undefined | Better HN

0 pointsdijit3y ago0 comments

Is there something you can’t do? Or are you assuming sysadmins don’t learn their tools.

Arguably learning the idiosyncracies of proprietary management tools is harder long-term as there are myriads of edge cases and they get replaced with completely new tools quite often.

Exceptions are SCCM maybe, but people are avoiding that as much as possible IME.

0 comments

nikau3y ago

Most Windows compliance tools are seen as a tick in a box so ease of use and low effort deployment is often the most important thing.

I'm sure you could achieve similar results with Salt but it will be some bespoke contraption requiring a lot of engineering effort where you cant just hire new staff off the street to maintain it.

dijitOP3y ago

Tell me what you need and I’ll tell you how hard it is.

I’m sure certain things are a tick of a box, with salt it’s usually 3-5 lines of yaml. It’s not like you’re writing a management system by hand in a general purpose programming language.

nikau3y ago

where I work there are controls to block USB media devices, they block certain software publishers (eg. cant run firefox), all sorts of annoying things.

j / k navigate · click thread line to collapse

0 pointsdijit3y ago0 comments

Is there something you can’t do? Or are you assuming sysadmins don’t learn their tools.

Arguably learning the idiosyncracies of proprietary management tools is harder long-term as there are myriads of edge cases and they get replaced with completely new tools quite often.

Exceptions are SCCM maybe, but people are avoiding that as much as possible IME.

0 comments

nikau3y ago

Most Windows compliance tools are seen as a tick in a box so ease of use and low effort deployment is often the most important thing.

I'm sure you could achieve similar results with Salt but it will be some bespoke contraption requiring a lot of engineering effort where you cant just hire new staff off the street to maintain it.

dijitOP3y ago

Tell me what you need and I’ll tell you how hard it is.

I’m sure certain things are a tick of a box, with salt it’s usually 3-5 lines of yaml. It’s not like you’re writing a management system by hand in a general purpose programming language.

nikau3y ago

where I work there are controls to block USB media devices, they block certain software publishers (eg. cant run firefox), all sorts of annoying things.

j / k navigate · click thread line to collapse