4 ms·

Any decent sized organization, even ones that don't have regulatory compliance to worry about, has to deal with the majority of things listed. My company has ro

by greedo 4y ago

Any decent sized organization, even ones that don't have regulatory compliance to worry about, has to deal with the majority of things listed. My company has roughly 200 Macs in use, around 5% of the total endpoints in use. The admins who specialize in this have to worry primarily about patch management, application deployment, and security. Authentication is through AD, so any changes that might affect this have to be done carefully. And yes, printing is still a big deal.

chrisseaton 4y ago
> worry primarily about patch management Don’t the OS and app prompt for their own updates these days?
- plonk 4y ago
  You don't want the whole office to be out of work for a day because the last Nvidia update broke some professional software your techs are using. This lets you test the patch on some machines before rolling it out to your whole org.
- rejectfinite 4y ago
  Sure but users can decline them and never reboot
- namdnay 4y ago
  There’s no way an enterprise can follow the consumer cadence for patches and updates. There are dozens if not hundreds of custom apps that could break
- itisit 4y ago
  Hoping for the best is not how compliance works.
  - chrisseaton 4y ago
    I'm not being obtuse - but if you can't trust your employees to run the updates they're asked to, then what are you able to trust them with?
    - aatharuv 4y ago
      Your employees have deliverables. Maybe they're customer facing. Maybe they're not directly customer facing. But the incentive structure may prioritize getting their deliverables done over doing patching at least in the short term. The corporate hierarchies for IT and their main organization might only have a common manager at the very top of the company.
- easton 4y ago
  They do, but people don't click on the "do the update" button so you need a way to force it for compliance reasons. And sometimes you want to withhold an update if it breaks an important app, etc.

by greedo 4y ago

chrisseaton 4y ago

> worry primarily about patch management Don’t the OS and app prompt for their own updates these days?

plonk 4y ago
You don't want the whole office to be out of work for a day because the last Nvidia update broke some professional software your techs are using. This lets you test the patch on some machines before rolling it out to your whole org.
rejectfinite 4y ago
Sure but users can decline them and never reboot
namdnay 4y ago
There’s no way an enterprise can follow the consumer cadence for patches and updates. There are dozens if not hundreds of custom apps that could break
itisit 4y ago
Hoping for the best is not how compliance works.
- chrisseaton 4y ago
  I'm not being obtuse - but if you can't trust your employees to run the updates they're asked to, then what are you able to trust them with?
  - aatharuv 4y ago
    Your employees have deliverables. Maybe they're customer facing. Maybe they're not directly customer facing. But the incentive structure may prioritize getting their deliverables done over doing patching at least in the short term. The corporate hierarchies for IT and their main organization might only have a common manager at the very top of the company.
easton 4y ago
They do, but people don't click on the "do the update" button so you need a way to force it for compliance reasons. And sometimes you want to withhold an update if it breaks an important app, etc.