At the University of Utah, standardizing endpoint management across dozens of colleges and hospitals was never technical — it was political. Departments ran their SCCM instances, and a Tanium rollout drew pushback over resource overhead and fear of losing control. Rather than mandating adoption, the Information Security Office engineered it: running Tanium as a service with low cost, letting the Software Package Gallery sell itself, building a cross-department community, and drawing one line — Threat Response stays with ISO, everything else is open. Result: ~16,000 endpoints on tag-based patching and 275+ department-run deployment jobs, with one holdout department retiring SCCM.

Additional details