Method for managing objects created in a directory service

• US 20020178249A1
• Filed: 03/06/2002
• Published: 11/28/2002
• Est. Priority Date: 03/09/2001
• Status: Active Grant

• Current Assignee: NetIQ Corporation (Open Text Corporation)
• Original Assignee: NetIQ Corporation (Open Text Corporation)
• Inventors: Radhakrishnan, Dilip, Prabakaran, Senthil, Kazachkov, Vladimir
• Granted Patent: US 7,398,529 B2
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: G06F 11/1451 by selection of backup contents
• CPC Class Codes: G06F 11/1464 for networked environments
• CPC Class Codes: H04L 63/0263 Rule management

Abstract

A computerized method for managing objects created in a directory service of a distributed computing environment, including a component for backing up and restoring a single or plurality of directory service objects, a component for delegating security privileges to permit access to directory service objects, a component for retrieving data in policy storage format and representing the data in human-readable form, a component having a graphical user interface including a display capable of searching and reporting policy storage data in human readable form, a component capable of replicating a single or plurality of directory service objects across the domain tree boundaries of the directory service, a component for analyzing the effect a particular setting will have on a particular target represented as a directory service object before the setting is added to the directory service.

Claims

1. The method comprising:

a) providing a component for backing up and restoring a single or plurality of directory service objects;

b) providing a component for delegating security privileges to permit access to directory service objects;

c) providing a component for retrieving data in policy storage format and representing said data in human-readable form;

d) providing a component having a graphical user interface including a display capable of searching and reporting policy storage data in human readable form;

e) providing a component capable of replicating a single or plurality of directory service objects across the domain tree boundaries of said directory service; and

f) providing a component for analyzing the effect a particular setting will have on a particular target represented as a directory service object before the setting is added to said directory service.

3. The method of claim 1 wherein directory service objects include users.

4. The method of claim 1 wherein directory service objects include computers.

5. The method of claim 1 wherein directory service objects include printers.

6. The method of claim 1 wherein directory service objects include a directory service component with a descriptive parameter.

7. The method of claim 1 wherein the back up component facilitates the storage of object settings, links to directory service objects, and security information regarding directory service objects.

8. The method of claim 1 wherein the restore component is capable of restoring archived data to a single or plurality of domains.

9. The method of claim 1 wherein various levels of security privileges can be delegated.

10. The method of claim 9 wherein the levels of security privileges that can be delegated include the ability to configure the entire policy object or the ability to configure only one or a plurality of administrative templates contained in the policy.

11. The method of claim 1 wherein the policy data is stored in a database.

12. The method of claim 11 wherein the database where policy data is stored is the registry.

13. The method of claim 1 wherein the directory service objects include back up components.

2. A system comprising:

a) a component for backing up and restoring a single or plurality of directory service objects;

b) a component for delegating security privileges to permit access to directory service objects;

c) a component for retrieving data in policy storage format and representing said data in human-readable form;

d) a component having a graphical user interface including a display capable of searching and reporting policy storage data in human readable form;

e) a component capable of replicating a single or plurality of directory service objects across the domain tree boundaries of said directory service; and

f) a component for analyzing the effect a particular setting will have on a particular target represented as a directory service object before the setting is added to said directory service.