Abstract: Disclosed are various embodiments for provisioning client devices. An enterprise credential can be obtained from a provisioning service. A client device can send an enrollment request to a management service specific to the enterprise associated with the client device. The management service can send an enrollment response to the client device. Then, the client device can receive a provisioning package from the management service. Next, the computing device can then be configured based upon the enrollment response.

Abstract: Disclosed are various embodiments for provisioning client devices. A configuration file previously installed on the computing device can be read. The configuration file can contain a provisioning address. Then, a user account is automatically created using a predefined username and credential stored in the configuration file. Next, an enrollment request can be sent to the provisioning address to enroll the computing device with a provisioning service using the user account. In response, an enrollment response can be received from the provisioning service. The computing device can then be configured based upon the enrollment response.

Abstract: Various examples for discovering policy bindings between group policy rules in a legacy management framework and unified endpoint management rules that are utilized in a modern mobile device management (MDM) device management framework. A configuration state view can allow an administrator to understand inconsistencies or conflicts between group policy rules and UEM rules.

Abstract: Examples of enterprise management using managed virtual machines for virtualized applications are described. In some examples, a managed virtual machine is executed on a host device and enrolled with a management service. A virtualized application drive is stored in the managed virtual machine. A launch agent executed within the managed virtual machine detects an application access request corresponding to user interaction with a host operating system of the host device. The application volumes launch agent accesses the virtualized application drive and launches the virtualized application corresponding to the application access request.

Abstract: Various examples for discovering policy bindings between group policy rules in a legacy management framework and unified endpoint management rules that are utilized in a modern mobile device management (MDM) device management framework. A configuration state view can allow an administrator to understand inconsistencies or conflicts between group policy rules and UEM rules.

Abstract: Examples of enterprise management using managed virtual machines are described. A host user context configuration can be received from a host management agent. The host user context configuration can include one or more policies. A managed virtual machine user context configuration can be received from a guest management agent within a managed virtual machine. A portion of the host user context configuration can be processed using a translation matrix to identify a configuration service provider (CSP)-based profile that is mapped to a policy from the host user context configuration. A command to enforce the CSP-based profile on the managed virtual machine can be transmitted.

Abstract: Examples of enterprise management using managed virtual machines (VMs) are described. In one example, a virtual machine base image is validated to comply with a plurality of managed virtual machine packaging rules of a management service. Managed virtual machine configuration parameters are written to a managed virtual machine configuration file of a managed virtual machine. The managed virtual machine includes a management component that implements instructions from a management service. A managed virtual machine package file is generated to include the managed virtual machine configuration file and enterprise-specific enterprise resources identified from the management service based on the enterprise identifier.

Abstract: Examples of enterprise management using managed virtual machines are described. A guest management agent executed within a managed virtual machine receives a command to update a user context configuration of the managed virtual machine from a management service. The command to update the user context configuration of the managed virtual machine is transferred through an inter-process communication (IPC) channel from the guest management agent within the managed virtual machine to a host management agent executed on the host device outside the managed virtual machine. The command to update the user context configuration of the managed virtual machine is implemented using a host desktop hypervisor.

Abstract: Examples of enterprise management using managed virtual machines are described. Virtual machine files can be extracted from a virtual machine package and stored on a host device. The virtual machine files can include a managed virtual machine configuration file, an NVRAM file, and a virtual disk file, as well as other files. A digital signature of the managed virtual machine package can be verified. The digital signature can be based on the managed virtual machine configuration file, the NVRAM file, and a virtual disk file. The managed virtual machine can be added to a virtual machine inventory of the host desktop hypervisor and executed.

Abstract: Disclosed are various embodiments for provisioning client devices. A configuration file previously installed on the computing device can be read. The configuration file can contain a provisioning address. Then, a user account is automatically created using a predefined username and credential stored in the configuration file. Next, an enrollment request can be sent to the provisioning address to enroll the computing device with a provisioning service using the user account. In response, an enrollment response can be received from the provisioning service. The computing device can then be configured based upon the enrollment response.

Abstract: Disclosed are various embodiments for provisioning client devices. A configuration file previously installed on the computing device can be read. The configuration file can contain a provisioning address. Then, a user account is automatically created using a predefined username and credential stored in the configuration file. Next, an enrollment request can be sent to the provisioning address to enroll the computing device with a provisioning service using the user account. In response, an enrollment response can be received from the provisioning service. The computing device can then be configured based upon the enrollment response.

