Detecting vulnerabilities in managed client devices

1. A method of analyzing a computing device prior to enrolling the computing device with a remote management service, comprising:

initiating an enrollment of the computing device with the remote management service;

determining that the remote management service requires a vulnerability scan of the computing device to be performed prior to enrolling the computing device with the remote management service;

installing a vulnerability detection component in the computing device in response to determining that the vulnerability scan is required, the vulnerability detection component being installed by obtaining a configuration profile for the computing device from the remote management service and obtaining an installation package for the vulnerability detection component from a location specified by the configuration profile;

authenticating the vulnerability detection component using a public key assigned to a developer of the vulnerability detection component;

requesting the vulnerability detection component to perform the vulnerability scan of the computing device;

transmitting a result of the vulnerability scan to a remote management service for the computing device; and

associating the computing device with a quarantine state within the remote management service in response to initiating the result of the vulnerability scan indicating that a vulnerability is present in the computing device, wherein the quarantine state restricts the computing device to access to a subset of the services provided by the remote management service.

2. The method of claim 1 , further comprising:

performing the vulnerability scan of the computing device at a time when the computing device is associated with the quarantine state; and

disassociating the computing device with the quarantine state in response to the result of the vulnerability scan indicating that the vulnerability is not present in the computing device.

3. The method of claim 1 , further comprising:

obtaining a configuration profile for the computing device from the remote management service; and

determining that the configuration profile specifies that the vulnerability scan of the computing device is required to be performed.

4. The method of claim 1 , wherein the vulnerability detection component comprises an application configured to detect an operating system vulnerability.

5. A system for analyzing a computing device prior to enrolling the computing device with a remote management service, comprising:

the computing device;

a storage device storing a plurality of computer instructions executable by the computing device, wherein the plurality of computer instructions cause the computing device to at least:

initiate an enrollment of the computing device with the remote management service;

determine that the remote management service requires a vulnerability scan of the computing device to be performed prior to enrolling the computing device with the remote management service;

install a vulnerability detection component in the computing device in response to determining that the vulnerability scan is required, the vulnerability detection component being installed by obtaining a configuration profile for the computing device from the remote management service and obtaining an installation package for the vulnerability detection component from a location specified by the configuration profile;

authenticate the vulnerability detection component using a public key assigned to a developer of the vulnerability detection component

request the vulnerability detection component to perform the vulnerability scan of the computing device;

transmit a result of the vulnerability scan to a remote management service for the computing device; and

associate the computing device with a quarantine state within the remote management service in response to initiating the result of the vulnerability scan indicating that a vulnerability is present in the computing device, wherein the quarantine state restricts the computing device to access to a subset of the services provided by the remote management service.

6. The system of claim 5 , wherein the plurality of computer instructions further cause the computing device to at least:

perform the vulnerability scan of the computing device at a time when the computing device is associated with the quarantine state; and

disassociate the computing device with the quarantine state in response to the result of the vulnerability scan indicating that the vulnerability is not present in the computing device.

7. The system of claim 5 , wherein the plurality of computer instructions further cause the computing device to at least:

obtain a configuration profile for the computing device from the remote management service; and

determine that the configuration profile specifies that the vulnerability scan of the computing device is required to be performed.

8. The system of claim 5 , wherein the vulnerability detection component comprises at least one of an antivirus application or an application configured to detect an operating system vulnerability.

9. A non-transitory computer-readable medium for analyzing a computing device prior to enrolling the computing device with a remote management service, the non-transitory computer-readable medium storing a plurality of computer instructions executable by the computing device, wherein the plurality of computer instructions cause the computing device to at least:

initiate an enrollment of the computing device with the remote management service;

determine that the remote management service requires a vulnerability scan of the computing device is required to be performed prior to enrolling the computing device with the remote management service;

install a vulnerability detection component in the computing device in response to determining that the vulnerability scan is required, the vulnerability detection component being installed by obtaining a configuration profile for the computing device from the remote management service and obtaining an installation package for the vulnerability detection component from a location specified by the configuration profile;

authenticate the vulnerability detection component using a public key assigned to a developer of the vulnerability detection component

request the vulnerability detection component to perform the vulnerability scan of the computing device;

transmit a result of the vulnerability scan to a remote management service for the computing device; and

associate the computing device with a quarantine state within the remote management service in response to initiating the result of the vulnerability scan indicating that a vulnerability is present in the computing device, wherein the quarantine state restricts the computing device to access to a subset of the services provided by the remote management service.

10. The non-transitory computer-readable medium of claim 9 , wherein the plurality of computer instructions further cause the computing device to at least:

perform the vulnerability scan of the computing device at a time when the computing device is associated with the quarantine state; and

disassociate the computing device with the quarantine state in response to the result of the vulnerability scan indicating that the vulnerability is not present in the computing device.

11. The non-transitory computer-readable medium of claim 9 , wherein the plurality of computer instructions further cause the computing device to at least:

obtain a configuration profile for the computing device from the remote management service; and

determine that the configuration profile specifies that the vulnerability scan of the computing device is required to be performed.