Remotely restricting client devices
AssigneeAirWatch LLC
InventorsKevin Marshall McKeithan, II, William DeWeese
Life of this patent
Estimating the term…
Abstract
Disclosed are various examples for remotely restricting client devices. A client device can be placed into a restricted mode in which application switching capabilities of the client device are disabled. Additionally, the client device can transmit screen capture data to a management service, which can provide the ability for an administrator user to monitor data shown on a display associated with the client device. The client device can also be removed from the restricted mode in response to a command sent from the management service to the client device.
Claims20
A method comprising:
- obtaining, by at least one computing device executing a management service, a request to register a client device, the request received from a client application;
- generating in a user interface within a management console, by the at least one computing device, an entry associated with the client device;
- obtaining, from the user interface associated with the management console, a request to place the client device in a restricted mode that disables an application switching capability of the client device;
- generating, by the at least one computing device, a command to place the client device in the restricted mode, wherein the command causes the client device to edit a system registry associated with an operating system of the client device to disable the application switching capability of the client device, wherein to edit the system registry associated with the operating system of the client device to disable the application switching capability of the client device comprises an instance in which a feature of the operating system is disabled that allows at least one application that is executing in a foreground on the client device to be changed;
- and
- transmitting, from the at least one computing device, the command to the client device to place the client device in the restricted mode, the command identifying at least one permitted application executable by the client device while the client device is in the restricted mode in the instance in which the feature is disabled.
A non-transitory computer-readable medium embodying a program, when executed by a client device, the program causes the client device to at least:
- generate a request to register the client device in a restricted mode, wherein the request comprises an identifier associated with the client device;
- transmit the request to a management service accessible over a network;
- obtain a command to place the client device in the restricted mode from the management service, the command identifying a permitted application that is allowed to be executed while the client device is in the restricted mode;
- disable an application switching capability by editing a system registry associated with an operating system of the client device, wherein to disable the application switching capability by editing the system registry comprises an instance in which a feature of the operating system is disabled that allows at least one application that is executing in a foreground on the client device to be changed;
- enter the restricted mode in the instance in which the feature is disabled;
- and
- execute the permitted application identified by the command to place the client device in the restricted mode.
A system comprising:
- a client device executing a client application;
- and
- a computing environment executing a management service, the computing environment in communication with the client device over a network, wherein the client device is configured to:
- generate a request to register the client device in a restricted mode, wherein the request originates from the client application;
- transmit the request to the management service;
- obtain a command to place the client device in the restricted mode, the command being received from the management service and the command specifying a permitted application that is allowed to be executed while the client device is in the restricted mode;
- disable an application switching capability by editing a system registry associated with an operating system of the client device, wherein to disable the application switching capability by editing the system registry comprises an instance in which a feature of the operating system is disabled that allows at least one application that is executing in a foreground on the client device to be changed;
- enter the restricted mode in the instance in which the feature is disabled;
- and
- execute the permitted application identified by the command while the client device is in the restricted mode.
Dependencies are inferred from the claim text.