Patent ID: 8683062

Claim:
A computer implemented method, comprising: maintaining a centralized allow list to control access to applications of a computer network in a computer-readable central database; receiving an update to the centralized allow list in the computer-readable central database from a terminal server that hosts one or more network applications that are access controlled according to the centralized allow list and remotely executable from a client computing device, the update being uploaded to the terminal server from an administrative tool that communicates with the terminal server; receiving an access query for access from the client computing device to a particular application that is on the one or more terminal servers at the computer-readable central database, the access query including an alias for a name of the particular application, the alias specifying a communication protocol for accessing the particular application; evaluating information in the access query against the centralized allow list to ascertain whether access privilege exists for accessing the particular application using the client computing device; and when the access privilege is affirmative, granting access to the particular application on a specified terminal server at the client computing device, the granting including providing an identity of the specified terminal server from which to access the particular application.