Title: Editing Openai/695cf919-be54-8012-abfe-890e2495a365 - freem URL Source: https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit Published Time: Sat, 10 Oct 2026 21:59:51 GMT Markdown Content: [Jump to content](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit#bodyContent) - [x] Main menu Main menu move to sidebar hide Navigation * [Main page](https://freemwiki.com/wiki/Main_Page "Visit the main page [alt-shift-z]") * [Recent changes](https://freemwiki.com/wiki/Special:RecentChanges "A list of recent changes in the wiki [alt-shift-r]") * [Random page](https://freemwiki.com/wiki/Special:Random "Load a random page [alt-shift-x]") * [Help about MediaWiki](https://www.mediawiki.org/wiki/Special:MyLanguage/Help:Contents) Legal * [Terms](https://freemwiki.com/wiki/Terms_of_Service) * [Privacy Policy](https://freemwiki.com/wiki/Privacy_Policy) * [About](https://freemwiki.com/wiki/About) * [Contact](https://freemwiki.com/wiki/Contact) [![Image 1](https://freemwiki.com/images/freem.svg)**freem**](https://freemwiki.com/wiki/Main_Page) [Search](https://freemwiki.com/wiki/Special:Search "Search freem [alt-shift-f]") Search - [x] Appearance * [Create account](https://freemwiki.com/index.php?title=Special:CreateAccount&returnto=Openai%2F695cf919-be54-8012-abfe-890e2495a365&returntoquery=section%3D7%26veaction%3Dedit%26redirect%3Dno "You are encouraged to create an account and log in; however, it is not mandatory") * [Log in](https://freemwiki.com/index.php?title=Special:UserLogin&returnto=Openai%2F695cf919-be54-8012-abfe-890e2495a365&returntoquery=section%3D7%26veaction%3Dedit%26redirect%3Dno "You are encouraged to log in; however, it is not mandatory [alt-shift-o]") - [x] Personal tools * [Create account](https://freemwiki.com/index.php?title=Special:CreateAccount&returnto=Openai%2F695cf919-be54-8012-abfe-890e2495a365&returntoquery=section%3D7%26veaction%3Dedit%26redirect%3Dno "You are encouraged to create an account and log in; however, it is not mandatory") * [Log in](https://freemwiki.com/index.php?title=Special:UserLogin&returnto=Openai%2F695cf919-be54-8012-abfe-890e2495a365&returntoquery=section%3D7%26veaction%3Dedit%26redirect%3Dno "You are encouraged to log in; however, it is not mandatory [alt-shift-o]") Pages for logged out editors [learn more](https://freemwiki.com/wiki/Help:Introduction) * [Contributions](https://freemwiki.com/wiki/Special:MyContributions "A list of edits made from this IP address [alt-shift-y]") * [Talk](https://freemwiki.com/wiki/Special:MyTalk "Discussion about edits from this IP address [alt-shift-n]") ## Contents move to sidebar hide * [Beginning](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit#) * [1 gpt-5-2](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit#gpt-5-2)Toggle gpt-5-2 subsection * [1.1 User: EPM on all endpoints or just who needs admin rights?](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit#User:_EPM_on_all_endpoints_or_just_who_needs_admin_rights?) * [1.2 Assistant: Short answer: both models exist, but they serve different risk appetites and maturity levels.](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit#Assistant:_Short_answer:_both_models_exist,_but_they_serve_different_risk_appetites_and_maturity_levels.) * [1.2.1 1. Is it normal that EPM is only on ~900 of 4k endpoints?](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit#1._Is_it_normal_that_EPM_is_only_on_~900_of_4k_endpoints?) * [1.2.1.1 Typical characteristics](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit#Typical_characteristics) * [1.2.1.2 Why orgs do this](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit#Why_orgs_do_this) * [1.2.1.3 Downsides (important)](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit#Downsides_(important)) * [1.2.2 2. Is it normal that no servers have EPM?](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit#2._Is_it_normal_that_no_servers_have_EPM?) * [1.2.2.1 Typical reasons](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit#Typical_reasons) * [1.2.2.2 Reality](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit#Reality) * [1.2.3 3. The 12k-endpoint rollout — what model is that?](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit#3._The_12k-endpoint_rollout_%E2%80%94_what_model_is_that?) * [1.2.3.1 Why orgs do full-estate EPM](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit#Why_orgs_do_full-estate_EPM) * [1.2.4 4. Pros & cons — side-by-side](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit#4._Pros_&_cons_%E2%80%94_side-by-side) * [1.2.4.1 Admin-only EPM (your current place)](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit#Admin-only_EPM_(your_current_place)) * [1.2.4.2 All-endpoints EPM (12k rollout)](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit#All-endpoints_EPM_(12k_rollout)) * [1.2.5 