Automatic Computer User Account Management on Multi Account Computer System

• US 20170310785A1
• Filed: 09/15/2016
• Published: 10/26/2017
• Est. Priority Date: 04/22/2016
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Martin, Jessica Lynn, Wei, Yaou, Herman, Zachary Grant, Donahue, Tyler Joseph, Anthony, Christopher Ronald, Lejeune, Christophe Dae Seung
• Granted Patent: US 10,303,653 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 16/1727 Details of free space management performed by the file system saving storage space on storage systems G06F3/0608; management of blocks in storage devices G06F3/064
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06F 3/0652 Erasing, e.g. deleting, data cleaning, moving of data to a wastebasket
• CPC Class Codes: H04L 67/143 Termination or inactivation of sessions, e.g. event-controlled end of session
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/5682 Policies or rules for updating, deleting or replacing the stored data

Abstract

Managing user accounts on a shared computing device to maintain at least one of system resources or performance. The method includes identifying one or more desired triggers indicating that that one or more user accounts should be deleted from the shared computing device to comply with a predetermined resource target. The method further includes, as a result of the one or more triggers, deleting user accounts to attempt to comply with the predetermined resource target.

Claims

1. A computer system comprising:

one or more processors; and

one or more computer-readable media having stored thereon instructions that are executable by the one or more processors to configure the computer system to manage user accounts on a shared computing device to maintain at least one of system resources or performance, including instructions that are executable to configure the computer system to perform at least the following;

identify one or more desired triggers indicating that that one or more user accounts should be deleted from the shared computing device to comply with a predetermined resource target; and

as a result of the one or more triggers, delete user accounts to attempt to comply with the predetermined resource target.

2. The computer system of claim 1, wherein the one or more triggers comprise resource triggers based on disk usage.

3. The computer system of claim 1, wherein the one or more triggers comprise resource triggers based on a number of accounts on the shared computing device.

4. The computer system of claim 1, wherein deleting user accounts takes into account exemptions for one or more user accounts.

5. The computer system of claim 1, wherein the deleting user accounts is prioritized based on the size of the user accounts.

6. The computer system of claim 1, wherein deleting user accounts is prioritized based on the amount of offline storage for accounts on the shared computing system.

7. The computer system of claim 1, wherein deleting user accounts is prioritized based on the number or frequency of logins for the user accounts.

8. The computer system of claim 1, wherein networked domain based accounts are preferred over local accounts at the shared computing system such that local accounts are deleted before networked domain based accounts are deleted.

9. The computer system of claim 1, wherein deleting user accounts takes into account the likelihood of users to use the shared computing system.

10. The computer system of claim 1, wherein deleting comprises deleting portions of a user accounts and identifying those portions as online only portions of the user account while continuing to maintain other portions of the user accounts at the shared computing device.

19. The method of claim 1 wherein deleting comprises deleting portions of a user accounts and identifying those portions as online only portions of the user account while continuing to maintain other portions of the user accounts at the shared computing device.

11. A computer implemented method of managing user accounts on a shared computing device to maintain at least one of system resources or performance, the method comprising:

identifying one or more triggers indicating that that one or more user accounts should be deleted from the shared computing device to comply with a predetermined resource target; and

as a result of the one or more triggers, deleting user accounts to attempt to comply with the predetermined resource target.

12. The method of claim 11, wherein the one or more triggers comprise resource based triggers based on queue size.

13. The method of claim 11, wherein deleting user accounts is prioritized based on the amount of offline storage for accounts on the shared computing system.

14. The method of claim 11, wherein deleting user accounts is prioritized based on the number or frequency of logins for the user accounts.

15. The method of claim 11, wherein networked domain based accounts are preferred over local accounts at the shared computing system such that local accounts are deleted before networked domain based accounts are deleted.

16. The method of claim 11, wherein deleting user accounts takes into account the likelihood of users to use the shared computing system.

17. The method of claim 11, further comprising identifying a critical trigger and as a result of identifying a critical trigger, deleting user accounts in a short time frame.

18. The method of claim 11, further comprising identifying a maintenance trigger and as a result of deleting user accounts when the shared computing system is idle within some predetermined criteria of idleness.

20. A shared computing device comprising:

one or more computer-readable media;

a plurality of user accounts stored on the one or more computer readable media;

a system state trigger service configured to manage one or more triggers configured to identify when one or more user accounts should be deleted from the shared computing device to comply with a predetermined resource target; and

one or more policy engines that are configured to evaluate triggers, and as a result of evaluating the one or more triggers, delete user accounts to attempt to comply with the predetermined resource target.