Machine policy configuration for managed devices
AssigneeVMware, Inc.
InventorsRobert Stanley Schlotman, Jr., Zuhaib Zakaria Abdul Zakaria Khan, Srinivasan Subramanian, Arnout Martijn Grootveld
Life of this patent
Estimating the term…
Abstract
Disclosed are various examples for managing and customizing policy configurations on user devices enrolled in an enterprise management service. The policy configurations can include machine policies and/or user policies. An administrator can customize a baseline including a list of policies supported by an operating system of managed user devices. A management component on the user devices can obtain the baseline specified by the administrator from a managing service and apply the policies to the user device.
Claims20
A system for machine policy enforcement, the system comprising:
- a client device enrolled in a management service;
- and
- at least one application executable in the client device, wherein the at least one application, when executed, causes the client device to:
- obtain a baseline configuration file from a computing device associated with the management service, the baseline configuration file comprising a list of policies associated with an operating system of the client device, and the baseline configuration file being obtained from a command queue of the computing device;
- and
- apply the list of policies for the client device by modifying a registry of the operating system in accordance with the list of policies.
A computer-implemented method for machine policy enforcement, comprising:
- obtaining, by a client device, a baseline configuration file from a computing device associated with a management service, the baseline configuration file comprising a list of policies associated with an operating system of the client device, and the baseline configuration file being obtained from a command queue of the computing device;
- and
- applying, by the client device, the list of policies for the client device by modifying a registry of the operating system in accordance with the list of policies.
A non-transitory computer-readable medium embodying a program executable in a client device, wherein when executed, the program causes the client device to at least:
- obtain a baseline configuration file from a computing device associated with a management service, the baseline configuration file comprising a list of policies associated with an operating system of the client device, and the baseline configuration file being obtained from a command queue of the computing device;
- and
- apply the list of policies for the client device by modifying a registry of the operating system in accordance with the list of policies.
Dependencies are inferred from the claim text.