Dynamic Application Compliance Policy Updates via User Behavior Feedback
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing application compliance policies in management solutions often lead to user frustration and decreased productivity, as users are forced to reinstall frequently used applications that are automatically removed by policy.
Innovation Solution
A system and method for dynamically updating application compliance policies by deploying agents on user computing devices to track application install events, sending application metrics to a policy recommendation service, which generates recommendations to update policies and prevent removal of frequently installed applications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If application compliance policies automatically remove applications from user computing devices, then security and policy compliance are improved, but user productivity and satisfaction deteriorate due to frequent reinstallation of needed applications
Solution Approach 1:
The system implements feedback by monitoring application installation events and usage patterns on user computing devices. When an application is repeatedly installed by a user despite being in the removal list, the system detects this pattern and automatically generates a policy update recommendation to remove the application from the removal list, thereby adapting the compliance policy based on actual user behavior feedback
Solution Approach 2:
The compliance policy is transformed from a static, manually updated configuration into a dynamic system that automatically adapts based on monitored user behavior. The policy can be automatically updated to reflect changing user needs, allowing the removal list to be dynamically adjusted without manual administrator intervention
2Productivity
If administrators manually update application compliance policies to prevent removal of frequently used applications, then user productivity is improved, but administrative workload and error-prone processes increase
Solution Approach 1:
The system enables self-service by automatically monitoring application installation events and generating policy update recommendations without requiring manual administrator intervention. The monitoring component tracks when users repeatedly install applications from the removal list, and the system automatically creates the necessary policy updates, freeing administrators from tedious manual updates
Solution Approach 2:
The system closes the loop between policy enforcement and policy adjustment by implementing feedback mechanisms that monitor user behavior and automatically trigger policy updates. This eliminates the need for administrators to manually respond to each policy violation, reducing administrative complexity while maintaining productivity
3Reliability
If application compliance policies are strictly enforced on all user computing devices, then security and compliance control are improved, but user flexibility and adaptability deteriorate
Solution Approach 1:
The compliance policy transitions from a rigid, one-size-fits-all approach to a dynamic, adaptive system that automatically adjusts based on individual user behavior patterns. Each user's frequently installed applications are tracked, and policies are automatically updated to accommodate their specific needs while maintaining security controls
Data Source
AI summary
Application compliance policies can be dynamically updated. An agent can be deployed on user computing devices to monitor application install events to track how frequently users install applications on the user computing devices and whether applicable application compliance policies dictate that such applications should be removed. A policy management service of a management solution can interface with the agents to gather application metrics and use the application metrics to dynamically update the application compliance policies to prevent future removal of one or more applications that are determined to be commonly installed by the users. These dynamic updates could be made on a per-user basis, a per-group basis, or a global basis.