Abstract: A system and method for providing secure access to an organization's internal resources by an application running on an external network. An agent accepts queries from the application which are passed to a relay with a dynamic filter. The relay establishes a secure connection with a connector through the organization's firewall and passes requests from the application to an authentication service running on the internal network to confirm that a user of the application is authorized and issue an authentication ticket which is returned to the application. The application then sends a request to access a specific internal resource based on the authentication ticket, which is passed to a ticket granting service running on the internal network, to verify that said user is authorized to access the specific internal resource, and, if so, issue a service ticket to grant access the application for that resource.

Abstract: A system and method for providing secure access to an organization's internal resources by an application running on an external network. An agent accepts queries from the application which are passed to a relay with a dynamic filter. The relay establishes a secure connection with a connector through the organization's firewall and passes requests from the application to an authentication service running on the internal network to confirm that a user of the application is authorized and issue an authentication ticket which is returned to the application. The application then sends a request to access a specific internal resource based on the authentication ticket, which is passed to a ticket granting service running on the internal network, to verify that said user is authorized to access the specific internal resource, and, if so, issue a service ticket to grant access the application for that resource.

Abstract: In a computing environment comprising multiple desktop windows displayed to a user of a client computer, a method to manage client application windows associated with applications configured to run on the client computer is provided. The method includes detecting user input regarding movement of a client application window from a client desktop window to a remote desktop window, removing a task bar icon associated with the client application window from a task bar displayed in the client desktop window, instructing the remote computer to generate a drone of the client application window in the remote desktop window and to display the task bar icon associated with the client application window in a task bar of the remote desktop window, and displaying the client application window always on top of all other windows. The method may further include applying appropriate clipping region to the client application window.

Abstract: In a computing environment comprising multiple desktop windows displayed to a user of a client computer, a method to manage client application windows associated with applications configured to run on the client computer is provided. The method includes detecting user input regarding movement of a client application window from a client desktop window to a remote desktop window, removing a task bar icon associated with the client application window from a task bar displayed in the client desktop window, instructing the remote computer to generate a drone of the client application window in the remote desktop window and to display the task bar icon associated with the client application window in a task bar of the remote desktop window, and displaying the client application window always on top of all other windows. The method may further include applying appropriate clipping region to the client application window.

Abstract: In a networked computing environment, a method for providing, by a server, access to graphical data associated with at least an application configured to run on a client computer includes receiving, at the server, information on a first icon associated with the application configured to run on the client computer and providing, by the server, to the client computer, a screen displaying a plurality of icons, the plurality of icons including at least the first icon and a second icon associated with an application configured to run on the server.

Abstract: A server-based computing system includes at least one server (1) and at least one client computer (5), connected to the server (1) through a network (2). The server (1) includes apparatus for providing the client computer (5) with a user interface. The client computer (5) includes an input device (8) for providing input to an application through the user interface and a display device (7) for presenting output from an application through the user interface. The server (1) includes apparatus for running the application and the client computer (5) includes apparatus for locally running at least one further application. The system includes apparatus for controlling the locally run applications through the user interface provided by the server (1).

Abstract: The invention relates to a method of providing access to one or more resources accessible via a remote computer. The resources are assigned to a remote security context. Access to at least one of said remote resources within the remote security context is controlled by access rules that are valid for said at least one of said remote resources, on receipt of a terminal services request for a terminal session from a local computer. A user of said local computer has already been authenticated in a local security context by local authentication information. The local computer runs a local agent and contains identification information in addition to the local authentication information.

Abstract: A method for setting priority levels in a multiprogramming computer system (1) with priority scheduling, in which threads (15, 16, 17) of execution of each process (13, 14) have a standard priority level, comprises measuring relative use of one or more processors (2) in the system (1) by the threads (15, 16, 17) of execution of a process (13, 14). The priority levels of one or more threads (15, 16, 17) of execution are lowered if their measured relative use exceeds a certain escalation threshold for the duration of an escalation time period (DT1).

Abstract: A server-based computing system comprises at least one server (1) and at least one client computer (5), connected to the server (1) through a network (2). The server (1) comprises means for providing the client computer (5) with a user interface. The client computer (5) comprises an input device (8) for providing input to an application through the user interface and a display device (7) for presenting output from an application through the user interface. The server (1) comprises means for running the application and the client computer (5) comprises means for locally running at least one further application. The system comprises means for controlling the locally run applications through the user interface provided by the server (1).

Abstract: A multi-user computer system, and method for creating a user session that comprises processing a log-on request entered by a user. The creation of the user session is halted when more than a maximum number of simultaneous log-on requests, maintained as a variable in the multi-user computer system, are being processed.

Abstract: In a multi-user computer system, a method of creating a user session comprises processing a log-on request entered by a user. The creation of the user session is halted when more than a maximum number of simultaneous log-on requests are being processed.

Abstract: A server-based computing system comprises at least one server (1) and at least one client computer (5), connected to the server (1) through a network (2). The server (1) comprises means for providing the client computer (5) with a user interface. The client computer (5) comprises an input device (8) for providing input to an application through the user interface and a display device (7) for presenting output from an application through the user interface. The server (1) comprises means for running the application and the client computer (5) comprises means for locally running at least one further application. The system comprises means for controlling the locally run applications through the user interface provided by the server (1).