Airwatch LLC

Vmware, Inc.

Adam Michael Hardy

Carlos Carbonell

Jason Bedient

Binjie Sun

Qi Gao

Adam Stephen Rykowski

Joshua Glenn Broch

Abhishek Mishra

Lokeswar Akuthota

Dharmesh Guna

Prashant Agrawal

Santhosh Chandrashekarappa

Sangeeta Soman

Zundra Vennaldo Daniel

Aashima Madaan

Sriram Devalapalli

A system can include a host device that includes a host management component and a virtual machine execution environment with a guest management component. The guest management component receives a data object generated by the host component. The data object specifies host parameters detected for the host device and hypervisor parameters detected for the hypervisor component. The hypervisor component relays the data object from the host management component to the guest management component, which identifies a violation of a compliance rule using this information. The guest management component performs an action based on the violation.

Enforcing compliance rules using guest management components

Disclosed are various examples for staging client devices. In one example, a computing device identifies a user profile logged in a client device based on receiving a profile identifier from a management component executed on the client device. The computing device determines that user profile is to be unmanaged by a management service based on a list of associated user profiles for the client device. A message is transmitted to the client device. The message causes the management component to refrain from enforcing a plurality of policies of the management service on the client device.

Single user device staging

Various examples are described for defining automations for client devices enrolled with a management service. A computing environment can cause one or more user interfaces to be shown in a display of an administrator device that include at least one field for generating an automation that includes a trigger, a condition, and an action to automatically be performed when the condition is satisfied. The trigger defines a time at which the management service compares the condition to device profiles generated for client devices enrolled with the management service. The user interface can forecast a number of client devices that will be affected or subject to an automation, and can display results of the automation as it is executed in real time.

Previewing impacted entities in automated device definitions

Various examples are described for enrollment data visualization using enhanced graphical user interface elements. In one example, a management service can receive device data from devices enrolled with the management service, where the management service is configured to remotely oversee operation of the devices. The management service can determine operational metrics using the device data describing operation of the client devices and generate a metric visualization region for display in a user interface. In some examples, the metric visualization region can include a graph plotting the operational metrics over a predefined period of time and a circle having a predefined width circumscribing the graph, where at least a portion of the circle is filled based on the operational metrics.

Enrollment data visualization using enhanced graphical user interface elements

A system can include a host device that includes a host management component and a virtual machine execution environment. The host device can execute the host management component and determine that the host device, a hypervisor machine in the virtual machine execution environment, or a virtual machine in the virtual machine execution environment violates at least one compliance rule. The host device can also cause the host management component to perform an action in response to determining that the at least one compliance rule is violated.

Enforcing compliance rules using host management components

Various examples are described for defining automations for client devices enrolled with a management service. A computing environment can cause one or more user interfaces to be shown in a display of an administrator device that include at least one field for receiving a conditional statement to generate an automation associated with client devices enrolled with the management service. The computing environment can validate the conditional statement based on validation criteria and, in an instance in which the conditional statement has been validated, generate the automation based on the conditional statement, the automation causing the computing environment to perform a predetermined action automatically when the conditional statement is satisfied.

Defining automations for enrolled user devices

Various examples for performing rule processing for device management data evaluation are described. According to some examples, one or more computing devices can receive new device data from a client device indicative of a current configuration of the client device and identify a change of a device configuration value from a past device configuration value by comparing the new device data to historic device data. The computing devices can send the new device data to a rule evaluation service to identify one or more rules associated with the device configuration value a rule action service to perform an action specified in the rules. The rule action service can determine the action to perform based on the device configuration value.

Efficient rule processing for device management data evaluation

Disclosed are various embodiments for staging client devices that allow for multiple user access. A computing device retrieves a current version of the list of user profiles associated with the client device. The computing device determines that the current list of user profiles differs from a previous version of the list of user profiles associated with the client device. The computing device identifies a list of policies to be sent to a management component executing on the client device based at least in part on a determination that the current list of user profiles differs from the previous version, wherein the list of policies comprises at least one policy that is associated with at least one user profile included in the current list of user profiles that is absent from the previous version of the list of user profiles. The computing device then sends the list of policies to the management component executing on the client device.

Multiuser device staging

Disclosed are various examples for network printer detection and authentication for managed device deployment. In one example, a computing environment can access a listing of network printers received from a printer discovery service executed in an enterprise device in an intranet behind a firewall. A user group associated with a client device enrolled with a management service can be identified as well as at least one of the network printers assigned to the user group. The client device can be remotely configured to access the at least one of the network printers assigned to the user group.

Network printer detection and authentication for managed device deployment

Disclosed are various examples for staging client devices. A computing device assigns a first policy to a client device. The computing device later authenticates a user account based at least in part on receipt of a user authentication message from the client device. The computing device then selects a second policy to assign to the client device based at least in part on authentication of the user account. The computing device then assigns the second policy to the client device.

Disclosed are various examples for network printer detection and authentication for managed device deployment. In one example, a computing environment can receive an identifier from a client device over a network, where the client device detects the identifier based on a wireless transmission performed by a transmitter in association with a print operation assigned to a network printer. The computing environment can determine whether an authentication is required at the network printer in association with the print operation and cause an agent application executable on the client device to obtain authentication data. An authentication can be performed based on the authentication data received from the client device and, in response to a successful authentication, causes the print operation to be performed by the network printer.

Systems and methods are included for displaying enterprise content on a large-format display based on proximity of one or more user devices. A management server can enroll a television and a user device and install management agents on both. The management server can receive proximity information from the television or the user device, or both, and determine that content relating to the user device should be displayed on the television. For example, the management server or management agents can compare an estimated distance between the television and user device to a threshold distance for displaying content on the television related to that user device. The management server can then request content from a content server and instruct the content server to provide that content directly to the television for display.

Displaying content based on proximity of a user device

Various examples are described for defining automations for client devices enrolled with a management service. A computing environment can cause one or more user interfaces to be shown in a display of an administrator device that include at least one field for receiving a conditional statement to generate an automation associated with client devices enrolled with the management service. The computing environment can validate the conditional statement based on validation criteria and, in an instance in which the conditional statement has been validated, execute a query to determine a number of the client devices affected by the conditional statement. As a result of the query, the computing environment can display information associated with a number of the client devices affected by the conditional statement.

A system can include computer instructions that can cause a computing device to obtain a request to access an application on behalf of a user. The request can be obtained from a client device associated with the user. The computer instructions can further cause the computing device to determine whether the client device is required to execute a virtual machine that executes the application. The computer instructions can further cause the computing device to identify whether the virtual machine is installed in the client device. The computer instructions can further cause the computing device to cause the virtual machine to be installed in the client device.

Growing community of inventors

Atlanta, GA, United States of America

Adam Michael Hardy