5. What’s “best practice” today?](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit#5._What%E2%80%99s_%E2%80%9Cbest_practice%E2%80%9D_today?) * [1.2.5.1 Phase 1 – Admin personas](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit#Phase_1_%E2%80%93_Admin_personas) * [1.2.5.2 Phase 2 – High-risk users](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit#Phase_2_%E2%80%93_High-risk_users) * [1.2.5.3 Phase 3 – All endpoints](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit#Phase_3_%E2%80%93_All_endpoints) * [1.2.5.4 Phase 4 – Select servers](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit#Phase_4_%E2%80%93_Select_servers) * [1.2.6 6. Interview signal (important)](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit#6._Interview_signal_(important)) * [1.2.6.1 TL;DR](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit#TL;DR) * [2 References](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit#References) - [x] Toggle the table of contents # Openai/695cf919-be54-8012-abfe-890e2495a365 - [x] Add languages * [Page](https://freemwiki.com/wiki/Openai/695cf919-be54-8012-abfe-890e2495a365 "View the content page [alt-shift-c]") * [Discussion](https://freemwiki.com/index.php?title=Talk:Openai/695cf919-be54-8012-abfe-890e2495a365&action=edit&redlink=1 "Discussion about the content page (page does not exist) [alt-shift-t]") - [x] English * [Read](https://freemwiki.com/wiki/Openai/695cf919-be54-8012-abfe-890e2495a365) * [Edit](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&veaction=edit "Edit this page [alt-shift-v]") * [Edit source](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&action=edit "Edit the source code of this page [alt-shift-e]") * [View history](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&action=history "Past revisions of this page [alt-shift-h]") - [x] Tools Tools move to sidebar hide Actions * [Read](https://freemwiki.com/wiki/Openai/695cf919-be54-8012-abfe-890e2495a365) * [Edit](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&veaction=edit "Edit this page [alt-shift-v]") * [Edit source](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&action=edit "Edit the source code of this page [alt-shift-e]") * [View history](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&action=history) General * [What links here](https://freemwiki.com/wiki/Special:WhatLinksHere/Openai/695cf919-be54-8012-abfe-890e2495a365 "A list of all wiki pages that link here [alt-shift-j]") * [Related changes](https://freemwiki.com/wiki/Special:RecentChangesLinked/Openai/695cf919-be54-8012-abfe-890e2495a365 "Recent changes in pages linked from this page [alt-shift-k]") * [Special pages](https://freemwiki.com/wiki/Special:SpecialPages "A list of all special pages [alt-shift-q]") * [Printable version](javascript:print(); "Printable version of this page [alt-shift-p]") * [Permanent link](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&oldid=595327 "Permanent link to this revision of this page") * [Page information](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&action=info "More information about this page") * [Cite this page](https://freemwiki.com/index.php?title=Special:CiteThisPage&page=Openai%2F695cf919-be54-8012-abfe-890e2495a365&id=595327&wpFormIdentifier=titleform "Information on how to cite this page") Appearance move to sidebar hide Text * Small Standard Large This page always uses small font size Width * Standard Wide The content is as wide as possible for your browser window. [Undo Ctrl+Z](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit "Undo Ctrl+Z")[Redo Ctrl+Shift+Z, Ctrl+Y](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit "Redo Ctrl+Shift+Z, Ctrl+Y") Style text [Link Ctrl+K](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit "Link Ctrl+K") ### Links Link important words to other wiki articles or even other websites. It will help readers understand the context. [Okay, got it](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit) Cite Structure Insert [Special character](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit "Special character") [Edit notices](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit "Edit notices") Page options Switch editor [Save…Alt+Shift+S](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit "Save… Alt+Shift+S") [Paragraph Ctrl+0](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Heading Ctrl+2](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Sub-heading 1 Ctrl+3](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Sub-heading 2 Ctrl+4](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Sub-heading 3 Ctrl+5](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Sub-heading 4 Ctrl+6](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Header