Systems and methods for managing policies on a computer

• US 8,713,583 B2
• Filed: 09/09/2013
• Issued: 04/29/2014
• Est. Priority Date: 07/09/2004
• Status: Active Grant

• Current Assignee: Quest Software, Inc.
• Original Assignee: Dell Software, Inc. (Dell Technologies Inc.)
• Inventors: Peterson, Matthew T., Peterson, Daniel F.
• Primary Examiner(s): Ho, Andy
• Application Number:
  US14/021,852
• Publication Number:
  US 20140012964A1
• Time in Patent Office: 232 Days
• Field of Search: 719/319, 709/201, 709/220, 709/223
• US Class Current: 719/319
• CPC Class Codes: G06F 21/6236 between heterogeneous systems
• CPC Class Codes: H04L 41/0866 Checking the configuration
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management

Abstract

An apparatus, system, and method are disclosed for managing policies on a computer having a foreign operating system. Policies may specify hardware or software configuration information. Policies on a first computer with a native operating system are translated into configuration information usable on a second computer having a foreign operating system. In an embodiment, a translator manager manages the association between the policy on the first computer and the translator on the second computer. Computer management complexity and information technology management costs are reduced by centralizing computer management on the native operating system. Further reductions in management complexity are realized when the present invention is used in conjunction with network directory services.

Claims

1. A computer system comprising:

a workstation having a non-Windows operating system, a tangible computer storage medium with user applications stored therein, and a computer processor;

a policy refresh component, stored in the storage medium, that checks whether a Windows native policy stored on a Windows computer and associated with the workstation has been changed;

a translator manager, stored in the storage medium, that manages the association of the Windows native policy with the workstation and, upon a determination by the policy refresh component that the Windows native policy has been changed, receives the Windows native policy from the Windows computer;

a policy translator, stored in the storage medium, that receives the Windows native policy from the translator manager and translates the Windows native policy into configuration information usable by the non-Windows operating system;

an update configuration component, stored in the storage medium, that applies the configuration information usable by the non-Windows operating system by saving the configuration information in a policy-related file on the workstation;

wherein the Windows native policy can be read, in its native format, by a Windows operating system to set policy settings for Windows computers but cannot be read, in its native format, by a non-Windows operating system to set policy settings for non-Windows computers; and

wherein the Windows native policy is used to set configurable options for at least one computer user, and wherein, after translation by the workstation, the Windows native policy remains centrally managed and updated by the Windows computer, and updates to the Windows native policy are propagated to the workstation, such that use of Windows native policies is extended to allow an administrator to use Windows native policies to manage configuration information on the workstation.

2. The system of claim 1, wherein the Windows native policy defines configuration of at least one application for each of a plurality of users within a group.

3. The system of claim 1, wherein the Windows native policy defines configuration information for each of a plurality of users within a group.

4. The system of claim 1, wherein the policy refresh component checks whether the Windows native policy has been changed at least by polling the Windows computer at periodic intervals.

5. The system of claim 1, wherein the policy refresh component checks whether the Windows native policy has been changed at least by receiving a notification from the Windows computer that the Windows native policy has been changed.

6. The system of claim 1, wherein the workstation is a desktop computer.

7. The system of claim 1, wherein at least one of the user applications stored in the storage medium is a word processing application.

8. A method comprising:

managing, on a workstation having a non-Windows operating system, a tangible computer storage medium with user applications stored therein, and a computer processor, an association between the workstation and a Windows native policy stored on a Windows computer;

checking, by the workstation, whether the Windows native policy stored on the Windows computer and associated with the workstation has been changed;

upon a determination by the workstation that the Windows native policy has been changed, receiving, on the workstation, the Windows native policy from the Windows computer;

translating, on the workstation, the Windows native policy into configuration information usable by the non-Windows operating system; and

applying the configuration information usable by the non-Windows operating system by saving the configuration information in a policy-related file on the workstation;

wherein the Windows native policy can be read, in its native format, by a Windows operating system to set policy settings for Windows computers but cannot be read, in its native format, by a non-Windows operating system to set policy settings for non-Windows computers; and

wherein the Windows native policy is used to set configurable options for at least one computer user, and wherein, after translation by the workstation, the Windows native policy remains centrally managed and updated by the Windows computer, and updates to the Windows native policy are propagated to the workstation, such that use of Windows native policies is extended to allow an administrator to use Windows native policies to manage configuration information on the workstation.

