Microsoft Technology Licensing, LLC

Angel Monterrubio

Kendra Anne Yourtee

Ricardo Soares Stern

Brian Michael Wahlert

Marius Cristian Constantin

Abhishek Dhasmana

Lloyd Gene Giberson

John Chad Parry

Olga Ryabchenkova

Eugene Polonsky

Nelson Sampaio Araujo, Jr

Nelson S Araujo

A server implementing a service receives a request from a client computing system and stores the request in a cache, along with a correlation identifier. The server returns a response to the request, along with a correlation identifier (ID). When a trigger input is received, indicating that a problem has been encountered at the client computing system, a diagnostic data generation system on the service accesses the cache and generates diagnostic data for the request corresponding to the correlation ID. The diagnostic data corresponding the correlation ID is then provided to a support data storage system where it can be combined with diagnostic data from the client computing system, to be accessed by a support computing system. This reduces consumption of computing resources, such as processing time, memory initialization and/or network bandwidth.

Triggering diagnostic data generation and aggregation across multiple systems to reduce computing resources

A server implementing a service receives a request from a client computing system and stores the request in a cache, along with a correlation identifier. The server returns a response to the request, along with a correlation identifier (ID). When a trigger input is received, indicating that a problem has been encountered at the client computing system, a diagnostic data generation system on the service accesses the cache and generates diagnostic data for the request corresponding to the correlation ID. The diagnostic data corresponding the correlation ID is then provided to a support data storage system where it can be combined with diagnostic data from the client computing system, to be accessed by a support computing system. This reduces consumption of computing resources, such as processing time, memory utilization and/or network bandwidth.

An administrative authority for virtual machines can send one or more delegated policy settings to a virtual machine manager. The virtual machine manager can in turn send management instructions that include the one or more policy settings to one or more virtual machine hosts. As such, a user's request for a virtual machine at a virtual machine host can be granted or denied based on the delegated policy settings. The policy settings can be updated periodically, and can include additional information about starting, stopping, expiring, saving, or even deleting virtual machines by particular users, as well as users accessing from particular locations. In addition, an agent operating at the virtual machine host can monitor and report virtual machine activity, to ensure unauthorized virtual machines are quickly stopped and reviewed until authorized.

Managing virtual machines with system-wide policies

The embodiments contemplate a system and method for a restriction of virtual machines for a group of one or more users. A predefined policy may include a restriction related to the group, as well as a measure of enforcement to initiate in the event of a violation of the restriction. The measure of enforcement may include a warning message or denial of resources. The restriction may be resource-based, time-based, machine-based, or a combination. The restriction may be a group-level restriction, in which the entire group actions are monitored, or a user-level restriction, in which the user's actions are monitored. In the event a user is assigned to more than one group, the policies of each group are assigned a priority level. The priority level dictates the restriction as well as the measure of enforcement.

Virtual machine self-service restrictions

Growing community of inventors

Redmond, WA, United States of America

Angel Monterrubio