Abstract: Application compliance policies can be dynamically updated. An agent can be deployed on user computing devices to monitor application install events to track how frequently users install applications on the user computing devices and whether applicable application compliance policies dictate that such applications should be removed. A policy management service of a management solution can interface with the agents to gather application metrics and use the application metrics to dynamically update the application compliance policies to prevent future removal of one or more applications that are determined to be commonly installed by the users. These dynamic updates could be made on a per-user basis, a per-group basis, or a global basis.

Abstract: Application compliance policies can be dynamically updated. An agent can be deployed on user computing devices to monitor application install events to track how frequently users install applications on the user computing devices and whether applicable application compliance policies dictate that such applications should be removed. A policy management service of a management solution can interface with the agents to gather application metrics and use the application metrics to dynamically update the application compliance policies to prevent future removal of one or more applications that are determined to be commonly installed by the users. These dynamic updates could be made on a per-user basis, a per-group basis, or a global basis.

Abstract: An information handling system may include a processor, a basic input/output system (BIOS) communicatively coupled to the processor, and a security agent comprising a program of instructions embodied in non-transitory computer-readable media and configured to, when read and executed by the processor: retrieve a BIOS policy, retrieve BIOS configuration information, based on the BIOS policy and the BIOS configuration information, determine a deviation of one or more BIOS attributes of the BIOS configuration information, and perform remediation of the one or more BIOS attributes based on the deviation.

Abstract: An information handling system may include a processor, a basic input/output system (BIOS) communicatively coupled to the processor, and a security agent comprising a program of instructions embodied in non-transitory computer-readable media and configured to, when read and executed by the processor: retrieve a BIOS policy, retrieve BIOS configuration information, based on the BIOS policy and the BIOS configuration information, determine a deviation of one or more BIOS attributes of the BIOS configuration information, and perform remediation of the one or more BIOS attributes based on the deviation.