cell](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Content cell](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Preformatted Ctrl+7](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Block quote Ctrl+8](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Page title Ctrl+1](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit) [Bold Ctrl+B](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Italic Ctrl+I](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Superscript Ctrl+.](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Subscript Ctrl+,](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Computer code Ctrl+Shift+6](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Strikethrough Ctrl+Shift+5](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Underline Ctrl+U](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Big](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Small](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Language](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Remove Ctrl+\, Ctrl+M](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[More](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit) [Basic Ctrl+Shift+K](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Re-use](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[More](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit) [Bullet list](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Numbered list](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Decrease indentation Shift+Tab, Ctrl+[](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Increase indentation Tab, Ctrl+]](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[More](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit) [Images and media](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Template](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Table](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Comment](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Chemical formula](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Math formula](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Code block](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Gallery](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Your signature](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[References list](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[More](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit) [Read the user guide](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Keyboard shortcuts Ctrl+/, Ctrl+Shift+/](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Toolbar search Ctrl+Shift+P, Ctrl+Alt+Shift+P](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Leave feedback about this software](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[More](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit) 1 notice[Close](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit "Close") You do not have permission to edit this page, for the following reason: **Your IP address is in a range which has been blocked on all wikis.** The block was made by . The reason given is _[Open proxy/Webhost](https://freemwiki.com/index.php?title=M:Special:MyLanguage/NOP&action=edit&redlink=1 "M:Special:MyLanguage/NOP (page does not exist)"): See the [help page](https://freemwiki.com/index.php?title=M:Special/MyLanguage:WM:OP/H&action=edit&redlink=1 "M:Special/MyLanguage:WM:OP/H (page does not exist)") if you are affected_. * Start of block: 19:58, 14 August 2025 * Expiration of block: 19:58, 14 August 2028 You can contact to discuss the block. You cannot use the "Email this user" feature unless a valid email address is specified in your [account preferences](https://freemwiki.com/wiki/Special:Preferences "Special:Preferences") and you have not been blocked from using it. Your current IP address is 152.233.48.137. The blocked range is 152.233.0.0/17. Please include all above details in any queries you make. [Options](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Categories](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Page settings](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Advanced settings](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Languages](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Templates used](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[View as right-to-left Ctrl+Shift+X](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Find and replace Ctrl+F](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[More](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit) [Visual editing](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit "Visual editing")[Source editing](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit "Source editing")[More](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit) From freem _This conversation was exported from ChatGPT_[[1]](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit#cite_note-1) ## gpt-5-2[[edit](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&veaction=edit§ion=1 "Edit section: gpt-5-2") | [edit source](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&action=edit§ion=1 "Edit section's source code: gpt-5-2")] ### User: EPM on all endpoints or just who needs admin rights?