Microsoft Technology Licensing, LLC

Alexandru Hanganu

Liqiang Zhu

Paul J Miller

Paul J Leach

Scott Field

Mark Fishel Novak

Yi Zeng

Gopinathan Kannan

Ramesh Chinta

Ryan James Fairfax

Qi Cao

Siddharth Bhai

K Michiko Short

Jeremy Dominic Viegas

James J Simmons

Umit Akkus

This disclosure describes methods, systems, and application programming interfaces for creating a credential managed account. This disclosure describes creating a new password managed account, defining the password managed account, wherein the password managed account is to access a service on a managed computing device, identifying the password managed account for a lifecycle, and automatically managing the password managed account by updating and changing a password for the password managed account on a periodic basis.

Isolation of services or processes using credential managed accounts

A client can communicate with a middle tier, which can then, in turn, communicate with a back end tier to access information and resources on behalf of the client within the context of a system that can scale well. Each individual back end can establish a policy that defines which computing device can delegate to that back end. That policy can be enforced by a domain controller within the same administrative domain as the particular back end. When a middle tier requests to delegate to a back end, the domain controller to which that request was directed can either apply the policy, or, if the domain controller is in a different domain than the targeted back end, it can direct the middle tier to a domain controller in a different domain and can sign relevant information that the middle tier can utilize when communicating with that different domain controller.

Back-end constrained delegation model

Growing community of inventors

Bellevue, WA, United States of America

Alexandru Hanganu