4 ms·

Recently discovered that Infosec has now mandated that all laptops have sleep disabled (the reason given is to be able to do endpoint patching). ¯\_(ツ)_/¯ So I

Recently discovered that Infosec has now mandated that all laptops have sleep disabled (the reason given is to be able to do endpoint patching). ¯\_(ツ)_/¯ So I'm faced with having to log out and power off every day or suck up the cost of keeping the laptop on. /r/maliciouscompliance, here I come I suppose. Tempted to get one of these: https://us.amazon.com/Vegamax-Button-Ethernet-Internet-Network/dp/B09GPSMZ92/ref=pd_lpo_1?pd_rd_i=B09GPSMZ92&psc=1 https://us.amazon.com/Vegamax-Button-Ethernet-Internet-Netwo...

Torifyme12 4y ago
Your infosec department doesn't know how to stage patches then and should be ashamed.
- sdoering 4y ago
  They should not be named "sec". It isn't security. It is compliance.
aimor 4y ago
I still can't believe they're able to disable "Hibernate", now "Sleep" is at risk? And of course with all the bloat booting takes forever.
alt227 4y ago
>So I'm faced with having to log out and power off every day When did this become a chore? I do this as standard and imo all people should. SSD Boot times these days are mostly under a minute and you get a fresh desktop every time. EDIT: In fact I am one of the sysadmins which so many seem to despise on here. I have hybrid sleep and fast startup disabled by group policy on all my windows domain networks. It reduces so many support tickets by just actually having machines properly rebooted every night. Without this, people contact IT for glitches and bugs in their system, and when you look at the system uptime it is years!
- sovnade 4y ago
  Because I have visual studio open, a solution loaded and organized with all the files I need for this sprint, SSMS with the servers all connected that I need, all my tabs open to see my jira board, support tickets, etc, a notepad doc i was using to take notes on a phone call, my ssh key loaded into pageant, and if my computer reboots, i'm going to forget half of that when it starts back up and lose 30+ minutes trying to get set up again the next day. edit: i would legitimately quit a company that made me reboot every single night.
  - alt227 4y ago
    In our network there are no developers. That would be a different usecase which would require different policies. All tools required by staff are online and autosave everything. This in fact is another reason why proper restarts are enforced nightly, as most browsers with multiple tabs of heavy web apps start misbehaving very quickly. Forcing a nightly shutdown of browsers is an added bonus of proper shutdowns. Be aware I am in a corporate environment, with all non technical users, and all services online.
    - sovnade 4y ago
      Ok - that makes sense. Obviously being on the dev side of things, I've never worked for a company that didn't have devs (and admins, devops, etc). Sounds like it definitely works in your case.
- aeyes 4y ago
  > I have hybrid sleep and fast startup disabled by group policy I guess I'll have to add this to my questions to ask at job interviews. Admins like you these days sure try to make our lives as horrible as possible. Corporate anti-virus, DNS interception and policies like these turn my machine into something I constantly want to throw out the window. All because you are too lazy to ask a person to reboot if the machine has high uptime.
  - alt227 4y ago
Macha 4y ago
Yeah, at a previous company, the IT team were complaining about users disabling powernap or shutting down laptops as it meant they wouldn't patch overnight. But these laptops were in bags, the last thing I wanted was a mac to start a house fire by heating up in a bag, so fuck that.
- deleted 4y ago
  [deleted]
Spooky23 4y ago
Probably because with work at home there’s no WOL. We disabled sleep to improve battery life and address a personal safety issue. There are many failure scenarios between various builds of Windows 10 and shitty drivers. Devices often wake up in bags and spin up fans until dead. Normal scenario is that the battery is dead in the morning. In one case, it melted the compartment material in a bag and was deemed a safety hazard.
- gabrielhidasy 4y ago
  So now instead all devices can keep their fans on and melt compartment material bag as nobody would assume the device is that dumb to not sleep when closed. Much better.
- hedora 4y ago
  If it's a safety hazard, tell the OEM to repair the entire fleet. Problem solved.
  - Spooky23 4y ago
    Takes awhile to bring back 20k laptops!

Torifyme12 4y ago

Your infosec department doesn't know how to stage patches then and should be ashamed.

sdoering 4y ago
They should not be named "sec". It isn't security. It is compliance.

aimor 4y ago

I still can't believe they're able to disable "Hibernate", now "Sleep" is at risk? And of course with all the bloat booting takes forever.

alt227 4y ago

>So I'm faced with having to log out and power off every day When did this become a chore? I do this as standard and imo all people should. SSD Boot times these days are mostly under a minute and you get a fresh desktop every time. EDIT: In fact I am one of the sysadmins which so many seem to despise on here. I have hybrid sleep and fast startup disabled by group policy on all my windows domain networks. It reduces so many support tickets by just actually having machines properly rebooted every night. Without this, people contact IT for glitches and bugs in their system, and when you look at the system uptime it is years!

sovnade 4y ago
Because I have visual studio open, a solution loaded and organized with all the files I need for this sprint, SSMS with the servers all connected that I need, all my tabs open to see my jira board, support tickets, etc, a notepad doc i was using to take notes on a phone call, my ssh key loaded into pageant, and if my computer reboots, i'm going to forget half of that when it starts back up and lose 30+ minutes trying to get set up again the next day. edit: i would legitimately quit a company that made me reboot every single night.
- alt227 4y ago
  In our network there are no developers. That would be a different usecase which would require different policies. All tools required by staff are online and autosave everything. This in fact is another reason why proper restarts are enforced nightly, as most browsers with multiple tabs of heavy web apps start misbehaving very quickly. Forcing a nightly shutdown of browsers is an added bonus of proper shutdowns. Be aware I am in a corporate environment, with all non technical users, and all services online.
  - sovnade 4y ago
    Ok - that makes sense. Obviously being on the dev side of things, I've never worked for a company that didn't have devs (and admins, devops, etc). Sounds like it definitely works in your case.
aeyes 4y ago
> I have hybrid sleep and fast startup disabled by group policy I guess I'll have to add this to my questions to ask at job interviews. Admins like you these days sure try to make our lives as horrible as possible. Corporate anti-virus, DNS interception and policies like these turn my machine into something I constantly want to throw out the window. All because you are too lazy to ask a person to reboot if the machine has high uptime.
- alt227 4y ago

Macha 4y ago

Yeah, at a previous company, the IT team were complaining about users disabling powernap or shutting down laptops as it meant they wouldn't patch overnight. But these laptops were in bags, the last thing I wanted was a mac to start a house fire by heating up in a bag, so fuck that.

deleted 4y ago
[deleted]

Spooky23 4y ago

Probably because with work at home there’s no WOL. We disabled sleep to improve battery life and address a personal safety issue. There are many failure scenarios between various builds of Windows 10 and shitty drivers. Devices often wake up in bags and spin up fans until dead. Normal scenario is that the battery is dead in the morning. In one case, it melted the compartment material in a bag and was deemed a safety hazard.

gabrielhidasy 4y ago
So now instead all devices can keep their fans on and melt compartment material bag as nobody would assume the device is that dumb to not sleep when closed. Much better.
hedora 4y ago
If it's a safety hazard, tell the OEM to repair the entire fleet. Problem solved.
- Spooky23 4y ago
  Takes awhile to bring back 20k laptops!