[[edit](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&veaction=edit§ion=2 "Edit section: User: EPM on all endpoints or just who needs admin rights?") | [edit source](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&action=edit§ion=2 "Edit section's source code: User: EPM on all endpoints or just who needs admin rights?")] EPM on all endpoints or just who needs admin rights? At my current we have CyberArk EPM and it’s where I first ever used EPM. We have about 4k endpoints and another 1500 servers. EPM is only installed on roughly 900 endpoints and no servers. Is this normal? LAR is removed from all endpoints. EPM is on some of the IT departments like dev, quant, DBAs, and Sys Engineering. No servers have EPM. I was just interviewing with a company who is looking to roll out EPM to all 12k endpoints that they have. ### Assistant: Short answer: both models exist, but they serve different risk appetites and maturity levels.[[edit](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&veaction=edit§ion=3 "Edit section: Assistant: Short answer: both models exist, but they serve different risk appetites and maturity levels.") | [edit source](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&action=edit§ion=3 "Edit section's source code: Assistant: Short answer: both models exist, but they serve different risk appetites and maturity levels.")] Short answer: both models exist, but they serve different risk appetites and maturity levels. What you’re seeing at your current place is very common, but it’s also less mature than what the 12k-endpoint company is aiming for. Let’s break it down clearly. #### 1. Is it normal that EPM is only on ~900 of 4k endpoints?[[edit](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&veaction=edit§ion=4 "Edit section: 1. Is it normal that EPM is only on ~900 of 4k endpoints?") | [edit source](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&action=edit§ion=4 "Edit section's source code: 1. Is it normal that EPM is only on ~900 of 4k endpoints?")] Yes — very common. This is the “admin personas only” deployment model. ##### Typical characteristics[[edit](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&veaction=edit§ion=5 "Edit section: Typical characteristics") | [edit source](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&action=edit§ion=5 "Edit section's source code: Typical characteristics")] * EPM installed only on: - Devs - Quants - DBAs - Sys/Platform engineers * Local Admin Rights (LAR) removed across the estate * Everyone else runs as standard user * Servers excluded entirely ##### Why orgs do this[[edit](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&veaction=edit§ion=6 "Edit section: Why orgs do this") | [edit source](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&action=edit§ion=6 "Edit section's source code: Why orgs do this")] * EPM is seen as an “admin replacement tool”, not a universal control * Lower: - Licensing cost - Operational overhead - Policy complexity * Security teams often think: > “If users can’t elevate, why install EPM?” ##### Downsides (important)[[edit](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&veaction=edit§ion=7 "Edit section: Downsides (important)") | [edit source](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&action=edit§ion=7 "Edit section's source code: Downsides (important)")] * No visibility into: - Credential abuse attempts - LOLBAS usage by standard users - UAC bypass attempts * Malware still executes as standard user * You only control who can elevate, not what executes So yes — normal, but reactive rather than preventative. #### 2. Is it normal that no servers have EPM?