Endpoint Configuration Management

Overview

Stanford University uses IBM BigFix to deploy patches and updates to Windows and Macintosh computers. BigFix is administered by the Information Security Office in collaboration with IT organizations across the University. Additionally, the School of Medicine uses BigFix in the following ways.

Features

Hardware/software Inventory

  • Asset management and physical security
  • Operating system versions to determine upgrade/patching needs
  • Hardware configuration/specs to help determine replacement needs
  • Software versioning to identify necessary patch management and future compatibility

Patch management and security actions

  • OS upgrades (macOS and Windows)
  • Driver and Bios updates
  • Application Actions (Installations, Removal, Updates):
    • Stanford required software
      • ESET (Anti-virus)
      • BigFix (upon leaving the University)
      • Others as needed
    • Stanford provided software
      • Office
      • Code42/Crashplan (Backup)
      • Others as needed
    • Department specific  software
      • As Requested

 

 

 

 

 

 

 

Collect survey data from end-users

  • To confirm current ownership
  • Verify machines physical location
  • To confirm device enrollment information