A method comprising: at a virtualization server comprising at least one processor, a communication interface, and memory: receiving, by the at least one processor and via the communication interface, end point analysis information associated with an enrolled device, wherein receiving the end point analysis information associated with the enrolled device comprises receiving one or more compliance tags generated by an enterprise mobility management server for the enrolled device, wherein the one or more compliance tags generated by the enterprise mobility management server for the enrolled device indicate whether the enrolled device is in compliance with a set of policies applicable to the enrolled device; analyzing, by the at least one processor, the end point analysis information associated with the enrolled device to determine, based on one or more smart access policies and the one or more compliance tags, whether to selectively enable or disable each of a plurality of hosted application functionalities of a hosted application experience; and providing, by the at least one processor, via the communication interface, to the enrolled device, a hosted application experience, wherein providing the hosted application experience to the enrolled device comprises: selectively enabling, based on the analyzing the end point analysis information associated with the enrolled device, a first hosted application functionality of the plurality of hosted application functionalities; selectively disabling, based on the analyzing the end point analysis information associated with the enrolled device, a second hosted application functionality of the hosted application experience of the plurality of hosted application functionalities; executing, at the virtualization server, one or more hosted applications in accordance to provide the first hosted application functionality, wherein executing the one or more hosted applications comprises generating virtualized user interface graphics associated with the one or more hosted applications; and sending the virtualized user interface graphics associated with the one or more hosted applications to the enrolled device. receiving, by the at least one processor and via the communication interface, end point analysis information associated with an enrolled device, wherein receiving the end point analysis information associated with the enrolled device comprises receiving one or more compliance tags generated by an enterprise mobility management server for the enrolled device, wherein the one or more compliance tags generated by the enterprise mobility management server for the enrolled device indicate whether the enrolled device is in compliance with a set of policies applicable to the enrolled device; analyzing, by the at least one processor, the end point analysis information associated with the enrolled device to determine, based on one or more smart access policies and the one or more compliance tags, whether to selectively enable or disable each of a plurality of hosted application functionalities of a hosted application experience; and providing, by the at least one processor, via the communication interface, to the enrolled device, a hosted application experience, wherein providing the hosted application experience to the enrolled device comprises: selectively enabling, based on the analyzing the end point analysis information associated with the enrolled device, a first hosted application functionality of the plurality of hosted application functionalities; selectively disabling, based on the analyzing the end point analysis information associated with the enrolled device, a second hosted application functionality of the hosted application experience of the plurality of hosted application functionalities; executing, at the virtualization server, one or more hosted applications in accordance to provide the first hosted application functionality, wherein executing the one or more hosted applications comprises generating virtualized user interface graphics associated with the one or more hosted applications; and sending the virtualized user interface graphics associated with the one or more hosted applications to the enrolled device. selectively enabling, based on the analyzing the end point analysis information associated with the enrolled device, a first hosted application functionality of the plurality of hosted application functionalities; selectively disabling, based on the analyzing the end point analysis information associated with the enrolled device, a second hosted application functionality of the hosted application experience of the plurality of hosted application functionalities; executing, at the virtualization server, one or more hosted applications in accordance to provide the first hosted application functionality, wherein executing the one or more hosted applications comprises generating virtualized user interface graphics associated with the one or more hosted applications; and sending the virtualized user interface graphics associated with the one or more hosted applications to the enrolled device.