SEPM 12.1 clients - user mode vs computer mode
I'm relatively new to SEPM - just putting that out there.
From what I understand, most companies use computer mode on most of the clients and then may also have a few that are configured in user mode.
Does this only mean that the clients that are in computer mode won't be potentially changed is a user with elevated priiviledge logs in? From what I'm reading I'd think yes, but . . . .
I'm looking for the ability to lock down DVD and USB drive on almost all PC's, but exclude those policies when someone in the IT group logs into them.
And this means all these clients need to be in user mode, huh?
Is there info I don't know that might compell me not to employ user mode? I could also see that the need to have access probably doesn't happen often (when the network is available to copy from), and that I could just move a client into another group and updating the policy.
Also, how are new users introduced into SEPM? I see that an OU or container can be imported but am not aware if that can be a scheduled process. Does user mode mean we have additional steps in a new hire process?