Indicator of security policy application for a portion of resources on a machine
A computer stores, within a single user account, multiple supervised computing resources and multiple additional computing resources. The multiple supervised computing resources are associated with a security policy. The computer executes a first instance of a specified application that lacks read access and lacks write access to any and all of the multiple supervised computing resources. The computer executes, simultaneously with the first instance, a second instance of the specified application that accesses at least a portion of the multiple supervised computing resources. The computer applies rules from the security policy to the second instance of the specified application while foregoing applying the rules from the security policy to the first instance of the specified application.
1. A method comprising:
storing, within a single user account at a computing machine, multiple unsupervised computing resources and multiple supervised computing resources, wherein the multiple supervised computing resources are associated with a security policy;
receiving, from a user of the computing machine, a request to access a specified supervised computing resource from among the multiple supervised computing resources;
providing access to the specified supervised computing resource locally on the computing machine and directly through a native computing environment of the computing machine;
causing a display unit to display, at a display position related to a region of the display unit displaying the specified supervised computing resource, an indicator that the specified supervised computing resource is associated with the security policy, the indicator comprising a border for the region, the border occupying points outside the region that are within a distance of n or fewer pixels from the region unless those pixels are occupied by visual representations of other computing resources that are more dominant than the specified supervised computing resource in a computing resource stack, wherein n is a positive integer; and
applying security rules from the security policy to the specified supervised computing resource.
2. The method of claim 1 , further comprising:
receiving, from the user of the computing machine, a request to access a specified unsupervised computing resource from among the multiple unsupervised computing resources;
providing access to the specified unsupervised computing resource locally on the computing machine and directly through a native computing environment of the computing machine;
forgoing causing the display unit to display the indicator that the specified unsupervised computing resource is associated with the security policy; and
foregoing applying security rules from the security policy to the specified unsupervised computing resource.
3. The method of claim 1 , wherein the multiple unsupervised computing resources are not associated with the security policy.
4. The method of claim 1 , wherein an administrator computing device, external to the computing machine, has access to the multiple supervised computing resources residing at the computing machine and lacks access to the multiple unsupervised computing resources residing at the computing machine.
5. The method of claim 1 , wherein the security policy comprises the security rules restricting activity of the user of the computing machine with respect to the multiple supervised computing resources.
6. The method of claim 1 , wherein the security policy comprises a monitoring policy allowing a remote computing device to monitor activity of the user of the computing machine with respect to the multiple supervised computing resources.
7. The method of claim 1 , wherein the multiple unsupervised computing resources and the multiple supervised computing resources reside in separate and distinct directories of a filesystem of the computing machine or of a cloud storage unit.
8. The method of claim 1 , wherein the multiple unsupervised computing resources access first common app platform application programming interfaces available to applications of the computing machine that use at least one of registry, remote procedure call, global objects, component object model, or universal application programming interfaces, wherein the multiple supervised computing resources access second common app platform application programming interfaces associated with the security policy that is different from the first common app platform application programming interfaces.
9. The method of claim 8 , wherein the first common app platform application programming interfaces comprise a universal windows platform.
10. The method of claim 8 , wherein the first common app platform application programming interfaces comprise at least one of shell infrastructure host, state repository service, background task infrastructure, user manager service, azure active directory broker, azure active directory credentials manager, host activity manager, application activation manager, or view manager.
11. A non-transitory machine-readable medium storing instructions that, when executed by processing circuitry, cause the processing circuitry to perform operations comprising:
storing, within a single user account at a computing machine, multiple unsupervised computing resources and multiple supervised computing resources, wherein the multiple supervised computing resources are associated with a security policy;
receiving, from a user of the computing machine, a request to access a specified supervised computing resource from among the multiple supervised computing resources;
providing access to the specified supervised computing resource locally on the computing machine and directly through a native computing environment of the computing machine;
causing a display unit to display, at a display position related to a region of the display unit displaying the specified supervised computing resource, an indicator that the specified supervised computing resource is associated with the security policy, the indicator comprising a border for the region, the border occupying points outside the region that are within a distance of n or fewer pixels from the region unless those pixels are occupied by visual representations of other computing resources that are more dominant than the specified supervised computing resource in a computing resource stack, wherein n is a positive integer; and
applying security rules from the security policy to the specified supervised computing resource.
12. The machine-readable medium of claim 11 , the operations further comprising:
receiving, from the user of the computing machine, a request to access a specified unsupervised computing resource from among the multiple unsupervised computing resources;
providing access to the specified unsupervised computing resource locally on the computing machine and directly through a native computing environment of the computing machine;
forgoing causing the display unit to display the indicator that the specified unsupervised computing resource is associated with the security policy; and
foregoing applying security rules from the security policy to the specified unsupervised computing resource.
13. The machine-readable medium of claim 11 , wherein the multiple unsupervised computing resources are not associated with the security policy.
14. The machine-readable medium of claim 11 , wherein an administrator computing device, external to the computing machine, has access to the multiple supervised computing resources residing at the computing machine and lacks access to the multiple unsupervised computing resources residing at the computing machine.
15. The machine-readable medium of claim 11 , wherein the security policy comprises the security rules restricting activity of the user of the computing machine with respect to the multiple supervised computing resources.
16. The machine-readable medium of claim 11 , wherein the security policy comprises a monitoring policy allowing a remote computing device to monitor activity of the user of the computing machine with respect to the multiple supervised computing resources.
17. The machine-readable medium of claim 11 , wherein the multiple unsupervised computing resources and the multiple supervised computing resources reside in separate and distinct directories of a filesystem of the computing machine or of a cloud storage unit.
18. A system comprising:
processing circuitry; and
a memory storing instructions that, when executed by processing circuitry, cause the processing circuitry to perform operations comprising:
storing, within a single user account at a computing machine, multiple unsupervised computing resources and multiple supervised computing resources, wherein the multiple supervised computing resources are associated with a security policy;
receiving, from a user of the computing machine, a request to access a specified supervised computing resource from among the multiple supervised computing resources;
providing access to the specified supervised computing resource locally on the computing machine and directly through a native computing environment of the computing machine;
causing a display unit to display, at a display position related to a region of the display unit displaying the specified supervised computing resource, an indicator that the specified supervised computing resource is associated with the security policy, the indicator comprising a border for the region, the border occupying points outside the region that are within a distance of n or fewer pixels from the region unless those pixels are occupied by visual representations of other computing resources that are more dominant than the specified supervised computing resource in a computing resource stack, wherein n is a positive integer; and
applying security rules from the security policy to the specified supervised computing resource.
19. The system of claim 18 , the operations further comprising:
receiving, from the user of the computing machine, a request to access a specified unsupervised computing resource from among the multiple unsupervised computing resources;
providing access to the specified unsupervised computing resource locally on the computing machine and directly through a native computing environment of the computing machine;
forgoing causing the display unit to display the indicator that the specified unsupervised computing resource is associated with the security policy; and
foregoing applying security rules from the security policy to the specified unsupervised computing resource.
20. The system of claim 18 , wherein the multiple unsupervised computing resources are not associated with the security policy.
21. The system of claim 18 , wherein an administrator computing device, external to the computing machine, has access to the multiple supervised computing resources residing at the computing machine and lacks access to the multiple unsupervised computing resources residing at the computing machine.
22. The system of claim 18 , wherein the security policy comprises the security rules restricting activity of the user of the computing machine with respect to the multiple supervised computing resources.
23. The system of claim 18 , wherein the security policy comprises a monitoring policy allowing a remote computing device to monitor activity of the user of the computing machine with respect to the multiple supervised computing resources.