1. A system, comprising: a host server with one or more memory locations configured to store one or more isolated environments and one or more host server update-caches, wherein the isolated environments comprise at least one or more applications, files and executables for said one or more applications, and an interception database comprised of mappings between resources inside an isolated environment and outside; one or more clients comprising one or more memory locations configured to store one or more isolated environments, an update-cache for each isolated environment, and a host operating system, wherein said one or more isolated environments comprise at least one or more applications, files and executables for said one or more applications, and an interception database comprised of mappings between resources inside an isolated environment and outside; and an isolated environment client policy manager configured to store client credentials for the one or more clients, wherein said one or more clients are authenticated against said isolated environment client policy manager and access to applications and isolated environments are granted based on said client-authentication; wherein one or more of said isolated environments on the host server are streamed to the one or more clients, and said one or more host server update-caches are configured to identify which files in said streamed isolated environments have changed since last being streamed to said one or more clients; and wherein said host server is authenticated using a certificate and said one or more clients validate said host certificate before accepting streaming applications from said host.