Library Archives | XOAP https://dev.xoap.io/category/library/ Platform for IT infrastructure and workplace automation Tue, 17 Feb 2026 08:05:52 +0000 en-US hourly 1 https://dev.xoap.io/wp-content/uploads/2023/11/cropped-favicon-32x32.png Library Archives | XOAP https://dev.xoap.io/category/library/ 32 32 XOAPChangeBIOSsettingDSC: Master the BIOS management https://dev.xoap.io/xoapchangebiossettingdsc-master-the-bios-management/ Fri, 30 Jan 2026 09:09:46 +0000 https://dev.xoap.io/?p=29255 Simplify BIOS management across your devices. Get free access to XOAP's module now and replace complicated manual processes with a unified approach.

The post XOAPChangeBIOSsettingDSC: Master the BIOS management appeared first on XOAP.

]]>

Managing BIOS settings across a diverse fleet of devices has historically been a headache for IT administrators. Different vendors, different tools, and varying security requirements often lead to fragmented workflows.

To streamline this process, we are excited to share a new PowerShell DSC (Desired State Configuration) module: XOAPChangeBIOSsettingDSC. This module provides a unified way to manage BIOS configurations on both Dell and Lenovo devices using infrastructure-as-code principles.

Key features

  • Multi-vendor support: Works seamlessly across Dell and Lenovo hardware.
  • Security minded: Fully tested to work with or without BIOS passwords.
  • Granular control: Allows for precise setting definitions (e.g., Secure Boot, Wake-on-LAN, etc.).

Important usage notes

To ensure successful deployment, keep these two technical details in mind:

  1. Case sensitivity: The module is case-sensitive regarding setting names. For example, you must use SecureBoot exactly as defined by the vendor; using secureboot will result in an error.
  2. Discovery: If you are unsure of the exact naming or possible values for a setting, you can refer to the scripts within the TestScript portion of the DSC Resources. These can be used to read all available values directly from the hardware.

Why DSC for BIOS?

By using DSC, you ensure that your hardware configuration remains in the “Desired State”. If a user or an update manually changes a BIOS setting, DSC will automatically detect the drift and pull the setting back to your defined corporate standard.

screenshot of the Start-DscConfiguration

Installation and usage

There are no special prerequisites for this module. 

To install the module in XOAP:

  • Upload the zipped DSC module to Configuration Management → Modules.
  • Once uploaded, the module can be referenced and used in your DSC configuration as needed.
zipped DSC module in Configuration Management
editing resource

Get the XOAPChangeBIOSsettingDSC module

Simplify BIOS management across your devices. Get free access to the module now and replace manual, error-prone processes with a unified approach.

Download illustration

Download the free module

By downloading, you accept the XOAP privacy policy and will receive product information from us.

The post XOAPChangeBIOSsettingDSC: Master the BIOS management appeared first on XOAP.

]]> How XOAP modernizes Citrix MCS and PVS https://dev.xoap.io/modernize-citrix-mcs-and-pvs-with-xoap/ Mon, 01 Dec 2025 10:05:23 +0000 https://dev.xoap.io/?p=27258 Automate Citrix MCS and PVS workflows, speeding deployments, ensuring consistency and improving IT efficiency across hybrid environments.

The post How XOAP modernizes Citrix MCS and PVS appeared first on XOAP.

]]>

Table of contents

For years, Citrix administrators have relied on Machine Creation Services (MCS) and Provisioning Services (PVS) to deliver virtual desktops and application servers.

While essential, these tools weren’t built for modern hybrid environments spanning on-prem datacenters, Azure, AWS and edge locations, where rapid updates, consistent configurations and automation are critical.

XOAP fills this gap, automating and standardizing the entire image lifecycle around Citrix deployments. Beyond Citrix, XOAP also streamlines physical device and full endpoint lifecycle management, providing consistent automation, compliance and operational control.

What MCS and PVS do

  • MCS: Machine Creation Services clone virtual desktops or servers from a master image. They are simple and suitable for small-to-medium deployments.

  • PVS: Provisioning Services stream a shared virtual disk to multiple machines, offering efficiency, fast deployment and reduced storage.

The challenge

Both MCS and PVS focus solely on provisioning and rely on administrators to manually maintain master images and configurations.

However, most operational effort occurs before and after provisioning and includes:

  • building images
  • patching OS
  • installing/updating apps
  • maintaining best practices
  • managing hybrid environments.

MCS and PVS do not automate image creation, application packaging, hybrid deployment, versioning or operational workflows, which leads to complexity, risk and increased cost as organizations scale.

📌 Read also: Device management beyond Autopilot

XOAP: Automation across the image lifecycle

XOAP doesn’t replace Citrix or MCS/PVS; it automates everything around them.

Citrix then delivers the images to users.

This layered approach provides faster deployments, fewer errors, consistent environments and lower operational costs, which is far more scalable and future-proof than relying on MCS/PVS alone.

Key features

1. Automated image creation and versioning

You define a pipeline once. XOAP then automatically builds images, applies best-practice configurations, installs apps, enforces naming conventions, versions outputs and enables rollback.

The result: reproducible, reliable golden images ready for MCS or PVS delivery.

📌 Learn more: XOAP Image Management

2. Configuration as Code

Centralized configuration enforcement prevents drift, tracks changes and ensures compliance across all machines. Citrix servers and desktops remain consistent, predictable and aligned with policies.

3. Application deployment and packaging

Applications are packaged once, deployed consistently and updated without rebuilding images, reducing image bloat and speeding patch cycles.

