I'm looking for effective ways to prepare computers for my network without complicating things for users. I deal with various software tailored to different users, and while it would be ideal to create separate deployment images for each business use, it gets complicated since the computers often move around. I'm considering two main strategies: one is to deploy software based on security groups and assign those groups to VLANs, so if a device connects to a Finance VLAN, it installs the needed software automatically. The other option is to install all software on every computer and restrict access so users can only see the software relevant to their groups. Are either of these methods more practical, or is there a better approach?
1 Answer
There are plenty of options out there like PDQ, BigFix, SCCM, or WDS that can help streamline your processes. What's your current setup for deploying software?
I use scripts to install the necessary software based on the department. But when computers shift locations, I have to remove the unnecessary software and add what's required for the new location. We also manage our devices with Datto RMM.