Configuration management for co-management
AssigneeVMware, Inc.
InventorsPaul Adam Ryman, Maxwell Christopher Fox, Richard Jason Croft
Life of this patent
Estimating the term…
Abstract
Various examples for discovering policy bindings between group policy rules in a legacy management framework and unified endpoint management rules that are utilized in a modern mobile device management (MDM) device management framework. A configuration state view can allow an administrator to understand inconsistencies or conflicts between group policy rules and UEM rules.
Claims20
A non-transitory computer-readable medium embodying program code executable in a computing device that, when executed by the computing device, causes the computing device at least:
- identify a combination of a user and a device that is enrolled as a managed device with a remotely executed management service;
- identify a plurality of group policy rules defined for the user and the device, the group policy rules defined in a directory service;
- identify a plurality of unified endpoint management (UEM) rules defined by the remotely executed management service for the user and the device;
- identify ones of the group policy rules that have at least one an analog from the UEM rules;
- build a configuration state view of the user and the device, the configuration state view identifying group policy rules and UEM rules that affect the same functionality of the device;
- and
- identify inconsistencies between the group policy rules and the UEM rules.
A system comprising:
- at least one computing device comprising a processor;
- and
- program instructions executable in the computing device that, when executed by the computing device, cause the client device to:
- identify a combination of a user and a device that is enrolled as a managed device with a remotely executed management service;
- identify a plurality of group policy rules defined for the user and the device, the group policy rules defined in a directory service;
- identify a plurality of unified endpoint management (UEM) rules defined by the remotely executed management service for the user and the device;
- identify ones of the group policy rules that have at least one an analog from the UEM rules;
- build a configuration state view of the user and the device, the configuration state view identifying group policy rules and UEM rules that affect the same functionality of the device;
- and
- identify inconsistencies between the group policy rules and the UEM rules.
A method comprising:
- identifying a combination of a user and a device that is enrolled as a managed device with a remotely executed management service;
- identify a plurality of group policy rules defined for the user and the device, the group policy rules defined in a directory service;
- identify a plurality of unified endpoint management (UEM) rules defined by the remotely executed management service for the user and the device;
- identify ones of the group policy rules that have at least one an analog from the UEM rules;
- build a configuration state view of the user and the device, the configuration state view identifying group policy rules and UEM rules that affect the same functionality of the device;
- and
- identify inconsistencies between the group policy rules and the UEM rules.
Dependencies are inferred from the claim text.