a second remote session within a first remote session, various redirection techniques can be configured to span both remote sessions so that redirection will be available within the second remote session in the same manner that redirection was available in the first remote session. Therefore, from the user perspective, redirection will occur regardless of whether the user has established a single tier remote session or multitier remote session.

Abstract: Source devices can be secured using a display device filter. When a display device is connected to a source device, a display device filter can identify the display device and determine whether it is a trusted display device. If the display device filter determines that the display device is not trusted, it can take a number of actions to minimize the likelihood of harm to the source device. These actions may include preventing the source device from booting, shutting down the source device, locking the source device, blocking access to other devices, and/or notifying an administrator. In this way, a malicious user can be prevented from gaining access to the source device.

Abstract: Multilevel redirection can be performed in a VDI environment. When a user establishes a second remote session within a first remote session, various redirection techniques can be configured to span both remote sessions so that redirection will be available within the second remote session in the same manner that redirection was available in the first remote session. Therefore, from the user perspective, redirection will occur regardless of whether the user has established a single tier remote session or multitier remote session.

Abstract: A digital watermark can be embedded within remote display protocol output. When host-side rendering is employed, the decoder on the client side can include a digital watermark component that can add a digital watermark to the remote display protocol output during the decoding process. This digital watermark can be specific to the end user and/or client device to thereby enable any misappropriation of the remote display protocol output to be traced back to the end user. The digital watermark can be added as a clearly visible portion of the remote display protocol output or can be added as an invisible (i.e., hidden) portion of the remote display protocol output.

Abstract: A digital watermark can be embedded within remote display protocol output. When host-side rendering is employed, the decoder on the client side can include a digital watermark component that can add a digital watermark to the remote display protocol output during the decoding process. This digital watermark can be specific to the end user and/or client device to thereby enable any misappropriation of the remote display protocol output to be traced back to the end user. The digital watermark can be added as a clearly visible portion of the remote display protocol output or can be added as an invisible (i.e., hidden) portion of the remote display protocol output.