Windows Device Management with Microsoft Endpoint
Trinity has begun using Microsoft Endpoint Manager to provide a comprehensive management solution for Windows computer systems.
Endpoint allows us to proactively manage all Windows devices by maintaining systems and software, limiting exposure and responding to security threats, distributing settings, identifying potential and actual hardware problems, and analyzing inventory data. It enables us to deploy new operating system builds, applications, and the latest updates to Windows users quickly, and cost-effectively. This allows us to assure that every Windows system managed on our network stays current, protects PCs from exploitation of software vulnerabilities, and improves overall network security for campus. If you would like to learn more about Endpoint, please read below and/or visit the Microsoft website.
What benefits do we receive from Endpoint?
- Reliability: Devices quickly receive patches and updates with minimal user interaction or disruption.
- Security: IS can ensure that critical patches are installed on your device.
- Company Portal: There will be a new program called “Company Portal” that will appear in the Start menu. The Company Portal contains standard software that you can install with the click of a mouse.
- Privacy & Confidentiality: User data and files remain confidential. No personal information is collected, such as the contents or names of individual files (documents, email, etc.) or any browsing history. Also, a remote wipe of a device can be requested and completed if a device is lost or stolen.
- Consistency: Devices can all have standard settings, certificates, and other required Trinity settings automatically taken care of.
How do updates work?
Software updates and patches will usually be invisible to you. Software updates are downloaded to your computer in the background and installed during a maintenance window late at night. To complete the installation process, many updates require your computer to restart.
Can I connect to Company Portal when I am off-campus?
Yes, you can access the Company Portal on any network.
What changes does the installation of Endpoint make?
Endpoint installs an agent on your computer. The agent runs in the background and will not interfere with the operation of your computer. Additionally, Endpoint installs the Company Portal application and required virus/malware protection software and Alertus to notify of campus emergencies.
Who supports Endpoint?
The system is administered by the Library and Information Technology Division, but the configuration is coordinated closely with the Distributed Computing Specialists Team.
What information does Endpoint collect?
Trinity‘s implementation of Endpoint collects only the data needed to support computers running a Microsoft Windows operating system. This information includes:
- Hardware Specifications
- Installed Applications & Usage
- Services Running
- Available Software Updates
- Local User Accounts and Login/Logout Timestamps
- Security Status (Firewall, SSH, etc.)
- Connected Peripheral Devices
No personal information is collected, such as the contents or names of personal files (documents, email, etc.) or any browsing history.
What if I have other questions?
For more information, don’t hesitate to get in touch with the Library & Information Technology Services Division.