Patent ID: 8230484

Claim:
A method comprising: initializing a group with respective entries corresponding to respective users that have controlled access to a resource; subsequently to the initializing, and in response to installing an agent program on a client computer having an association with at least one of the users, deleting at least one entry from a cached copy of the group, the deleted entry corresponding to the at least one user; subsequently to the installing, and in response to uninstalling the agent program from the client computer, adding an entry to the cached copy, the added entry corresponding to the at least one user; subsequently to the initializing, and in response to a request from the at least one user to access the resource, consulting the cached copy to determine if there is an entry corresponding to a source of the request, and if so, then denying the request; and wherein after the initializing, the at least one user is denied access to the resource unless the agent program is installed on the client computer associated with the at least one user.