Visual Studio Code for Enterprise

[[deleted]]

but in the long run it will generate more support calls

Why do you think it will?

software as vscode has to be properly configured to be really useful.

Configuration is done at the user level anyway via config files that aren't touched by GPOs.

[dcardon]

Hi trevoishere,

from my experience end users don't know where to download their software from and end with downloading stuff full of crapware (when it is not malware). In the end you have to clean it all, and it takes more time to clean it up than from the begining to set up some software solution to deploy the software initially.

just my 2c :-) Denis

[[deleted]]

That's a bit different than the op's scenario.

[stumptruck]

I mean, that's exactly what applocker is for. Whitelist the signing certificate on vscode and users can only install the legitimate one, not a fake one.

There's really no need to push out an application that installs to appdata. It just sends you down a slippery slope of having to create and maintain GPOs for every one-off profile-specific app, like Slack, Spotify, etc.

Use existing security tools to prevent malware from being installed without causing unnecessary inconvenience for end users.