Abstract: Disclosed are various approaches for automating the detection and identification of anomalous devices in a management service. Device check-ins are received by a management service and housed in a data store. The quantity of device check-ins over various time periods can be analyzed using various approaches to identify anomalous devices.

Abstract: Disclosed are various examples of intelligent provisioning management. An application launch is detected from a client device. An application launch policy is identified. Device parameters are identified and mapped to an application access type according to the application launch policy. The application is accessed according to the application access type.

Abstract: Disclosed are various approaches for automating the detection and identification of anomalous devices in a management service. Device check-ins are received by a management service and housed in a data store. The quantity of device check-ins over various time periods can be analyzed using various approaches to identify anomalous devices.

Abstract: Examples of enterprise management using managed virtual machines for virtualized applications are described. In some examples, a managed virtual machine is executed on a host device and enrolled with a management service. A virtualized application drive is stored in the managed virtual machine. A launch agent executed within the managed virtual machine detects an application access request corresponding to user interaction with a host operating system of the host device. The application volumes launch agent accesses the virtualized application drive and launches the virtualized application corresponding to the application access request.

Abstract: Examples of enterprise management using managed virtual machines are described. A guest management agent executed within a managed virtual machine receives a command to update a user context configuration of the managed virtual machine from a management service. The command to update the user context configuration of the managed virtual machine is transferred through an inter-process communication (IPC) channel from the guest management agent within the managed virtual machine to a host management agent executed on the host device outside the managed virtual machine. The command to update the user context configuration of the managed virtual machine is implemented using a host desktop hypervisor.

Abstract: Examples of enterprise management using managed virtual machines (VMs) are described. In one example, a virtual machine base image is validated to comply with a plurality of managed virtual machine packaging rules of a management service. Managed virtual machine configuration parameters are written to a managed virtual machine configuration file of a managed virtual machine. The managed virtual machine includes a management component that implements instructions from a management service. A managed virtual machine package file is generated to include the managed virtual machine configuration file and enterprise-specific enterprise resources identified from the management service based on the enterprise identifier.

Abstract: Examples of enterprise management using managed virtual machines are described. Virtual machine files can be extracted from a virtual machine package and stored on a host device. The virtual machine files can include a managed virtual machine configuration file, an NVRAM file, and a virtual disk file, as well as other files. A digital signature of the managed virtual machine package can be verified. The digital signature can be based on the managed virtual machine configuration file, the NVRAM file, and a virtual disk file. The managed virtual machine can be added to a virtual machine inventory of the host desktop hypervisor and executed.

Abstract: Examples of enterprise management using managed virtual machines are described. A host user context configuration can be received from a host management agent. The host user context configuration can include one or more policies. A managed virtual machine user context configuration can be received from a guest management agent within a managed virtual machine. A portion of the host user context configuration can be processed using a translation matrix to identify a configuration service provider (CSP)-based profile that is mapped to a policy from the host user context configuration. A command to enforce the CSP-based profile on the managed virtual machine can be transmitted.

Abstract: Disclosed are various examples of intelligent provisioning management. An application launch is detected from a client device. An application launch policy is identified. Device parameters are identified and mapped to an application access type according to the application launch policy. The application is accessed according to the application access type.

Abstract: Disclosed are various approaches for automating the detection and identification of anomalous devices in a management service. Device check-ins are received by a management service and housed in a data store. The quantity of device check-ins over various time periods can be analyzed using various approaches to identify anomalous devices.

Abstract: Embodiments described herein are related to performing virtual application delivery. In some embodiments, a method includes accessing, at a computing device, a datastore comprising a first virtual disk file mapped to a plurality of virtual disk files separate from the first virtual disk file, wherein each of the plurality of virtual disk files comprises at least one application stored thereon. The method further includes receiving, at the computing device, one or more operations for accessing the first virtual disk file, the one or more operations corresponding to a first application stored on a second virtual disk file of the plurality of virtual disk files. The method further includes redirecting the one or more operations for accessing the first virtual disk file to the second virtual disk file.

Abstract: Embodiments described herein are related to performing virtual application delivery. In some embodiments, a method includes accessing, at a computing device, a datastore comprising a first virtual disk file mapped to a plurality of virtual disk files separate from the first virtual disk file, wherein each of the plurality of virtual disk files comprises at least one application stored thereon. The method further includes receiving, at the computing device, one or more operations for accessing the first virtual disk file, the one or more operations corresponding to a first application stored on a second virtual disk file of the plurality of virtual disk files. The method further includes redirecting the one or more operations for accessing the first virtual disk file to the second virtual disk file.