Methods and systems for provisioning a virtual resource in a mixed-use server

1. A method for provisioning a virtualized resource in a mixed-use virtualization environment, the method comprising:

directing, by a provisioning machine, a hypervisor executing on a server, to provision a virtual machine on the server;

directing, by the provisioning machine, generation of a first organizational unit within a multi-tenant directory service separated from a second organizational unity in the a multi-tenant directory service by a firewall;

associating, by the provisioning machine, the virtual machine with the first organizational unit;

establishing, by the provisioning machine, at least one firewall rule on the virtual machine restricting communications to the virtual machine to communications from explicitly authorized machines, the explicitly authorized machines including at least one other machine within the first organizational unit;

receiving, by the provisioning machine, from a management component, a request to provision a virtualized resource for at least one user within an organization, the request received after the provisioning of the virtual machine and generation of the first organizational unit;

updating, by the provisioning machine, data associated with the first organizational unit to include an identification of the at least one user; and

directing, by the provisioning machine, the virtual machine to host the virtualized resource.

2. The method of claim 1 , wherein directing generation of the first organizational unit further comprises directing a directory service management component to instruct a directory server to generate the first organizational unit.

3. The method of claim 2 further comprising transmitting, by the directory service management component, an instruction to generate the first organizational unit via an application programming interface (API) to the directory server.

4. The method of claim 1 , wherein associating further comprises directing the directory service to modify data associated with the first organizational unit to include an identification of the virtual machine.

5. The method of claim 1 , wherein establishing further comprises directing a directory service management component to establish the at least one firewall rule.

6. The method of claim 1 further comprising marking the virtual machine as available for hosting a virtualized resource.

7. The method of claim 1 , wherein receiving further comprises receiving an indication that the virtualized resource is to execute on a virtual machine dedicated to a single user.

8. The method of claim 1 , wherein receiving further comprises receiving an indication of a type of the virtualized resource.

9. The method of claim 1 , wherein receiving further comprises receiving a username associated with the at least one user.

10. The method of claim 1 further comprising generating a resource username associated with the username for use when accessing the virtualized resource.

11. The method of claim 1 , wherein updating further comprises directing, by the provisioning machine, a directory service management component to update the data associated with the first organizational unit.

12. The method of claim 1 , wherein updating further comprises transmitting an instruction to modify data associated with the first organization unit to include an identification of the at least one user.

13. A method for providing access to a virtualized resource in a mixed-use virtualization environment, the method comprising:

receiving, by a service broker machine, from a client machine, at least one credential;

requesting, by the service broker machine, from a database, connection information associated with the at least one credential;

receiving, by the service broker machine, from the database, connection information including:

I. an identification of a data center,

II. an identification of at least one virtual machine in the data center, the at least one virtual machine (i) associated with a first organization, (ii) designated to provide access to at least one virtual resource for a user associated with the at least one credential, and (iii) executing on a physical server hosting a second virtual machine associated with a second organization and providing shared sessions to users of the second organization, and

III. an identification of a resource username for use in connecting to the at least one virtual machine; and

providing, by the service broker machine, to the client machine, the connection information.

14. The method of claim 13 , wherein receiving the connection information includes receiving an identification of a gateway associated with the data center.

15. The method of claim 13 further comprising validating, by the service broker machine, with the database, the at least one credential.

16. The method of claim 13 further comprising logging, by the service broker machine, a date on which the service broker machine received the at least one credential.

17. The method of claim 13 further comprising logging, by the service broker machine, an identifier of the client machine.

18. The method of claim 13 further comprising logging, by the service broker machine, an identifier of an IP address from which the client machine connected to the service broker machine.

19. The method of claim 13 , wherein receiving the at least one credential further comprises receiving biometric information associated with a user of the client machine.

20. The method of claim 13 , wherein receiving the at least one credential further comprises receiving a password.