...
Operating system deployment is supported using System Center Configuration Manager (SCCM). The SCCM infrastructure provides the ability install Windows 10 and configured applications via and OSD task sequence (TS) to devices connected to on-campus wired Ethernet networks. Specific combinations of applications can be configured for installation during OSD by creating and saving a build in the Config-O-Matic Otto web application. Saved builds may be assigned to specific computers in Config-O-MaticOtto.
Application Deployment
Available Applications
...
Updates for the Windows operating system and for Microsoft applications such as Microsoft Office and Skype are installed on client systems using required deployments. Deployed updates will install automatically when the deployment deadline is reached. Pending update installations may be viewed in the Software Center application. Installed updates are not displayed in Software Center, but they may be viewed in the Programs and Features control panel. To read about the release schedule of updates, view the Windows Change Schedule topic.
Anti-Virus
Windows Defender antivirus is CrowdStrike Falcon is an antimalware product that's deployed to all Windows PaaS client systems. Antivirus definitions are updated automatically multiple times per day. Configuration policies for Windows Defender are deployed centrally using SCCM. Customized configuration policies may be deployed on a per-unit basis. To read detailed information about the Windows Defender configuration, view the Windows Defender Configuration topicPlatform as a Service devices. Malware detections from Falcon are monitored by MiWorkspace and Information Assurance team members.
Security Configurations
Windows PaaS systems share many of the same security settings that are implemented on MiWorkspace Windows systems. The baseline security configuration for Windows PaaS systems is designed to enable users to securely access institutional and personal data while still preserving an easy to use computing experience. The settings were developed in consultation with the University of Michigan Information Assurance (IA) team. The specific settings that comprise the baseline security configuration have been tested by the MiWorkspace Quality Assurance (QA) Team to ensure compatibility with major university systems and applications.
...
The Cisco AnyConnect VPN Client is availble for available for deployment to Windows PaaS computers. The client provides connection to the ITS Cisco VPN Service. More information about the Cisco AnyConnect VPN Client implememation in Windows PaaS is available in the MiWorkspace Cisco AnyConnect Overview document.
...