Reply to thread

Message

<blockquote data-quote="ForgottenSeer 97327" data-source="post: 1029932">Which admin is still installing software on individual PC&#039;s? <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite132" alt=":unsure:" title="Unsure&nbsp; &nbsp; :unsure:" loading="lazy" data-shortname=":unsure:" /><img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite126" alt=":ROFLMAO:" title="ROFL&nbsp; &nbsp; :ROFLMAO:" loading="lazy" data-shortname=":ROFLMAO:" /><img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite114" alt=":cool:" title="Cool&nbsp; &nbsp; :cool:" loading="lazy" data-shortname=":cool:" />. In the Netherlands most companies roll out pre-set images to a few different types of devices (max three to five device variances). In my company we have five device variances which are rolled out identically: a &#039;top end desktop&#039; HP PC, an Intel &#039;office&#039; NUC , a &#039;management&#039; Surface Pro and a &#039;power user&#039; 17 inch HP laptop and &#039;ambulant worker&#039; HP 15 inch laptop. We write off hardware in 5 years, each year replacing one of the five &#039;worker profile&#039; devices.In 2019 I did an internal project and met our company&#039;s sysadmin. My company wanted to assess the risk of fully working at home, to be ready for the upcoming Covid19 troubles (our worst case scenario of Covid19 became reality). I was impressed with the sysadmin&#039;s confidence on IT-security. He explained me a little on WDAC, showed me the WDAC wizzard. His adagium was KISS keep it simple stupid. Things become complex when you allow a lot of variances. When you keep things simple you don&#039;t need complex and expensive third-party management and control software.That is how I managed a strict WDAC policy (Microsof only + Macrium Reflect + Syncback + Norton &amp; Sophos secondary scanners allowed) up and running in less than 30 minutes (spending more than half the time on double checking my image backup and recovery procedure).</blockquote>

[QUOTE="ForgottenSeer 97327, post: 1029932"] Which admin is still installing software on individual PC's? :unsure::ROFLMAO::cool:. In the Netherlands most companies roll out pre-set images to a few different types of devices (max three to five device variances). In my company we have five device variances which are rolled out identically: a 'top end desktop' HP PC, an Intel 'office' NUC , a 'management' Surface Pro and a 'power user' 17 inch HP laptop and 'ambulant worker' HP 15 inch laptop. We write off hardware in 5 years, each year replacing one of the five 'worker profile' devices. In 2019 I did an internal project and met our company's sysadmin. My company wanted to assess the risk of fully working at home, to be ready for the upcoming Covid19 troubles (our worst case scenario of Covid19 became reality). I was impressed with the sysadmin's confidence on IT-security. He explained me a little on WDAC, showed me the WDAC wizzard. His adagium was KISS keep it simple stupid. Things become complex when you allow a lot of variances. When you keep things simple you don't need complex and expensive third-party management and control software. That is how I managed a strict WDAC policy (Microsof only + Macrium Reflect + Syncback + Norton & Sophos secondary scanners allowed) up and running in less than 30 minutes (spending more than half the time on double checking my image backup and recovery procedure). [/QUOTE]

Verification