Abstract: A method for providing, by a remote machine, access to functionality associated with a resource executing on a local machine includes receiving, by a remote agent executing on a remote machine, an identification of a shell extension associated with a resource provided by a local machine. The remote agent installs a proxy handler associated with the identified shell extension. The proxy handler receives a request for access to the shell extension and redirects the request to a shell extension invoker executing on the local machine.

Abstract: In a method for accessing resources provided by an operating system, a request for a resource is received by an application program executing inside an environment. A first identifier associated with the resource is acquired. A registry is consulted, responsive to an association between a first identifier associated with the resource and a second identifier associated with the resource, the association associated with the environment. The resource and an environment on which to launch the resource are identified, responsive to consulting the registry. The second identifier is associated with the resource, with the environment, and with the environment on which to launch the resource. A registry key for the resource is stored in the registry, the registry key comprising the second identifier. The request for the resource is redirected to the identified instance of the resource, responsive to the second identifier.

Abstract: A method for providing access to a computing environment includes the step of receiving a request from a client system for an enumeration of available computing environments. Collected data regarding available computing environments are accessed. Accessed data are transmitted to a client system, the accessed data indicating to the client system each computing environment available to a user of the client system. A request is received from the client system to access one of the computing environments. A connection is established between the client system and a virtual machine hosting the requested computing environment via a terminal services session, the virtual machine executed by a hypervisor executing in the terminal services session provided by an operating system executing on one of a plurality of execution machines.

Abstract: A method for providing, by a remote machine, access to functionality associated with a resource executing on a local machine includes receiving, by a remote agent executing on a remote machine, an identification of a shell extension associated with a resource provided by a local machine. The remote agent installs a proxy handler associated with the identified shell extension. The proxy handler receives a request for access to the shell extension and redirects the request to a shell extension invoker executing on the local machine.

Abstract: A method for moving an executing process from a source isolation scope to a target isolation scope includes the step of determining that the process is in a state suitable for moving. The association of the process changes from a source isolation scope to a target isolation scope. A rule loads in association with the target isolation scope.

Abstract: A method for providing, by a remote machine, access to a desk band associated with a resource on a local machine includes receiving, by a first agent on the remote machine, an identification of a desk band associated with a resource on a local machine. The first agent, in communication with a shell on the remote machine, maintains a taskbar window in a remote desktop environment. The taskbar window includes at least one window associated with a resource provided by the remote machine and a window region representing the desk band by using graphical data stored on the remote machine. The first agent transmits, to a second agent on the local machine, window attribute data and output data associated with the taskbar window in the remote desktop environment. The second agent displays at least a portion of the received output data in a local window on a local desktop environment.

Abstract: A method for providing access to a computing environment includes the step of receiving, by a broker machine, a request from a client machine for access to a computing environment, the request including an identification of a user of the client machine. One of a plurality of virtual machines is identified by a session management component, the identified virtual machine providing the requested computing environment. One of a plurality of execution machines is identified, the identified execution machine providing a terminal services session in which a hypervisor executes to provide access to hardware resources required by the identified virtual machine. The hypervisor launches the identified virtual machine. A connection is established between the client machine and the identified virtual machine, via the terminal services session.

Abstract: A method for providing, by a remote machine, access to graphical data associated with a resource provided by a local machine includes initializing, by a remote agent on a remote machine, a proxy icon handler. The proxy icon handler receives, from an icon handler on a local machine, data associated with an icon for a resource provided by the local machine. The proxy icon handler modifies a window in a remote desktop environment displaying a plurality of icons including at least one icon associated with a resource provided by the remote machine and the icon associated with the resource provided by the local machine. The remote agent transmits, to the local machine, window attribute data associated with the modified window and graphical data representing the window displaying the plurality of icons. The local agent displays the received graphical data in a window formed according to the received window attribute data.

Abstract: A method for moving an executing process from a source isolation scope to a target isolation scope includes the step of determining that the process is in a state suitable for moving. The association of the process changes from a source isolation scope to a target isolation scope. A rule loads in association with the target isolation scope.

Abstract: A system for granting access to resources includes a client machine, a collection agent, a policy engine, and a broker server. The client machine requests access to a resource. The collection agent gathers information about the client machine. The policy engine receives the gathered information and assigns one of a plurality of levels of access responsive to application of a policy to the received information. The broker server establishes, responsive to the assigned level of access, a connection between the client machine and a computing environment providing the requested resource, the computing environment provided by a virtual machine.