4. Multi-cloud and on-prem infrastructure provisioning

XOAP automates infrastructure creation across vSphere, Nutanix, Azure, AWS and Google Cloud, bringing consistency across distributed environments.

5. Lifecycle, governance and compliance

XOAP centralizes patching, image rebuilds, monitoring and multi-tenant management, reducing manual work and ensuring policy compliance.

Traditional vs XOAP workflow

Without XOAP:
1. Manually update master image → 2. Install apps → 3. Patch OS → 4. Capture image → 5. Push to MCS/PVS → 6. Troubleshoot → 7. Repeat

With XOAP:
1. Update image pipeline → 2. XOAP automation 

Consistent, compliant images are delivered to Citrix MCS or PVS with minimal manual effort.

When to use XOAP

While XOAP can automate almost anything in your IT infrastructure, it will help you the most in the following contexts:

• Large or distributed Citrix environments.
• Hybrid deployments across cloud and on-prem.
• Strict security or compliance requirements.
• Service providers managing multiple tenants.
• Teams aiming to reduce manual work.

Final thoughts

MCS and PVS remain critical for Citrix provisioning, but modern hybrid IT demands automation beyond provisioning. XOAP delivers this by automating image creation, application deployment, configuration management, infrastructure provisioning and full endpoint lifecycle management.

For organizations seeking faster, more reliable deployments, operational efficiency and compliance, XOAP is a powerful automation layer that complements Citrix and modernizes IT operations.

💡 Further reading:

→XOAP for MSPs
→On-premises automation with XOAP Connector
→All about XOAP’s Image Management module

Automate your Citrix deployment

Start for free
Book a demo

The post How XOAP modernizes Citrix MCS and PVS appeared first on XOAP.

]]> Automating Amazon DCV deployment with XOAP https://dev.xoap.io/automate-amazon-dcv-deployment/ Mon, 18 Aug 2025 13:05:47 +0000 https://dev.xoap.io/?p=25167 Spin up a fully functional Amazon DCV environment efficiently. Reduce setup time, ensure consistency and enable rapid scaling.

The post Automating Amazon DCV deployment with XOAP appeared first on XOAP.

]]>

Table of contents

Amazon DCV (formerly NICE DCV) offers a high-performance, secure solution for delivering remote desktops and 3D applications. However, setting up DCV infrastructure manually can be time-consuming and prone to errors.

This blog post walks you through the automation process using AWS tools and XOAP to simplify the deployment of Amazon DCV.

How does it work?

Using prebuilt scripts, XOAP’s Image Management module and the Scripted Actions feature, you’ll spin up a fully functional Amazon DCV environment efficiently, reducing setup time, ensuring consistency and enabling rapid scaling in the cloud.

You can test everything in this tutorial for free, as both Image Management and Scripted Actions are available in XOAP’s free plan. Just create your account first.

The Amazon DCV deployment will take five steps:

  1. Download a script from AWS.
  2. Change the username in the script and upload it to XOAP.
  3. Create a connection to your AWS environment.
  4. Prepare your image for DCV deployment with Image Management.
  5. Spin up the DCV infrastructure with Scripted Actions.

Let’s go into the details now.

Step 1: Downloading script from AWS

Download the script from the official AWS GitHub repository here. You can find the documentation in the AWS Administrator Guide.

Step 2: Uploading script to XOAP

Now, let’s edit the script quickly before uploading it:

• Remove the first and last lines of code: <powershell> and </powershell>.

• Replace the placeholder “USERNAME” in line 51 with a valid username.

• Remove the comments from lines 49 to 52 (optional, but considered a good practice).

To upload the script, open your XOAP Workspace and go to the Resources area in the left-side menu. Click + New Resource, then simply drag and drop the script. Click Next and Save.

ℹ For more information on the script’s syntax, click here.
ℹ The DCV license is free on EC2, with a required S3 policy.

Follow the Amazon DCV automation video tutorial
This video may not load due to your cookie preferences. Adjust your cookie settings or watch it directly on YouTube.

Step 3: Creating a connection to your AWS environment

In XOAP, connections are used to deploy image definitions, as well as to provision and configure cloud and on-premises environments.

• Go to Connections in the left-side menu.
• Click + New Connection.
• Select AWS as the provider and choose the connection type.
• If you’re using the AWS-Access Key type, provide your Access Key ID, Secret Access Key and Account ID.
• Click Confirm to save the connection.

Step 4: Preparing image for DCV deployment

The next step is Image Management. It’s a custom image automation module that can be found in your XOAP Workspace.

First, create a provisioner:

• Click on Image Management, then click on Provisioners in the drop-down menu.
• In the Provisioners area, click + New Provisioner.
• Under Select Type, choose PowerShell Script.
• Under Source File, select Install-DCV.ps1, the script you uploaded to XOAP.
• Enter the mandatory information and click Confirm.

Create a provisioner | Amazon DCV automation | XOAP
Adding a provisioner in XOAP

 

Now, add that provisioner to a group:

•  Go to Image Management > Provisioner Groups.
•  Click + New Provisioner Group and select the provisioner you’ve created from Available Provisioners.
•  Enter the details and click Save.

Add the group to a provisioner role:

•  Go to Image Management > Provisioner Roles.
•  Click + New Role and select the group you created from Available Provisioner Groups.
•  Enter the details and click Save.

Note:

Each XOAP Workspace is equipped with Operating Systems that can be used as templates for further customizations. Operating system availability depends on the region and may vary. If your region is not available and you would like to adjust the operating system, you can add additional ones as needed.

