Re: Remote domain joined computer updates

[Blake Brown <Blake.Brown () MHCC EDU>]

Thanks! Very similar boat here and probably taking the same long-term path.

~Blake
________________________________
From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of Eric Schewe 
<eric.schewe () VIU CA>
Sent: Thursday, August 27, 2020 3:03 PM
To: SECURITY () LISTSERV EDUCAUSE EDU <SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] Remote domain joined computer updates

External Email

We ran into the same issue.

For AV we're using SCCM Endpoint Protection (SCEP) and have it configured to fall back to the cloud if it can't reach 
the SCCM servers for updates.

For Windows/Office updates we expanded our SCCM boundary to include the VPN network which had the added benefit of 
making the Software Center available for employees off campus.

We've generally done a poor job of managing laptops in the past so this is a pretty big improvement for us at this 
point.

Medium term we're working on getting a Enterprise CA Deployed, providing machines certificates and allowing them to 
remotely talk to SCCM over the internet and then long term we're likely moving to InTune or whatever it's called this 
week.

-Eric

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community