Microsoft Technology Licensing, LLC

Vladimir Holostov

Shai Guday

Thomas W Kuehnel

Mohammad Shabbir Alam

Yigal Mordechai Edery

Rao Salapaka

Justin Alexander Hou

Tript Singh Lamba

Naile Daoud

Austin Tyler Czarnecki

Peter J Kaufman

Feng Yue

Roy Williams

Yuhang Zhu

David Neil MacDonald

Jack W Stokes

Julia Louise Meinershagen

Sean Anderson Bowles

Triptpal Singh Lamba

Piyush Goyal

Darya Mazandarany

Roy Varshavsky

Brian P Connolly

Sidharth Nabar

Richard Ivan June

Neal Myerson

Kira Radinsky

John Chadwell Spaith

Janani Vasudevan

Tyler Edward Hennessy

Edward William Schaefer

Yair E Geva

Darren C Justus

Javier Novales

Christopher William Thilgen

David B Cross

Yigal Edery

Gregory Thomas Caponigro

Shi Chen

Aaron James Kubly

A facility for provisioning a device is described. The facility discerns an identifier that identifies the device, and transmits the identifier to a server computer system. The facility receives from the server computer system provisioning measures specified for the device. In response to receiving the specified provisioning measures, the facility performs the specified provisioning measures on the device.

Device provisioning

Various technologies described herein pertain to managing multiple enrollments of a computing device into configuration sources. Respective enrollment types for the enrollments into the configuration sources can be detected. Moreover, respective control data for the enrollments into the configuration sources can be set based on the enrollment types. Provisioning elements (e.g., policies, preferences, configuration profiles, and resources) that satisfy the respective control data can be permitted to be applied to the computing device by the configuration sources as part of the enrollments. Further, disparate provisioning elements that fail to satisfy the respective control data can be prevented from being applied to the computing device as part of the enrollments.

Multi-enrollments of a computing device into configuration sources

Various technologies described herein pertain to sharing Wi-Fi credentials based upon relationships in a computer-implemented social network. At least one server computing device of a Wi-Fi credential sharing service receives an identifier from a mobile device and credentials for a Wi-Fi network from the mobile device. The identifier identifies a user of the mobile device. Moreover, the credentials for the Wi-Fi network are desirably shared by the user. Further, contacts of the user are retrieved from the social network. The credentials for the Wi-Fi network are retained in respective accounts of the contacts of the user from the social network. Further, an account of a contact includes credentials for Wi-Fi networks shared with the contact.

Sharing based on social network contacts

Methods, systems, and computer program products are provided that enable secure remote modification of device credentials using device-generated credentials. A plurality of credentials policies is stored by the user device. The credentials policies are merged to generate a merged credentials policy. An instruction is received by the user device from a trusted service to initiate a device credentials change. A new device credentials is generated on the user device based at least on the merged credentials policy.

Secure remote modification of device credentials using device-generated credentials

The description relates to controllable device marking. One example can be manifest as a device that has a housing and a marking apparatus integrated into the housing. The marking apparatus can include a display and a disablement mechanism. While the disablement mechanism is in a first state the display is controllable to allow content presented on the display to be defined and when the disablement mechanism is transitioned to a second state the content is persisted and unchangeable on the display.

Controllable marking

A facility for managing storage of program customization resources on a computing system is described. The computing system has an amount of storage space, some of which is free. Some of the program customization resources are selected for use. The facility determines that the amount of free storage space is inadequate. In response, the facility identifies at least a portion of the plurality of program customization resources stored on the computing system that are not selected for use, and causes the identified program customization resources to be deleted from the computing system.

Storing optimization for customization resources

An extensible framework for offloading data traffic sent to a mobile computing device over a cellular network to a wireless network comprises software plugins, a plugin host that is typically part of the mobile device operating system, and plugin interfaces through which the plugin host communicates with the plugins. A plugin is associated with one or more mobile operators. The framework can comprise one or more plugins, but typically, only one plugin is active at a time. The framework can automatically detect and connect to wireless networks associated with a mobile operator associated with an active plugin. The plugin can automatically authenticate the mobile device or a mobile device user with the mobile operator over the connected wireless network. The plugins are not allowed access to operating system functions responsible for detecting and connecting and disconnecting to a wireless network, which can improve mobile operating system stability and battery life.

System and method for offloading traffic from cellular networks

Embodiments enable prioritization and selection of network access points (NAP) by a computing device using NAP attribute values. The computing device obtains the attribute values based on a location of the computing device and/or proximate NAPs detected by the computing device. The obtained attribute values are compared to a state of the computing device (e.g., sensor values), user preferences, or other criteria to select at least one of the NAPs for connection with the computing device. In some embodiments, a user of the computing device is presented with a list of Wi-Fi access points ranked according to relevance to the computing device and/or user.

Service-assisted network access point selection

System and method for offloading traffic from cellular networks using plugins

Architecture that selects a classification engine based on the expertise of the engine to process a given entity (e.g., a file). Selection of an engine is based on a probability that the engine will detect an unknown entity classification using properties of the entity. One or more of the highest ranked engines are activated in order to achieve the desired performance. A statistical, performance-light module is employed to skip or select several performance-demanding processes. Methods and algorithms are utilized for learning based on matching the best classification engine(s) to detect the entity class based on the entity properties. A user selection option is provided for specifying a maximum number of ranked, classification engines to consider for each state of the machine. A user can also select the minimum probability of detection for a specific entity (e.g., unknown file). The best classifications are re-evaluated over time as the classification engines are updated.

Realtime multiple engine selection and combining

Aspects of the subject matter described herein relate to analyzing data and providing recommendations regarding computing assets. In aspects, data is collected from computing assets and aggregated in a data repository. A data analyzer analyzes the data to determine problems associated with the computing assets. Work done to identify a problem with one computing asset may be used to identify problems with or provide recommendations for other computing assets controlled by the same or different entities. When a problem is identified in a computing asset, a recommendation may be proactively provided to an entity associated with the computing asset.

Analyzing data and providing recommendations

Architecture that addresses security concerns while still providing transparent user experience with ability to perform tasks. When a user machine is considered incompliant or compromised due to, for example, a suspected infection, the user machine can be blocked from further access to a network or other computing hosts until the incompliance is resolved. A notification is presented that indicates the nature of the problem, and a way to access an automatically configured isolated environment via which to continue working. The user can be automatically routed to use the alternative isolated environment for temporary access to network resources. Once the user finishes activities in the isolated environment, the system hosting the isolated environment is reverted back to a known good state.

Host usability and security via an isolated environment

Methods, systems, and computer-readable media are disclosed for selecting a set of security offerings. A particular method includes receiving a security need profile associated with a computing environment and receiving security offering information related to a plurality of security offerings. The security offerings of the plurality of security offerings are evaluated with respect to the security need profile. A set of security offerings from the plurality of security offerings are automatically selected.

Selecting security offerings

Aspects of the subject matter described herein relate to monitoring and controlling network communications. In aspects, communication components receive a communication from a node. The communication components determine a potential use of the communication that may be used for reporting and enforcement purposes. The communication components monitor subsequent communications and store usage information including duration in a store. In addition, the communication components may enforce a policy that depends on the potential use of a communication and the usage information.

Monitoring and controlling network communications

Growing community of inventors

Sammamish, WA, United States of America

Vladimir Holostov