公开(公告)号：US10445106B2

公开(公告)日：2019-10-15

申请号：US15466830

申请日：2017-03-22

Applicant: VMware, Inc.

Inventor： Jason Roszak ,  Craig Newell ,  Shravan Shantharam ,  Varun Murthy ,  Kalyan Regula ,  Blake Watts

IPC: G06F15/177 ,  G06F9/4401 ,  G06F9/451 ,  H04L29/08 ,  G06F11/14 ,  G06F8/61

Abstract: Systems and methods are included for causing a computing device to install a management agent prior to an operating system completing its first boot. A bootstrap loader is flashed into firmware, such as the BIOS, of a computing device. The bootstrap loader installs an enroller that identifies a management agent. This can include downloading the management agent from a management server. The enroller can find or contact the management server by contacting an address provided in a WINDOWS Platform Binary Table (WPBT). The management agent is installed prior to the user logging into the operating system to prevent circumvention of management policies.

公开(公告)号：US10395027B2

公开(公告)日：2019-08-27

申请号：US15373603

申请日：2016-12-09

Applicant: VMware, Inc.

Inventor： Jason Roszak ,  Varun Murthy ,  Shravan Shantharam ,  Blake Watts ,  Kalyan Regula

IPC: G06F21/52 ,  G06F21/56 ,  G06F21/10 ,  G06F21/50 ,  G06F21/62 ,  H04L29/08 ,  G06F9/48

Abstract: Various examples for providing execution of both a first management application and a second management application on a client device are provided. In one example, a client device can be configured to identify that a first management application, such as a legacy management application, installed on the client device has management privileges with an operating system of the client device. As the first management application is configured to generate a terminate command in response to detection of the second management application, the terminate command can be intercepted prior to a receipt of the terminate command by the operating system. As a result, the operating system does not terminate execution of the second management application on the client device, thereby allowing both the first management application and the second management application to co-exist on the client device.

公开(公告)号：US20180276386A1

公开(公告)日：2018-09-27

申请号：US15466837

申请日：2017-03-22

Applicant: VMware, Inc.

Inventor： Jason Roszak ,  Craig Newell ,  Shravan Shantharam ,  Varun Murthy ,  Kalyan Regula ,  Blake Watts

IPC: G06F21/57 ,  H04L29/06 ,  G06F9/44

CPC classification number: G06F21/575 ,  G06F8/61 ,  G06F9/4416 ,  G06F9/452 ,  H04L63/0815 ,  H04L63/102

Abstract: Systems and methods are included for causing a computing device to implement a management policy prior to a user logging into an operating system on initial boot. As part of initial boot, the computing device contacts a management server for enrollment. Installation of the operating system is paused while the management server synchronizes the software and policies on the computing device. To do this prior to login, the management server can create a temporary user account to associate with the computing device and apply a default management policy. After the installation is complete, an installed management agent can gather user inputs made during login. The management agent can send these inputs to the management server for use in creating an actual user account to associate with the computing device.

公开(公告)号：US20180276003A1

公开(公告)日：2018-09-27

申请号：US15466844

申请日：2017-03-22

Applicant: VMware, Inc.

Inventor： Jason Roszak ,  Craig Newell ,  Shravan Shantharam ,  Varun Murthy ,  Kalyan Regula ,  Blake Watts

IPC: G06F9/44 ,  G06F9/445 ,  G06F11/14

Abstract: Systems and methods are included for causing a computing device to assemble and boot from a managed operating system. When the computing device is powered on, it can execute firmware that specifies a server to contact. The server can identify a base operating system (OS) image to boot, and the location of a pre-enrollment installer for installing the base OS image. The pre-enrollment installer can download the base OS image in one or more pieces from multiple locations. This can include base OS images related to enterprise management and company-specific applications and drivers. Once the pre-enrollment OS has combined the base OS images, the computing device reboots using the combined image.

公开(公告)号：US20180276001A1

公开(公告)日：2018-09-27

申请号：US15466835

申请日：2017-03-22

Applicant: VMware, Inc.

Inventor： Jason Roszak ,  Craig Newell ,  Shravan Shantharam ,  Varun Murthy ,  Kalyan Regula ,  Blake Watts

IPC: G06F9/44 ,  G06F9/445

CPC classification number: G06F9/4416 ,  G06F8/61 ,  G06F9/4401 ,  G06F9/4411 ,  G06F9/452 ,  H04L41/046 ,  H04L67/34

Abstract: Systems and methods are included for causing a computing device to request ownership information and configure itself based on which tenant is associated with the computing device. During launch of an operating system, such as WINDOWS, the computing device can contact a server that tracks ownership information. The server can be identified in firmware or an operating system image of the computing device. The server can determine which operating system image and applications to install at the computing device. The server can provide addresses that the computing device can contact to retrieve portions of the operating system or applications.

公开(公告)号：US20180276000A1

公开(公告)日：2018-09-27

申请号：US15466830

申请日：2017-03-22

Applicant: VMware, Inc.

Inventor： Jason Roszak ,  Craig Newell ,  Shravan Shantharam ,  Varun Murthy ,  Kalyan Regula ,  Blake Watts

IPC: G06F9/44 ,  H04L29/08 ,  H04L12/24

CPC classification number: G06F9/4416 ,  G06F8/61 ,  G06F9/4401 ,  G06F9/452 ,  G06F11/14 ,  H04L67/34

Abstract: Systems and methods are included for causing a computing device to install a management agent prior to an operating system completing its first boot. A bootstrap loader is flashed into firmware, such as the BIOS, of a computing device. The bootstrap loader installs an enroller that identifies a management agent. This can include downloading the management agent from a management server. The enroller can find or contact the management server by contacting an address provided in a WINDOWS Platform Binary Table (WPBT). The management agent is installed prior to the user logging into the operating system to prevent circumvention of management policies.

公开(公告)号：US20180173517A1

公开(公告)日：2018-06-21

申请号：US15658421

申请日：2017-07-25

Applicant: VMWARE, INC.

Inventor： SHRAVAN SHANTHARAM ,  Vijay Narayan ,  Kalyan Regula ,  Varun Murthy ,  Jason Roszak ,  Achyutha Bharadwaj ,  Abheesh Kumar Thaleppady

IPC: G06F9/445 ,  H04L29/08

Abstract: Operating system update management for enrolled devices is disclosed according to various examples. In one example, a computing environment can receive an identifier from at least one of a multitude of client devices enrolled with a management service, where the identifier is indicative of a software update available for the at least one of the plurality of client devices. The computing environment can query a service using the identifier to identify information pertaining to the software update and cause a display of the information in at least one user interface. In response to a specification of a subset of the client devices being received, for example, by an administrator, the computing environment can cause the subset of the plurality of client devices to perform an installation of the software update.

公开(公告)号：US20180152439A1

公开(公告)日：2018-05-31

申请号：US15365524

申请日：2016-11-30

Applicant: VMware, Inc.

Inventor： Yogesh Govind Hande ,  Shravan Shantharam ,  Kalyan Regula ,  Varun Murthy ,  Bhuvanesh Shanmuga Sundaram ,  Jonathon Deriso

IPC: H04L29/06

CPC classification number: H04L63/0815 ,  H04L63/0435 ,  H04L63/083 ,  H04L63/10 ,  H04L67/02

Abstract: Disclosed are various approaches for providing single sign-on capabilities for a user on a client device. A user's credentials can be authenticated by an identity provider application. The identity provider application can facilitate single sign-on capabilities for browser-based applications and native applications on the client device.