Mapping global policy for resource management to machines

• US 9,501,656 B2
• Filed: 04/05/2011
• Issued: 11/22/2016
• Est. Priority Date: 04/05/2011
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Mysore Seetharam, Ravindra, Wollnik, Matthias, Ben-Zvi, Nir, Hardy, Judd, Zheglov, Ivelin L.
• Primary Examiner(s): Najjar, Saleh
• Assistant Examiner(s): Korsak, Oleg
• Application Number:
  US13/079,987
• Publication Number:
  US 20120260303A1
• Time in Patent Office: 2,058 Days
• Field of Search: 726 1- 4, 726 26- 30
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database

Abstract

A global policy is applied to only select resources (e.g., certain file folders) based on property settings associated as metadata with those resources. The resource property settings correspond to a defined property set (e.g., a global taxonomy) that is consistent with the global policy. When global policy is received, the property metadata for each resource determines whether to apply the global policy to that resource. In this way, a central administrator may provide the defined property set, a policy author may provide the policy, and a local administrator may set the resource property settings.

Claims

1. A computer implemented method, the method comprising:

receiving, by a client, a set of defined property definitions, wherein the set of defined property definitions applies to a plurality of machines, wherein the plurality of machines includes the client;

maintaining, by the client, property metadata associated with a resource of the client;

receiving, by the client, a policy that is applicable to the plurality of machines, wherein whether the policy applies to the resource is determined based at least in part on at least one property definition of the set of defined property definitions;

determining, by the client, that the resource meets the at least one property definition based at least in part on the property metadata;

applying, by the client, the policy to the resource;

updating, by the client, the resource, wherein updating the resource comprises updating the property metadata;

determining, by the client, that the resource no longer meets the at least one property definition; and

removing, by the client, the policy from the resource based on the update to the resource.

2. The method of claim 1 wherein the policy has a condition that references a property definition.

3. The method of claim 1 wherein the resource comprises a folder, share, UNC path or file, and wherein maintaining the property metadata comprises maintaining the property metadata within a file in the folder, share, or UNC path.

4. The method of claim 1 wherein the resource comprises a folder, share, UNC path or file, and wherein maintaining the property metadata comprises maintaining a folder, share, UNC path or file type property setting.

5. The method of claim 1 wherein the resource comprises a folder, share, UNC path or file, and wherein maintaining the property metadata comprises maintaining a secrecy level property setting, or maintaining a business impact level property setting, or maintaining a legal hold property setting, or maintaining any combination of a secrecy level property setting, a business impact level property setting, or a legal hold property setting.

6. The method of claim 1 further comprising, obtaining a second policy that is applicable to only the client, and using the property metadata to determine whether to apply the second policy to the resource.

7. The method of claim 1 wherein the property metadata is changed into changed metadata, and further comprising, using the changed metadata to determine whether to apply the policy to the resource.

8. One or more computer storage media having computer-executable instructions, which when executed perform steps, comprising:

obtaining a set of property definitions by a first client, wherein the set of property definitions applies to a plurality of computing machines, including the first client;

obtaining by the first client a policy that applies to the plurality of computing machines, wherein the policy is associated with at least one property definition in the set of property definitions, wherein the policy is obtained without being requested by the first client;

maintaining by the first client property metadata in association with a resource of the first client, in which the property metadata represents at least one setting corresponding to the at least one property definition;

determining by the first client that the policy uses the at least one property definition represented by the property metadata; and

applying at least part of the policy to the resource;

updating the resource, wherein updating the resource comprises updating the property metadata;

determining that the resource no longer meets the at least one property definition; and

removing the policy from the resource.

9. The one or more computer storage media of claim 8 wherein the resource comprises a folder, share, UNC path or file, and wherein maintaining the property metadata in association with the resource comprises maintaining the property metadata within a metadata file in the folder, share, or UNC path.

10. The one or more computer storage media of claim 8 wherein the resource comprises a folder, share, UNC path or file, and wherein applying at least part of the policy comprises performing an action to a metadata file within the folder, share or UNC.

11. The one or more computer storage media of claim 8 wherein the resource comprises a folder, share, UNC path or file, and wherein maintaining the property metadata is maintaining a secrecy level property setting, maintaining a business impact level property setting, maintaining a legal hold property setting, maintaining any combination of a secrecy level property setting, maintaining a business impact level property setting, or maintaining a legal hold property setting.

12. The one or more computer storage media of claim 8 wherein the policy has a condition that references a property definition.

13. The one or more computer storage media of claim 8 further comprising, obtaining property definitions for properties of resources.

14. The one or more computer storage media of claim 8 further comprising, obtaining policy that is local to the first client, and using the property metadata to determine whether to apply the policy that is local to the first client to the resource.

15. A system comprising:

at least one computer processor;

memory, in electronic communication with the at least one computer processor, the memory including instructions that, when executed by the at least one computer processor, cause the at least one computer processor to perform a method, the method comprising;

receiving, by a client, a set of defined property definitions, wherein the set of defined property definitions applies to a plurality of machines, wherein the plurality of machines includes the client;

maintaining, by the client, property metadata associated with a resource of the client;

receiving, by the client, a policy that is applicable to the plurality of machines, wherein whether the policy applies to the resource is determined based at least in part on at least one property definition of the set of defined property definitions;

determining, by the client, that the resource meets the at least one property definition based at least in part on the property metadata;

applying, by the client, the policy to the resource;

updating, by the client, the resource, wherein updating the resource comprises updating the property metadata;

determining, by the client, that the resource no longer meets the at least one property definition; and

removing, by the client, the policy from the resource based on the update to the resource.

16. The system of claim 15, wherein the policy has a condition that references a property definition.

17. The system of claim 15, wherein the resource comprises a folder, share, UNC path or file, and wherein maintaining the property metadata comprises maintaining the property metadata within a file in the folder, share, or UNC path.

18. The system of claim 15, wherein the resource comprises a folder, share, UNC path or file, and wherein maintaining the property metadata comprises maintaining a folder, share, UNC path or file type property setting.

19. The system of claim 15, wherein the resource comprises a folder, share, UNC path or file, and wherein maintaining the property metadata comprises maintaining a secrecy level property setting, or maintaining a business impact level property setting, or maintaining a legal hold property setting, or maintaining any combination of a secrecy level property setting, a business impact level property setting, or a legal hold property setting.

20. The system of claim 15, wherein the method further comprises:

obtaining a second policy that is applicable to only the client, and using the property metadata to determine whether to apply the second policy to the resource.