The same applies to Builders, which define the connection being used, the region, the size of the VM defined to build the image and additional optional settings. You can create them before the next step or add them while defining the Image Definition.

• Now go to Image Management > Image Definitions and click + New Image. Here you will create your image – see screenshot below as a reference. If you need help creating the image, watch this short video tutorial.

Creating an image


Once your image is created, it will appear in Image Definitions.

• Click the three dots on the right in the image’s row, then click Run.

You can track the progress of the Image Definition build by either clicking on the status badge or by clicking on Runs in the upper right corner.

Once the run is finished, in the Image ID field, you will see the ID as ami-xxxxxxxxxxxxxxxxx.
It’s good to save the image ID now, as you will need it to spin up you DCV infrastructure later.

Important:
• If you don’t have it in your XOAP Workspace already, download the EC2 provisioning script ⬇ below and upload it to the Resources area, just like you did with the first AWS script.

Tutorial continues below
Download illustration

Download the EC2 provisioning script

By downloading, you accept the XOAP privacy policy and will receive product information from us.

Step 5: Spinning up DCV infrastructure

Now that you’ve uploaded the EC2 provisioning script to Resources, let’s move to Scripted Actions.

You will find this feature in your XOAP Workspace under the Platform Management module, which helps you automate hybrid infrastructures and cloud workflows.

• Go to Platform Management > Scripted Actions and click + New Scripted Action.
• Enter a Name for this scripted action.
• Under Choose a script from Resources, select the EC2 provisioning script.
• Click Next.

Create a scripted action | Automating Amazon DCV deployment | XOAP
Creating a scripted action


• Edit script parameters as shown below.

Important:

Under AMI_ID, use the Image ID from your Image Definition run. Specify the region where you want the EC2 instance to be created, along with the SUBNET_ID of the VPC where you want the instance to be placed. Make sure you choose the same region that was specified in your Image Definition. Otherwise, the AMI won’t be found, as they are region-specific.

Editing script parameters


• When everything’s ready, click Next.

• Select AWS from the Connections table and click Next. 

• In the final scripted action creation step, you can schedule your scripted actions. We can skip that for now, so just click Finish.

The scripted action is now created and you can run it the same way you ran your Image Definition. If you want to track the progress, click on the status badge right next to the scripted action. Once the run is finished, the DCV will be ready.

You can find all the information necessary for connecting to the DCV in the scripted action’s log. To access the log, click the three dots on the right side in the scripted action’s row and click View log.

Scripted action log | Automating Amazon DCV deployment | XOAP
Example of a scripted action’s log

To connect to the DCV, you can use web access or the Amazon DCV client, which is available for download from AWS. Be mindful of the required Security Group rules when connecting. Direct access to the instance will be required (for web access, you will need a public facing instance).

Alternatively, you can deploy the Amazon DCV client to your endpoints worldwide using XOAP’s Application Management module. Application Management automates and simplifies software packaging and delivery to any device. This way, you can easily create a remote access solution for your endpoints.

👉 Did we miss something? If you need help using XOAP to automate Amazon DCV deployment, just book a call 📅 and our engineers will walk you through it.

More about XOAP:

→ More on Application Management
→ Automating your entire AWS operations
→ Standardized image automation across platforms
→ Scripted Actions for centralized script management

Start automating your cloud infrastructure with XOAP

Start for free
Book a demo

The post Automating Amazon DCV deployment with XOAP appeared first on XOAP.

]]> Windows Server 2019 end-of-life: What system engineers need to do now https://dev.xoap.io/windows-server-2019-end-of-life/ Tue, 27 May 2025 08:59:06 +0000 https://dev.xoap.io/?p=22493 Windows Server 2019 is losing support for Microsoft 365 Apps in October 2025 and is reaching end of life in 2029.

The post Windows Server 2019 end-of-life: What system engineers need to do now appeared first on XOAP.

]]>

Table of contents

Windows Server 2019 is reaching the end of support in January 2029. For system engineers and IT administrators, this isn’t just another update—it’s a critical turning point. Failing to act now could expose your organization to major security risks, compliance failures and operational disruptions.

Available options after end-of-life

To navigate beyond 2029, organizations must either:

• upgrade to newer server versions or
• opt for Extended Security Updates (ESU) to continue receiving critical security patches, thus maintaining compliance and security standards.

The ESU program, available for up to three years, can drive up costs quickly, especially for enterprises. In other words, the options are risking security or significantly increasing operational costs for outdated infrastructure.

Moreover, Microsoft 365 Apps is supported on Windows Server 2019 only until October 2025. Security updates will be available for three more years, ending in October 2028. After the end of support, they too will need to be redeployed.

Below, we outline what system engineers and IT admins need to focus on now—and how the XOAP automation platform can help.

Windows Server 2019 end-of-life

Steps to take now

1. Inventory and assess your environment

Start by identifying all servers still running Windows Server 2019, and all applications tied to it—especially those hosting Microsoft 365 Apps through Remote Desktop Services (RDS) or VDI. Understanding your environment is the first step to planning the migration!

How XOAP helps:
XOAP integrates seamlessly with your environment to help with discovery and assessment workflows. You’ll get a clear, centralized view without manual spreadsheets or time-consuming audits.

2. Plan migrations to supported platforms

Post-Server 2019, Microsoft is emphasizing Windows Server 2022, Azure Virtual Desktop (AVD) and Windows 11 multi-session environments. Choosing the right target platform for your infrastructure is critical to ensure ongoing support and security.

