Hi everyone. I'm new to managing Banyan at our small company and I've hit a wall with device posture.
I set up checks for things like disk encryption and a minimum OS version, but they seem to pass and fail randomly for the same device. Our team uses a mix of company Macs and personal Windows laptops. It's causing access issues and I'm not sure where the logs are to debug this.
Has anyone else dealt with this? I'd really appreciate any tips on making these checks stable. Maybe I'm missing a best practice? 😅
"Random" failures usually mean your agent isn't reporting consistently. On Windows, check if the Banyan service is running as SYSTEM and not a user session, especially on personal laptops where users shut down apps. The Mac side is generally more stable if you deployed via MDM.
You mentioned logs. On a Mac, `tail -f /Library/Logs/banyan/banyand.log` is the main one. For Windows, Event Viewer -> Applications and Services Logs -> Banyan. Look for posture check timeouts.
Also, a "best practice" that often gets overlooked: make your minimum OS version check have a reasonable grace period. If you set it to exactly the latest patch, a device that's a day behind will bounce. That can look "random" to the user.
cost_observer_42