Password hint policies on a user provided device
AssigneeAirWatch LLC
InventorsRene J. Olivera, Ishan Srivastava, Aditya Prasad
Life of this patent
Estimating the term…
Abstract
Disclosed are various examples for remotely managing passwords using local security policies. A client device can be enrolled with a management service. The management service then transmits a password policy requiring a password hint to be defined by the user. A management component executed on the client device can then enforce the password policy by requiring a user to define a password hint in order to access enterprise resources.
Claims20
A non-transitory computer-readable medium embodying a management component executed by a client device, wherein the management component is configured to cause the client device to at least:
- enroll the client device, through the management component installed on the client device, with a management service;
- in response to enrollment of the client device with the management service, determine that a local security policy stored by the management component on the client device indicates that a password hint is required to be defined by a user for a local password corresponding to the client device;
- extract a Windows Relative Identifier (RID) from a Windows Security Identifier (SID) associated with a local user identity of the client device;
- determine that a registry entry in a system registry of the client device fails to comprise the password hint, the registry entry being based upon the RID;
- prompt a user to define the password hint associated with the local password corresponding to the client device;
- and
- store the password hint in the registry entry on the client device.
A method comprising:
- enrolling, by a management component, a client device with a management service, wherein the management component is installed on the client device;
- in response to enrolling the client device with the management service, determining, by the management component, that a local security policy stored by the management component on the client device indicates that a password hint is required to be defined by a user for a local password corresponding to the client device;
- extracting, by the management component, a Windows Relative Identifier (RID) from a Windows Security Identifier (SID) associated with a local user identity of the client device;
- determining, by the management component, that a registry entry in a system registry of the client device fails to comprise the password hint, the registry entry being based upon the RID;
- prompting, by the management component, a user to define the password hint associated with the local password corresponding to the client device;
- and
- storing, by the management component, the password hint in the registry entry.
A system comprising:
- a client device;
- and
- a management component executable by the client device, wherein the management component causes the client device to at least:
- enroll a client device, through a management component installed on the client device, with a management service;
- in response to enrollment of the client device with the management service, determine that a local security policy stored by the management component on the client device indicates that a password hint is required to be defined by a user for a local password corresponding to the client device;
- extract a Windows Relative Identifier (RID) from a Windows Security Identifier (SID) associated with a local user identity of the client device;
- determine that a registry entry in a system registry of the client device fails to comprise the password hint, the registry entry being based upon the RID;
- prompt a user to define the password hint associated with the local password corresponding to the client device;
- and
- store the password hint in the registry entry.
Dependencies are inferred from the claim text.