Detecting network conditions for enterprise users
Disclosed are various examples for automatically analyzing telemetry data from managed devices in one or more organizations and categorizing devices and/or user accounts as home users, hybrid users, or office users. The categorization can be performed based upon an analysis of a wireless network connection of a client device that is managed by a management service.
1 . A system, comprising:
a computing device comprising a processor and a memory; and
machine-readable instructions stored in the memory which, when executed by the processor, cause the computing device to at least:
obtain telemetry data from a plurality of client devices within a plurality of organizations over a period of time, the telemetry data identifying at least one network condition under which respective client devices connect to a unified endpoint management (UEM) system;
categorize a network through which individual ones of the client devices are connecting to the UEM system based upon the at least one network condition, wherein the network through which individual ones of the client devices are connecting to the UEM system is categorized based on a respective service set identifier (SSID) associated with a respective wireless network connection of the individual ones of the client device, wherein the network is categorized by:
identifying a plurality of SSIDs utilized by the plurality of client devices;
identifying the plurality of organizations utilizing the plurality of SSIDs;
calculating a respective entropy value for individual ones of the plurality of SSIDs, wherein the respective entropy value represents a measure of how many organizations utilize a respective SSID; and
designating the network as a public network in response to the entropy measure exceeding an entropy threshold; and
categorize a respective user account associated with individual ones of the client devices into a public network account, a home network account, or an enterprise network account based upon the at least one network condition and a categorization of the network.
2 . The system of claim 1 , wherein the respective SSID is reported to a management service executed by the computing device by a management component running on the individual ones of the client devices.
3 . The system of claim 1 , wherein, when executed by the processor, the machine readable instructions further categorize the respective user account as a public network account in response to the network being designated as the public network.
4 . The system of claim 1 , wherein the network through which individual ones of the client devices are connecting to the UEM system is further categorized by:
eliminating a plurality of public network SSIDs from the plurality of SSIDs;
identifying a percentage of client devices using a respective SSIDs within the plurality of client devices;
designating the network as an enterprise network in response to the percentage meeting or exceeding a percentage threshold, wherein the network is designated as a home network in response to the percentage being less than the percentage threshold.
5 . The system of claim 4 , wherein, when executed by the processor, the machine readable instructions further categorize the respective user account as an enterprise network account in response to the network being designated as the enterprise network or a home network account in response to the network being designated as the home network.
6 . A non-transitory computer-readable medium embodying executable instructions which, when executed by a computing device, cause the computing device to at least:
obtain telemetry data from a plurality of client devices within a plurality of organizations over a period of time, the telemetry data identifying at least one network condition under which respective client devices connect to a unified endpoint management (UEM) system;
categorize a network through which individual ones of the client devices are connecting to the UEM system based upon the at least one network condition, wherein the network through which individual ones of the client devices are connecting to the UEM system is categorized based on a respective service set identifier (SSID) associated with a respective wireless network connection of the individual ones of the client device, wherein the network is categorized by:
identifying a plurality of SSIDs utilized by the plurality of client devices;
identifying the plurality of organizations utilizing the plurality of SSIDs;
calculating a respective entropy value for individual ones of the plurality of SSIDs, wherein the respective entropy value represents a measure of how many organizations utilize a respective SSID; and
designating the network as a public network in response to the entropy measure exceeding an entropy threshold; and
categorize a respective user account associated with individual ones of the client devices into a public network account, a home network account, or an enterprise network account based upon the at least one network condition and a categorization of the network.
7 . The non-transitory computer-readable medium of claim 6 , wherein the respective SSID is reported to a management service executed by the computing device by a management component running on the individual ones of the client devices.
8 . The non-transitory computer-readable medium of claim 6 , wherein, when executed by the processor, the machine readable instructions further categorize the respective user account as a public network account in response to the network being designated as the public network.
9 . The non-transitory computer-readable medium of claim 6 , wherein the network through which individual ones of the client devices are connecting to the UEM system is further categorized by:
eliminating a plurality of public network SSIDs from the plurality of SSIDs;
identifying a percentage of client devices using a respective SSIDs within the plurality of client devices;
designating the network as an enterprise network in response to the percentage meeting or exceeding a percentage threshold, wherein the network is designated as a home network in response to the percentage being less than the percentage threshold.
10 . The non-transitory computer-readable medium of claim 9 , wherein, when executed by the processor, the machine readable instructions further categorize the respective user account as an enterprise network account in response to the network being designated as the enterprise network or a home network account in response to the network being designated as the home network.
11 . A computer-implemented method, comprising:
obtaining telemetry data from a plurality of client devices within a plurality of organizations over a period of time, the telemetry data identifying at least one network condition under which respective client devices connect to a unified endpoint management (UEM) system;
categorizing a network through which individual ones of the client devices are connecting to the UEM system based upon the at least one network condition, wherein the network through which individual ones of the client devices are connecting to the UEM system is categorized based on a respective service set identifier (SSID) associated with a respective wireless network connection of the individual ones of the client devices, wherein the network is categorized by:
identifying a plurality of SSIDs utilized by the plurality of client devices;
identifying the plurality of organizations utilizing the plurality of SSIDs;
calculating a respective entropy value for individual ones of the plurality of SSIDs, wherein the respective entropy value represents a measure of how many organizations utilize a respective SSID; and
designating the network as a public network in response to the entropy measure exceeding an entropy threshold; and
categorizing a respective user account associated with individual ones of the client devices into a public network account, a home network account, or an enterprise network account based upon the at least one network condition and a categorization of the network.
12 . The computer-implemented method of claim 11 , wherein the respective SSID is reported to a management service executed by the computing device by a management component running on the individual ones of the client devices.
13 . The computer-implemented method of claim 11 , wherein the network through which individual ones of the client devices are connecting to the UEM system is categorized by:
eliminating a plurality of public network SSIDs from the plurality of SSIDs;
identifying a percentage of client devices using a respective SSID's within the plurality of client devices;
designating the network as an enterprise network in response to the percentage meeting or exceeding a percentage threshold, wherein the network is designated as a home network in response to the percentage being less than the percentage threshold.
14 . The computer-implemented method of claim 13 , wherein categorizing the respective user account as an enterprise network account is performed in response to the network being designated as the enterprise network or a home network account in response to the network being designated as the home network.