SYSTEMS AND METHODS FOR MANAGING POLICIES ON A COMPUTER

• US 20120215899A1
• Filed: 02/17/2012
• Published: 08/23/2012
• Est. Priority Date: 07/09/2004
• Status: Abandoned Application

• Current Assignee: Quest Software, Inc.
• Original Assignee: Quest Software, Inc.
• Inventors: Peterson, Matthew T., Peterson, Daniel F.
• Application Number:
  US13/399,438
• Publication Number:
  US 20120215899A1
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: G06F 21/6236 between heterogeneous systems
• CPC Class Codes: H04L 41/0866 Checking the configuration
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management

Abstract

An apparatus, system, and method are disclosed for managing policies on a computer having a foreign operating system. Policies may specify hardware or software configuration information. Policies on a first computer with a native operating system are translated into configuration information usable on a second computer having a foreign operating system. In an embodiment, a translator manager manages the association between the policy on the first computer and the translator on the second computer. Computer management complexity and information technology management costs are reduced by centralizing computer management on the native operating system. Further reductions in management complexity are realized when the present invention is used in conjunction with network directory services.

Claims

1. A policy management system comprising:

a directory server comprising computer storage that stores a configuration settings database and a first policy-related file;

a first computer comprising a first processor, computer storage that stores a policy template, and computer instructions executable by the first processor comprising a policy editor and a policy manager; and

a second computer comprising a second processor, computer storage that stores a second policy-related file, and computer instructions executable by the second processor comprising a translator manager and a translator;

wherein the policy management system facilitates management of a group of computers having multiple operating systems by replicating configuration information stored on the directory server to the second computer;

wherein a user uses the policy template and policy editor to control operation of the policy manager and wherein the policy manager uses the first policy-related file and settings in the configuration settings database to record, on the directory server, policy settings created by the user; and

wherein the translation manager obtains policy settings by reading from the first-policy related file and the configuration settings database, the translation manager passes the policy settings to the translator, and the translator translates the policy settings to configuration information stored in the second policy-related file, wherein the first policy-related file is not in a native policy format of the second computer and the second policy-related file is in a native policy format of the second computer.

2. The system of claim 1, wherein the policy settings created by the user are used to set configurable options associated with an application program.

3. The system of claim 1, wherein the policy settings created by the user are used to set configurable options associated with an operating system.

4. The system of claim 1, wherein the policy settings created by the user are associated with a defined group of users and set configurable options for the defined group of users.

5. The system of claim 1, wherein the policy settings created by the user define configuration information for each of a plurality of users within a group.

6. The system of claim 1, wherein the policy settings created by the user are created in a process that involves use of a wizard program that guides the user through the process of creating the policy settings.

7. The system of claim 1, wherein the policy management system updates changed policy settings upon login.

8. The system of claim 1, wherein the policy management system updates changed policy settings upon computer startup.

9. The system of claim 1, wherein the second policy-related file is a text file.

10. The system of claim 1, wherein the policy settings are associated with at least one container in a directory services tree on the directory server.

11. A policy management method comprising:

receiving, at a policy editor comprising computer instructions executable by a computer processor, policy settings created by a computer user;

recording, by a policy manager located on a first computer and comprising computer instructions executable by a computer processor, the policy settings created by the user, into a first policy-related file and a configuration settings database located in computer storage on a directory server;

obtaining, by a translation manager located on a second computer and comprising computer instructions executable by a computer processer, the policy settings by reading from the first-policy related file and the configuration settings database;

passing the policy settings from the translation manager to a translator located on the second computer and comprising computer instructions executable by a computer processor; and

translating, using the translator, the policy settings to configuration information stored in a second policy-related file located on the second computer, wherein the first policy-related file is not in a native policy format of the second computer and the second policy-related file is in a native policy format of the second computer;

wherein the policy management method facilitates management of a group of computers having multiple operating systems by replicating configuration information stored on the directory server to the second computer.

12. The method of claim 11, wherein the policy settings created by the user are used to set configurable options associated with an application program.

13. The method of claim 11, wherein the policy settings created by the user are used to set configurable options associated with an operating system.

14. The method of claim 11, wherein the policy settings created by the user are associated with a defined group of users and set configurable options for the defined group of users.

15. The method of claim 11, wherein the policy settings created by the user define configuration information for each of a plurality of users within a group.

16. The method of claim 11, wherein the policy settings created by the user are created in a process that involves use of a wizard program that guides the user through the process of creating the policy settings.

17. The method of claim 11, wherein the policy management system updates changed policy settings upon login.

18. The method of claim 11, wherein the policy management system updates changed policy settings upon computer startup.

19. The method of claim 11, wherein the second policy-related file is a text file.

20. The method of claim 11, wherein the policy settings are associated with at least one container in a directory services tree on the directory server.