A system for accessing an application available from a data center of a program execution service, the system comprising: a Program Execution Service, PES, comprising a number of data centers (102A-102N), each data center including one or more physical computing systems configurable to execute one or more virtual desktop instances, each virtual desktop instance associated with a computing environment that includes an operating system configurable to execute one or more applications, each virtual desktop instance accessible by a computing device of a user of the PES via a network, the PES including an application marketplace accessible to search for one or more of the virtual desktop instances or one or more applications, the PES further comprising: an application access component configured to: provide, to a user computing device associated with a user of the PES, access to the application marketplace for searching for an application to be executed by the virtual desktop instance; receive, by the application marketplace, a request from the user to access the application on a virtual desktop instance from the user computing device; determine an entity associated with the user; access placement rules associated with the entity, the placement rules used to determine a plurality of users that are authorized to access the application on behalf of the entity and a percentage of users of the entity that may access the application at a particular data center; access metadata associated with the user computing device, the metadata comprising information indicative of whether the user is authorized to access the application from the PES on the user computing device; determine, based at least in part on the metadata and the placement rules, whether the user is authorized to access the application on the user computing device; in response to determining that the user is authorized to access the application on the user computing device; select a data center to host the virtual desktop instance from the number of data centers, the data center selected based at least in part on the placement rules and an amount of users of the entity accessing the data center; cause the application to be executed from the virtual desktop instance at the selected data center; and provide, to the user computing device, access to at least a portion of the application from the virtual desktop instance. provide, to a user computing device associated with a user of the PES, access to the application marketplace for searching for an application to be executed by the virtual desktop instance; receive, by the application marketplace, a request from the user to access the application on a virtual desktop instance from the user computing device; determine an entity associated with the user; access placement rules associated with the entity, the placement rules used to determine a plurality of users that are authorized to access the application on behalf of the entity and a percentage of users of the entity that may access the application at a particular data center; access metadata associated with the user computing device, the metadata comprising information indicative of whether the user is authorized to access the application from the PES on the user computing device; determine, based at least in part on the metadata and the placement rules, whether the user is authorized to access the application on the user computing device; in response to determining that the user is authorized to access the application on the user computing device; select a data center to host the virtual desktop instance from the number of data centers, the data center selected based at least in part on the placement rules and an amount of users of the entity accessing the data center; cause the application to be executed from the virtual desktop instance at the selected data center; and select a data center to host the virtual desktop instance from the number of data centers, the data center selected based at least in part on the placement rules and an amount of users of the entity accessing the data center; cause the application to be executed from the virtual desktop instance at the selected data center; and provide, to the user computing device, access to at least a portion of the application from the virtual desktop instance.