Methods and systems for provisioning a virtual resource in a mixed-use server

摘要

A method for provisioning a virtualized resource includes directing, by a provisioning machine, a server-executed hypervisor to provision a virtual machine. The provisioning machine directs generation of an organizational unit within a first organizational unit within a multi-tenant directory service separated from a second organizational unit in the multi-tenant directory service by a firewall. The provisioning machine associates the virtual machine with the first organizational unit. The provisioning machine establishes at least one firewall rule on the virtual machine restricting communications to the virtual machine to communications from explicitly authorized machines, which including at least one other machine within the organizational unit. The provisioning machine receives a request to provision a virtualized resource for at least one user. The provisioning machine updates data associated with the organizational unit to include an identification of the at least one user. The provisioning machine directs the virtual machine to host the virtualized resource.

主权项

1. A method for providing access to a virtualized resource in a mixed-use virtualization environment, the method comprising:
receiving, by a service broker machine, from a client machine, at least one credential; requesting, by the service broker machine, from a database, connection information associated with the at least one credential; receiving, by the service broker machine, from the database, connection information including:
I. an identification of a data center,II. an identification of at least one virtual machine in the data center, the at least one virtual machine (i) associated with a first organization, (ii) designated to provide access to at least one virtual resource for a user associated with the at least one credential, and (iii) executing on a physical server hosting a second virtual machine associated with a second organization and providing shared sessions to users of the second organization, andIII. an identification of a resource username for use in connecting to the at least one virtual machine; providing, by the service broker machine, to the client machine, the connection information; and establishing, by the physical server, a connection between the client machine and the at least one virtual machine providing the at least one virtual resource to the user based on the connection information.