Reply to thread

Message

<blockquote data-quote="ForgottenSeer 98186" data-source="post: 1029959">I was not talking about SAC. SAC is partially dependent upon WDAC, but full-on WDAC is a completely different animal.I never said that any admin is installing software on individual.The vast majority of companies do not do this. Many companies still use Windows 7 and Server 2008 machines. Not only that they will continue to use old hardware until it dies.There is huge variance built-in to environments with old hardware, old OS, all the different software, etc. Any self-respecting security professional has to account for that and make sure everything is covered.Microsoft itself has admitted that WDAC deployments have been troublesome. So any fanboism or defense of WDAC in terms of enterprise deployment is just plain ignorant.Actually, at the enterprise level, 3rd party software are often more reliable, less complex, and much easier to use than Microsoft&#039;s solutions. Take InTune as a single example. It is a pain to use and often does not work correctly. I&#039;ve received lots of complaints from the field about InTune not working correctly with Windows 11 22H2 systems. Submit a trouble ticket to Microsoft and you&#039;ll wait weeks, and sometimes months, to get the issues resolved. There are enough times where Microsoft support ends up saying &quot;we can&#039;t help you.&quot; Meanwhile the company has spent a ton of money on Microsoft&#039;s overly expensive solutions and support.So if productivity and profit are of primary importance, then yes, you do need 3rd party software. The relatively poor usability of Microsoft solutions is the reason why a 3rd party market thrives to the tune of 1+ trillion euro valuations.</blockquote>

[QUOTE="ForgottenSeer 98186, post: 1029959"] I was not talking about SAC. SAC is partially dependent upon WDAC, but full-on WDAC is a completely different animal. I never said that any admin is installing software on individual. The vast majority of companies do not do this. Many companies still use Windows 7 and Server 2008 machines. Not only that they will continue to use old hardware until it dies. There is huge variance built-in to environments with old hardware, old OS, all the different software, etc. Any self-respecting security professional has to account for that and make sure everything is covered. Microsoft itself has admitted that WDAC deployments have been troublesome. So any fanboism or defense of WDAC in terms of enterprise deployment is just plain ignorant. Actually, at the enterprise level, 3rd party software are often more reliable, less complex, and much easier to use than Microsoft's solutions. Take InTune as a single example. It is a pain to use and often does not work correctly. I've received lots of complaints from the field about InTune not working correctly with Windows 11 22H2 systems. Submit a trouble ticket to Microsoft and you'll wait weeks, and sometimes months, to get the issues resolved. There are enough times where Microsoft support ends up saying "we can't help you." Meanwhile the company has spent a ton of money on Microsoft's overly expensive solutions and support. So if productivity and profit are of primary importance, then yes, you do need 3rd party software. The relatively poor usability of Microsoft solutions is the reason why a 3rd party market thrives to the tune of 1+ trillion euro valuations. [/QUOTE]

Verification