Microsoft Technology Licensing, LLC

Mahesh Sharad Lotlikar

Sriram Sampath

Costin Hagiu

Makarand V Patwardhan

Gilad Odinak

David Milstein

Vinay Deo

Mihai Costea

Vladimir Stoyanov

Tak Chung Lung

Nadim Y Abdo

Ara Bernardi

Hammad Butt

Dustin Lyle Green

Ido Miles Ben-Shachar

B Anil Kumar

Ashwin Palekar

Joy Chik

Parag Chakraborty

Bradley Post

Meher P Malakapalli

John E Parsons, Jr

Olga Ivanova

Huei Chung Wang

Karthik Lakshminarayanan

Ritu Bahl

A session-specific policy may be used to define specific configuration and operational characteristics of different types of sessions. One type of session may have one set of characteristics while a second type of session may have a different set of characteristics. The policy may be applied by a server or client, and may be propagated through an enterprise by a policy distribution management system to establish policies across multiple devices. Different session types include sessions from a local console, a remote user, a device-initiated session, a service-initiated session, and other types. Within each session type, policies may be defined for specific instances of each type. For example, different policies may be defined for different devices in a device-initiated policy.

Policies for session types

Techniques for configuring a commodity server to host virtual hard disks are disclosed herein. In an exemplary embodiment, a virtual hard disk file can be split into a plurality of differencing VHD files and one or more of the files can be downloaded to a virtualization host as it runs off the VHD files stored on the server. After the one or more VHD files are downloaded, the virtualization host can be configured to use the local copy instead of the copy on the commodity server. In addition to the foregoing, other techniques are described in the claims, the detailed description, and the figures.

Techniques for streaming virtual machines from a server to a host

High Fidelity remoting can be enabled by loading a hybrid remote session in a computer system. The hybrid remote session can include components loaded in a console session and components loaded in a remote session.

Hybrid remote sessions

A mechanism is described for mitigating the effects of such a DoS attack by detecting a multiple TDR situation within a short duration, identifying the errant virtual machines, and suspending all rendering ability for that virtual machine or set of virtual machines. While the disclosed embodiments are described in the context of virtual machines, the principles may be extended to the general problem of DoS attacks due to TDRs and bugchecks on any physical machine that includes a GPU. For example, DoS attacks can be generated from web sites directly using GPU rendering.

Prevention of DoS attack by a rogue graphics application

The present invention extends to methods, systems, and computer program products for establishing and utilizing terminal server dynamic virtual channels. In some embodiments, a terminal server sends a new channel request to a terminal server. The client receives the new channel request and forwards the new channel request to a listener for a plug-in. The listener creates an instance of the client side plug-in and sends a channel accept to the terminal server. The terminal server receives the channel accept and creates an instance of a server side plug-in. The server and the client agree to use a unique identifier for identifying the established dynamic virtual channel. In other embodiments, data for a dynamic virtual channel is tunneled between computers over a static virtual channel.

Establishing and utilizing terminal server dynamic virtual channels

Techniques are disclosed for enabling a system service executing in an isolated session to access system resources (such as a graphics processing unit) that it is isolated from. In an embodiment, the system service creates a 'worker' session that is not isolated, and a 'worker' process inside that worker session. Then, the system service is able to access the system resource that it is directly isolated from accessing by passing a request to the worker process to access the system resource on the system service's behalf. The worker process does so, and passes a result to the system service.

Sessions to host processes with special requirements

Techniques relating to managing terminal services scenarios are described. In one instance, a process establishes a new terminal services session having a session configuration consistent with a permitted terminal services session configuration. The process also monitors whether the new terminal services session configuration remains consistent with the permitted terminal services session configuration.

Techniques for managing terminal services sessions

The present invention extends to methods, systems, and computer program products for controlling the transfer of terminal server data. In some embodiments, contending request to send terminal server data are resolved by a flow control module situated between a terminal server protocol and a transport/network protocol. The flow control module utilizes channel priorities along with amounts of previously sent data per channel to determine how to distribute bandwidth in a relatively controlled manner between contending channels. The flow control module can be configured to intercept communication between terminal server protocol and a transport/network protocol to facilitate bandwidth distribution. In other embodiments, data is simultaneously sent over multiple channels of terminal server connection. A first write operation obtains a lock on a corresponding channel but the channel lock does not prevent write operations on other channels.

Controlling the transfer of terminal server data

An integrated circuit (IC) module allows volatile data generated by applications to be stored within volatile data files in the volatile memory. A file system tracks the location of all data files as residing in either volatile memory or nonvolatile memory and facilitates access to the volatile data files in volatile memory in a similar manner to accessing nonvolatile data files in nonvolatile memory. The file system exposes a set of application program interfaces (APIs) to allow applications to access the data files. The same APIs are used to access both volatile data files and nonvolatile data files. When an application requests access to a data file, the file system initially determines whether the application is authorized to gain access to the data file. If it is, the file system next determines whether the data file resides in volatile memory or nonvolatile memory. Once the memory region is identified, the file system identifies the physical location of the data file.

Smart card with volatile memory file subsystem

Growing community of inventors

Redmond, WA, United States of America

Mahesh Sharad Lotlikar