Microsoft Technology Licensing, LLC

Massimiliano Ciccotosto

David Paul Limont

Selvaraj Nalliah

John Allen Atwood

Patrick Tousignant

Omar Aftab

Zhidong Yang

Wilbert De Graaf

Daniel Dwight Longley

Chandresh Kumar Jain

James H Baker

Gregory Bolles

Andrew S Moss

The present invention extends to methods, systems, and computer program products for enforcing device settings for mobile devices. Generally, a computer system enforces appropriate mobile device settings (e.g., policy and/or configuration settings) prior to permitting a mobile device to access maintained data. The computer system receives a request from a mobile device. The computer system determines that current mobile device settings are not appropriate for accessing the maintained data. The computer system sends device settings, representing a new mobile device configuration that is appropriate accessing the maintained data, to the mobile device. The computer system receives an indication that the mobile device is configured in accordance with the device settings. The computer system permits the mobile device to access the maintained data in response to receiving the indication that the mobile device is configured in accordance with the device settings.

Enforcing device settings for mobile devices

The present embodiments extend to methods, systems, and computer program products for enforcing device settings for mobile devices. Generally, a computer system enforces appropriate mobile device settings (e.g., policy and/or configuration settings) prior to permitting a mobile device to access maintained data. The computer system receives a request from a mobile device. The computer system determines that current mobile device settings are not appropriate for accessing the maintained data. The computer system sends device settings, representing a new mobile device configuration that is appropriate for accessing the maintained data, to the mobile device. The computer system receives an indication that the mobile device is configured in accordance with the device settings. The computer system permits the mobile device to access the maintained data in response to receiving the indication that the mobile device is configured in accordance with the device settings.

Example embodiments provide for authenticating a device to multiple servers without using delegation or having to have a password stored on the device. Multiple certificates that are typically non-delegable are used to authenticate the device to each server. One certificate is used to authenticate the client with the front-end server and a second certificate is used to authenticate the client against a back-end server. Rather than having both certificates reside with the device, however, the second certificate is originally stored by the client in the back-end. It is then retrieved 'on-the-fly' by the front-end upon authentication of the client and used to authenticate itself as the client in order to act on behalf of the client when retrieving data from the back-end server.

Client authentication using multiple user certificates

Journaling e-mail messages, containing information about an e-mail message and/or entities associated with the e-mail messages, are sent to journaling mailboxes. An e-mail server sends an original journaling e-mail message, preferably through an envelope protocol extension, to an entity's journaling mailbox. Upon detecting additional recipients of the e-mail message (e.g. an expansion of a distribution list or alternate recipient forwarding rule) the e-mail server sends an additional journaling e-mail message, containing information about the additional recipients, to the entity's journaling mailbox.

Methods for sending additional journaling e-mail messages subsequent to sending original journaling e-mail messages

E-mail envelope journaling. A server determines that an entity's (e.g., a recipient revealed from an expanded distribution list) home mailbox store has envelope journaling enabled and specifies a journaling mailbox address. The server sets a journaling property in an e-mail message identifying that the e-mail message is to be journaled. The server adds the journaling mailbox address specified by the entity's home mailbox store to the journaling property. The server sends envelope journaling information through an envelope protocol extension to the journaling mailbox addresses specified in the journaling property. The server sends the e-mail message to one or more recipients specified in the e-mail message and journaling mailbox addresses specified in the journaling property. Journaling servers receiving envelope journaling information, place journaling information in archive messages, and attach portions e-mail messages to archive messages.

Growing community of inventors

Kirkland, WA, United States of America

Massimiliano Ciccotosto