Elgato_dark/fleet
1
0
Fork 0
mirror of https://github.com/fleetdm/fleet synced 2026-05-23 17:08:53 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 83

Why this way: "OS settings" and "configuration profiles" instead of "CSP/XML" (#26803)

Browse source 
- @noahtalerman: this will be a spotlight in the next all hands
This commit is contained in:
Noah Talerman 2025-03-13 01:01:31 -04:00 committed by GitHub
parent 99dab98120
commit c5bf05a1ce
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 10 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
handbook/company/why-this-way.md
View file

@ -371,12 +371,21 @@ MDM should be a capability, not a product category.
In Fleet, the word "enrolled" means "the host shows up in the dashboard and API".
When some tools like Workspace ONE say a host is "enrolled", they mean that data is being collected _and_ enforcement features are activated on that host.
When some tools like Omnissa say a host is "enrolled", they mean that data is being collected _and_ enforcement features are activated on that host.
Since Fleet is more than MDM, you can collect logs and health data on any computer. You can also enforce OS settings on any computer. But you don't have to enable both: for example, you can build an installer that only collects data, without enabling enforcement features like MDM protocol support and script execution.
That means you can collect logs from Linux servers or Windows factory workstations without enabling remote script execution on those computers, even if you're using script execution on your Macs.
## Why does Fleet use "OS settings" and "configuration profiles" instead of "Windows CSP/XML"
IT and security tools should be easy to understand for everyone. This includes people who don't work in IT and security.
In Fleet, the words "OS settings" mean the computer's operating system settings. All computers have settings that can be changed and enforced using Fleet. A Fleet user can enforce OS settings with a script or a "configuration profile."
Some tools like Omnissa say "Windows CSP/XML" instead of "Windows configuration profile." We've learned that "CSP/XML" is confusing even for people who work in IT and security.
By saying "configuration profile," Fleet has one, cross-platform name for a feature used to enforce OS settings on macOS, iOS, iPadOS, Windows, and Linux hosts.
## Why not mention the CEO in Slack threads?