Microsoft Technology Licensing, LLC

Jonathan M Luk

Ariel Nicolas Gordon

Murli D Satagopan

Girish Chander

Clifford Didcock

Anandhi Somasekaran

Raman Nagaraj Chikkamagalur

Ziad Elmalki

Sergii Gubenko

Jason Matthew Cahill

Alexander Hopmann

David Paul Harris Gorbet

Balinder Malhi

Jun Ge

Marc Keith Windle

Erick Raymundo Lerma

Zach Rosenfield

Doron Bar-Caspi

Vipins Gopinadhan

Michelle Lee Dauphiny

Ricardo Prates De Oliveira

Joshua Calvin Jenkins

Marcin Olszewski

Fabricio Chalub Barbosa Do Rosario

Raman N Chikkamagalur

Alexander I Hopmann

Aspects of the subject matter described herein relate to synchronizing data. In aspects, properties are synchronized from an organization property store to a cloud property store and/or vice versa. The list of properties to synchronize may change based on the cloud services to which the organization subscribes, changes to the cloud services, or for other reasons. Furthermore, the list of properties to synchronize may be limited to certain objects of the organization which may also change over time.

Synchronizing local and remote data

A system includes a target directory service, a domain mesh with a plurality of domains, and a synchronization host coupled to the domain mesh. The synchronization host is configured to synchronize password changes received in the domain mesh with the target directory service. Synchronizing the password changes includes receiving at the synchronization host a hash value representative of a plaintext password from the domain mesh, performing at the synchronization host an additional hash on the hash value to generate protected password data, and exporting the protected password data from the synchronization host to the target directory service.

Synchronizing credential hashes between directory services

The subject disclosure is directed towards securely synchronizing passwords that are changed at a source location (e.g., an on-premises directory service) to a target location (e.g., a cloud directory service), so that the same credentials may be used to log into the source or target location, yet without necessarily having each domain controller handle the synchronization. The plaintext password is not revealed, instead using hash values computed therefrom to represent the password-related data. The target may receive a secondary hash of a primary hash, and thereby only receive and store a password blob. Authentication is accomplished by using the same hashing algorithms at the target service to compute a blob and compare against the synchronized blob. Also described are crypto agility and/or changing hashing algorithms without requiring a user password change.

A cloud manager assists in deploying and managing networks for an online service. The cloud manager system receives requests to perform operations relating to configuring, updating and performing tasks in networks that are used in providing the online service. The management of the assets may comprise deploying machines, updating machines, removing machines, performing configuration changes on servers, Virtual Machines (VMs), as well as performing other tasks relating to the management. The cloud manager is configured to receive requests through an idempotent and asynchronous application programming interface (API) that can not rely on a reliable network.

Managing networks and machines for an online service

Embodiments provide application and/or resource access control features of an online computing environment, but are not so limited. In an embodiment, a computer-implemented method provides access control features for an online application environment based in part on the use of a number of directory service instances isolated from direct customer access and deployed in a defined datacenter architecture. In one embodiment, a computing environment uses web-based access control features and a number of directory service instances having organizational units and corresponding mappings to maintain a support infrastructure as part of providing features of online application services to customers. Other embodiments are included and available.

Online service access controls using scale out directory features

Technologies are described herein for inserting a multimedia file through a web-based desktop productivity application. A request for the multimedia file is received from a client computer over a network. A request for the multimedia file is transmitted to a server computer over the network. The request for the multimedia file is transmitted via a proxy web service. The multimedia file is received from the server computer over the network upon transmitting the request for the multimedia file. The multimedia file is inserted in a document edited by the web-based desktop productivity application.

Inserting a multimedia file through a web-based desktop productivity application

Growing community of inventors

Bellevue, WA, United States of America

Jonathan M Luk