[[edit](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&veaction=edit§ion=8 "Edit section: 2. Is it normal that no servers have EPM?") | [edit source](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&action=edit§ion=8 "Edit section's source code: 2. Is it normal that no servers have EPM?")] Also very common, but increasingly questioned. ##### Typical reasons[[edit](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&veaction=edit§ion=9 "Edit section: Typical reasons") | [edit source](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&action=edit§ion=9 "Edit section's source code: Typical reasons")] * Servers are: - “Hardened” - Managed via PAM (CyberArk Core, BeyondTrust, etc.) - Considered operationally sensitive * Fear of: - Performance impact - Breaking services * Teams rely on: - AD delegation - Just-in-Time admin - Jump hosts / PAWs ##### Reality[[edit](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&veaction=edit§ion=10 "Edit section: Reality") | [edit source](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&action=edit§ion=10 "Edit section's source code: Reality")] * Servers are high-value targets * Lateral movement often ends on servers * Many orgs now: - Deploy EPM on jump boxes - Deploy EPM on Tier 2 / app servers - Exclude Tier 0 (DCs, PKI, etc.) So “no servers” is common, but not best practice anymore. #### 3. The 12k-endpoint rollout — what model is that?[[edit](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&veaction=edit§ion=11 "Edit section: 3. The 12k-endpoint rollout — what model is that?") | [edit source](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&action=edit§ion=11 "Edit section's source code: 3. The 12k-endpoint rollout — what model is that?")] That company is going for “EPM as a security control”, not just an admin tool. ##### Why orgs do full-estate EPM[[edit](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&veaction=edit§ion=12 "Edit section: Why orgs do full-estate EPM") | [edit source](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&action=edit§ion=12 "Edit section's source code: Why orgs do full-estate EPM")] * Prevent: - LOLBAS abuse - Script abuse (PowerShell, WMI, mshta, rundll32, etc.) - Living-off-the-land malware * Gain: - Full execution visibility - Forensic telemetry - Consistent control plane * Enforce: - App control - Elevation only when explicitly approved This aligns with: * Zero Trust * MITRE ATT&CK * NIST / CIS benchmarks * Insurance & audit pressure #### 4. Pros & cons — side-by-side[[edit](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&veaction=edit§ion=13 "Edit section: 4. Pros & cons — side-by-side") | [edit source](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&action=edit§ion=13 "Edit section's source code: 4. Pros & cons — side-by-side")] ##### Admin-only EPM (your current place)[[edit](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&veaction=edit§ion=14 "Edit section: Admin-only EPM (your current place)") | [edit source](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&action=edit§ion=14 "Edit section's source code: Admin-only EPM (your current place)")] Pros * Faster rollout * Fewer tickets * Easier policies * Cheaper Cons * Blind spots on ~75% of endpoints * No protection against standard-user attacks * Security value capped ##### All-endpoints EPM (12k rollout)[[edit](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&veaction=edit§ion=15 "Edit section: All-endpoints EPM (12k rollout)") | [edit source](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&action=edit§ion=15 "Edit section's source code: All-endpoints EPM (12k rollout)")] Pros * Strong security posture * Full visibility * Better malware containment * Consistent enforcement Cons * Heavy policy design effort * More noise initially * Requires mature: - App packaging - Certificate hygiene - Change control * Needs strong L2/L3 Cyber involvement #### 5. What’s “best practice” today?[[edit](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&veaction=edit§ion=16 "Edit section: 5. What’s “best practice” today?") | [edit source](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&action=edit§ion=16 "Edit section's source code: 5. What’s “best practice” today?")] Hybrid, phased maturity model: ##### Phase 1 – Admin personas[[edit](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&veaction=edit§ion=17 "Edit section: Phase 1 – Admin personas") | [edit source](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&action=edit§ion=17 "Edit section's source code: Phase 1 – Admin personas")] ✔ What your org has now ##### Phase 2 – High-risk users[[edit](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&veaction=edit§ion=18 "Edit section: Phase 2 – High-risk users") | [edit source](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&action=edit§ion=18 "Edit section's source code: Phase 2 – High-risk users")] * Finance * Execs * Developers using unsigned tools ##### Phase 3 – All endpoints[[edit](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&veaction=edit§ion=19 "Edit section: Phase 3 – All endpoints") | [edit source](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&action=edit§ion=19 "Edit section's source code: Phase 3 – All endpoints")] * Elevation mostly disabled * EPM used for: - Blocking abuse - Monitoring execution - Just-Enough-Admin ##### Phase 4 – Select servers[[edit](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&veaction=edit§ion=20 "Edit section: Phase 4 – Select servers") | [edit source](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&action=edit§ion=20 "Edit section's source code: Phase 4 – Select servers")] * Jump hosts * App servers * Exclude Tier 0 #### 6. Interview signal (important)[[edit](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&veaction=edit§ion=21 "Edit section: 6. Interview signal (important)") | [edit source](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&action=edit§ion=21 "Edit section's source code: 6. Interview signal (important)")] The fact that the new company wants EPM on all 12k endpoints usually means: * They’ve had: - Incidents - Audit findings - Insurance pressure * They see EPM as endpoint protection, not an IT tool * They will need: - Strong engineering - Good runbooks - People who understand friction vs security Given your background with: * CI/CD signing * Certificate governance * macOS + Windows EPM * LOLBAS awareness 👉 You’re exactly the kind of profile they need, whether they realise it yet or not. ##### TL;DR[[edit](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&veaction=edit§ion=22 "Edit section: TL;DR") | [edit source](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&action=edit§ion=22 "Edit section's source code: TL;DR")] * Your current setup is normal but limited * Full-estate EPM is more mature and security-driven * Servers excluded is common but slowly changing * The 12k rollout suggests higher ambition — and higher pain If you want, I can help you: * Frame this comparison for interviews * Design a realistic phased rollout model * Or draft talking points that show you understand both security and ops reality ## References[[edit](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&veaction=edit§ion=23 "Edit section: References") | [edit source](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&action=edit§ion=23 "Edit section's source code: References")] 1. [↑](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit#cite_ref-1 "Jump up")["EPM Deployment Models"](https://chatgpt.com/share/695cf919-be54-8012-abfe-890e2495a365). ChatGPT. Retrieved 2026-01-07. Retrieved from "[https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&oldid=595327](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365&oldid=595327)" ![Image 2](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[DISPLAYTITLE:EPM Deployment Models](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)![Image 3](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit) _This conversation was exported from ChatGPT_[[1]](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit#)![Image 4](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit) ## gpt-5-2 ### User: EPM on all endpoints or just who needs admin rights? EPM on all endpoints or just who needs admin rights? At my current we have CyberArk EPM and it’s where I first ever used EPM. We have about 4k endpoints and another 1500 servers. EPM is only installed on roughly 900 endpoints and no servers. Is this normal? LAR is removed from all endpoints. EPM is on some of the IT departments like dev, quant, DBAs, and Sys Engineering. No servers have EPM. I was just interviewing with a company who is looking to roll out EPM to all 12k endpoints that they have. ### Assistant: Short answer: both models exist, but they serve different risk appetites and maturity levels. Short answer: both models exist, but they serve different risk appetites and maturity levels. What you’re seeing at your current place is very common, but it’s also less mature than what the 12k-endpoint company is aiming for. Let’s break it down clearly. #### 1. Is it normal that EPM is only on ~900 of 4k endpoints? Yes — very common.↵This is the “admin personas only” deployment model. ##### Typical characteristics * EPM installed only on: - Devs - Quants - DBAs - Sys/Platform engineers * Local Admin Rights (LAR) removed across the estate * Everyone else runs as standard user * Servers excluded entirely ##### Why orgs do this * EPM is seen as an “admin replacement tool”, not a universal control * Lower: - Licensing cost - Operational overhead - Policy complexity * Security teams often think: > “If users can’t elevate, why install EPM?” ##### Downsides (important) * No visibility into: - Credential abuse attempts - LOLBAS usage by standard users - UAC bypass attempts * Malware still executes as standard user * You only control who can elevate, not what executes So yes — normal, but reactive rather than preventative. #### 2. Is it normal that no servers have EPM? Also very common, but increasingly questioned. ##### Typical reasons * Servers are: - “Hardened” - Managed via PAM (CyberArk Core, BeyondTrust, etc.) - Considered operationally sensitive * Fear of: - Performance impact - Breaking services * Teams rely on: - AD delegation - Just-in-Time admin - Jump hosts / PAWs ##### Reality * Servers are high-value targets * Lateral movement often ends on servers * Many orgs now: - Deploy EPM on jump boxes - Deploy EPM on Tier 2 / app servers - Exclude Tier 0 (DCs, PKI, etc.) So “no servers” is common, but not best practice anymore. #### 3. The 12k-endpoint rollout — what model is that? That company is going for “EPM as a security control”, not just an admin tool. ##### Why orgs do full-estate EPM * Prevent: - LOLBAS abuse - Script abuse (PowerShell, WMI, mshta, rundll32, etc.) - Living-off-the-land malware * Gain: - Full execution visibility - Forensic telemetry - Consistent control plane * Enforce: - App control - Elevation only when explicitly approved This aligns with: * Zero Trust * MITRE ATT&CK * NIST / CIS benchmarks * Insurance & audit pressure #### 4. Pros & cons — side-by-side ##### Admin-only EPM (your current place) Pros * Faster rollout * Fewer tickets * Easier policies * Cheaper Cons * Blind spots on ~75% of endpoints * No protection against standard-user attacks * Security value capped ##### All-endpoints EPM (12k rollout) Pros * Strong security posture * Full visibility * Better malware containment * Consistent enforcement Cons * Heavy policy design effort * More noise initially * Requires mature: - App packaging - Certificate hygiene - Change control * Needs strong L2/L3 Cyber involvement #### 5. What’s “best practice” today? Hybrid, phased maturity model: ##### Phase 1 – Admin personas ✔ What your org has now ##### Phase 2 – High-risk users * Finance * Execs * Developers using unsigned tools ##### Phase 3 – All endpoints * Elevation mostly disabled * EPM used for: - Blocking abuse - Monitoring execution - Just-Enough-Admin ##### Phase 4 – Select servers * Jump hosts * App servers * Exclude Tier 0 #### 6. Interview signal (important) The fact that the new company wants EPM on all 12k endpoints usually means: * They’ve had: - Incidents - Audit findings - Insurance pressure * They see EPM as endpoint protection, not an IT tool * They will need: - Strong engineering - Good runbooks - People who understand friction vs security Given your background with: * CI/CD signing * Certificate governance * macOS + Windows EPM * LOLBAS awareness 👉 You’re exactly the kind of profile they need, whether they realise it yet or not. ##### TL;DR * Your current setup is normal but limited * Full-estate EPM is more mature and security-driven * Servers excluded is common but slowly changing * The 12k rollout suggests higher ambition — and higher pain If you want, I can help you: * Frame this comparison for interviews * Design a realistic phased rollout model * Or draft talking points that show you understand both security and ops reality ## References 1. [↑](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)["EPM Deployment Models"](https://chatgpt.com/share/695cf919-be54-8012-abfe-890e2495a365). ChatGPT. Retrieved 2026-01-07. [Insert paragraph](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit) [Categories](https://freemwiki.com/wiki/Special:Categories "Special:Categories"): * [Pages with ignored display titles](https://freemwiki.com/index.php?title=Category:Pages_with_ignored_display_titles&action=edit&redlink=1 "Category:Pages with ignored display titles (page does not exist)") * [Pages using the JsonConfig extension](https://freemwiki.com/index.php?title=Category:Pages_using_the_JsonConfig_extension&action=edit&redlink=1 "Category:Pages using the JsonConfig extension (page does not exist)") * [ChatGPT Shares](https://freemwiki.com/index.php?title=Category:ChatGPT_Shares&action=edit&redlink=1 "Category:ChatGPT Shares (page does not exist)") * [Openai](https://freemwiki.com/index.php?title=Category:Openai&action=edit&redlink=1 "Category:Openai (page does not exist)") * This page was last edited on 7 January 2026, at 05:31. * Content is available under [Creative Commons Attribution-ShareAlike 4.0](https://creativecommons.org/licenses/by-sa/4.0/) unless otherwise noted. FreemWiki is operated by **FINGERPOWER DIGITAL TECHNOLOGY LLC** (Colorado, Entity ID 20221978727). * [Privacy Policy](https://freemwiki.com/wiki/Privacy_Policy) * [About](https://freemwiki.com/wiki/About) * [Terms of Service](https://freemwiki.com/wiki/Terms_of_Service) * [Mobile view](https://freemwiki.com/index.php?title=Openai/695cf919-be54-8012-abfe-890e2495a365§ion=7&veaction=edit&mobileaction=toggle_view_mobile) Welcome to freem Anyone can edit, and every improvement helps. Thank you for helping the world discover more! [Switch to the source editor](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)[Start editing](https://freemwiki.com/index.php?section=7&title=Openai%2F695cf919-be54-8012-abfe-890e2495a365&veaction=edit)