9. The method of claim 8, wherein the Windows native policy defines configuration of at least one application for each of a plurality of users within a group.

10. The method of claim 8, wherein the Windows native policy defines configuration information for each of a plurality of users within a group.

11. The method of claim 8, wherein checking whether the Windows native policy has been changed includes polling the Windows computer at periodic intervals.

12. The method of claim 8, wherein checking whether the Windows native policy has been changed includes receiving, on the workstation, a notification from the Windows computer that the Windows native policy has been changed.

13. The method of claim 8, wherein the workstation is a desktop computer.

14. The method of claim 8, wherein at least one of the user applications stored in the storage medium is a word processing application.

15. A policy management and update system that uses Windows native policies to manage policy settings on a Linux computer, the system comprising:

a workstation having a Linux operating system, a tangible computer storage medium with user applications stored therein, and a computer processor, wherein the workstation allows a user to login to the Linux operating system and to access one or more application programs comprising at least a word processing program;

a policy refresh component, stored in the storage medium, that checks whether a Windows native policy stored on a Windows computer and associated with the workstation has been changed;

a translator manager, stored in the storage medium, that manages the association of the Windows native policy with the workstation and, upon a determination by the policy refresh component that the Windows native policy has been changed, receives the Windows native policy from the Windows computer;

a policy translator, stored in the storage medium, that receives the Windows native policy from the translator manager and translates the Windows native policy into configuration information usable by the Linux operating system;

an update configuration component, stored in the storage medium, that applies the configuration information usable by the Linux operating system by saving the configuration information in a policy-related file on the workstation;

wherein the Windows native policy can be read, in its native format, by a Windows operating system to set policy settings for Windows computers but cannot be read, in its native format, by a Linux operating system to set policy settings for Linux computers; and

wherein the Windows native policy is used to set configurable options for at least one computer user, and wherein, after translation by the workstation, the Windows native policy remains centrally managed and updated by the Windows computer, and updates to the Windows native policy are propagated to the workstation, such that use of Windows native policies is extended to allow an administrator to use Windows native policies to manage configuration information on the workstation.

16. The system of claim 15, wherein the Windows native policy defines configuration of at least one application for each of a plurality of users within a group.

17. The system of claim 15, wherein the Windows native policy defines configuration information for each of a plurality of users within a group.

18. The system of claim 15, wherein the policy refresh component checks whether the Windows native policy has been changed at least by polling the Windows computer at periodic intervals.

19. The system of claim 15, wherein the policy refresh component checks whether the Windows native policy has been changed at least by receiving a notification from the Windows computer that the Windows native policy has been changed.

20. The system of claim 15, wherein the workstation is a desktop computer.

21. The system of claim 15, wherein the update configuration component changes configuration information of the word processing program.

22. A method of managing and updating policy settings on a Linux computer using Windows native policies, the method comprising:

managing, on a workstation having a Linux operating system, a tangible computer storage medium with user applications stored therein, and a computer processor, an association between the workstation and a Windows native policy stored on a Windows computer, wherein the workstation allows a user to login to the Linux operating system and to access one or more application programs comprising at least a word processing program;

checking, by the workstation, whether the Windows native policy stored on the Windows computer and associated with the workstation has been changed;

upon a determination by the workstation that the Windows native policy has been changed, receiving, on the workstation, the Windows native policy from the Windows computer;

translating, on the workstation, the Windows native policy into configuration information usable by the Linux operating system; and

applying the configuration information usable by the Linux operating system by saving the configuration information in a policy-related file on the workstation;

wherein the Windows native policy can be read, in its native format, by a Windows operating system to set policy settings for Windows computers but cannot be read, in its native format, by a Linux operating system to set policy settings for Linux computers; and

wherein the Windows native policy is used to set configurable options for at least one computer user, and wherein, after translation by the workstation, the Windows native policy remains centrally managed and updated by the Windows computer, and updates to the Windows native policy are propagated to the workstation, such that use of Windows native policies is extended to allow an administrator to use Windows native policies to manage configuration information on the workstation.

23. The method of claim 22, wherein the Windows native policy defines configuration of at least one application for each of a plurality of users within a group.

24. The method of claim 22, wherein the Windows native policy defines configuration information for each of a plurality of users within a group.

25. The method of claim 22, wherein checking whether the Windows native policy has been changed includes polling the Windows computer at periodic intervals.

