Microsoft Technology Licensing, LLC

Eric R Flo

Sterling M Reasor

John E Brezak

Chris J Guzak

Christopher Andrew Evans

Raymond J Chen

Ramkumar Ramasubramanian

Dennis L Davis

Craig Adam Beilinson

Mark R Ligameri

Charles Cummins

Charles W Stabb

Cristian Marius Ilac

Daniel F Plastina

Timothy P McKee

David Andrew Matthews

J Craig Hally

Hillel Noah Cooperman

Mohammed Samji

Giampiero M Sierra

Klaus U Schutz

Eric C Perlin

David E Kays

Robert E Corrington

Timothy Daniel Noonan

John Scott Stephens

Kanwal Vedbrat

Stefan N Richards

Michele L Freed

Michael W Dennis

Benjamin A Hutz

Paul J Leach

Joseph H Matthews, Iii

Balan Sethu Raman

Sean O Lyndersay

Jason Fergus Moore

Richard Bruce Ward

Robert F Day

Jon Robert Berry

Brian D Wentz

David A Orbits

Richard S Turner, Jr

Andrew Peter Sinclair

Sudarshan Anand Chitre

David Ruzyski

Ramesh Chinta

Shaun A Kaasten

James H Hong

Brian K McNeil

Jeffrey M Saathoff

Stefan Richards

A system and method for controlling access to a computer provides for loose security within a local network while retaining strong security against external access to the network. In one embodiment, a user has access to trusted nodes in a secured group within an unmanaged network, without being required to choose, enter and remember a login password. To establish such a secure blank password or one-click logon account for the user on a computer, a strong random password is generated and stored, and the account is designated as a blank password account. If the device is part of a secured network group, the strong random password is replicated to the other trusted nodes. When a user with a blank password account wishes to log in to a computer, the stored strong random password is retrieved and the user is authenticated.

Method and system for controlling access privileges for trusted network nodes

In an implementation of user interface transition, a user interface logon page is displayed with selectable logon controls that each have a corresponding user-identifiable indicator. A transition from the user interface logon page to a user interface desktop page is initiated in response to a selectable logon control being selected. The transition displays the user-identifiable indicator corresponding to the selectable logon control uninterrupted throughout the transition, and the user-identifiable indicator corresponding to the selectable logon control is displayed on the user interface desktop page.

User interface transition

A system and method for generating aggregated content views in a computing network are provided. A host computing device obtains a request for an aggregated view of content corresponding to a set of criteria. The host computing device queries itself and each computing device in a defined network for locally stored content matching the set of criteria. The query results are merged and displayed to a user at the host computing device as an aggregated list view.

System and method for generating aggregated data views in a computer network

In an implementation of user interface start page, the start page includes a user-identifiable indicator associated with a user of a computing system to indicate that the user is logged-on to the computing system. The user interface start page also includes user-selectable controls from one or more regions of a user interface desktop page which is displayed after a transition from the user interface start page to the user interface desktop page. Each of the user-selectable controls on the user interface start page initiate a display of information associated with the user when selected.

User interface start page

This invention is directed to provide a method for enabling an administrator to monitor and selectively limit the computer functions available to a user. The method is carried out on a personal computer by an administrator, and administrator decisions can be enforced on other personal computers in a local network. The invention enables an administrator to restrict a user's logon hours, logon duration, access to computer functions, and access to applications based on content rating. In addition, the administrator may temporarily restrict or extend normally allowed access privileges. The invention also allows for the monitoring, auditing, and reporting of a user's computer function usage to an administrator.

User controls for a computer

Systems and/or methods are described that enable a credential interface. These systems and/or methods may build a credential user interface enabling a user to choose between multiple credentials and submit an authenticator for a chosen credential. These systems and/or methods may also gather information about arbitrary credentials and build a user interface for submission of authenticators for these arbitrary credentials.