How XOAP helps:
Whatever you choose, XOAP covers it, making sure you remain platform independent without getting stuck in vendor lock-in. XOAP makes deploying new environments across Azure, AWS or hybrid clouds easy, while ensuring best practices and security benchmarks are baked in.

Learn more: Platform and infrastructure automation

3. Automate Microsoft 365 App deployments

With older versions of Microsoft 365 Apps losing support, you’ll need to redeploy them on modern OS platforms. Manual installation at scale is slow, error-prone and frustrating.

How XOAP helps:
XOAP automates Microsoft 365 App deployments with consistent, standardized configurations. Whether you’re dealing with dozens or thousands of systems, XOAP ensures that every desktop or server meets Microsoft’s supported requirements.

4. Secure and patch your new environment

Migrating off Server 2019 is just the beginning. Your new environments must stay patched, compliant and aligned with evolving security standards.

How XOAP helps:
XOAP automates patch management, compliance scanning and remediation tasks across cloud and hybrid infrastructures—keeping your new environment secure with minimal hands-on work.

Also read: Automating security and compliance benchmarks with XOAP

5. Train for a future-proof approach

IT operations are moving away from manual management toward low-code and no-code automation. System engineers and admins who embrace this shift will be better positioned to lead future infrastructure projects.

How XOAP helps:
XOAP’s no-code image build pipelines and wizard-assisted configurations make automation accessible to IT teams without requiring scripting or DevOps backgrounds. You can start automating today with minimal onboarding time.

Acting now pays off

October is just around the corner, and 2029 not that far away. Large migrations and modernization efforts take months or even years.

System engineers and IT admins who act now—and who automate wherever possible—will avoid the stress of last-minute scrambles and future-proof their organizations.

With XOAP, you can automate inventory, migrations, deployments, patching and compliance, allowing you to focus on what matters most: delivering secure, modern infrastructure that’s ready for the next decade. 

📖 You might find this interesting:
 >> Windows 11 migration made easy with XOAP
>> Complete Windows 11 migration guide for enterprise IT

Use XOAP to simplify migration

Start for free
Book a demo

The post Windows Server 2019 end-of-life: What system engineers need to do now appeared first on XOAP.

]]> Get your free copy: IT Infrastructure Automation Guide https://dev.xoap.io/ebook-it-infrastructure-automation-guide/ Wed, 07 May 2025 08:53:29 +0000 https://dev.xoap.io/?p=22449 Everything you need to know about IT infrastructure automation before getting started, with expert insights and helpful tips.

The post Get your free copy: IT Infrastructure Automation Guide appeared first on XOAP.

]]>
E-book: IT Infrastructure Automation Guide | Free download | XOAP

A full, 35-page e-book on everything you need to know before you start automating

 

Automation is the backbone of modern IT. No longer an option, but a must for staying competitive and agile.

Written by XOAP’s experts, including CTO Sinisa Sokolic, this e-book is aimed at professionals and organizations just starting out on their automation journey, as well as those wanting to gain deeper insight. This full guide, spanning 35 pages, will show you exactly why automation is crucial for organizations, including the knowledge teams need to get started, the tools that help along the way, and the key roles that make it happen.

What’s inside?


In the e-book, you will find chapters on:

1) Why automation matters
2) How to get started with automation
3) Step-by-step guide
4) Free automation tools
5) Launching an automation project
6) Mastering the automation pipeline

In addition to general guidelines and automation expertise shared with you, we have included practical tips to make this process as smooth as possible.

Preview selected pages from the e-book:

IT Infrastructure Automation Guide | E-book Preview
IT Infrastructure Automation Guide | E-book Preview
IT Infrastructure Automation Guide | E-book Preview
IT Infrastructure Automation Guide | E-book Preview
IT Infrastructure Automation Guide | E-book Preview
IT Infrastructure Automation Guide | E-book Preview

By the time you finish reading it, you will have a solid understanding of IT infrastructure automation and how to apply it to your own environment.

If you need help automating anything during the process, book a call with the XOAP automation team. We’d be happy to help.

 

Download illustration

Get your free copy

The e-book will open in a new tab after clicking the download button.

By downloading, you accept the XOAP privacy policy and will receive product information from us.

The post Get your free copy: IT Infrastructure Automation Guide appeared first on XOAP.

]]> Ignoring IT security compliance automation? Think again https://dev.xoap.io/ignoring-security-compliance-automation-think-again/ Tue, 08 Apr 2025 13:57:04 +0000 https://dev.xoap.io/?p=21483 Failing to automate security compliance isn’t just inefficient—it’s a ticking time bomb. Security gaps widen, audits become nightmares and fines escalate quickly.

The post Ignoring IT security compliance automation? Think again appeared first on XOAP.

]]>

Table of contents

Picture this: It’s 4:30 PM on a Friday, and instead of winding down for the weekend, your team is scrambling. A security audit is looming, compliance reports are scattered across spreadsheets and a missed vulnerability now means potential fines and a late-night emergency fix. Stress levels are high, and the weekend? Canceled.

Now, we don’t want that, do we?

Failing to automate security compliance isn’t just inefficient—it’s a ticking time bomb. Security gaps widen, audits become nightmares and fines escalate quickly.

While security is never simple nor trivial, it can be streamlined, well covered and run like clockwork. Not every company has this control. Maybe you’ve seen some of them in the news.

