Method and system for enabling remote access to a computer system
View Patent ↗Method and systems configured for allowing a non-local remote user to access a computer system with a particular authorization level. Such access is facilitated by examining non-local directory services group memberships of the user and performing a mapping of the user's identity to a corresponding universal local user account that have the proper authorization level or levels. Such methods and systems allow any number of non-local remote users access to the computer system in such a way that the remote user assumes the identity of (i.e., is mapped to) a corresponding universal local user account of an appropriate privilege level. All non-local remote users that the computer system determines to be of the same privilege level will share the identity of the same universal local user account.
1. A computer-implemented method for enabling users to remotely access a computer system using an active shared directory account maintained on a different computer system, comprising:
facilitating authentication of a user using only information derived from said shared directory account, wherein said authenticating includes the computer system accessing said shared directory account on the different computer system;
determining that the user does not have a local account on the computer system in response to successfully authenticating the user thereby recognizing that the user is a non-local user with respect to the computer system;
selecting a universal local user account of the computer system in response to successfully identifying a recognized group membership affiliation for the user that corresponds to said shared directory account such that the universal local user account is selected dependent upon said shared directory account and the recognized group membership affiliation, wherein the universal local user account has access privilege on the computer system; and
mapping the user to the universal local user account, wherein said mapping enables access to the computer system by the user in accordance with an access privilege level corresponding to the universal local user account.
2. The method of claim 1 wherein selecting the universal local user account of the computer system dependent upon said shared directory account includes determining at least one of directory services group membership information associated with said shared directory account and access privilege information associated with said shared directory account.
3. The method of claim 1 wherein said selecting the universal user account includes correlating a universal local user account access level to a corresponding group membership of the user.
4. The method of claim 1 wherein:
the universal local user account is one of a plurality of universal local user accounts; and
each one of said universal local user accounts has a respective access privilege level associated therewith.
5. The method of claim 1 , further comprising:
creating said plurality of universal local user accounts prior to performing said selecting,
wherein each one of said universal local user access accounts has a respective access privilege level associated therewith.
6. The method of claim 1 wherein several users can be simultaneously mapped to the universal local user account for enabling simultaneous access by each one of said users to the computer system.
7. A computer-implemented method for enabling users to remotely access a computer system using an active shared directory account maintained on a different computer system, comprising:
facilitating authentication of a user using only information derived from said shared directory account, wherein said authenticating includes the computer system accessing said shared directory account on the different computer system;
determining that the user does not have a local account on the computer system thereby recognizing that the user is a non-local status user with respect to the computer system; and
associating the user with a universal local user account of the computer system after said determining and in response to successfully identifying a recognized group membership affiliation for the user that corresponds to said shared directory account such that the universal local user account is selected dependent upon said shared directory account and the recognized group membership affiliation, wherein the universal local user account has access privilege on the computer system and wherein said associating enables access to the computer system in accordance with said access privilege corresponding to the universal local user account.
8. The method of claim 7 wherein associating the user with the universal local user account includes determining at least one of directory services group membership information associated with said shared directory account and access privilege information associated with said shared directory account.
9. The method of claim 7 wherein said associating includes correlating a universal local user account access level to a corresponding access level of a group membership of the user.
10. The method of claim 7 wherein:
the universal local user account is one of a plurality of universal local user accounts; and
each one of said universal local user accounts has a respective access privilege level associated therewith.
11. The method of claim 7 , further comprising:
creating said plurality of universal local user accounts prior to performing said selecting, wherein each one of said universal local user access accounts has a respective access privilege level associated therewith.
12. The method of claim 11 wherein said user account selection information includes at least one of directory services group membership information and access privilege information.
13. The method of claim 12 wherein said selecting the universal user account includes correlating a universal local user account access level to an access level of a group membership of the user.
14. The method of claim 7 wherein several users can be simultaneously mapped to the universal local user account for enabling simultaneous access by each one of said users to the computer system.
