Request for Python and GitHub Desktop Access on VDI

On a locked-down VDI used for privileged or sensitive work (such as DLP initiatives), installation of local tools like Python and GitHub Desktop is typically controlled by the organization’s security and endpoint management policies. The appropriate pattern is to request these tools as managed applications rather than attempting direct downloads.

A suitable request to the VDI/security/Intune administration team should:

1. Clarify the business need
   • State that the tools are required to develop and maintain automation for Microsoft DLP initiatives on the VDI.
   • Emphasize that Python is needed as a runtime within Visual Studio Code and that GitHub Desktop is required for source control and collaboration.
2. Request deployment as managed applications
   • Ask that Visual Studio Code, Python, and GitHub Desktop be made available via the organization’s managed app channel (for example, Intune Company Portal on secure workstations).
   • Reference the standard secure pattern where tools like Visual Studio Code are packaged and deployed centrally to secured workstations, rather than installed ad hoc by users.
3. Align with secure workstation practices
   • Indicate that the request is consistent with the secure workstation model where only approved, centrally packaged tools (such as Visual Studio Code) are installed on privileged VDIs.
   • Confirm willingness to use only the centrally provided versions and to comply with any additional controls (for example, restricted extensions, preconfigured Git remotes, or enforced policies for GitHub access).
4. Provide technical details for packaging (for admins)
   • Visual Studio Code and similar tools can be packaged as Win32 apps (for example, using the Microsoft Win32 Content Prep Tool) and deployed via Intune or the organization’s endpoint management solution.
   • Python and GitHub Desktop can be handled in the same way: packaged, signed, and distributed as managed apps, ensuring they meet security and compliance requirements.
5. Request appropriate network and repository access
   • If GitHub (or Azure DevOps/GitHub Enterprise) is used, request that the VDI be granted access only to the required repositories and services, following least-privilege and any existing policies for code hosting and DevOps.

A concise formal request to the internal admin team could be structured as:

• Purpose: Enable development and maintenance of automation for Microsoft DLP initiatives on secure VDI.
• Tools requested: Visual Studio Code (if not already present), Python runtime (for VS Code), GitHub Desktop (for Git-based collaboration).
• Deployment method: Request packaging and deployment as managed applications through the organization’s standard endpoint management (for example, Intune Company Portal) in line with secure workstation guidance.
• Scope: Limit access to approved repositories and services; accept any additional security controls required.

This approach keeps the VDI compliant with privileged access and secure workstation standards while enabling the required development workflow.

References:

• Privileged access deployment