If you’re considering security compliance automation for your IT environment, you know it’ll reduce costs, cut human error and provide system consistency. But where do you start? Specifically, with automating CIS, STIG and, if you’re operating in Germany like us, BSI.

Why automate CIS, STIG and BSI?

CIS, STIG and BSI are critical frameworks for robust security and protecting your systems from real threats. Maintaining them manually? It’s complex, time-consuming and prone to errors due to the sheer monumentality of the task. While CIS is a must, STIG and BSI might not be directly relevant to your organization. We suggest implementing them anyway.

CIS (Center for Internet Security) benchmarks provide global best practices for securing IT systems, covering everything from operating systems to cloud environments. They help minimize vulnerabilities and harden configurations, ensuring systems meet industry security standards. Automating CIS compliance gives you continuous security controls, real-time monitoring and quick remediation, boosting your overall security with less manual effort.

For businesses working with U.S. federal agencies or defense contractors, STIG (Security Technical Implementation Guidelines) compliance is mandatory. Even if you don’t have a direct connection to the U.S., implementing STIG is a smart move as it provides strict security configurations for systems. Given its notorious complexity when enforced manually, automating STIG implementation helps you stay compliant without getting bogged down in tedious configurations.

If you’re based in Germany, you already know that BSI (Bundesamt für Sicherheit in der Informationstechnik) compliance is crucial. When BSI is automated, security measures are consistently applied and updated, reducing the risk of non-compliance penalties. But there’s a second benefit to implementing BSI for those operating in or with critical sectors of the European Union—BSI compliance sets you up for the strict and comprehensive EU-wide NIS2 cybersecurity requirements, covering many of the same areas. >> More on NIS2 automation

Automating IT security compliance

Source: Freepik

Challenges of automating across different systems

While automation can be the deciding factor when it comes to security, automating across different systems comes with its own set of challenges. And there are plenty. You may have a mix of legacy infrastructure, cloud environments, on-premise systems and third-party tools in your infrastructure. Each of these systems has its own quirks, configurations and security requirements, making integration tricky.

Legacy systems are often rigid, outdated and weren’t built for automation. This makes introducing modern automated compliance tough and leads to compatibility issues, gaps in coverage and even unexpected downtime.

Then, there’s the fact that different systems often use different security protocols and tools. You might be running one system with a firewall solution that’s highly specific to your environment, while another is using a cloud-native solution with its own security framework. Ensuring compatibility between these security controls often requires custom configurations and careful coordination.

Another challenge comes when systems are highly customized or rely on vendor-specific tools. In this case, automation tools might need to be fine-tuned—or even completely reworked—to adapt. Vendor lock-in can complicate matters even more, as you’re limited by the functionality and flexibility of your chosen solution.

Automation also relies heavily on effective cross-system communication. To ensure that all systems are in sync, especially when patching vulnerabilities, monitoring compliance and generating reports, your systems need to “talk” to each other. If there are mismatched data formats or integration barriers, this can cause automation workflows to break down and require manual intervention.

Finally, as your organization grows, so do your automation needs. What worked for a small environment might need adjustments as your infrastructure scales. It’s crucial to have flexible, scalable automation to manage evolving infrastructure and compliance demands.

How to handle all this

If this seems a bit daunting, that’s because it is. From legacy infrastructure to cloud environments, the complexities involved in automating compliance across different systems can be a lot. There is a solution, though. We designed XOAP to solve these exact challenges and make security compliance automation smooth, scalable and reliable. On top of automating anything in your IT infrastructure, XOAP takes the headache out of managing STIG, CIS and BSI compliance—all from a single, unified platform.

XOAP seamlessly integrates with various systems, whether legacy or cloud, maintaining consistent security policies with minimal manual effort. Even if your setup is highly customized or uses vendor-specific tools, XOAP adapts without the need for major adjustments. No vendor lock-ins, just flexible automation that fits your needs.

What really sets XOAP apart is its real-time monitoring and automated remediation. When a vulnerability is detected, XOAP not only flags it but also applies the necessary fix, keeping your systems compliant and reducing downtime. It also solves the problem of cross-system communication, eliminating integration barriers and making sure that patch management and vulnerability assessments run smoothly across all your systems.

As your business grows, XOAP scales with the evolving infrastructure, ensuring that the compliance processes stay up to date and efficient as your needs change.

Automating STIG, CIS and BSI compliance this way becomes straightforward, leaving you free to focus on your business while XOAP takes care of the security details.

And those security audits? With XOAP’s automated reports, your only worry will be picking the report cover.

Check nodes details

📚 More on security automation:
   >> Achieving up to 98% CIS compliance
   >> STIG security across all systems
   >> Security compliance made easy
   >> Why XOAP

Still not sure about automating your IT security? Let’s talk! You can book a timeslot below. If you’d like to explore XOAP yourself, start with a free account.

Automate security compliance benchmarks

Start for free
Book a demo

The post Ignoring IT security compliance automation? Think again appeared first on XOAP.

]]> Achieve Windows 11 security in minutes with our baseline setup https://dev.xoap.io/achieve-windows-11-security-in-minutes/ Thu, 13 Feb 2025 14:24:14 +0000 https://dev.xoap.io/?p=18373 This quick and simple tutorial will guide you through finding, modifying, and assigning the Windows 11 Security Baseline in XOAP.

The post Achieve Windows 11 security in minutes with our baseline setup appeared first on XOAP.

]]>

Table of contents

XOAP now provides newly registered users with direct access to the Windows 11 Security Baseline in their Workspaces. Still not a XOAP user? Start for free here.