Abstract: A method for providing authorized remote access to a computing environment provided by a virtual machine, includes the step of requesting, by a client machine, access to a resource. A collection agent gathers information about the client machine. A policy engine receives the gathered information. The policy engine makes an access control decision based on the received information. A computing environment already associated with the user is identified in response to the received information, the identified computing environment provided by a virtual machine. A broker server establishes, responsive to the access control decision, a connection between the client machine and the identified computing environment.

Abstract: A method for attributing a portion of a level of electrical power consumption by a server to a virtual machine executing on the server, includes determining a level of electrical power consumption of a server. The method includes identifying a level of load placed on the server by a workload executing on the server. The method includes attributing, by a power apportionment module in communication with the server, a portion of the level of electrical power consumption of the server to the workload, based on the identified level of load. The method includes providing, by the power apportionment module, to a user, an identification of the attributed portion of the level of electrical power consumption.

Abstract: A method for providing, by a remote machine, access to graphical data associated with a resource provided by a local machine includes initializing, by a remote agent on a remote machine, a proxy icon handler. The proxy icon handler receives, from an icon handler on a local machine, data associated with an icon for a resource provided by the local machine. The proxy icon handler modifies a window in a remote desktop environment displaying a plurality of icons including at least one icon associated with a resource provided by the remote machine and the icon associated with the resource provided by the local machine. The remote agent transmits, to the local machine, window attribute data associated with the modified window and graphical data representing the window displaying the plurality of icons. The local agent displays the received graphical data in a window formed according to the received window attribute data.

Abstract: A method for executing, by a virtual machine, an application program requested by a client machine includes the step of receiving a file including access information for accessing a plurality of application files and for executing a first client capable of receiving an application stream. An identification of the plurality of application files is retrieved, responsive to the received file. At least one characteristic required for execution of the plurality of application files is retrieved, responsive to the file. A determination is made as to whether a client machine includes the at least one characteristic. A second client is executed, responsive to a determination that the client machine lacks the at least one characteristic, the second client requesting execution of the plurality of application files on a remote machine comprising a virtual machine providing a computing environment having the at least one characteristic.

Abstract: A method for virtualizing access to named system objects includes the step of receiving a request to access a system object from a process executing in the context of a user isolation scope, the request including a virtual name for the system object. A rule associated with the request is determined and a literal name for the system object is formed in response to the determined rule. A request to access the system object is issued to the operating system. The issued request including the literal name for the system object.

Abstract: A method for associating a file type of a file with one or more programs includes the step of receiving a request to store in a configuration store file type association information. From the request, an application program is determined that is to be associated with a file type in the configuration store.

Abstract: Methods and systems for generating playback instructions for time-warped playback of presentation layer protocol data. The method includes a protocol engine executing on a computing device recording a protocol data stream comprising a plurality of packets representing a user session. The protocol engine determines a complexity factor for a first portion of the protocol data stream and for a second portion of the protocol data stream based on content of the packets of the protocol data stream. The protocol engine determines a first playback rate for the first portion of the protocol data stream and a second playback rate for the second portion of the protocol data stream using the complexity factor of each portion of the protocol data stream, wherein the first playback rate differs from the second playback rate. The protocol engine renders the protocol data stream according to the determined playback rates.

Abstract: A method for isolating access by application programs to native resources provided by an operating system redirects a request for a native resource made by an application program executing on behalf of a user to an isolation environment. The isolation environment includes a user isolation scope and an application isolation scope. An instance of the requested native resource is located in the user isolation scope corresponding to the user. The request for the native resource is fulfilled using the version of the resource located in the user isolation scope. If an instance of the requested native resource is not located in the user isolation scope, the request is redirected to an application isolation scope. The request for the native resource is fulfilled using the version of the resource located in the application isolation scope. If an instance of the requested native resource is not located in the application isolation scope, the request is redirected to a system scope.

Abstract: In a method for accessing resources provided by an operating system, a request for a resource is received by an application program executing inside a first environment. A first identifier associated with the resource is acquired. A second identifier referring to the requested resource and to a launch environment on which to launch the resource is determined. The request for the resource is redirected to the identified instance of the resource, responsive to the second identifier. The request for the resource is responded to using the instance of the resource located inside an environment on which the resource resides.

Abstract: A method for maintaining a full-screen, integrated desktop environment on a remote machine for display to a user by a local machine includes monitoring, by a first agent on the remote machine, a desktop environment providing integrated access to a resource provided to a user of the local machine by the remote machine and a resource provided by the local machine to the user. The first agent generates a proxy window representing a window on the local machine displaying output data generated by the second resource and receives an identification of a change to the window on the local machine. The first agent modifies at least one data object in the desktop environment responsive to the change. The first agent transmits, to a second agent on the local machine, an identification of the modification. The second agent modifies attribute data associated with a data object displayed by the local machine.