# US 12,001,871 B2 · Virtual machine provisioning and directory service management > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,001,871 B2 - Document ID: US12001871B2 - Status: Granted - Kind: B2 - Application number: 17/356,050 - Filed: 2021-06-23 - Published: 2022-12-29 - Granted: 2024-06-04 - Earliest claimed: 2021-06-23 - Assignees: Microsoft Technology Licensing, LLC - Applicants: Microsoft Technology Licensing, LLC - Inventors: Prasanna Chromepet Padmanabhan; Somesh Goel; Jun Shi; Scott Alan Manchester - Web page: https://patentgrep.com/patent/US12001871B2 ## CPC - G06F 9/45558: {Hypervisor-specific management and integration aspects} - H04L 41/0895: Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements - G06F 9/452: {Remote windowing, e.g. X-Window System, desktop virtualisation (protocols for virtual reality H04L67/131)} - H04L 41/0894: Policy-based network configuration management - H04L 43/20: the monitoring system or the monitored elements being virtualised, abstracted or software-defined entities, e.g. SDN or NFV - H04L 67/141: Setup of application sessions (admission control or resource allocation in data switching networks H04L47/70) - G06F 2009/45595: {Network integration; Enabling network access in virtual machine instances} - H04L 67/10: in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A computer implemented method includes granting a subscriber client access to a cloud service-based resource group within a subscriber controlled computing environment. The subscriber controlled computing environment has a virtual network. A direct network connection is established via the virtual network to a domain controller in the subscriber controlled computing environment. The virtual network is extended to a subscriber client virtual machine in a producer cloud service. The subscriber client virtual machine is then joined with the virtual network. Access to the subscriber client virtual machine is provided via the subscriber controlled computing environment and virtual network. ## Claims ### Claim 1 A computer implemented method comprising: granting a subscriber client access to a cloud service-based resource group within a subscriber controlled computing environment, the subscriber controlled computing environment having a virtual network; establishing, via the virtual network, a direct network connection to a domain controller in the subscriber controlled computing environment; extending the virtual network to a subscriber client virtual machine in a producer cloud service; joining the subscriber client virtual machine with the virtual network; and providing access, by the subscriber client via the subscriber controlled computing environment and virtual network, to the subscriber client virtual machine. ### Claim 2 (depends on 1) The method of claim 1 wherein access to the subscriber client virtual machine is provided to the subscriber client via a dedicated network connection in the cloud service-based resource group. ### Claim 3 (depends on 2) The method of claim 2 wherein the dedicated network connection comprises a network interface card accessed via a subscriber client token. ### Claim 4 (depends on 1) The method of claim 1 wherein extending the virtual network to the subscriber client virtual machine comprises: confirming, by a test virtual machine, that the virtual network can support the subscriber client virtual machine; and responsive to the test virtual machine confirming that the virtual network can support the subscriber client virtual machine, provisioning the subscriber client virtual machine. ### Claim 5 (depends on 4) The method of claim 4 wherein confirming that the virtual network can support the subscriber client virtual machine includes performing, by the test virtual machine, a domain join with the domain controller using a producer cloud service token. ### Claim 6 (depends on 4) The method of claim 4 wherein controlling the test virtual machine comprises checking that connections to the virtual network are available. ### Claim 7 (depends on 4) The method of claim 4 wherein controlling the test virtual machine comprises determining that a directory service join is available via the domain controller. ### Claim 8 (depends on 1) The method of claim 1 and further comprising: sending a request to the producer cloud service for virtual machines; sending a request for a first token to a director service joined with the domain controller; generating the client virtual machine as a function of the first token. ### Claim 9 (depends on 1) The method of claim 1 wherein accessing the cloud service-based resource group comprises using, via a subscriber client device, a subscription token to access the subscriber controlled virtual environment. ### Claim 10 (depends on 9) The method of claim 9 wherein extending the virtual network to the subscriber client virtual machine in the producer cloud service to provide access to the subscriber client virtual machine comprises receiving a virtual network linking token. ### Claim 11 (depends on 1) The method of claim 1 and further comprising providing multiple subscriber clients access to multiple respective subscriber client virtual machines via multiple respective unique network interface connections to the virtual network. ### Claim 12 (depends on 11) The method of claim 11 and further comprising managing each of the subscriber client virtual machines via the producer cloud service in accordance with a provisioning policy provided via the subscriber controlled computing environment. ### Claim 13 A machine-readable storage device having instructions for execution by a processor of a machine to cause the processor to perform operations to perform a method, the operations comprising: granting a subscriber client access to a cloud service-based resource group within a subscriber controlled computing environment, the subscriber controlled computing environment having a virtual network; establishing, via the virtual network, a direct network connection to a domain controller in the subscriber controlled computing environment; extending the virtual network to a subscriber client virtual machine in a producer cloud service; joining the subscriber client virtual machine with the virtual network; and providing access, by the subscriber client via the subscriber controlled computing environment and virtual network, to the subscriber client virtual machine. ### Claim 14 (depends on 13) The device of claim 13 wherein access to the subscriber client virtual machine is provided to the subscriber client via a dedicated network connection in the cloud service-based resource group and wherein the dedicated network connection comprises a network interface card accessed via a subscriber client token. ### Claim 15 (depends on 13) The device of claim 13 wherein extending the virtual network to the subscriber client virtual machine comprises: confirming, by a test virtual machine, that the virtual network can support the subscriber client virtual machine; and responsive to the test virtual machine confirming that the virtual network can support the subscriber client virtual machine, provisioning the subscriber client virtual machine. ### Claim 16 (depends on 15) The device of claim 15 wherein confirming that the virtual network can support the subscriber client virtual machine includes performing, by the test virtual machine, a domain join with the domain controller using a producer cloud service token. ### Claim 17 (depends on 16) The device of claim 16 wherein controlling the test virtual machine comprises checking that connections to the virtual network are available and that a directory service join is available via the domain controller. ### Claim 18 (depends on 13) The device of claim 13 wherein the operations further comprise: sending a request to the producer cloud service for virtual machines; sending a request for a first token to a director service joined with the domain controller; generating the client virtual machine as a function of the first token. ### Claim 19 (depends on 13) The device of claim 13 wherein accessing the cloud service-based resource group comprises using, via a subscriber client device, a subscription token to access the subscriber controlled virtual environment and wherein extending the virtual network to the subscriber client virtual machine in the producer cloud service to provide access to the subscriber client virtual machine comprises receiving a virtual network linking token. ### Claim 20 A device comprising: a processor; and a memory device coupled to the processor and having a program stored thereon for execution by the processor to perform operations comprising: granting a subscriber client access to a cloud service-based resource group within a subscriber controlled computing environment, the subscriber controlled computing environment having a virtual network; establishing, via the virtual network, a direct network connection to a domain controller in the subscriber controlled computing environment; extending the virtual network to a subscriber client virtual machine in a producer cloud service; joining the subscriber client virtual machine with the virtual network; and providing access, by the subscriber client via the subscriber controlled computing environment and virtual network, to the subscriber client virtual machine.