Abstract: This document relates to a process for supporting the management of a variety of types of deployed devices. Administrators utilizing enterprise services can provide generic configuration data using configuration templates, which can be provided to a management server. The management server can then precompute device-specific configuration settings and resolve any conflicts that may arise based on the configuration templates. The configuration templates can also include placeholders for secret values, and once a managed device checks in to the management server, the secret values can be retrieved from an applicable enterprise service and provided to the managed device at the time of applying the configuration template.

Abstract: This document relates to a process for supporting the management of a variety of types of deployed devices. Administrators utilizing enterprise services can provide generic configuration data using configuration templates, which can be provided to a management server. The management server can then precompute device-specific configuration settings and resolve any conflicts that may arise based on the configuration templates. The configuration templates can also include placeholders for secret values, and once a managed device checks in to the management server, the secret values can be retrieved from an applicable enterprise service and provided to the managed device at the time of applying the configuration template.

Abstract: This document relates to a process for supporting the management of a variety of types of deployed devices. Administrators utilizing enterprise services can provide generic configuration data using configuration templates, which can be provided to a management server. The management server can then precompute device-specific configuration settings and resolve any conflicts that may arise based on the configuration templates. The configuration templates can also include placeholders for secret values, and once a managed device checks in to the management server, the secret values can be retrieved from an applicable enterprise service and provided to the managed device at the time of applying the configuration template.

Abstract: This document relates to a process for supporting the management of a variety of types of deployed devices. Administrators utilizing enterprise services can provide generic configuration data using configuration templates, which can be provided to a management server. The management server can then precompute device-specific configuration settings and resolve any conflicts that may arise based on the configuration templates. The configuration templates can also include placeholders for secret values, and once a managed device checks in to the management server, the secret values can be retrieved from an applicable enterprise service and provided to the managed device at the time of applying the configuration template.

Abstract: This document relates to a process for supporting the management of a variety of types of deployed devices. Administrators utilizing enterprise services can provide generic configuration data using configuration templates, which can be provided to a management server. The management server can then precompute device-specific configuration settings and resolve any conflicts that may arise based on the configuration templates. The configuration templates can also include placeholders for secret values, and once a managed device checks in to the management server, the secret values can be retrieved from an applicable enterprise service and provided to the managed device at the time of applying the configuration template.

Abstract: Various technologies described herein pertain to controlling configuration of a computing device. A configuration request can be received, at the computing device, from a configuration source external to the computing device. The configuration request can include configuration data for a dependent feature. An evaluation can be performed at the computing device to determine whether a dependency graph for the dependent feature is satisfied. The dependency graph for the dependent feature can specify interdependencies between configurations of a set of features such that remaining features in the set of features are to be configured prior to enabling the dependent feature to be configured. Moreover, the dependent feature can be configured based on the configuration data when the dependency graph for the dependent feature is satisfied. The configuring of the dependent feature based on the configuration data can be prohibited prior to the dependency graph for the dependent feature being satisfied.

Abstract: Various technologies described herein pertain to controlling reconfiguration of a dependency graph for coordinating reconfiguration of a computing device. An operation can be performed at the computing device to detect whether an error exists in the dependency graph for a desired configuration state. The dependency graph for the desired configuration state specifies interdependencies between configurations of a set of features. An error can be detected to exist in the dependency graph when the desired configuration state differs from an actual configuration state of the computing device that results from use of the dependency graph to coordinate configuring the set of features. Feedback concerning success or failure of the dependency graph on the computing device can be sent from the computing device to a configuration source. The dependency graph can be modified (by the computing device and/or the configuration source) based on whether an error is detected in the dependency graph.

Abstract: Various technologies described herein pertain to managing multiple enrollments of a computing device into configuration sources. Respective enrollment types for the enrollments into the configuration sources can be detected. Moreover, respective control data for the enrollments into the configuration sources can be set based on the enrollment types. Provisioning elements (e.g., policies, preferences, configuration profiles, and resources) that satisfy the respective control data can be permitted to be applied to the computing device by the configuration sources as part of the enrollments. Further, disparate provisioning elements that fail to satisfy the respective control data can be prevented from being applied to the computing device as part of the enrollments.

