3 ms·

Microsoft just released Linux support (Ubuntu) in their MDM Intune. It’s very barebones yet but provides first fundamental capabilities. https://learn.microsof

Microsoft just released Linux support (Ubuntu) in their MDM Intune. It’s very barebones yet but provides first fundamental capabilities. https://learn.microsoft.com/en-us/mem/intune/fundamentals/supported-devices-browsers https://learn.microsoft.com/en-us/mem/intune/fundamentals/su... https://learn.microsoft.com/en-us/mem/intune/user-help/enroll-device-linux https://learn.microsoft.com/en-us/mem/intune/user-help/enrol...

hsbauauvhabzb 4y ago
Not even Ubuntu, Ubuntu + gnome. Everyone is different but for me gnome feels like osx ui, both of which I dislike immensely.
azalemeth 4y ago
Isn't MDM very much anathema to the Linux user's philosophy? I've avoided it pretty sternly.
- echelon 4y ago
  For a personal device. Corporate devices are subject to a whole host of regulations. PCI, HIPAA, etc. You can't even touch fintech unless your engineers work on MDM'd devices. You can't trust every single employee to always keep their machine up to date or be on the up and up. Statistically speaking, you'll need it eventually.
  - betaby 4y ago
    Are they? First time I hear that users' desktops are subject to PCI in fin-tech companies.
    - CoolCold 4y ago
      start with password complexities, prevention of unauthorized access (i.e. screen locks), full disk encryption, so on, for those users who are close to cards/data management. Using Linux not making people automagically smarter and setting simple passwords or not enabling disk encryption - that kind of stuff I can easily imagine to happen without external curation.
  - lrvick 4y ago
    I have worked at 10+ fintech companies in a mix of full time and contract roles and exclusively use QubesOS. No one was able to make a coherent argument how MDM was going to work or help improve the security of a base OS that is not even connected to the internet. At best I could run something like osquery that sends reports to my sys-net VM that forwards them to to an interested IT group at a set interval, but no one has actually implemented this as I am always enough of an edge case that they can file a special exception for me. Some fintech orgs do get by with Linux users just using osquery reporting to a central monitoring panel like Kibana or Kolide that can send automated alerts to those not complying.
- CoolCold 4y ago
  I see it like that - you can create any car or vehicle to be used on your backyard somewhere in distant village, until you start driving on public roads, selling it to general auditory - then, please, stop being cool kid and start using common practices - i.e. have stop backlights, safety belts, noise levels ... Linux is just a tool. Yes, just another tool. I've personally seen multiple, not even single digits of persons, who store they ssh private keys unprotected, not using Full Disk Encryption and so on - most of them even have no idea that booting with `init=/bin/bash` will open their system. Those are average Joe and needs curation. Industry need to the way to ensure on such things => industry created MDM. Actually it's finally a sign, someone starts interested in bringing Linux To Desktop. I'm waiting for telemetry to be added - that will assure me of the interest further of Linux as a viable Product, not just concept.

hsbauauvhabzb 4y ago

Not even Ubuntu, Ubuntu + gnome. Everyone is different but for me gnome feels like osx ui, both of which I dislike immensely.

azalemeth 4y ago

Isn't MDM very much anathema to the Linux user's philosophy? I've avoided it pretty sternly.

echelon 4y ago
For a personal device. Corporate devices are subject to a whole host of regulations. PCI, HIPAA, etc. You can't even touch fintech unless your engineers work on MDM'd devices. You can't trust every single employee to always keep their machine up to date or be on the up and up. Statistically speaking, you'll need it eventually.
- betaby 4y ago
  Are they? First time I hear that users' desktops are subject to PCI in fin-tech companies.
  - CoolCold 4y ago
    start with password complexities, prevention of unauthorized access (i.e. screen locks), full disk encryption, so on, for those users who are close to cards/data management. Using Linux not making people automagically smarter and setting simple passwords or not enabling disk encryption - that kind of stuff I can easily imagine to happen without external curation.
- lrvick 4y ago
  I have worked at 10+ fintech companies in a mix of full time and contract roles and exclusively use QubesOS. No one was able to make a coherent argument how MDM was going to work or help improve the security of a base OS that is not even connected to the internet. At best I could run something like osquery that sends reports to my sys-net VM that forwards them to to an interested IT group at a set interval, but no one has actually implemented this as I am always enough of an edge case that they can file a special exception for me. Some fintech orgs do get by with Linux users just using osquery reporting to a central monitoring panel like Kibana or Kolide that can send automated alerts to those not complying.
CoolCold 4y ago
I see it like that - you can create any car or vehicle to be used on your backyard somewhere in distant village, until you start driving on public roads, selling it to general auditory - then, please, stop being cool kid and start using common practices - i.e. have stop backlights, safety belts, noise levels ... Linux is just a tool. Yes, just another tool. I've personally seen multiple, not even single digits of persons, who store they ssh private keys unprotected, not using Full Disk Encryption and so on - most of them even have no idea that booting with `init=/bin/bash` will open their system. Those are average Joe and needs curation. Industry need to the way to ensure on such things => industry created MDM. Actually it's finally a sign, someone starts interested in bringing Linux To Desktop. I'm waiting for telemetry to be added - that will assure me of the interest further of Linux as a viable Product, not just concept.