Controlling administration rights

摘要

A computer in a network has an operating system. The operating system is configured to prevent running of software not identified in a list of approved software referred to as a white list. Software absent from the list is prevented from running by the operating system. The network has a server which determines, for each item of software on the white list, the administration rights of the users of computers having that item of software. If a white listed software item is present on one or more computers used by users without admin rights, then the admin rights of any user of other computers having the same white listed software item are withdrawn by instructions sent by the server to the computer.

主权项

1. A method of controlling computers in a network, the network having a network management system storing data identifying the computers present in the network and the software present in the network, each computer having an operating system, the operating system storing data relating to administration rights, wherein said administration rights are local administration rights, the method comprising:
identifying, by a suite of control programs, software present on the computers, whether the software is approved for use, and the administration rights of the users of the computers; determining, by the suite of control programs, for each instance of the same software which is approved for use and installed on different computers, whether the users of the different computers have administration rights; and in response to a determination that at least one such user does not have administration rights, interacting, by the suite of control programs, with the operating system of the different computers of the users of the said same software to withdraw the administration rights of the users on the different computers who do have administration rights.