CoreImage Modernization Program

CoreImage Modernization banner

The Michigan Medicine community depends on computing services for all aspects of research, education, clinical, and administrative work. HITS strives to continuously improve our managed devices to support innovation and teamwork. Yet, in the face of increasing cybersecurity threats, we must also take steps to keep the enterprise safe while using these devices.  

The goal of the CoreImage Modernization Program is to improve the user experience of our managed Windows device service by offering more self-service options for getting new devices and making routine changes, like adding printers or installing software. This is in support of a longer term goal to provide a safe and secure managed device to every faculty, staff, and learner that works for their needs. 

Managed Device Types

The Michigan Medicine managed device service includes several options:  

  • CoreImagePC– Personally-assigned or shared Windows laptops and desktops 

  • CoreMac – Personally assigned or shared Mac laptops and desktops  

  • Kiosk PC– Shared/walk-up devices deployed across the enterprise 

  • Flex PC – Windows desktops configured specifically for researchers 

  • Windows Virtual Desktop - Remote access to Michigan Medicine resources from any computer or browser, without the need for VPN.

Planned Changes: Fall/Winter 2022

Several projects are underway that will improve how HITS manages the majority PC device fleet. These projects are designed to make it easier to access common tools on WindowsCoreImage devices, including how you:  

  • Request administrative rights: We will enable you to do more with trusted sites and functions, reducing the need to have administrative rights on your device. When needed, though, you’ll be able to follow a new process for requesting and activating privileged access to your device.  

  • Add, modify, and remove printers: Self-service tools will allow you to add, modify, and remove printers instantly rather than having to call the Service Desk or run device maintenance 

  • Add software: Choose from a catalog of software to install directly to your device without calling the service desk or using the Michigan Medicine Help Center. 

  • Receive new devices: Automated build of new CoreImage Windows devices to better support flex-first work model and enhance the remote worker experience in device procurement, replacement, and support. 

Planned Changes: Spring 2023

In spring 2023, HITS will gradually restrict how unmanaged devices connect to the Michigan Medicine network, including introducing VPN restrictions. HITS will work closely with faculty, staff, and learners to continue to improve the managed device services and ensure restrictions do not negatively impact the ability to fulfill mission-critical work.  

Frequently Asked Questions

Will CoreMac support continue?

Yes. Initial plans primarily focus on the majority PC fleet, and do not include changes to CoreMac support. 

Certain services may not be as fully featured for CoreMac users. While HITS continues to enable ways of connecting to services on unmanaged devices (e.g., Windows Virtual Desktop, web-based interfaces), it will become increasingly difficult to work within our protected environment on an unmanaged device.  

How will the Michigan Medicine community be engaged in this work?

HITS will partner with multiple stakeholders throughout this effort to ensure all aspects of these changes are considered. IT-aligned faculty will help evaluate technical solutions, ITS and vendor partners will serve as collaborators, and HITS will connect with peers to learn how they addressed similar challenges.

Can I use a personally-owned device at Michigan Medicine? What can I access with it?

The goal of the CoreImage Modernization Program is to provide a safe and secure managed device to every faculty, staff, and learner. While it will become increasingly difficult to work within our protected environment on an unmanaged device, you may use a personally-owned Windows or Mac device to connect to the eduroam wireless network or to use Windows Virtual Desktop (WVD)