Remote access to resources over a network

A method for controlling access to data, the method comprising:

• downloading an interrogator agent onto a first computer over a communication network;
• executing the interrogator agent, wherein execution of the interrogator agent by a processor of the first computer;
• identifies one or more artifacts characterizing an operating environment of the first computer, and
• generates a signature based on the identified artifacts, wherein the signature includes a set of Boolean logical expressions defining a list of the identified artifacts;
• and
• sending the signature to a server for evaluation, wherein the server classifies the first computer into a zone based on matching the set of Boolean logical expressions with at least one configuration controlled by a provisioning server, the zone governed by a rule identifying one or more operating environment requirements for accessing one or more resources.

A method for controlling access to data, the method comprising:

• receiving a request to access a resource, the request sent from a requesting computer over a communication network and indicating an operating environment of the requesting computer;
• identifying that the operating environment of the requesting computer does not conform to a configuration rule;
• and
• sending program code to the requesting computer, wherein the requesting computer executes the program code to update the operating environment to conform to the configuration rule.