Apparatus, system, and method for managing policies on a computer having a foreign operating system

• US 7,617,501 B2
• Filed: 07/09/2004
• Issued: 11/10/2009
• Est. Priority Date: 07/09/2004
• Status: Active Grant

• Current Assignee: Quest Software, Inc.
• Original Assignee: Quest Software, Inc.
• Inventors: Peterson, Matthew T., Peterson, Daniel F.
• Primary Examiner(s): Ho; Andy
• Application Number:
  US10/888,845
• Publication Number:
  US 20060010445A1
• Time in Patent Office: 1,950 Days
• Field of Search: 709200-253, 719/319
• US Class Current: 719/319
• CPC Class Codes: G06F 21/6236 between heterogeneous systems
• CPC Class Codes: H04L 41/0866 Checking the configuration
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management

Abstract

An apparatus, system, and method are disclosed for managing policies on a computer having a foreign operating system. Policies may specify hardware or software configuration information. Policies on a first computer with a native operating system are translated into configuration information usable on a second computer having a foreign operating system. In an embodiment, a translator manager manages the association between the policy on the first computer and the translator on the second computer. Computer management complexity and information technology management costs are reduced by centralizing computer management on the native operating system. Further reductions in management complexity are realized when the present invention is used in conjunction with network directory services.

Claims

1. A signal bearing medium tangibly embodying a program of machine-readable instructions executable by a digital processing apparatus to perform operations to manage policies on a computer having a foreign operating system, the operations comprising:

receiving a policy on a second computer having a foreign operating system, the policy constructed on a first computer having a native operating system according to a policy standard developed for, and utilized by, the native operating system, and wherein the foreign operating system does not directly utilize the policy standard developed for, and utilized by, the native operating system; and

executing a translator on the second computer, the translator configured to execute under the foreign operating system and translate the policy from the policy standard developed for, and utilized by, the native operating system to configuration information usable by the foreign operating system.

2. The signal bearing medium of claim 1, wherein the native operating system is Windows™

.

3. The signal bearing medium of claim 1, wherein the foreign operating system is UNIX™

or a derivative thereof.

4. The signal bearing medium of claim 1, further comprising updating selected information on the second computer with the configuration information.

5. The signal bearing medium of claim 4, wherein updating selected information on the second computer comprises updating workstation-specific configuration information.

6. The signal bearing medium of claim 4, wherein updating selected information occurs in response to workstation start-up.

7. The signal bearing medium of claim 4, wherein updating selected information on the second computer further comprises updating user-specific configuration information.

8. The signal bearing medium of claim 7, wherein the user-specific configuration information comprises configuration information selected from the group consisting of organization information, organizational unit information, organizational role information, group information, domain information, domain controller information, country information, locality information, state or province information, site information, profile information, user object information, template information, and alias information.

9. The signal bearing medium of claim 4, wherein setting user-specific configuration information further comprises establishing a precedence of user-specific configuration information.

10. The signal bearing medium of claim 4, wherein updating the selected information occurs in response to user login.

11. The signal bearing medium of claim 1, further comprising editing a policy on the first computer.

12. The signal bearing medium of claim 1, further comprising providing a policy template configured to constrain policy editing on the first computer.

13. The signal bearing medium of claim 1, further comprising registering a plurality of translators on the second computer corresponding to a plurality of policies on the first computer.

14. The signal bearing medium of claim 13, wherein registering the plurality of translators comprises placing the translators in a file system directory.

15. The signal bearing medium of claim 1, further comprising polling a translator to identify configuration information to be translated.

16. The signal bearing medium of claim 15, wherein the polling is conducted at periodic time intervals.

17. The signal bearing medium of claim 1, further comprising polling the first computer to identify modifications to the policy.

18. The signal bearing medium of claim 17, wherein the polling is conducted at periodic time intervals.

19. An apparatus to manage policies on a computer having a foreign operating system, the apparatus comprising:

a policy translator configured to receive a policy on a second computer having a foreign operating system, the policy constructed on a first computer having a native operating system according to a policy standard developed for, and utilized by, the native operating system;

the policy translator further configured to execute under the foreign operating system and translate the policy from the policy standard developed for, and utilized by, the native operating system to configuration information usable by the foreign operating system; and

a translator manager configured to manage the association between the policy on the first computer and the translator on the second computer.

20. The apparatus of claim 19, wherein the policy is a group policy.

21. The apparatus of claim 19, wherein the native operating system is Windows™

and the foreign operating system is UNIX™

or a derivative thereof.

22. The apparatus of claim 21, wherein the policy is further configured to pertain to a plurality of computer workstations referenced in a directory services container.

23. The apparatus of claim 19, wherein the policy is further configured to pertain to a user.

24. The apparatus of claim 19, wherein the policy is further configured to comprise configuration information selected from the group consisting of organization information, organizational unit information, organizational role information, group information, domain information, domain controller information, country information, locality information, locality information, site information, profile information, user object information, template information, and alias information.

25. The apparatus of claim 19, further comprising at least one policy on the first computer, each policy thereof corresponding to a policy translator on the second computer.

26. The apparatus of claim 19, further comprising a policy editor configured to facilitate creation and editing of policies.

27. The apparatus of claim 19, further comprising a policy template configured to constrain creation and editing of policies.

28. The apparatus of claim 19, wherein the translator manager is further configured to execute the translator in response to the translator manager beginning execution.

29. The apparatus of claim 19, wherein the translator manager is further configured to execute the translator in response to user login.

30. The apparatus of claim 19, wherein the translator manager is further configured to poll the first computer for modifications to the policy.

31. An apparatus to manage policies on a computer having a foreign operating system, the apparatus comprising:

means for receiving a policy on a second computer having a foreign operating system, the policy constructed on a first computer having a native operating system according to a policy standard developed for, and utilized by, the native operating system, and wherein the foreign operating system does not directly utilize the policy standard developed for, and utilized by, the native operating system; and

means for translating the policy under the foreign operating system from the policy standard developed for, and utilized by, the native operating system to configuration information usable by the foreign operating system.

32. The apparatus of claim 31, further comprising means for providing a policy template configured to constrain policy editing on the first computer.

33. The apparatus of claim 31, further comprising means for updating selected information on the second computer with the configuration information.

34. A system to manage policies on a computer having a foreign operating system, the system comprising:

a first computer having a native operating system;

a second computer having a foreign operating system;

a directory services database;

a communications network configured to facilitate communications between computers and computer peripherals;

a policy translator configured to execute under the foreign operating system and translate the policy from a policy standard developed for, and utilized by, the native operating system to configuration information useable by the foreign operating system;

a translator manager configured to manage the association between the policy on the first computer and the translator on the second computer.

35. The system of claim 34, the system further comprising a policy editor configured to facilitate creation and editing of polices.

36. The system of claim 34, the system further comprising a policy template configured to constrain creation and editing of policies.

37. The system of claim 34 wherein the directory services database resides on the first computer.

38. A method to manage policies on a computer having a foreign operating system, the method comprising:

receiving a policy on a second computer having a foreign operating system, the policy constructed on a first computer having a native operating system according to a policy standard developed for, and utilized by, the native operating system; and

executing a translator on the second computer, the translator configured to execute under the foreign operating system and translate the policy from the policy standard developed for, and utilized by, the native operating system to configuration information usable by the foreign operating system.

39. The method of claim 38, further comprising providing a policy template configured to constrain policy editing on the first computer.

40. The method of claim 38, further comprising updating selected information on the second computer with the configuration information.