Abstract: Various examples for discovering policy bindings between group policy rules in a legacy management framework and unified endpoint management rules that are utilized in a modern mobile device management (MDM) device management framework. A configuration state view can allow an administrator to understand inconsistencies or conflicts between group policy rules and UEM rules.

Abstract: Various examples for discovering policy bindings between group policy rules in a legacy management framework and unified endpoint management rules that are utilized in a modern mobile device management (MDM) device management framework. A configuration state view can allow an administrator to understand inconsistencies or conflicts between group policy rules and UEM rules.

Abstract: Disclosed are various embodiments for provisioning client devices. A configuration file previously installed on the computing device can be read. The configuration file can contain a provisioning address. Then, a user account is automatically created using a predefined username and credential stored in the configuration file. Next, an enrollment request can be sent to the provisioning address to enroll the computing device with a provisioning service using the user account. In response, an enrollment response can be received from the provisioning service. The computing device can then be configured based upon the enrollment response.

Abstract: Various examples for discovering policy bindings between group policy rules in a legacy management framework and unified endpoint management rules that are utilized in a modern mobile device management (MDM) device management framework. A configuration state view can allow an administrator to understand inconsistencies or conflicts between group policy rules and UEM rules.

Abstract: Embodiments described herein are related to performing virtual application delivery. In some embodiments, a method includes accessing, at a computing device, a datastore comprising a first virtual disk file mapped to a plurality of virtual disk files separate from the first virtual disk file, wherein each of the plurality of virtual disk files comprises at least one application stored thereon. The method further includes receiving, at the computing device, one or more operations for accessing the first virtual disk file, the one or more operations corresponding to a first application stored on a second virtual disk file of the plurality of virtual disk files. The method further includes redirecting the one or more operations for accessing the first virtual disk file to the second virtual disk file.

Abstract: Methods and systems for bound based contextual zoom are disclosed. Legacy WINDOWS desktop and web applications were designed for a mouse or other high-precision pointing device, and as such, small controls and closely grouped controls/icons were commonly designed/used on the screen. Interacting with such applications remoted to a touch-based device (e.g., a smartphone or tablet) is difficult. Bound based contextual zoom overcomes at least some of these limitations by permitting a user to zoom in on an area of interest within an application or desktop, and for a period of time long enough to complete the touch interaction. The area zoomed might be a group of controls on a ribbon bar, the minimize/maximize/close buttons in the top-right corner of a window, a group of form input controls, or any other natural cluster of related user interface (UI) elements.

Abstract: Methods and systems for bound based contextual zoom are disclosed. Legacy WINDOWS desktop and web applications were designed for a mouse or other high-precision pointing device, and as such, small controls and closely grouped controls/icons were commonly designed/used on the screen. Interacting with such applications remoted to a touch-based device (e.g., a smartphone or tablet) is difficult. Bound based contextual zoom overcomes at least some of these limitations by permitting a user to zoom in on an area of interest within an application or desktop, and for a period of time long enough to complete the touch interaction. The area zoomed might be a group of controls on a ribbon bar, the minimize/maximize/close buttons in the top-right corner of a window, a group of form input controls, or any other natural cluster of related user interface (UI) elements.

Abstract: Embodiments described herein are related to performing virtual application delivery. In some embodiments, a method includes accessing, at a computing device, a datastore comprising a first virtual disk file mapped to a plurality of virtual disk files separate from the first virtual disk file, wherein each of the plurality of virtual disk files comprises at least one application stored thereon. The method further includes receiving, at the computing device, one or more operations for accessing the first virtual disk file, the one or more operations corresponding to a first application stored on a second virtual disk file of the plurality of virtual disk files. The method further includes redirecting the one or more operations for accessing the first virtual disk file to the second virtual disk file.

Abstract: Environments are disclosed in which a server executes an application on behalf of a client device and, in particular, to providing responsive scrolling in server-hosted applications. In one example, a remote computing device may be a mobile (or stationary) computing device with (or without) a touch screen input surface. Some or all of the client-server communication between a client-side scrollable UI control module of the remote computing device and a server-side scrollable UI control module of the server device may occur in an asynchronous manner.