The Windows 11 Security Baseline integrates best practices from the Centre for Internet Security (CIS) and Security Technical Implementation Guides (STIG) from the latest October release.

This quick and simple tutorial will guide you through finding, modifying, and assigning the Windows 11 Security Baseline in XOAP.

How to use the Windows 11 Security Baseline in XOAP

Follow along with the video tutorial:

This video may not load due to your cookie preferences. Adjust your cookie settings or watch it directly on YouTube.

Step 1: Locate the Windows 11 Security Baseline

Log in to your XOAP account. Navigate to Configuration Management → Configurations. Use the search bar to find Windows 11 Security Baseline.

Step 2: Modify and save a new version (optional)

The baseline is pre-configured with best practices, but you can adjust settings to fit your organization’s needs:

Open the configuration and make the necessary changes. Save it as a new version to preserve both the original and updated configurations. This allows flexibility; you can switch between different security configurations as needed.

Extend it with all common modules available in your XOAP account under Configuration Management → Modules, or extend the configuration with self-created modules or Group Policy settings.

Step 3: Assign the Security Baseline to systems

To apply this security configuration to your systems. Go to Groups in XOAP and choose an existing group or create a new group. Click Edit and assign the newly saved configuration version to the group.

Once assigned, all connected systems in that group will automatically receive the updated security baseline.

What if you can't find the Windows 11 Security Baseline?

 If the baseline is not available in your XOAP account, download it at the end of this blog.

				
					Name: Windows11_Security_Baseline 
Description: Windows 11 security and compliance baseline 
 
Following DSC modules are required within the XOAP workspace when working towards the Windows 11 Security Baseline configuration: 

XOAPBaselineModuleDSC 
XOAPSTIGOctober2024DSC 
XOAPCISBenchmarkDSC 
 
XOAPBaselineModuleDSC, XOAPCISBenchmarkDSC and XOAPSTIGOctober2024DSC are all provided by template whenever one creates a new workspace account and should be present in every case.

Stronger security with less effort

The Windows 11 Security Baseline in XOAP makes security simple and powerful. With just a few clicks, you can lock down your systems using the best practices from CIS and STIG.

Once assigned, it automatically keeps everything in line, so you don’t have to worry about constant updates or manual fixes. Need to tweak something? Customize it, save a new version, and roll it out instantly. It’s security that just works – strong, flexible, and easy.

💡 Helpful resources:

→ Apply STIG compliance in a few steps
→ Deliver dynamic DSC configuraton
→ Free DSC module: Windows LAPS
→ Automate Microsoft 365 configurations
→ Docs: Configuration Management

Download illustration

Download Windows 11 Security Baseline

By downloading, you accept the XOAP privacy policy and will receive product information from us.

The post Achieve Windows 11 security in minutes with our baseline setup appeared first on XOAP.

]]> How IT teams are fueling shadow IT and driving up enterprise costs https://dev.xoap.io/enterprise-shadow-it-automation/ Mon, 09 Dec 2024 09:12:51 +0000 https://dev.xoap.io/?p=17435 Shadow IT practices, paired with decentralization and cloud migrations risks, are causing exploding costs for enterprises. Is there a way out?

The post How IT teams are fueling shadow IT and driving up enterprise costs appeared first on XOAP.

]]>

Table of contents

When it comes to large organizations, IT decentralization challenges have become a major source of exploding costs, cybersecurity vulnerabilities and inefficiencies, often fueled by shadow IT practices and unmanaged cloud migration risks. This includes anything from uncontrolled and unstandardized cloud accounts created by different business units, such as those on AWS, Azure and Google Cloud platforms, to entire infrastructures misaligned with the central setup.

Once centrally monitored and controlled to adhere to internal policies, these decentralized systems have become a growing blind spot—leading to escalating cybersecurity risks and millions lost yearly. Without clear answers to fundamental questions such as ‘Are business standards implemented?’ or ‘Which configurations and image definitions are in place?’ enterprises are vulnerable, while accountability becomes increasingly difficult to maintain.

Lift and shift: the easy route to expensive outcomes

On top of uncontrolled decentralization, organizations face cloud migration risks that contribute to growing IT costs. These risks often stem from poor planning, a lack of standardization and inadequate consideration for performance and compliance. A seemingly quick, simple and cheap ‘lift and shift’ approach to cloud migration has proven to be much more expensive in the long run, leading to both financial and performance losses.

Moving an on-premises infrastructure to the cloud as-is, without necessary modifications, does result in a quick migration. Redesigning applications and reconfiguring infrastructure not only take time but also require a comprehensive cloud migration strategy. Avoiding this can seem tempting and, in the case of numerous uncontrolled business units, may even appear as the only feasible solution.

In practice, applications designed for the on-premises environments do not perform well when simply transplanted into a cloud environment, leading to slower performance and downtime as well as inefficient use of cloud resources and higher operational expenses. While clearly not the desired outcome, it pales in comparison to the security and compliance risks that the ‘lift and shift’ approach poses.

What was adequate for traditional data centers, might not be suitable for the cloud. Carrying over old vulnerabilities without the possibility to use cloud-native security features leaves the enterprise more exposed to security threats.

In 2022 and 2023, 85% of companies globally have experienced cyber incidents, with 11% attributed to the unauthorized use of shadow IT, according to Kaspersky’s report.

Shadow data was involved in whooping 35% of data breaches, which are becoming increasingly expensive (from $4.45M to $4.88M in 2023), the Cost of a Data Breach Report 2024 found.

