USER CONTROLS FOR A COMPUTER

• US 20080155685A1
• Filed: 02/26/2008
• Published: 06/26/2008
• Est. Priority Date: 06/28/2002
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: DAVIS, DENNIS L., CHEN, RAYMOND J., FLO, ERIC R., EVANS, CHRISTOPHER A., REASOR, STERLING M., BEILINSON, CRAIG ADAM, RAMASUBRAMANIAN, RAMKUMAR
• Granted Patent: US 7,797,735 B2
• Time in Patent Office: Days
• US Class Current: 726/21
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems

Abstract

This invention is directed to provide a method for enabling an administrator to monitor and selectively limit the computer functions available to a user. The method is carried out on a personal computer by an administrator, and administrator decisions can be enforced on other personal computers in a local network. The invention enables an administrator to restrict a user'"'"'s logon hours, logon duration, access to computer functions, and access to applications based on content rating. In addition, the administrator may temporarily restrict or extend normally allowed access privileges. The invention also allows for the monitoring, auditing, and reporting of a user'"'"'s computer function usage to an administrator.

Claims

1. A method for selectively limiting a user'"'"'s use of a computer, comprising:

receiving on the computer user authorization settings, including one or more defined time periods during which the user is authorized to use or restricted from use of the computer and one or more computer functions for which the user'"'"'s use is authorized or restricted, for at least one user;

receiving from the user a request to perform an action on the computer;

determining based on the user authorization settings whether the user is authorized to perform the action on the computer, and, if so, performing the action; and

terminating the user'"'"'s use of the computer outside of the one or more defined time periods during which the user is authorized to use the computer.

2. The method of claim 1, wherein the step of receiving on the computer user authorization settings includes receiving user authorization settings stored in at least one group policy object.

3. The method of claim 1, wherein the request to perform an action is a request to log on to the computer.

4. The method of claim 1, wherein the request to perform an action is a request to perform a computer function.

5. The method of claim 1, wherein the request to perform an action is a request to execute an application.

6. The method of claim 1, wherein the user authorization settings include settings to authorize a user to log on to the computer.

7. The method of claim 6, wherein the settings to authorize a user to log on to the computer include settings to deny a logon request by the user.

8. The method of claim 1, wherein the user authorization settings include settings to deny or grant a user access to a computer function.

9. The method of claim 8, wherein the settings to deny or grant a user access to a computer function are contained in a computer functions list.

10. The method of claim 9, wherein the computer functions list includes applications installed on the computer.

11. The method of claim 9, wherein the computer functions list includes for at least one computer function one or more time periods during which the user is authorized to use or restricted from use of the computer function.

12. The method of claim 11, wherein the computer functions list includes for at least one computer function one or more time periods during which the user is authorized to use the computer functions;

and wherein the method further comprises terminating the user'"'"'s use of the computer function outside of the one or more time periods during which the user is authorized to use the computer function.

13. The method of claim 9, wherein the computer functions list includes for at least one computer function an associated content rating for determining whether the user may or may not access the at least one computer function.

14. The method of claim 1, wherein the user authorization settings include types of data collected concerning the user'"'"'s use of the computer.

15. The method of claim 1, further comprising storing data concerning the user'"'"'s use of the computer in a user activity log.

16. The method of claim 15, further comprising storing data concerning the user'"'"'s use of the computer in accordance with the user authorization settings.

17. The method of claim 1, further comprising transmitting a request to temporarily modify the user authorization settings by modifying at least one or the one or more defined time periods.

18. The method of claim 17, further comprising receiving updated user authorization settings after transmitting the request to temporarily modify the user authorization settings by modifying at least one of the one or more defined time periods.

19. A computer-readable storage medium containing computer executable instructions for performing a method for selectively limiting a user'"'"'s use of a computer, the method comprising:

receiving on the computer user authorization settings, including one or more defined time periods during which the user is authorized to use or restricted from use of the computer, for at least one user;

transmitting a request to temporarily modify the user authorization settings by modifying at least one of the one or more defined time periods;

receiving from the user a request to perform an action on the computer;

determining based on the user authorization settings whether the user is authorized to perform the action on the computer, and, if so, performing the action; and

terminating the user'"'"'s use of the computer outside of the one or more defined time periods during which the user is authorized to use the computer.

20. A computer-readable storage medium containing computer executable instructions for performing a method for selectively limiting a user'"'"'s use of a computer in a local network wherein at least one computer in the local network has a group policy object for the user, the method comprising:

receiving on the computer at least one group policy object containing user authorization settings, including one or more defined time periods during which the user is authorized to use or restricted from use of the computer and one or more computer functions for which the user'"'"'s use is authorized or restricted, for at least one user;

receiving from the user a request to perform an action on the computer;

determining based on the user authorization settings whether the user is authorized to perform the action on the computer, and, if so, performing the action; and

terminating the user'"'"'s use of the computer outside of the one or more defined time periods during which the user is authorized to use the computer.