Best practices for managing Windows 10 in the enterprise

Windows and the enterprise market have gone together like peas and carrots since computers were brought into the mainstream, and that relationship has continued since then. Managing a fleet of Windows 10 computers in an enterprise setting is easier than ever, but there are still some things to consider when setting upward your surroundings.

A small flake of backstory on me: my 24-hour interval job involves configuring, tracking and managing Windows laptops and desktops for a ~500 person non-profit. The tips I'yard sharing below are what I've picked up since starting the job seven months ago.

Use SCCM

System Centre Configuration Manager — or SCCM — is Microsoft'southward own suite for managing Windows deployments in an enterprise setting. Administrators can utilize SCCM to remotely control client machines, manage updates and patches and fifty-fifty manage iOS and Android devices. SCCM does take a licensing cost per device, which keeps my company from using information technology. Only, practice some inquiry and find out if SCCM is worth the toll for your company.

Have one installation prototype

In the past, a Windows installation prototype would need to be customized with specific drivers for each motorcar. One of my favorite parts of Windows ten is that the base of operations image has generic drivers for networking, brandish output, audio and other cardinal components. This means I demand to accept one single installation image for all of my machines, making it easier to ensure each machine is set and patched in a uniform mode.

Rely on Windows Update

The other piece that lets me just employ one installation image is how great Windows Update has become over the years. Starting with Windows x, Update can now detect which components your computer is using and if those components need an update. This includes networking, display, sound, trackpads, firmware updates (for Surface devices) and more.

Windows Update isn't entirely fool proof, though information technology does piece of work 90% of the time. For some components, you may need to check for updates in Device Manager or download an update utility from the computer's manufacturer.

Speaking of Windows Update, it's worth taking the time to ready an update server for your company. This will permit you test updates before rolling them out to client computers. Well-nigh every bit important, it will let you reduce Internet costs and bandwidth employ. If everything is configured correctly, your customer computers volition pull the update files from your internal Windows Update server, rather than dozens or hundreds of computers all pulling the update from Microsoft's servers.

Install every bit few programs as possible

Until every plan is available in the Windows Store, each program you install is going to rely on its own update service and connexion to the Internet. Each of those update services represents a potential attack vector for the machine and your network, so simply install the essentials for each user. For united states, that'south Google Chrome (more than on that subsequently), Chrome Remote Desktop, ESET Anti-Virus, Forticlient VPN, Parallels Client, and 8X8 Virtual Office. Inside Chrome, we only allow a few extensions — Chrome Remote Desktop, LastPass, Adblock Plus — considering browser extensions are besides an attack vector.

Document everything and accept a plan when things go bad

This is something I need to get better at. Even though I have my initial setup process for desktops and laptops down to a T, I still need to actually write information technology downwardly. At that place volition exist a day when I'm on vacation or no longer working for my visitor, and someone else will need to gear up a Windows calculator. If you lot're an It admin, just write down the processes for everything you practice. Even if the end product isn't pretty, it's ameliorate than nothing.

Also, know that yous're going to have bad days. You're going to accept times when your bosses demand a set up for that thing they heard about on the news, and the only answer you can give them is, "We have to wait for updates." It happens. Know it'south going to happen, so you're non blindsided.

Consider other operating systems

Truth be told, nearly people don't need everything that Windows does. I mentioned Google Chrome earlier because a vast majority of our users are on Chromebooks and Chromeboxes. This may sound counterintuitive, but if your users don't need anything more a web browser, a Chromebook is a good pick. Chromebooks are criticized for not being able to run the same software that Windows computers are, but that has a large benefit: malware designed for Windows computers simply doesn't work on a Chromebook.