Credential interface

Disclosed is a data synchronization service for use in a peer-to-peer computing environment. Selected data objects are copied onto selected computing devices. A service running on each device monitors data objects for changes. When a change is detected, the service sends a change notification to the other devices so that they can update their copies of the data object. A user can access a data object from any device, knowing that he will retrieve the latest version of the data object. Instead of incurring the costs of storing a large file on every device, a user 'ghosts' the file on some devices. A ghosting device stores only metadata about the file rather than the entire file. The user accesses the file through the ghost: access requests are sent to a device that holds the actual contents, and those contents are presented to the user as if they were stored locally.

Method and system for synchronizing data shared among peer computing devices

Computers on a local computer network, such as a home network or a small business network, are formed into a secured network group that provides common user access control and enables resource sharing among the computers in the group. A computer on the local network discovers whether there are secured network groups existing on the local network. If one secured network group is found, the computer indicates to a second computer in the group its desire to join the group, and establishes trust with that computer, such as by entering a proper user name and password, or a secret identification number. Once the trust is established, the first computer joins the group. Within the secured network group, user accounts and user profiles are replicated to each of the computers in the group. The establishment of trust and the replication of user accounts and profiles among the computers in the group enable the implementation of security policies and user access control in a group-wide manner.

Small-scale secured computer network group without centralized management

A credential is translated with one of different credential provider modules each translating a corresponding different type of credential into a common protocol. The translated credential is communicated through an API to a logon UI module to an operating system (OS) of a local machine. An OS logon module is called by the logon UI module to authenticate the translated credential against a credential database. A user identified by the translated credential is logged on to access the local machine when the authentication is successful. The credential can also be used with a selection received from the logon UI module via a corresponding one of different pre-log access provider (PLAP) modules that each communicate with the API. The API establishes a network session with an access service specified by the selected PLAP module when the credential is authenticated with the credential database.

Interoperable credential gathering and access modularity

A method and system for implementing policy by accumulating policies for a policy recipient from policy objects associated with a hierarchically organized structure of containers, such as directory containers (sites, domains and organizational units) that includes the policy recipient. Based on administrator input, policy settings for the policy recipient may be accumulated into a specific order by inheriting policy from higher containers, which may enforce their policy settings over those of lower containers. Policy that is not enforced may be blocked at a container. The result is an accumulated set of group policy objects that are ordered by relative strength to resolve any policy conflicts. Policy may be applied to a policy recipient by calling extensions, such as an extension that layers the policy settings into the registry or an extension that uses policy information from the objects according to the ordering thereof.

System and method for implementing group policy

Conventional computer systems include numerous application programs which by default store files, or documents, in folders containing the application program that creates them. For example, wordprocessing documents are stored by default in the folder with the wordprocessing application program, and so forth. Thus, users who choose not to organize their documents according to subject matter or other criteria end up having their documents dispersed across numerous application-program folders, sometimes making them difficult to find. Accordingly, the inventors devised a computer operating system that defines a common default document folder for application programs. Moreover, to promote use of the default document folder, one embodiment of the operating system includes a graphical user interface which provides links, that is, one-button access to the common default folder, at file access points, such as in file-open and file-save dialog boxes accessed by the application programs.

Computer operating system that defines default document folder for application programs

A method and system for implementing policy by accumulating policies for a policy recipient from policy objects associated with a hierarchically organized structure of containers, such as directory containers (sites, domains and organizational units) that includes the policy recipient. Based on administrator input, policy settings for the policy recipient may be accumulated into a specific order by inheriting policy from higher containers, which may enforce their policy settings over those of lower containers. Policy that is not enforced may be blocked at a container. The result is an accumulated set of group policy objects that are ordered by relative strength to resolve any policy conflicts. Policy may be applied to a policy recipient by calling extensions, such as an extension that layers the policy settings into the registry or an extension that uses policy information from the objects according to the ordering thereof. Linking of group policy objects to one or more containers (e.g., sites, domains and organizational units) is provided, as is exception management. The effects of group policy may be filtered based on users' or computers' membership in security groups.

Growing community of inventors

Sammamish, WA, United States of America

Eric R Flo