Applying local machine restrictions on a per-user basis

• US 20060259964A1
• Filed: 01/20/2006
• Published: 11/16/2006
• Est. Priority Date: 05/10/2005
• Status: Abandoned Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Maldonado, Jose F., Campbell, Derick A.
• Application Number:
  US11/336,722
• Publication Number:
  US 20060259964A1
• Time in Patent Office: Days
• US Class Current: 726/16
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2149 Restricted operating environment

Abstract

The ability to apply local machine restrictions on a per-user basis on machines that do not use a directory service is provided. A script that loads a user registry hive through a user interface is provided. The user interface provides a means for an authorized user to apply machine restrictions to a plurality of users. Through interaction with the user interface the registry hive is modified and applied to the appropriate user profile.

Claims

1. A system that facilitates per-user restrictions on a machine, comprising:

a component that receives at least one restriction modification for a machine and updates a profile with the at least one restriction modification; and

a component that receives the updated profile and modifies a profile registry hive.

2. The system of claim 1, the profile registry hive comprising registry information relating to an application setting.

3. The system of claim 2, the application setting comprising at least one of a desktop setting, an environment setting, a printer setting, and a network connection.

4. The system of claim 1, the profile represents a plurality of users that have access to the machine.

5. The system of claim 1, further comprising a script module that runs a script to load the profile registry hive.

6. The system of claim 1, the component that receives at least one restriction modification is an interface that automates applying one or more restrictions to the profile.

7. The system of claim 6, the interface further categorizes recommended restrictions for shared accounts.

8. The system of claim 6, further comprising a session timer that automatically logs off the machine after a predetermined time interval.

9. The system of claim 1, the machine is a shared computer accessed by a plurality of users.

10. The system of claim 1, the at least one restriction modification is a restriction to at least one of a start menu, an operating system, an Internet application, a word processing application, and a software application.

11. The system of claim 1, the machine does not use a directory service.

12. A method for applying local machine restrictions on a machine that does not use an active directory service, comprising:

configuring a registry hive associated with at least a first user;

modifying the registry hive for the at least a first user;

applying the modified registry hive to the at least a first user; and

restricting future access to the at least a first user based upon the modified registry hive.

13. The method of claim 12, modifying the registry hive for the at least a first user, further comprising:

providing a script that loads the registry hive; and

selecting parameters associated with the registry hive.

14. The method of claim 12, applying the modified registry hive to at least a first user is during a log on process.

15. The method of claim 12, further comprising:

accessing the registry hive through an interactive user interface; and

automating restriction settings through the user interface.

16. The method of claim 15, automating restriction settings further comprising:

grouping similar restrictions in a drop-down menu; and

selectively applying the restrictions to a selected profile.

17. The method of claim 12, further comprising:

applying a session timer that automatically logs off the at least a first user after a predefined period.

18. A system for applying local machine restrictions, comprising:

means for loading a registry hive of at least a first user;

means for modifying the registry hive; and

means for applying the modified registry hive to the at least a first user.

19. The system of claim 18, further comprising:

means for selectively applying the modified registry hive to a plurality of users; and

means for distinguishing among the plurality of users.

20. The system of claim 18, further comprising:

means for automating application of restrictions on a per-user basis; and

means for interfacing with an authorized user to facilitate configuration of the restrictions.