fleet/docs
Dante Catalfamo bd3e775e67
Windows MDM Fix Manual Detection (#17721)
#15565 

Replace the use of the isFederated registry key with a keys that check
for AAD (Azure Active Directory, now Entra ID)

Federated enrollment (`isFederated`) seems to be when windows uses a
Discovery MDM endpoint to get its policy and management endpoint
configuration. This is always the case when a client is enrolled with
fleet, so installations always show up as automatic.

It's being replaced by a different key, `AADResourceID`, which appears
to identify the resource that controls the automated deployment. In my
tests it only appears to be populated when the computer is enrolled
through automated deployments. This key appears on both Windows 10 and
11.

There is a similar key, `AADTenantID`, which appears to identify the
client (tenant) to the Azure cloud. I haven't seen this ID in our
systems, so it is likely exclusively used in Azure. Both this key and
`AADResourceID` seem to always be set at the same time, so we only
check for the `AADResourceID`.

I've also added documentation on the registry keys I've analyzed for future reference.
2024-03-21 15:09:05 -04:00
..
01-Using-Fleet/standard-query-library Doc changes for VSCode extensions (#17639) 2024-03-14 17:00:07 -03:00
Configuration Sentence-case fix (#17611) 2024-03-13 18:00:06 -05:00
Contributing Windows MDM Fix Manual Detection (#17721) 2024-03-21 15:09:05 -04:00
Deploy Fix Incorrect Helm Chart Keys in MySQL Installation Documentation (#17160) 2024-03-21 13:59:45 -05:00
files Create 2022-04-29-fleet-penetration-test.pdf (#5658) 2022-05-10 10:26:10 -04:00
Get started update Orbit docs url (#17077) 2024-02-26 17:13:25 +00:00
images Migrate Deploy Fleet on Hetzner Cloud (#13021) 2023-08-30 19:17:22 -05:00
REST API API design: See macOS hosts that failed DEP profile assignment (#15461) (#16166) 2024-03-21 13:33:35 -05:00
Using Fleet Windows MDM Fix Manual Detection (#17721) 2024-03-21 15:09:05 -04:00
README.md Update positioning in documentation readme and CTA example (#12464) 2023-07-17 12:38:07 -07:00

Fleet documentation

Welcome to the documentation for Fleet, the lightweight management platform for laptops and servers.

You can also read the Fleet docs over at https://fleetdm.com/docs.

Using Fleet

Resources for using the Fleet UI, fleetctl CLI, and Fleet REST API.

Deploying

Resources for installing Fleet's infrastructure dependencies, configuring Fleet, deploying osquery to hosts, and viewing example deployment scenarios.

Contributing

If you're interested in interacting with the Fleet source code, you'll find information on modifying and building the code here.


If you have any questions, please don't hesitate to File a GitHub issue or join us on Slack. You can find us in the #fleet channel.