Systems and methods for managing policies on a computer

• US 8,533,744 B2
• Filed: 07/31/2012
• Issued: 09/10/2013
• Est. Priority Date: 07/09/2004
• Status: Active Grant

• Current Assignee: Quest Software, Inc.
• Original Assignee: Dell Software, Inc. (Dell Technologies Inc.)
• Inventors: Peterson, Matthew T., Peterson, Daniel F.
• Primary Examiner(s): Ho, Andy
• Application Number:
  US13/563,490
• Publication Number:
  US 20120297035A1
• Time in Patent Office: 406 Days
• Field of Search: 719/319, 709/201, 709/220, 709/223
• US Class Current: 719/319
• CPC Class Codes: G06F 21/6236 between heterogeneous systems
• CPC Class Codes: H04L 41/0866 Checking the configuration
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management

Abstract

An apparatus, system, and method are disclosed for managing policies on a computer having a foreign operating system. Policies may specify hardware or software configuration information. Policies on a first computer with a native operating system are translated into configuration information usable on a second computer having a foreign operating system. In an embodiment, a translator manager manages the association between the policy on the first computer and the translator on the second computer. Computer management complexity and information technology management costs are reduced by centralizing computer management on the native operating system. Further reductions in management complexity are realized when the present invention is used in conjunction with network directory services.

Claims

1. A group policy execution system comprising computer hardware configured to perform operations comprising:

receiving, at a computer having a non-Windows operating system, a Windows group policy that has a format that is native to a Windows operating system but is not native to the non-Windows operating system and that defines configuration information for each of a plurality of users within a group, wherein the Windows group policy can be read, in its native format, by a Windows client computer to set policy settings on the Windows client computer but cannot be read, in its native format, by a non-Windows client computer to set policy settings on the non-Windows client computer;

translating the Windows group policy into a translated group policy that has a format that is native to the non-Windows operating system, wherein the translated group policy is at least partially embodied in at least one plain text file; and

applying the translated group policy on the computer;

maintaining an association between the Windows group policy and the translated group policy;

detecting a change to the Windows group policy on the Windows computer;

determining that the translated group policy on the non-Windows computer, for which there is an association with the changed Windows group policy, needs to be changed;

translating the changed Windows group policy into a changed translated group policy; and

applying the changed translated group policy on the computer;

wherein the group policy is a Windows policy file used to set configurable options for a group of computer users, and wherein, after translation by the computer, the Windows group policy remains centrally managed and updated by the Windows computer, and updates to the policy are propagated to the computer, such that use of Windows native policies is extended to allow an administrator to use Windows native policies to manage configuration information on the computer.

2. The system of claim 1, wherein the Windows group policy defines configuration of at least one application for each of a plurality of users within a group.

3. The system of claim 1, wherein the Windows group policy facilitates management of a group of computers.