RE: Asessment of TAMP with vendor hat on

["Kemp, David P." <DPKemp@xxxxxxxxxxxxxx>]

> From: Stefan Santesson
>
> The challenge of this group is to consider both the management model
of
> a central function with complete authority over local TA stores on
> distributed Hosts and the model where the TA distributing environment
> merely support the hosts with a reliable source of TAs. 

Yes, we are in agreement that this is an important distinction.

> Both models can be managed, one directly and the other indirectly.
> I'm not convinced yet the directly managed model is needed, but that
> can be saved for future debate.

As you say, the issue is who has complete authority.  In the case of
Hosts owned and managed by an enterprise but located on employees'
desks, should it be up to the employee to voluntarily make use of
enterprise-managed reliable TA stores, or should the enterprise have a
model that permits it to query and set TAs on Hosts regardless of the
employee's wishes?

I know very few of the technical details about how "my" work machine was
installed and added to an AD domain.  But at some point in the process
it received a TA (an administrator password) that I do not know and can
not change; thus I do not have the technical ability to override my
employer's control of my desktop.

I'm convinced that you believe direct management is not needed because
you do not see "TA" in its full generality.  If you accept that control
of a host is ultimately traced back to a TA of some form and you accept
the need of an enterprise to control its hosts in a way that users
cannot override, then you must believe in direct management.

Dave