Methods and Apparatus for Scalable Secure Remote Desktop Access

A method of enrolling networked resources via an enrollment system communicating with an enrollment administration system permitting enrollment based on enrollment rules stored in an enrollment database, the method comprising:

• receiving, by an enrollment administration system executing on a computing machine, a request from an enrollment system communicating with the enrollment administration system, to enroll a networked resource for a user, the request comprising at least an identification of the user and an identification of the networked resource, the networked resource comprising one of:
• a desktop and an application program;
• identifying, by the enrollment administration system, one of a plurality of enrollment rules stored in an enrollment database, each rule identifying a group of users permitted to enroll a networked resource, the identified rule identifying a group of users comprising at least the user;
• enrolling, by the enrollment administration system, the networked resource for the user responsive to (i) authenticating the identity of the user and (ii) determining, based on the identified rule, that the user has permission to enroll and use the networked resource, the enrollment allowing a user to later access the networked resource from a remote client as if the enrolled networked resource locally resides on the client;
• providing, responsive to the enrollment, a remote access system to the user to later access the networked resource from the remote client;
• adding, by the enrollment administration system responsive to the enrollment, an enrollment record of the networked resource for the user to an enrollment database;
• requesting, by the user via the remote access system, remote access to the networked resource;
• verifying, by the remote access system, the identity of the user responsive to the request;
• determining, by the remote access system in communication with the enrollment database, that the user was previously enrolled in the requested network resource;
• and
• granting the user access to the networked resource responsive to the verification and determination.