Abstract: Various technologies described herein pertain to evaluating configuration compliance of a computing device. The computing device operates in a configuration compliance evaluation mode to test a set of configuration requests for a configuration source. Configuration changes to the computing device can be applied in a virtual machine run on the computing device when operating in the configuration compliance evaluation mode. Responsive to each configuration request being received and when the computing device is operating in the configuration compliance evaluation mode, the computing device can store the configuration request in a data store, apply the configuration request in the virtual machine to cause a configuration change in the virtual machine, and store data for verifying enforcement of the configuration change in the data store.

Abstract: Various technologies described herein pertain to controlling configuration of a computing device. A configuration request can be received, at the computing device, from a configuration source external to the computing device. The configuration request can include configuration data for a dependent feature. An evaluation can be performed at the computing device to determine whether a dependency graph for the dependent feature is satisfied. The dependency graph for the dependent feature can specify interdependencies between configurations of a set of features such that remaining features in the set of features are to be configured prior to enabling the dependent feature to be configured. Moreover, the dependent feature can be configured based on the configuration data when the dependency graph for the dependent feature is satisfied. The configuring of the dependent feature based on the configuration data can be prohibited prior to the dependency graph for the dependent feature being satisfied.

Abstract: Various technologies described herein pertain to controlling configuration of a computing device. A configuration request can be received, at the computing device, from a configuration source external to the computing device. The configuration request can include configuration data for a dependent feature. An evaluation can be performed at the computing device to determine whether a dependency graph for the dependent feature is satisfied. The dependency graph for the dependent feature can specify interdependencies between configurations of a set of features such that remaining features in the set of features are to be configured prior to enabling the dependent feature to be configured. Moreover, the dependent feature can be configured based on the configuration data when the dependency graph for the dependent feature is satisfied. The configuring of the dependent feature based on the configuration data can be prohibited prior to the dependency graph for the dependent feature being satisfied.

Abstract: Various technologies described herein pertain to controlling reconfiguration of a dependency graph for coordinating reconfiguration of a computing device. An operation can be performed at the computing device to detect whether an error exists in the dependency graph for a desired configuration state. The dependency graph for the desired configuration state specifies interdependencies between configurations of a set of features. An error can be detected to exist in the dependency graph when the desired configuration state differs from an actual configuration state of the computing device that results from use of the dependency graph to coordinate configuring the set of features. Feedback concerning success or failure of the dependency graph on the computing device can be sent from the computing device to a configuration source. The dependency graph can be modified (by the computing device and/or the configuration source) based on whether an error is detected in the dependency graph.

Abstract: Various technologies described herein pertain to evaluating configuration compliance of a computing device. The computing device operates in a configuration compliance evaluation mode to test a set of configuration requests for a configuration source. Configuration changes to the computing device can be applied in a virtual machine run on the computing device when operating in the configuration compliance evaluation mode. Responsive to each configuration request being received and when the computing device is operating in the configuration compliance evaluation mode, the computing device can store the configuration request in a data store, apply the configuration request in the virtual machine to cause a configuration change in the virtual machine, and store data for verifying enforcement of the configuration change in the data store.

Abstract: Various technologies described herein pertain to controlling configuration of a computing device. A configuration request can be received, at the computing device, from a configuration source external to the computing device. The configuration request can include configuration data for a dependent feature. An evaluation can be performed at the computing device to determine whether a dependency graph for the dependent feature is satisfied. The dependency graph for the dependent feature can specify interdependencies between configurations of a set of features such that remaining features in the set of features are to be configured prior to enabling the dependent feature to be configured. Moreover, the dependent feature can be configured based on the configuration data when the dependency graph for the dependent feature is satisfied. The configuring of the dependent feature based on the configuration data can be prohibited prior to the dependency graph for the dependent feature being satisfied.

Abstract: Various technologies described herein pertain to managing multiple enrollments of a computing device into configuration sources. Respective enrollment types for the enrollments into the configuration sources can be detected. Moreover, respective control data for the enrollments into the configuration sources can be set based on the enrollment types. Provisioning elements (e.g., policies, preferences, configuration profiles, and resources) that satisfy the respective control data can be permitted to be applied to the computing device by the configuration sources as part of the enrollments. Further, disparate provisioning elements that fail to satisfy the respective control data can be prevented from being applied to the computing device as part of the enrollments.