26. The method of claim 22, wherein checking whether the Windows native policy has been changed includes receiving, on the workstation, a notification from the Windows computer that the Windows native policy has been changed.

27. The method of claim 22, wherein the workstation is a desktop computer.

28. The method of claim 22, wherein applying the configuration information updates configuration information of the word processing program.

29. A Windows native policy application system that applies a Windows native policy to set configuration information of at least a word processing program on a Unix computer, the system comprising:

a workstation having a Unix operating system, a tangible computer storage medium with user applications stored therein, and a computer processor, wherein the workstation allows a user to login to the Unix operating system and to access one or more application programs comprising at least a word processing program;

a policy refresh component, stored in the storage medium, that, upon user login to the workstation, checks whether a Windows native policy stored on a Windows computer and associated with the workstation has been changed;

a translator manager, stored in the storage medium, that manages the association of the Windows native policy with the workstation and, upon a determination by the policy refresh component that the Windows native policy has been changed, receives the Windows native policy from the Windows computer;

a policy translator, stored in the storage medium, that receives the Windows native policy from the translator manager and translates the Windows native policy into configuration information usable by the Unix operating system;

an update configuration component, stored in the storage medium, that applies the configuration information usable by the Unix operating system by saving the configuration information in a policy-related file on the workstation, wherein application of the configuration information updates configuration information of at least the word processing program;

wherein the Windows native policy can be read, in its native format, by a Windows operating system to set policy settings for Windows computers but cannot be read, in its native format, by a Unix operating system to set policy settings for Linux computers; and

wherein the Windows native policy is used to set configurable options for at least one computer user, and wherein, after translation by the workstation, the Windows native policy remains centrally managed and updated by the Windows computer, and updates to the Windows native policy are propagated to the workstation, such that use of Windows native policies is extended to allow an administrator to use Windows native policies to manage configuration information on the workstation.

30. The system of claim 29, wherein the Windows native policy defines configuration of at least one application for each of a plurality of users within a group.

31. The system of claim 29, wherein the Windows native policy defines configuration information for each of a plurality of users within a group.

32. The system of claim 29, wherein the policy refresh component checks whether the Windows native policy has been changed at least by polling the Windows computer at periodic intervals.

33. The system of claim 29, wherein the policy refresh component checks whether the Windows native policy has been changed at least by receiving a notification from the Windows computer that the Windows native policy has been changed.

34. The system of claim 29, wherein the workstation is a desktop computer.

35. A method of applying a Windows native policy to set configuration information of at least a word processing program on a Unix computer comprising:

managing, on a workstation having a Unix operating system, a tangible computer storage medium with user applications stored therein, and a computer processor, an association between the workstation and a Windows native policy stored on a Windows computer, wherein the workstation allows a user to login to the Unix operating system and to access one or more application programs comprising at least a word processing program;

upon user login to the workstation, checking, by the workstation, whether the Windows native policy stored on the Windows computer and associated with the workstation has been changed;

upon a determination by the workstation that the Windows native policy has been changed, receiving, on the workstation, the Windows native policy from the Windows computer;

translating, on the workstation, the Windows native policy into configuration information usable by the Unix operating system; and

applying the configuration information usable by the Linux operating system by saving the configuration information in a policy-related file on the workstation, wherein application of the configuration information updates configuration information of at least the word processing program;

wherein the Windows native policy can be read, in its native format, by a Windows operating system to set policy settings for Windows computers but cannot be read, in its native format, by a Unix operating system to set policy settings for Unix computers; and

wherein the Windows native policy is used to set configurable options for at least one computer user, and wherein, after translation by the workstation, the Windows native policy remains centrally managed and updated by the Windows computer, and updates to the Windows native policy are propagated to the workstation, such that use of Windows native policies is extended to allow an administrator to use Windows native policies to manage configuration information on the workstation.

36. The method of claim 35, wherein the Windows native policy defines configuration of at least one application for each of a plurality of users within a group.

37. The method of claim 35, wherein the Windows native policy defines configuration information for each of a plurality of users within a group.

38. The method of claim 35, wherein checking whether the Windows native policy has been changed includes polling the Windows computer at periodic intervals.

39. The method of claim 35, wherein checking whether the Windows native policy has been changed includes receiving, on the workstation, a notification from the Windows computer that the Windows native policy has been changed.

40. The method of claim 35, wherein the workstation is a desktop computer.