15. A computer system, comprising:
at least one data processing device;
instructions processable by said at least one data processing device; and
an apparatus from which said instructions are accessible by said at least one data processing device; and
means for accessing an active shared directory account maintained on a different computer system;
wherein said instructions are configured for enabling said at least one data processing device to facilitate:
facilitating authentication of a user using only information derived from the active directory account, wherein said authenticating includes the computer system accessing said shared directory account on the different computer system;
determining that the user does not have a local account on the computer system in response to successfully authenticating the user thereby recognizing that the user is a non-local user with respect to the first computer system;
selecting a universal local user account of the computer system in response to successfully identifying a recognized group membership affiliation for the user that corresponds to said shared directory account such that the universal local user account is selected dependent upon said shared directory account and the recognized group membership affiliation, wherein the universal local user account has access privilege on the computer system; and
mapping the user to the universal local user account, wherein said mapping enables access to the computer system by the user in accordance with an access privilege level corresponding to the universal local user account.
16. The computer system of claim 15 wherein selecting the universal local user account of the computer system dependent upon said shared directory account includes determining at least one of directory services group membership information associated with said shared directory account and access privilege information associated with said shared directory account.
17. The computer system of claim 15 wherein said selecting the universal user account includes correlating a universal local user account access level to a corresponding group membership of the user.
18. The computer system of claim 15 wherein:
the universal local user account is one of a plurality of universal local user accounts; and
each one of said universal local user accounts has a respective access privilege level associated therewith.
19. The computer system of claim 15 wherein said instructions are further configured for enabling said at least one data processing device to facilitate:
creating said plurality of universal local user accounts prior to performing said selecting,
wherein each one of said universal local user access accounts has a respective access privilege level associated therewith.
20. The computer system of claim 15 wherein several users can be simultaneously mapped to the universal local user account for enabling simultaneous access by each one of said users to the computer system.
21. A computer system, comprising:
at least one data processing device;
instructions processable by said at least one data processing device; and
an apparatus from which said instructions are accessible by said at least one data processing device; and
means for accessing an active shared directory account maintained on a different computer system;
wherein said instructions are configured for enabling said at least one data processing device to facilitate:
facilitating authentication of a user using only information derived from the active shared directory account, wherein said authenticating includes the first computer system accessing said shared directory account on a different computer system;
determining that the user does not have a local account on the computer system thereby recognizing that the user is a non-local status user with respect to the computer system; and
associating the user with a universal local user account of the computer system after said determining and in response to successfully identifying a recognized group membership affiliation for the user that corresponds to said shared directory account such that the universal local user account is selected dependent upon said shared directory account and the recognized group membership affiliation, wherein the universal local user account has access privilege on the computer system and wherein said associating enables access to the computer system in accordance with said access privilege corresponding to the universal local user account.
22. The computer system of claim 21 wherein associating the user with the universal local user account includes determining at least one of directory services group membership information associated with said shared directory account and access privilege information associated with said shared directory account.
23. The computer system of claim 21 wherein said associating includes correlating a universal local user account access level to a corresponding access level of a group membership of the user.
24. The computer system of claim 21 wherein:
the universal local user account is one of a plurality of universal local user accounts; and
each one of said universal local user accounts has a respective access privilege level associated therewith.
25. The computer system of claim 21 wherein said instructions are further configured for enabling said at least one data processing device to facilitate:
creating said plurality of universal local user accounts prior to performing said selecting, wherein each one of said universal local user access accounts has a respective access privilege level associated therewith.
26. The computer system of claim 25 wherein said user account selection information includes at least one of directory services group membership information and access privilege information.
27. The computer system of claim 25 wherein said selecting the universal user account includes correlating a universal local user account access level to an access level of a group membership of the user.
28. The computer system of claim 21 wherein several users can be simultaneously mapped to the universal local user account for enabling simultaneous access by each one of said users to the computer system.