jgstew / bigfix-content

a repo to store some example bigfix-content
The Unlicense
30 stars 24 forks source link

Better content for setting BigFix settings #2

Closed jgstew closed 5 years ago

jgstew commented 5 years ago

I'd recommend reviewing this related presentation first: https://drive.google.com/file/d/1dUqdTSuqex-c-3Iu33cnWEP6oV0vN0tm/view?usp=sharing

Make content that can be safely used to set recommended client settings that can be taken as a policy action targeted to ALL COMPUTERS. These are conservative, not setting anything that shouldn't be left in place in almost all cases, and most of the settings are only set if not already set to a different value, and only set once, so that if they are overridden later, then so be it. (command polling is an exception, the interval can be changed, but it MUST be enabled with an interval no greater than once every 6 hours)

Content ready to deploy:

For other settings:

Windows Console Dashboard to help generate tasks to manage bigfix client settings:

Other Example Fixlets to set client settings:

Related:

jgstew commented 5 years ago

This is now a policy action to enable command polling: https://github.com/jgstew/bigfix-content/blob/master/fixlet/clientsettings/Set%20__BESClient_Comm_CommandPollEnable_%20to%20_1_%20-%20Universal.bes

jgstew commented 5 years ago

This should force the command polling interval to be less than once every 6 hours: https://github.com/jgstew/bigfix-content/blob/master/fixlet/clientsettings/Force%20CommandPollInterval%20to%20be%20less%20than%206%20hours%20-%20Universal%20-%20Policy.bes

jgstew commented 5 years ago

run once on machines newer than the last 3 days, conservative long term settings only if not already set to something else:

https://github.com/jgstew/bigfix-content/blob/master/fixlet/clientsettings/Recommended%20Client%20Settings%20-%20Initial%20Provisioning%20Speed%20up%20-%20Long%20term%20settings.bes

jgstew commented 5 years ago

added this one: https://github.com/jgstew/bigfix-content/blob/master/fixlet/clientsettings/Set%20__BESClient_Resource_PowerSaveEnable_%20to%20_1_%20after%202%20days%20-%20Universal.bes