

Minimum version of MECM 1710 is required for co-management, recommended minimum version at is 2002 update version.Although a combination of the Microsoft Endpoint Configuration Manager (MECM) Console and Group Policy Objects (GPOs) would be able to achieve the same settings in a hybrid environment, this blueprint does not include MECM and GPOs example configurations due to the level of dissimilarities and per agency customisation in existing MECM and GPOs configurations across Commonwealth entities.


The iOS section covers enrolment and security of the mobile devices.įor each component within the document there is a brief description of the contents of the section, a commentary on the things that have been considered in determining the decisions and the design decisions themselves. The Windows Security section describes the configuration and methods of locking down the configuration to align with Microsoft security best practices and ACSC guidance for Windows 10 clients. It includes the operating system and core services. The SOE section defines all the operating system components that are installed on the physical hardware. Windows 10 Standard Operating Environment (SOE) The Deployment & Management section shows the typical deployment options for cloud & hybrid as well as the management options that can be used in the application of the SOE and security. The Hardware Platform section includes the physical hardware, firmware drivers, and peripherals. This document covers the following topics.
