Abstract: For a particular request to access a resource, both a user associated with the request and a service through which the request is made are identified. Whether requested access to a resource is permitted is determined based on a user associated with the requested access and a service through which the access is requested. This determination can be made based on an access control entry of an access control list corresponding to the resource, the access control entry identifying access to the resource that is permitted to the user when accessing the resource through the service.

Abstract: The claimed subject matter provides a method for licensing software in a computing environment. An exemplary method includes initiating application software program on a computer system having a plurality of authorized users, one of the authorized users having a single-user license to use the software program. An identity of a current user of the computer system is checked. Operation of the software program is prohibited if the current user is one of the plurality of authorized users other than the user who is granted the single-user license.

Abstract: The claimed subject matter provides a method for managing license upgrades in a computing environment. An exemplary method includes sending a request to upgrade a license status of application software program. The method further includes receiving licensing information indicating a change to the license status of the software program, the change to the license status of the software program being sufficient to allow the user to use the software program under the changed status automatically, and without further action by a user.

Abstract: The claimed subject matter provides a method for revoking licensed software in a computing environment. An exemplary method includes receiving a machine ID from a computer system. An application program and a license credential for the application program are sent to the computer system. Subsequently, upon theft or other loss of the computer system, a request to revoke the license credential is received. The request identifies the machine ID. When the computer system subsequently initiates a connection, the connection is detected based on the machine ID. An indication that the license credential for the application program is revoked is sent to the computer system. When the application program is later initiated, its operation is disabled because of the revocation of the license credential.

Abstract: A system, method and computer program product are provided for communicating over a network without a direct connection to the network. A process is first initiated on a first computer without a direct connection to a network. In response to the process, a second computer coupled to the first computer with a direct connection to the network is automatically identified. Data is then communicated between the first computer and a server computer over the network via the direct connection of the second computer.

Abstract: For a particular request to access a resource, both a user associated with the request and a service through which the request is made are identified. Whether requested access to a resource is permitted is determined based on a user associated with the requested access and a service through which the access is requested. This determination can be made based on an access control entry of an access control list corresponding to the resource, the access control entry identifying access to the resource that is permitted to the user when accessing the resource through the service.

Abstract: One embodiment of the present invention provides a system that facilitates software installation using embedded user credentials. The system receives a software installation package at a computer to be installed on the computer. The system then extracts an installation program from the software installation package. Next, the system determines if the current user has sufficient privileges to run the installation program. If not, the system recovers a set of user credentials from the software installation package that is associated with sufficient privileges to run the installation program. The system then authenticates to the computer using this set of user credentials. Finally, the system runs the installation program on the computer.

Abstract: One embodiment of the present invention provides a system to facilitate cross-domain push deployment of software in an enterprise environment. The system operates by receiving a machine name and a domain name associated with a client at a server. Next, the system creates an entry in a database, which associates the machine name with the domain name. This entry establishes what software to deploy to the client. The system then accepts a user name and a password from the server administrator to gain access to the client. The system authenticates the server to the client using the user name and password. After authenticating the server to the client, the system pushes the software package to the client.

Abstract: One embodiment of the present invention provides a system to facilitate software management by applying network address-sorting rules on a hierarchical directory structure. The system operates by creating a hierarchical directory structure that reflects the logical coupling among computers within an enterprise. This hierarchical directory structure is sorted based on network addresses of the constituent computers of the enterprise. The system establishes a software policy at the root level of the hierarchical directory structure. Individual computers within the enterprise inherit the software policy from the root level of the hierarchical directory structure.

Abstract: One embodiment of the present invention provides a system that facilitates software installation using embedded user credentials. The system receives a software installation package at a computer to be installed on the computer. The system then extracts an installation program from the software installation package. Next, the system determines if the current user has sufficient privileges to run the installation program. If not, the system recovers a set of user credentials from the software installation package that is associated with sufficient privileges to run the installation program. The system then authenticates to the computer using this set of user credentials. Finally, the system runs the installation program on the computer.

Abstract: One embodiment of the present invention provides a system to facilitate cross-domain push deployment of software in an enterprise environment. The system operates by receiving a machine name and a domain name associated with a client at a server. Next, the system creates an entry in a database, which associates the machine name with the domain name. This entry establishes what software to deploy to the client. The system then accepts a user name and a password from the server administrator to gain access to the client. The system authenticates the server to the client using the user name and password. After authenticating the server to the client, the system pushes the software package to the client.

Abstract: One embodiment of the present invention provides a system to facilitate software management by applying network address-sorting rules on a hierarchical directory structure. The system operates by creating a hierarchical directory structure that reflects the logical coupling among computers within an enterprise. This hierarchical directory structure is sorted based on network addresses of the constituent computers of the enterprise. The system establishes a software policy at the root level of the hierarchical directory structure. Individual computers within the enterprise inherit the software policy from the root level of the hierarchical directory structure.