Remote administration of initial computer operating system setup options

Patent metadata

Field	Value
Publication number	US-10977053-B2
Application number	US-201916455657-A
Country	US
Kind code	B2
Filing date	Jun 27, 2019
Priority date	Feb 27, 2017
Publication date	Apr 13, 2021
Grant date	Apr 13, 2021

Abstract

Remote administration of initial computer operating system setup options is facilitated by systems and mechanisms that provide such initial setup options to a computing device during an earlier stage of the operating system setup. An administrator defines, in a profile, how such initial setup options are to be set and when an operating system is being set up it communicates with licensing servers to validate the copy of the operating system. If authorized, and if set up by an administrator, initial setup options are provided to the computing device at such an early stage of the operating system setup. Processes executing on the computing device then utilize software licensing application program interfaces to not only validate the copy of the operating system, but also to set the initial setup options in the manner pre-specified by the administrator. A customized directory service login user interface is one such initial setup option.

First claim

We claim:

1. A computing device comprising:
one or more processing units;
a network interface;
a graphics hardware interface; and
one or more computer-readable media comprising computer-executable instructions which, when executed by the one or more processing units, cause the computing device to:
begin setting up an operating system on the computing device by performing an initial operating system setup comprising:
locally obtaining device-identifying information;
transmitting the device-identifying information;
receiving, through the network interface, operating system license data contingent upon validation of the device-identifying information, the operating system license data comprising:
a license for the operating system; and
initial operating system setup options; and

performing the initial operating system setup in accordance with the initial operating system setup options; and

complete the setting up of the operating system on the computing device by performing a subsequent operating system setup comprising:
presenting, through the graphics hardware interface of the computing device whose operating system is being set up, a customized directory sign-in, wherein:
the customized directory sign-in is specified by the initial operating system setup options; and
the customized directory sign-in accepts user-identifying information;

transmitting the user-identifying information;
receiving subsequent operating system setup options contingent upon validation of the user-identifying information; and
performing the subsequent operating system setup in accordance with the subsequent operating system setup options.

2. The computing device of claim 1 , wherein the computer-executable instructions causing the computing device to obtain the device-identifying information comprise computer-executable instructions, which, when executed by the one or more processing units cause the computing device to obtain at least one of: a MAC address of the network interface, a BIOS identifier, or a cryptographic certificate of a Trusted Platform Module (TPM) of the computing device.

3. The computing device of claim 1 , wherein the computer-executable instructions causing the computing device to obtain the device-identifying information comprise computer-executable instructions, which, when executed by the one or more processing units cause the computing device to generate a single hardware hash value that incorporates two or more identifiers assigned to hardware components of the computing device.

4. The computing device of claim 1 , wherein the computer-executable instructions causing the computing device to perform the initial setup comprise computer-executable instructions which, when executed by the one or more processing units, set options of the operating system through one or more software licensing Application Program Interfaces (APIs).

5. The computing device of claim 1 , wherein the operating system license data further comprises a license that authorizes the initial setup in accordance with the received initial operating system setup options.

6. The computing device of claim 1 , wherein the device-identifying information is transmitted to a remote computing devices; and
wherein the operating system license data is received from the remote computing device, and is in response to the transmission of the device-identifying information.

7. The computing device of claim 1 , wherein the computer-executable instructions causing the computing device to obtain the device-identifying information comprise computer-executable instructions, which, when executed by the one or more processing units cause the computing device to obtain an identifier of the operating system to be set up on the computing device.

8. The computing device of claim 1 , wherein the computer-executable instructions causing the computing device to perform the initial operating system setup comprise computer-executable instructions which, when executed by the one or more processing units, cause the computing device to:
set one or more variables that determine whether the computing device presents, through the graphics hardware interface, an end-user license agreement associated with the operating system;
wherein the initial operating system setup options comprise an indication that the end-user license agreement associated with the operating system is not to be presented.

9. The computing device of claim 1 , wherein the computer-executable instructions causing the computing device to perform the initial operating system setup comprise computer-executable instructions which, when executed by the one or more processing units, cause the computing device to:
set one or more variables that determine whether the operating system will allow for local administration of the operating system;
wherein the initial operating system setup options comprise an indication that the local administration of the operating system is not to be allowed.

10. One or more computer-readable storage media comprising computer-executable instructions which, when executed by a computing device, cause the computing device to:
begin setting up an operating system on the computing device by performing an initial operating system setup comprising:
locally obtaining device-identifying information;
transmitting the device-identifying information;
receiving, through a network interface of the computing device, operating system license data contingent upon validation of the device-identifying information, the operating system license data comprising:
a license for the operating system; and
initial operating system setup options; and

performing the initial operating system setup in accordance with the initial operating system setup options; and

complete the setting up of the operating system on the computing device by performing a subsequent operating system setup comprising:
presenting, through a graphics hardware interface of the computing device whose operating system is being set up, a customized directory sign-in, wherein:
the customized directory sign-in is specified by the initial operating system setup options; and
the customized directory sign-in accepts user-identifying information;

transmitting the user-identifying information;
receiving subsequent operating system setup options contingent upon validation of the user-identifying information; and
performing the subsequent operating system setup in accordance with the subsequent operating system setup options.

11. The one or more computer-readable storage media of claim 10 , wherein the computer-executable instructions causing the computing device to obtain the device-identifying information comprise computer-executable instructions, which, when executed, cause the computing device to obtain at least one of: a MAC address of the network interface, a BIOS identifier, or a cryptographic certificate of a Trusted Platform Module (TPM) of the computing device.

12. The one or more computer-readable storage media of claim 10 , wherein the computer-executable instructions causing the computing device to obtain the device-identifying information comprise computer-executable instructions, which, when executed, cause the computing device to generate a single hardware hash value that incorporates two or more identifiers assigned to hardware components of the computing device.

13. The one or more computer-readable storage media of claim 10 , wherein the computer-executable instructions causing the computing device to perform the initial setup comprise computer-executable instructions which, when executed, cause the computing device to set options

Assignees

• Microsoft Technology Licensing Llc

Inventors

• Puri Namrata Shankar
• Barhudarian Anna
• Mantri Siddharth
• Bostanci Hakki Tunc
• Shepard Marc

Classifications

• H04L63/0876

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• H04L41/28

  Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration · CPC title

• H04L41/0806

  for initial configuration or provisioning, e.g. plug-and-play · CPC title

• H04L9/3242

  involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC · CPC title