A small group of our users have admin privileges and can install everything they want.
Would it be a good idea to create a patch policy with just one rule for their devices:
- Age >= 7 Days
This to make sure their devices are up-to-date.
I assume that initially the policy would contain a lot of patches, but after some time this should normalize.
Has anyone done the same? Is there a better way to achieve this?