NETWORK BASED PROVISIONING

• US 20130117806A1
• Filed: 11/09/2011
• Published: 05/09/2013
• Est. Priority Date: 11/09/2011
• Status: Abandoned Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Parthasarathy, Srivatsan, Field, Scott, Kays, David, Dadzie, Joseph
• Application Number:
  US13/292,922
• Publication Number:
  US 20130117806A1
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems

Abstract

The subject disclosure generally relates to provisioning devices via a network service, such as a cloud service. A profile component can authenticate a user of a device with a cloud service, and determine services maintained by the network service that are associated with the user. A reception component can receive a request for a set of services from the device, and a services component can obtain the set of services from the network service, and provision the device based on the set of services. Provisioning the device can include downloading the services to the device, or including the services in a virtual machine executing in the network service.

Claims

1. A computing device, comprising:

a memory having computer executable components stored thereon; and

a processor communicatively coupled to the memory, the processor configured to facilitate execution of the computer executable components, the computer executable components, comprising;

a profile component configured to authenticate a user of a device with a network service, and determine services maintained by the network service that are associated with the user;

a reception component configured to receive a request for a set of services from the device; and

a services component configured to obtain the set of services from the network service, and provision the device based on the set of services.

2. The computing device of claim 1, wherein the set of services includes at least one of an operating system, a set of applications, a set of settings, or a set of data.

3. The computing device of claim 1, wherein the set of services include services employed in a configuration of a disparate device.

4. The computing device of claim 1, further comprising an enterprise component configured to determine that the user is associated with an enterprise, and in response to the user being associated with the enterprise, provide a set of enterprise services to the device.

5. The computing device of claim 4, further comprising a policy component configured to enforce a set of enterprise policies.

6. The computing device of claim 1, further comprising a virtual machine component configured to provision a virtual machine that executes in the network service and includes the set of services, wherein the virtual machine can be accessed by the device.

7. The computing device of claim 1, further comprising a dynamic determination component configured to automatically determine the set of services to provide to the device.

8. The computing device of claim 1, wherein the services component is further configured to determine that a subset of the services are incompatible with the device, and in response to the subset of the services being incompatible with the device, map the subset of services to another set of services that are compatible with the device.

9. A method, comprising:

authenticating an identity of a user of a first device with a network service;

determining a set of privileges associated with the user;

obtaining a request to provision the first device based on a configuration of a second device maintained by the network service; and

provisioning the first device based on the configuration of the second device.

10. The method of claim 9, wherein the determining the set of privileges associated with the user, includes determining a set of enterprise privileges associated with the user.

11. The method of claim 10, wherein the determining the set of enterprise privileges associated with the user, includes enabling access for the user to at least one of a set of enterprise services, or set of enterprise service templates.

12. The method of claim 9, wherein the provisioning the first device further comprises downloading a first set services included in the configuration to the device.

13. The method of claim 10, wherein the provisioning the first device further comprises provisioning a virtual machine based on at least one of:

the first set of services, or a second set of services included in the configuration.

14. The method of claim 9, wherein the obtaining the request to provision the first device based on a configuration of a second device maintained by the network service, includes obtaining the request to provision the first device based on the configuration of the second device, wherein the second device is associated with a disparate user.

15. The method of claim 9, wherein the provisioning the first device based on the configuration of the second device, includes provisioning the first device based on at least one of an operating system, a set of applications, a set of settings, or a set of data included in the configuration of the second device.

16. A computer-readable storage device comprising computer-readable instructions that, in response to execution, cause a computing system to perform operations, comprising:

verifying an identity of a user of a device with a network;

obtaining a set of services from the network; and

determining to download a first subset of the services to the device based on a set of criterion.

17. The computer-readable storage device of claim 16, further comprising at least one of:

obtaining a request to provision the device for the set of services, or dynamically determining the set of services to provision for the device.

18. The computer-readable storage device of claim 16, further comprising determining to include at least one of the first subset of the services, or a second subset the services in a virtual machine executing in the network based on the set criterion.

19. The computer-readable storage device of claim 18, wherein the obtaining the set of services includes determining the user has access to a set of enterprise services, and obtaining a set of enterprise services.

20. The computer-readable storage device of claim 16, wherein the obtaining the set of services includes obtaining at least one of an operating system, a set of applications, a set of settings, or a set of data.