Distributed monitoring of desired configurations using rules

• US 20070168493A1
• Filed: 11/15/2005
• Published: 07/19/2007
• Est. Priority Date: 11/15/2005
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: McAlpine, Roberta, Zakrajsek, Frank, Sarwono, Edhi, Gicewicz, Gregory
• Granted Patent: US 7,506,143 B2
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: G06F 11/006 Identification G06F11/2289 takes precedence
• CPC Class Codes: G06F 11/0709 in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems
• CPC Class Codes: G06F 11/0748 in a remote unit communicating with a single-box computer node experiencing an error/fault remote testing G06F11/2294
• CPC Class Codes: G06F 11/0751 Error or fault detection not based on redundancy power supply failures G06F1/30; network fault management H04L41/06
• CPC Class Codes: G06F 11/3006 where the computing system is distributed, e.g. networked systems, clusters, multiprocessor systems multiprogramming arrangements G06F9/46; allocation of resources G06F9/50
• CPC Class Codes: G06F 11/3051 Monitoring arrangements for monitoring the configuration of the computing system or of the computing system component, e.g. monitoring the presence of processing resources, peripherals, I/O links, software programs verification or detection of system hardware configuration G06F11/2247
• CPC Class Codes: G06F 11/3495 for systems

Abstract

A method and system for monitoring configuration information of computing devices is provided. The monitoring system generates a desired configuration monitor (“DCM”) document for each computing device that is to have its configuration monitored. The DCM document specifies configuration settings to be monitored along with rules that specify how to determine whether a configuration setting is correct. Each computing device may include a comparison engine that inputs the DCM document and applies the rules of the DCM document to determine which configuration settings of the computing device are not in compliance.

Claims

1. A method for monitoring configuration information of computing devices, the method comprising:

providing a desired configuration monitor document that specifies configuration settings and associated rules for determining whether a configuration setting is in compliance; and

for each configuration setting specified in the desired configuration monitor document,

determining whether the rule associated with the configuration setting indicates whether the configuration setting is in compliance; and

when it is determined that the configuration setting is not in compliance, logging that the configuration setting is not in compliance; and

reporting that the logged configuration settings are not in compliance.

2. The method of claim 1 wherein the reporting including sending a message to a server that collects the configuration settings that are not in compliance.

3. The method of claim 1 wherein the providing includes receiving the desired configuration monitor document from a server.

4. The method of claim 1 wherein the configuration settings are selected from a group consisting of registry, active directory, file, Windows management instrumentation configuration settings, and IIS metabase.

5. The method of claim 1 wherein a configuration setting of the desired monitor document has an associated action that is to be taken when the rule associated with the configuration setting is satisfied.

6. The method of claim 5 wherein the action is specified as executable code.

7. The method of claim 5 wherein the action is to put the non-compliant configuration setting into compliance.

8. The method of claim 5 wherein the action is to shut down an application executing on the computing device.

9. A computer system for monitoring the configuration settings of computing devices, the method comprising:

preparing a desired configuration monitor document that specifies configuration settings and associated rules for determining whether a configuration setting is in compliance;

sending to the computing devices the desired configuration monitor document;

receiving from the computing devices reports indicating configuration settings of the computing device that are not in compliance as specified by the rules of the desired configuration monitor document; and

providing reports for analyzing the configuration settings that are not in compliance.

10. The computer system of claim 9 wherein the sending includes sending to the computing devices a comparison engine for determining whether the rules of the desired configuration monitor document are satisfied.

11. The computer system of claim 9 wherein the sending including sending to the computing devices a collection engine for providing to the computer system the configuration settings that are not in compliance.

12. The computer system of claim 9 wherein the preparing includes providing a user interface through which a user can specify the configuration settings and rules.

13. The computer system of claim 9 wherein a rule of the desired configuration monitor is derived from configuration settings collected from computing devices.

14. The computer system of claim 9 wherein the desired configuration monitor document specifies groups of configuration settings.

15. The computer system of claim 14 wherein the configuration settings of a group are organized by data source.

16. A computer-readable medium containing instructions for controlling a computing device to monitor configuration information, comprising:

configuration settings and associated rules for determining whether a configuration setting is in compliance;

a component that determines whether the rule associated with a configuration setting indicates whether the configuration setting is in compliance and that when the configuration setting is not in compliance, logs that the configuration setting is not in compliance; and

a component that provides to a server the logged configuration settings that are not in compliance.

17. The computer-readable medium of claim 16 including a component to install on the computing device the component that determines and logs and the component that reports.

18. The computer-readable medium of claim 16 wherein a configuration setting has an associated action that is to be taken when the rule associated with the configuration setting is satisfied.

19. The computer-readable medium of claim 18 including a component that performs the associated action.

20. The computer-readable medium of claim 18 wherein the action is to put the non-compliant configuration setting into compliance.