1. An apparatus for endpoint-hosted hypervisor management, comprising: a processor running a hypervisor-resident, policy-based, virtual management agent in a privileged context, said processor, via said agent, managing at least one host OS from outside said OS, said host OS comprising a virtual machine (VM) running on an underlying hardware-based device; said processor, via said agent, executing virtual machine management operations for any of provisioning, end-of-life, removable device management, emergency partition, protected process, configuration persistence, multiple VMs, encrypted VMs, or off-line patching; a client hosted virtual desktop running within said underlying hardware-based device, said client hosted virtual desktop comprising said hypervisor, wherein said hypervisor is configured to support an administrative environment comprising a virtual management appliance, said virtual management appliance comprising said management agent, a virtual relay, and a virtual management platform, said hypervisor also configured to support at least one virtual machine having a respective virtual machine agent; and a parent relay configured for inspection, wherein said virtual management platform interfaces with said hypervisor to allow inspection of said hardware-based device, and wherein said virtual management platform interfaces with said hypervisor to allow management of hardware-based device.