CONTROLLING ADMINISTRATION RIGHTS

摘要

A computer in a network has an operating system. The operating system is configured to prevent running of software not identified in a list of approved software referred to as a white list. Software absent from the list is prevented from running by the operating system. The network has a server which determines, for each item of software on the white list, the administration rights of the users of computers having that item of software. If a white listed software item is present on one or more computers used by users without admin rights, then the admin rights of any user of other computers having the same white listed software item are withdrawn by instructions sent by the server to the computer.

主权项

1. A method of controlling computers in a network, the network having a network management system storing data identifying the computers present in the network and the software present in the network, each computer having an operating system, the operating system storing data relating to administration rights, the method comprising running on the network a suite of control programs which:
identifies software present on the computers, whether the software is approved for use and the administration rights of the users of those computers; determines, for each instance of the same software which is approved for use installed on different computers, whether the users of those computers have administration rights; and if at least one such user does not have administration rights, interacts with the operating system of the other computer(s) to withdraw the administration rights of the user(s) of said same software on the other computer(s).