Microsoft Technology Licensing, LLC

Kevin Scott London

Ido Miles Ben-Shachar

Ersev Samim Erdogan

Amjad Hussain

Tristan William Scott

Travis Michael Howe

Jonathan Austin Hoover

Alberto Henriquez

Raymond Matthew Reskusich

Nelly L Porter

Ashwin Palekar

Rajneesh Mahajan

Elton Saul

Niraj Agarwala

James Henry Baker, Iii

Jeson Patel

Subhashini Raghunathan

Ayesha M Mascarenhas

Naga Vankata Rajagopal Ramadugu

Ramasamy Pullappan

Ruiquing Zhu

Ray Reskusich

Russell S Morgan

Debaprajna Bhattacharyya

Embodiments are directed to provisioning private virtual machines in a public cloud and to managing private virtual machines hosted on a public cloud. In one scenario, a computer system receives authentication information for a private domain from an entity. The entity indicates that their private virtual machines are to be provisioned on a public cloud, where the entity's private domain is accessible using the authentication information. The computer system establishes a virtual network on the public cloud which is configured to host the entity's private virtual machines, where each virtual machine hosts remote applications. The computer system establishes an authenticated connection from the virtual network to the entity's private domain using the received authentication information and provides the entity's private virtual machines on the public cloud. The remote applications provided by the private virtual machines then have access to data stored within the entity's private domain using the authenticated connection.

Providing domain-joined remote applications in a cloud environment

Embodiments are directed to provisioning private virtual machines in a public cloud and to managing private virtual machines hosted on a public cloud. In one scenario, a virtual network is established at a public cloud environment based on a request received from a private domain, and an authenticated session is established between the virtual network and the private domain. A virtual machine is hosted within the virtual network. The virtual machine is configured to be accessible to a user authenticated to the virtual machine, and is configured to run an application using data received from the private domain. Private data is received from the private domain over the authenticated session, and the authenticated user is provided access to the application running at the virtual machine, including providing the authenticated user access to the private data.

A remote resource application that is associated with an application container in a manner that the application container restricts the remote resource application from directly accessing at least a file system of the computing system. The remote resource application provides a visualization for each of multiple remote resources. The user may launch the remote resource by selecting the corresponding visualization. Some of the remote resources are accessed by launching from the remote resource application itself in the context of the application container. Others of the remote resources are launched outside of the application container. The remote desktop application may operate securely within the application container, and still serve as an integrated location from which a user can access remote resources, regardless of whether the remote resource is launched from internal or external to the application container.

Resource launch from application within application container

Techniques for discovering, connecting to, disconnecting from, reconnecting to, updating, and removing workspaces are described. In one embodiment, a list of discovered workspaces is maintained on a user device. Shortcuts for resources corresponding to each respective one of the discovered workspaces are integrated into a user interface of the user device. A request to access one of the resources contained in one of the discovered workspaces is received. Responsive to receiving the request, a connection from the user device to one or more resource hosts containing the resources corresponding to the indicated one of the discovered workspaces is opened. Access from the user device to the resources stored on the resource host(s) corresponding to the indicated one of the discovered workspaces is enabled by presenting shortcuts for resources corresponding to the discovered workspaces as though they were local resources.

Integrated client for access to remote resources

Web access over a public network for applications that operate on virtual desktops on a plurality of servers is facilitated. Through the web access the user is provided with the information necessary to establish a connection with an application by way of the virtual desktop. Applications that the user is authorized to access are determined and those applications that the user is not authorized to access are filtered out. The applications associated access control list is used for determining the user's access to discover an application.

Remote application presentation over a public network connection

Techniques for XML (Extensible Markup Language) web feeds for web access of remote resources are described. In one embodiment, a method includes obtaining information regarding one or more available resources from one or more resource hosts, rendering the information regarding one or more available resources into an Extensible Markup Language (XML) document, and providing the XML document to a user device.

XML-based web feed for web access of remote resources

A Terminal Server Administrator is provided with the ability to indirectly update RDP files that have been placed inside an MSI file. The TS Web Access server retrieves the RDP file from the MSI file being published by the Active Directory, contacts the corresponding Terminal Server for any updated settings to the RDP file and icon allowing the remote program to be launched, and then passes the updated RDP file and icon to the client that is to connect to the Terminal Server. In this way RDP files can be dynamically updated without creating a new MSI file.

MSI enhancement to update RDP files

Embodiments herein address some of the problems associated with compromised configuration files used in a remote sessions of a virtual computing environment. Accordingly, a subset of settings in a configuration file are secured from malicious or accidental modification, while other portions of the configuration file are modifiable by a user as desired without invalidating the integrity of the secure subset. This not only allows for the user to be assured of the integrity of the settings, but also allows an administrator of the remote or terminal server with the ability to control how and what access a client has to resources thereon. Such access may be further controlled based on a trust level between the client, server, and/or publisher of the configuration file.

Secure and modifiable configuration files used for remote sessions

Growing community of inventors

Monroe, WA, United States of America

Kevin Scott London