Protect the Client Authentication Certificate during its capture Obviously a security risk… attacker potentially has access to your network and access to variables in the Task Sequence environment could have sensitive data. Not blocking might let attackers be able to impersonate ConfigMgr Client and have the capability to download Policies that can contain sensitive information.ĭon’t enable Command Support on your production Boot ImagesĮnabling Command Support, you can press F8 to start Command Prompt if a machine build fails, so you perform troubleshooting and look at the smsts.log. If you discover the client certificate has been compromised (is required to deploy an OS), revoke it if it is a PKI certificate. So is it possible for an attacker’s machine to take all disk space on the SMP, which would cause a denial of service… Block the Client Certificate if compromised There’s no way to limit the amount of data a machine stores on a state migration point (SMP). SCCM Download Whitepaper on Top 10 Best Practices on Windows 10 OSD Configuration Manager ConfigMgr? State Migration Points Collection Variablesīe careful with the use of collection variables! Administrators could maybe read sensitive information they might be in there. The last thing we want is people who shouldn’t access OSD, causing problems on purpose or because they have features they don’t understand, and they end up deploying to a Collection like All Systems or others that are a big deal if targeted wrong. Co-management is the bridge between traditional management and modern management. Windows 10 co-management is a dual management capability available with Windversion (Fall Creators Update) and later. Decision – Windows 10 or Windows 11 Co-Management? But, I didn’t hear anything from Remedy or ServiceNow about Intune integration. This integration can be achieved through Microsoft Graph APIs. Microsoft Intune has a way to hook into ISVs like Remedy and ServiceNow for IT service management and as well as for asset management.
IT service management tools are essential for most organizations.Īs SCCM is having the vast majority of the market share in the device management world, this is one of the critical points that we should consider while architecture decision making.
SCCM Architecture Decision Making Guide 4 Integration with ISVs ServiceNow/Remedy?Ĭan Intune get integrated with ISVs like ServiceNow or Remedy? SCCM can get integrated with various 3rd parties service providers like ServiceNow or Remedy.
0 kommentar(er)
