freddo

Hello all,

I have recently joined a company as a system administrator and I am in a dire need of advice.

In the interviews we discussed how it is needed for the company to manage Windows endpoints, apply policies, patch them and make sure that they comply with new regulations.

They told me the RMM that they will use and I took for granted that I will have an AD or intune as a tool along side it.

Apparently all I will have is the RMM tool, nothing else, which I think is insane. They expect me to manage the local policies through scripts that I will push through the RMM.

I have told my supervisor that this is not a good idea because the endpoints will basically be unamanged devices, scripts are not reliable and tend to break with updates, they won't stack well... etc. The response was: "this is how we were advised to proceed" (probably by the RMM company, I did not ask), with automations and scripts. I asked for a possibility for an MDM but they will have to check the cost of that.

Now the colleague (field tech) that was starting the project before I came along is fine with it somehow, and I had a look into a script that will set the password "policies". It is a combination of "net" and changing the local security database of windows.

Am I out of touch? I have to admit that I am relatively new to the field and my scripting skills are not good. I am writing a report about this which I am not sure if I should send or not.

What would you do here? Do I need to skill up and take it on?