Microsoft Technology Licensing, LLC

Venkatasubrahmanyam Raman

Robert M Fries

Karan Mehra

Brian Thomas Berkowitz

Karandeep Singh Anand

Catharine Van Ingen

Giedrius Zizys

Gerardo Diaz Cuellar

Seetharaman Harikrishnan

Michael L Michael

Vinay Badami

Benjamin A Leis

William L Scheidel

Nikhil Vijay Chandhok

Brian Michael Wahlert

Yezdi Z Lashkari

Sunil Pai

Purushottam M Kulkarni

David E Gonzalez

Natalia Valeryevna Varava

Alexandru Naparu

Arupendra Narayan Roy

Fernando Garcia Valenzuela

Bisconde Ramon Aquino

Benjamin Alan Leis

The disclosure herein describes securing access to a service resource within a security boundary. A security gateway instance receives a request from an edge deployment outside the security boundary. The request includes identity data identifying the edge deployment. The identity data is validated based on allowed identity data of the security gateway instance and based on a validation handler associated with the service resource. Based on validating the identity data and validating the request, the identity data is transformed using security data specific to the security gateway instance. The transformed identity data indicates the request has been validated by the security gateway instance. Based on transforming the identity data of the request, the transformed identity data and the request are forwarded to the service resource via a network link within the security boundary, wherein the service resource is configured to process the request based on identifying the transformed identity data.

Handling requests to service resources within a security boundary using a security gateway instance

A method for creating a group plan for protecting an object located at a production location is provided. A selection of an object for which a group plan is to be created is received along with protection intents for the selected object. The protection intents are translated into a group plan for protecting the selected object.

Method, system, and apparatus for translating logical information representative of physical data in a data protection system

Physical (or prior virtual) machine volumes can be converted to virtual machines at a virtual machine host while the physical machines are running. In one implementation, a volume shadow copy service can be used to create an application (and/or file system)-consistent snapshot of one or more physical machine volumes while the one or more volumes are running. The snapshot data can then be transferred to a mounted virtual hard disk file (dynamic or fixed) at a virtual machine host. Operational information (e.g., boot record, system registry, drivers, devices, configuration preferences, etc.) associated with the virtual hard disk file and the operating system(s) within the virtual machine can then be modified as appropriate to ensure that the corresponding virtual machine is bootable and functional at the virtual machine host. The virtual hard disk file can then be un-mounted, and used as a new virtual machine.

Converting physical machines to virtual machines

Growing community of inventors

Seattle, WA, United States of America

Venkatasubrahmanyam Raman