what are some of the more common tools/methods used when you have a large workforce and therefore a large number of end user devices, e.g. laptops/desktops, to help speed the build process of lets say new laptop devices? I assume there must be some sort of standard image that can be installed onto the HDD of new devices rather than manual process each time. can you give some info on desktop/laptop side? and what kind of settings/configurations are typically included in the golden build, specific to the OS/apps? I appreciate this is very vague but just wondered the process.
and is it also common to have a similar 'image' for server OS and apps, that can be quickly issued to a new VM? Again, what are the common tools/methods used and and what kind of settings/configurations are typically included in the golden build, specific to the OS/apps? Is it typically only the OS which is included int he build, or is it common to have a quick to deploy image with common server apps such as SQL, IIS etc?
we are looking at the CIS top 20 cyber security controls which recommends standardising many settings as part of the build process, so getting some background what tools deploy these 'images' (may not be the correct term) to new equipment would be most interesting.