How do you manage your Client PCs

[ITGURU]

So, I have 1200 clients (mixture of desktops and laptops) on our network.

 

It seems ever increasing that software now has an 'Agent' that has to be installed on the clients to be managed and all have their own independent management console.

 

So far I have:

 

WSUS - For managing Windows Updates

McAfee EPO Agent - For Anti-Virus and DLP

SIMS Solus 3 Agent - For SIMS updates.

 

That's 3 separate systems I have to look at to check that they are all patched and up to date, and still 'Checking in'.

 

As for SIMS Solus 3 Agent - if a computer is re-imaged and put back on the network with the same name, the server console just says 'offline' - it gives you the option to 'reinstall' but that's then an extra step.

 

For McAfee - If a client is re-imaged I have to re-deploy the agent or it just says the last check in time before the PC crashed.

 

For WSUS - after approving updates check after to ensure none are reporting errors.

 

Just wondered if this is what everyone else does , checking 3 management consoles for ensure PCs are still checking in and up to date - or whether there is an easier way to manage this.

[snagrat]

Stuff like McAfee can be deployed during OSD assuming you use either SCCM or MDT.

 

Still needs installing, but is automated.

[sparkeh]

Yeah it does seem the way things to have lots of separate consoles to mange things. To a certain extent you have to deal with what you are given but there are some things you can do.

 

I use SCCM and Lansweeper to monitor things and create alerts when things need attention. Solus 3 though is what it is though and I feel like we just have to suck that one up :/

[andydis]

If you have EES ditch mcafee for Microsoft endpoint imho mcafee is awful

[Dos_Box]

Moving to correct forum.

[speckytecky]

Thanks given to @Dos_Box not in particular for the post but the wonderful quote from Sir Terry Pratchett R.I.P. used in the signature box. We were lucky enough to see the wonderful chap the year before he died. We were in the front row at Salisbury City Hall when he made a guest appreciate with Steele Eye Span in their fabulous rendition of his Wintersmith book.

 

Apologies for taking the thread off topic!

[AJWhite1970]

If you have EES ditch mcafee for Microsoft endpoint imho mcafee is awful

 

How good is Endpoint? Been looking at a few reviews and it appears it's zero day performance isn't that great? Also, what would I need to be subscribed to with EES to get Endpoint? I already subscribe all the usual OS, SQL, Exchange, Office etc

 

Cheers

Andrew

[ITGURU]

If you have EES ditch mcafee for Microsoft endpoint imho mcafee is awful

 

I've trialled other AV products but unless they have the same DLP Removable Device Protection as McAfee then they are not what i'm looking for.

 

With McAfee you can set USB policies that are applied by the user who logs on. Therefore, you can set it so that exe, zip etc files are blocked for all uses in my Student & Staff OU policies, but if an admin user logs on to the client PC then it will let you run/open these.

 

I've found with other products that whilst you can block the above files, you can only set this PER COMPUTER, so it's all or nothing for ALL users including admin users.

 

McAfee lets you set policies/rules per user or OU.

[ITGURU]

Yeah it does seem the way things to have lots of separate consoles to mange things. To a certain extent you have to deal with what you are given but there are some things you can do.

 

I use SCCM and Lansweeper to monitor things and create alerts when things need attention. Solus 3 though is what it is though and I feel like we just have to suck that one up :/

 

I find SOLUS 3 so complicated - how many screens do you need, Agents & Targets?! Not fully rolled it out yet as find it so much better with SOLUS 2 for end users just to run sims after an update and let it complete, saves any issues with clients that may be offline at time of update.

 

Guess won't have much choice once support for SOLUS 3 ends - lets hope they carry on improving it still, especially when you re-image a PC and have to re-deploy the agent.

[RobD]

How good is Endpoint? Been looking at a few reviews and it appears it's zero day performance isn't that great? Also, what would I need to be subscribed to with EES to get Endpoint? I already subscribe all the usual OS, SQL, Exchange, Office etc

 

We use it here and haven't had any issues, its far better than our previous solution and picked up literally hundreds of virus's when we first implemented it. My suggestion would be to block port 25 on your firewall for everything except exchange as a safe measure.