1. A method for remote access to a plurality of managed contexts, comprising: providing a hypervisor-resident, policy-based, virtual management agent running in a privileged context and configured to manage at least one host OS from outside said OS, said host OS comprising a virtual machine (VM) running on an underlying hardware-based device; and further comprising using said virtual management agent for any of: connecting to a VM that does not have network access; connecting to an administrative environment in which an administrative agent is running; connecting to any VM hosted by said hypervisor, even if said VM does not have an agent running on it; and connecting to a VM without installing any software inside said VM.