With the lift and shift, staying compliant with strict data protection and privacy laws, as well as additional security standards mandatory in certain industries, is practically impossible as applications are not redesigned. Auditing and reporting on these regulations may also be impacted if the applications are not integrated with the cloud provider’s logging and reporting tools.

Getting a better hold of security

So what exactly can be done post-migration if everything has already been lifted and shifted to the cloud?

Conducting regular security and compliance audits to ensure that the cloud infrastructure meets regulatory requirements and best practices is probably the best way to start. Security holes can point to the infrastructure that needs to be prioritized and reworked. This will take the time that was initially saved by migrating fast.

If an enterprise faces decentralization in addition to the consequences of the lift and shift, taking control of different units’ IT practices will provide the best long-term solution. In other words:

Aligning OS image definitions and system configurations across the entire enterprise, while staying flexible to customization on the business unit level will set a healthy foundation for both cloud and business operations, minimizing risks and costs.

If done right, it should lead to a unified management of different platforms, accounts and vendors, without configuration drifts across units.

Enterprises can tackle these challenges head-on by using solutions like XOAP, which automates the (re)standardization of the entire enterprise’s infrastructure, addressing critical IT decentralization challenges while mitigating cloud migration risks.

By leveraging enterprise automation, XOAP provides a unified solution to optimize cloud environments, maintain compliance and eliminate inefficiencies. With continuous security and compliance monitoring, including immediate fixes, and connections to major cloud providers like AWS, Azure and Google Cloud, the XOAP platform tackles shadow IT and lift-and-shift challenges in one fell swoop.

Haven't migrated to the cloud yet?

Rethink your approach. It may require more planning, but it does not have to be a long and daunting process.

Instead of lifting and shifting, consider enterprise automation to overcome cloud migration risks and resolve IT decentralization challenges. This way, you can ensure scalability, security and cost-efficiency for your cloud transformation journey.

A standardized system migration from on-premises to cloud environments saves time and money now and in the future, and best of all, it works for you, not the other way around.

If you need help before or after migration to the cloud, book a free consultation with our automation experts.

P.S. You can use XOAP for free. With image, configuration, application and platform management modules included, our free plan offers plenty of starter units for you to explore all the automation and standardization possibilities.

Start using XOAP for free

The post How IT teams are fueling shadow IT and driving up enterprise costs appeared first on XOAP.

]]> Free BitLocker module: Encrypt HD disk easily https://dev.xoap.io/free-bitlocker-module-encrypt-hd-disk-easily/ Thu, 07 Nov 2024 09:23:25 +0000 https://dev.xoap.io/?p=16850 Implement and manage BitLocker on Windows 10/11 and Windows 2022 Datacenter (server solution) using XOAP's free BitLocker module.

The post Free BitLocker module: Encrypt HD disk easily appeared first on XOAP.

]]>

Table of contents

Safeguarding sensitive data is more crucial than ever, particularly as organizations increasingly rely on mobile devices and remote work environments. Among the array of security measures available, BitLocker stands out as a powerful encryption tool designed to protect data stored on Windows devices. However, many organizations face challenges in effectively deploying and managing BitLocker across their systems.

You can streamline the deployment of BitLocker using XOAP’s Configuration Management module. config.XO simplifies the implementation of BitLocker through Desired State Configuration (DSC), allowing IT administrators to automate and standardize encryption across managed devices. DSC ensures that systems remain compliant with organizational policies, reducing the risk of misconfigurations and ensuring that all devices are appropriately protected.

In this blog post, we will guide you through the process of implementing and managing BitLocker on Windows 10/11 (client solution) and Windows 2022 Datacenter (server solution).

With XOAP, you can begin the deployment process immediately. Simply create a free XOAP account and follow the steps below.

You can also download our BitLocker module and put it to use yourself.

Windows 10 and 11 (Client solution)

To encrypt a virtual machine disk using BitLocker, first you will need to enable Trusted Platform Module (TMP) in Hyper-V Manager.

To do this, open the VM settings and click on Security. In the Encryption Support section, check the Enable Trusted Platform Module box. Click here for detailed instructions.

Moving on to config.XO. If you haven’t yet, create a free XOAP account and go to your Workspace. In Configuration Management, create a new configuration or open an existing one.

XOAP's BitLocker tutorial - client solution - step 1

Click Add resources.

XOAP's BitLocker tutorial - client solution - step 2

Select XOAPBitlockerDSC and add EnableBitlocker-DSC resource from XOAPBitlockerDSC-Module.

XOAP's BitLocker tutorial - client solution - step 3

Save your configuration.

If the configuration is saved and compiled (this might take a few moments), you will see your DSC resources when you click on the View code option in your configuration.

XOAP's BitLocker tutorial - client solution - step 4

Now, go to Groups in Configuration Management and create a new group or choose an existing one.

In the Edit group screen, attach your configuration for BitLocker to that group.

XOAP's BitLocker tutorial - client solution - step 5

Download the group registration script and run it on your machine.

Bitlocker Recovery Key will now be stored within your Microsoft Entra (if your device is already joined) and locally on the second drive you chose in the configuration. 

 

Windows Server 2022 Datacenter (Server solution)

For the server solution, first you will need to install prerequisites with the PSDesiredStateConfiguration resources.

Specifically, you’ll need to enable the WindowsFeature and WindowsFeature RSAT-Feature-Tools-Bitlocker. These features are essential for ensuring that BitLocker operates effectively on your Windows Server 2022 Datacenter environment.

