Managed Networks

What is the definition of a "Managed" Environment?

As defined by "Durf"

I would answer by saying that a 'managed network' is one where:

Systems are proactively monitored for problems before they arise
Problems are anticipated before they develop
The end-user is involved in questions of usability and functionality, in order to best serve their needs without locking out functionality
Education and training provide a cornerstone of the management philosophy

...this is a long-winded way of saying that I think that a 'managed network' consists largely of 'managed users'. This is to say that end-users aren't simply locked out of needed functionality or made to call in (for pay!) to the consultant to get things done like adding a printer or installing needed software.

On a managed network, users shouldn't need admin rights to install software, because the needed software should be published to computers in such a way that the end-user doesn't have to get invovled with it.

On a managed network, necessary resources should be anticipated and be available (printers, for example) in such a way that end-users don't have to deal with it.

Virus and malware problems are stopped at the gateway and stopped by policy so that end users don't have to deal with it.

Problematic websites and dangerous software are stopped both at the gateway and at the desktop level so that end users don't have to be put in the position of clicking the "allow this software to access the Internet...?" button.

Dangerous attachments and email bugs are filtered at the mail transport, gateway and desktop level so that end-users can click on what they are given with confidence, but if they are presented with something unexpected, have confidence in hitting 'cancel' without being afraid they will loose essential information.

End users will route around whatever obstacles are placed in their way to do what they think they need to do. A huge reason why early attempts at anti-spam failed was that false positives wound up in the Administrator's bit-bucket, and you were just plain lucky if the admin actually went through the emails in there and tossed something you actually needed to get your job done to you.

So, a truly managed network not only has the technological controls in place to keep dangerous stuff out of the hands of end-users, but also gives them the knowledge and resources ahead of time to actually let them get their work done without getting in their way. It's a fine line and a balancing act that needs constand tuning, and just flipping the admin bit off or on for the end-user won't ever really solve the problem -- although it may be a necessary first step.

-- Durf

Reprinted from wikispaces.com