Abstract: A mechanism is provided for automatically logging into a cloud based system that does not accept token log-on credentials generated by a single sign-on service. In an embodiment, a one-time password is automatically generated and persisted. The generated password is used to log in automatically to a cloud based system that does not accept tokens generated by the web-ID providers and for connecting to other services. Examples of such systems may include Windows, Linux, and iOS.

Abstract: A mechanism is provided for creating and deploying a user environments for work groups in a cloud computing environment. A user such as an administrator is provided an interface for defining an end user computing environment and a desired IT infrastructure. Based on this information the system creates the infrastructure in the cloud platform. The underlying provisioning of the infrastructure in the cloud is transparent to the administrator.

Abstract: A mechanism is provided for In a cloud computing infrastructure, a mechanism is provided for balancing client sessions across virtual machines such that the number of virtual machines is efficiently managed. In some embodiments, the total number of virtual machines is minimized to reduce power consumption, cooling, and other cost drivers, while assigning users across the sessions. In one embodiment, the sessions in a virtual machine with low activity are migrated to a virtual machine with higher session rates to allow for the shutdown of the low usage virtual machines. In another embodiment, new user sessions are assigned according to a minimum performance standard.

Abstract: A mechanism is provided for deploying software applications in a cloud computing environment. An administrator is provided an interface for allowing a software application that is designed for a single tenant to be used by a plurality of users. An aspect of the invention is to provide a mechanism for quickly and easily giving multi-user qualities to a single tenant application like autoCAD. As such, multiple users can access the application without the need to download and install a version locally on their system. The system is able to determine the period of time for which an application is in use for a given user, because every application is run on a resource that is part of the cloud environment. Therefore, it is possible for the application provider to charge for the application in a usage-based model—e.g. by the hour, or day—without any re-engineering of the existing application.

Abstract: A mechanism is provided for presenting a software application to a plurality of users in a cloud computing environment. For example, an application that was designed for use by a single user is provided in a cloud based platform without re-architecting the application. Using a web-based interface, multiple cloud users may launch and execute the application. The various instances of the application are provided to the cloud users as if the application were designed as a multi-user application.

Abstract: A mechanism is provided for scalably creating and deploying a network of virtual computers with common desktop images in a cloud computing environment. An administrator is provided an interface for defining a user desktop comprising an OS and a set of applications and associated settings. The administrator may further enter the number of roles or remote users. Based on this information the system creates a golden image or master template of the desktop and propagates the image throughout the cloud platform. The underlying provisioning of the virtual machines in the cloud is transparent to the user. The same automated mechanism used for creating the golden image is also used to update the golden image whenever there are updates to the OS or any applications and settings. The system automatically propagates the new image throughout the cloud platform.

Abstract: Systems, methods, and computer-readable storage media are disclosed for configuring and managing a remote presentation session server farm. In an example embodiment, a central management server (CMS) receives a task to be carried out on a server farm (e.g. make an otherwise unused server operate as a remote presentation session server). The CMS then validates this request against a model of allowed tasks, and the current configuration of the server farm. Once validated, the CMS converts the task into operations to be carried out by one or more servers of the server farm. The CMS then sends these operations to the respective servers, where the operations are received by an agent process executing on the server. Each agent performs the received operations on the server upon which it executes, and sends an indication of whether the operations were completed successfully to the CMS. The CMS may then update its model and current configuration to reflect the current configuration of the server farm.

Abstract: Example embodiments of the present disclosure provide techniques for performing multiple protocol exchanges over a single socket connection, one preceding another, in order to provide a platform for policy exchange between terminal servers and a gateway. The protocol exchanges may occur without using additional ports while ensuring that the terminal server state is restored to the previous state. In an embodiment, such a method may adhere to terminal server security levels and perform an exchange with the terminal servers by replicating remote access security layer exchanges and authenticating the gateway to the terminal server.

Abstract: Example embodiments of the present disclosure provide techniques for performing multiple protocol exchanges over a single socket connection, one preceding another, in order to provide a platform for policy exchange between terminal servers and a gateway. The protocol exchanges may occur without using additional ports while ensuring that the terminal server state is restored to the previous state. In an embodiment, such a method may adhere to terminal server security levels and perform an exchange with the terminal servers by replicating remote access security layer exchanges and authenticating the gateway to the terminal server.