Device Management Platform Configuration:
- AD/SCCM - Windows – Staff and Student Desktops (on-premise)
- Intune - Windows - Laptops
- Jamf Cloud - macOS – Apple Devices
-
AD/SCCM - Windows Desktops (on premise)
- Microsoft’s System Centre Configuration Manager (SCCM) and Active Directory (AD) registration is required for all corporate desktops to support cybersecurity needs and provide remote management capabilities for components such as Operating System updates, device configuration and applications delivery. All on-premise desktop devices need to run an active SCCM Client.
- Digital Services provide an SCCM based “build solution” for desktop devices that includes a core software profile and application delivery tools that meets the corporate need.
- Desktops intending to be run via wireless services or those with an off-premise potential need to be treated as per laptops and managed by Intune.
-
Intune - Windows Laptops
- Microsoft’s Intune platform is the University’s corporate Mobile Device Management (MDM) solution. All corporate owned and operated devices (staff /student) need to be subject to Intune /Autopilot on-boarding and security tag /group classification to meet cybersecurity compliance needs and support remote management capabilities.
- New laptop devices must be registered in the University’s Mobile Device Management (MDM) platform (Microsoft Intune) as point of procurement. Details on this mechanism can be provided by Digital Services.
- Legacy laptop devices need to have hardware data harvested and be built (from scratch) as an Intune (Autopilot) device.
- Standard Intune Laptop deployments are based upon an “individual” use model. Where a “shared” or “pool” requirement exists, the device must be established /re-built with this usage model in mind.
- Core software products /updates /security patches are automatically deployed via Intune services.
- A portfolio of software applications will be advertised for download /deployment via the University’s Company Portal.
-
Jamf - mac OS Apple devices
- Jamf Cloud platform is the University’s corporate mobile device management solution for all Apple devices.
- All corporate owned Apple devices (staff /student) must registered in Apple Schools Manager (ASM) by the vendor at procurement time. As a fall-back /exception, ASM registration can be progressed by Digital Services.
- The Apple device then needs to be enrolled in the Jamf Cloud portal. The stakeholder needs to have a “build profile” that has been developed by Digital Services applied. Digital Services need to be advised of such activity by a Service Desk request.
- Core software products /updates /security patches are automatically deployed via Jamf Cloud services.
- A portfolio of additional software applications are advertised for download /deployment via the University’s Jamf Cloud Portal.
< Return to Workstation Standards Architecture