XOAP's BitLocker tutorial - server solution - step 1

In XOAP, this will involve setting up two distinct DSC resources: one for the WindowsFeature and another for the RSAT-Feature-Tools-Bitlocker WindowsFeature. See screenshots below.

XOAP's BitLocker tutorial - server solution - step 2
Bitlocker WindowsFeature
XOAP's BitLocker tutorial - server solution - step 3
RSAT-Feature-Tools-Bitlocker WindowsFeature

Please note:

• If you need to encrypt the system drive (e.g., C), you should use the DSC resource xBLBitLocker from our module as done here.

• To automatically enable BitLocker on fixed or removable drives, you should use the DSC resource xBLAutoBitLocker from our module. It does not work on operating system drives, but requires the OS to be encrypted. If you have multiple drives, use both DSC resources as done here.

Finalizing the configuration

Once you’ve completed your BitLocker configuration and linked it to a group within config.XO, download the group registration script associated with your BitLocker configuration.

Run the script on your machine, and after the required reboots, your drives should be successfully encrypted by BitLocker. ✅

 

Outcome

Windows 10 and 11 (Client solution).

If the device is joined to the work (or school) organization’s Microsoft Entra ID, then the VM and the BitlockerKey will be stored in My Account > Devices area.

XOAP's BitLocker tutorial - outcome - example 1

 

XOAP’s Configuration Management 

 

XOAP's BitLocker tutorial - outcome - example 2

 

Locally on the VM (ResourceCount can vary)

 

XOAP's BitLocker tutorial - outcome - example 3
XOAP's BitLocker tutorial - outcome - example 4

Windows Server 2022 Datacenter (Server solution)

Backing up the Recovery Key is essential for ensuring you can regain access to your data. You can do this using the Windows option available in the Manage BitLocker settings.

 

XOAP's BitLocker tutorial - outcome - example 4

Begin the deployment process immediately

So, are you ready to try it with XOAP? Just follow the steps above and you’ll be done in no time. The BitLocker module is directly available in your  free Workspace. If you prefer to do this manually, download the BitLocker module. 

Download illustration

Download BitLocker module

By downloading, you accept the XOAP privacy policy and will receive product information from us.

The post Free BitLocker module: Encrypt HD disk easily appeared first on XOAP.

]]> Global outage takeaways: How to protect your organization https://dev.xoap.io/global-outage-takeaways-how-to-protect-your-organization/ Tue, 23 Jul 2024 12:02:08 +0000 https://dev.xoap.io/?p=14725 XOAP's CTO offers key takeaways following the CrowdStrike incident, from an organizational and technical perspective.

The post Global outage takeaways: How to protect your organization appeared first on XOAP.

]]>

We have all witnessed recent incidents that underscore the inherent fragility of IT systems.

First, let me express my understanding of the trust placed in security agents deeply integrated within the OS to bolster system security. These agents, provided by reputable vendors, undergo rigorous testing to minimize potential issues, especially in high-impact scenarios.

However, despite our best efforts and the most stringent procedural tests, issues can still arise. After all, we are human, and errors are an inevitable part of our reality. I sympathize deeply with those affected by such incidents, recognizing the immense pressure and responsibility they bear.

Incidents like this occur daily in various organizations, often on a smaller scale due to auto-updates.

We must take a step back and consider how we can mitigate these issues in the future.

While it might be tempting to lay all the blame on CrowdStrike, it’s essential to remember that both companies and end-users share the responsibility for minimizing the impact of such incidents.

Here are several key points to consider.

🗃 The organizational perspective

First and foremost, establish robust testing stages. Implement processes to thoroughly test updates in automated environments before deploying them to production. When it comes to backup, implementing comprehensive backup strategies is critical in ensuring critical data and systems are backed up across multiple versions and locations.

In the event of total failure, you will need a clear, automated plan for redeploying your entire infrastructure. Develop redeployment plans and avoid the pitfall of treating server setup as a one-time task—automation is crucial. Moreover, pay attention to desktop readiness. Leverage available solutions to ensure desktops can be restored and operational within hours.

If you haven’t yet, adopt contemporary deployment methodologies and agile practices. Following incidents, conduct thorough postmortem analyses to identify and implement improvements.

 

💻 The technical perspective

Avoid “latest” and auto-updates on critical systems. While convenient, these can introduce unforeseen issues, so exercise caution.

Testing should be done in controlled environments. Deploy nothing to production without thorough testing in a staging environment. Testing should also be done regularly. Conduct regular, comprehensive tests of your automation and deployment processes—not just annually.

To ensure rapid deployment in disaster scenarios, automate your infrastructure as much as possible and consider implementing automated testing. Testing processes enhanced with automation will catch issues early. For quicker recovery and reduced attack surfaces, transition critical infrastructure to containers and Kubernetes. Simultaneous failures can be mitigated by distributing infrastructure and critical components across multiple cloud providers and geographical locations.

When it comes to standby snapshots, go cold. Maintain replicated, versioned snapshots of crucial backend systems and data as cold standby, since hot standby can replicate corrupted data.

And last but not the least, rethink your security measures. Explore innovative security solutions that reduce dependency on full-blown desktops.

 

What do you think?

Before the end of this blog, I also want to highlight a particularly smart approach to addressing these issues, developed by Helge Klein and the uberAgent team: UberAgent Driver Safety Net Feature. Check it out!

If there’s anything I missed or if you have a different perspective, feel free to share your thoughts here. 💬

The post Global outage takeaways: How to protect your organization appeared first on XOAP.

]]>