Thank you for taking the time to answer! I think I might not pass on a few of those answers but I appreciate it.
Linden Beaumont Data Analyst and Developer +44 1629 699 100 LinkedIn https://ideagen.ai/ Ideagen acknowledges the Traditional Owners and Custodians of Country throughout Australia. We recognise their enduring connection to the lands, the waterways, and the skies. We acknowledge the Gadigal people, on whose lands our head office is located, as well as all other First Nation Countries we operate across. We pay our respects to Elders past, present and to all Aboriginal and Torres Strait Islander peoples ________________________________ From: David Niklas via ffmpeg-user <[email protected]> Sent: Tuesday, June 23, 2026 02:34 To: [email protected] <[email protected]> Cc: David Niklas <[email protected]> Subject: [FFmpeg-user] Re: Questions for software approval for my company CAUTION: Unverified Email Hello, Okay, here's all the answers to your questions. On Fri, 19 Jun 2026 06:47:10 +0000 Linden Beaumont via ffmpeg-user <[email protected]> wrote: > Hello, > > I work for Ideagen and my teams wants to use FFmpeg. Our company policy > is to know a bit about applications before allowing employees to > install them. As such I have a few questions (below). Is there a place > on your website where there is an answer to them all? Or would you be > able to take a few minutes to answer them? > > Many thanks, > > Linden > > > Administrative Privileges > We expect applications to run on our end-user compute devices without > administrative privileges. Questions: > > * Does your application require administrative privileges to run? > * If yes, please explain why and what specific privileges are > required > * Are there any workarounds to run without administrative > privileges? Only to install it into the main directories on the machine. After that, it runs without any privileges unless you use it to serve videos in which case it needs to be able to access the relevant port(s). If you had tried ffmpeg on a test VM/machine you'd quickly figure this out. It's free, both as in beer and as in freedom, so it's weird you didn't try it. > Installation and Deployment > We install applications on our endpoints via Microsoft Intune. > For Windows applications, we require apps that can be deployed via: > > * MSI installer > * Microsoft Store (via Microsoft Intune) > * WinGet package manager > > For macOS applications, we require apps that can be deployed via: > > * DMG or PKG installers (via Microsoft Intune) > > For mobile apps (iOS/Android), we require: > > * Apps that can be secured with Microsoft Intune App Protection > Policy > * Apps that support Azure AD Conditional Access Policy > > Questions: > > * Have you verified that your application can be installed via > Microsoft Intune? > * What installation method(s) does your application support? > * Are silent installation switches available? > * Can installation be customized or pre-configured? A quick look at the docs on installation would have answered all of your questions. Why don't you RTFM? > Authentication and Identity > Authentication Methods: > How does your application authenticate users: > > * Modern authentication with Entra ID (OAuth 2.0, OpenID Connect) > * Windows Integrated Authentication > * Certificate-based authentication > * Biometric authentication (Windows Hello, Touch ID, Face ID) > * Other (please specify) > > Entra ID Integration: > > * Does the application support Entra ID Conditional Access policies? > * Does the application support device-based Conditional Access > (compliant device requirements)? > * Can the application enforce multi-factor authentication through > Entra ID? > * Does the application support seamless single sign-on (SSO)? > > Device Identity and Trust: > > * Does the application verify device identity (Entra ID joined, > Hybrid joined, registered)? > * Can the application be restricted to corporate-managed devices > only? > * Does the application support Intune App Protection Policies for > data protection? > > Session and Token Management: > > * How long do authentication sessions persist? > * Does the application support token refresh without user > interaction? > * Can we configure session timeout policies? > * Does the application properly clear credentials on sign-out? > > Offline Authentication: > > * Can users authenticate when offline? > * How are cached credentials handled? > * What is the offline access duration before re-authentication is > required? Again, and this is really obvious, there is no authentication at all in ffmpeg. Reading the man page or any of the helpful responses to questions on the net about ffmpeg should make that very obvious. > Network Requirements > Connectivity: > > * What outbound network connectivity is required for the > application to function? > * What ports and protocols are required? > * What are the destination IP ranges or FQDNs that need to be > allowed? > * Do you support IPv6? If you don't use ffmpeg's server, then you don't need net access. Again, reading the docs would have answered this in short order as the man page describes, how ffmpeg converts video, audio, subtitles, and pictures. > Dependencies: > > * Does the application require internet access for licensing > validation? > * Does the application require internet access for updates? > * Does the application send telemetry or diagnostic data? > * Can the application function offline or with limited connectivity? Again, is there any mention in the docs of how ffmpeg uses the internet for any of the above? No, because it doesn't. Even if you thought the question was missing from the man page, FAQ, etc., setting up a test VM/machine would make this obvious in short order. > Licensing and Activation > License Management: > > * How is the application licensed (per-user, per-device, > concurrent, subscription)? > * How are licenses assigned to users or devices? > * Can licenses be managed centrally (e.g., through a license server > or management portal)? It's license file is provided for you and your lawyers reading pleasure. As should be obvious from reading the license file, there is no registration or anything similar. > Activation and Registration: > > * What activation method does the application use: > * User-based activation (tied to Entra ID/user credentials) > * Device-based activation (tied to device identity) > * License key or activation code > * License file deployment > * Volume licensing/KMS activation > * Other (please specify) Other: We don't register. > Deployment Considerations: > > * Can licensing be pre-configured during Intune deployment? > * Does the application support silent activation without user > interaction? > * Can license keys or files be deployed via Intune configuration > policies? > * Is online activation required, or can devices be activated > offline? No to all the above as per the ffmpeg licensing file. > License Validation: > > * How frequently does the application validate its license? > * What happens if license validation fails (grace period, offline > mode, application locks)? > * Does license validation require internet connectivity? > * What network endpoints are used for license validation? > > License Portability: > > * Can users roam between devices with their license? > * How is license deactivation/reactivation handled when replacing > devices? > * Are there limits on license transfers or device changes? Again, why didn't you just read the license file? In the worst case scenario, licensing wise, you'd not be able to support the copyright-ed encoding formats. > Update Management > > * How are application updates delivered? By your IT department. > * Can updates be managed centrally via Intune? If your IT department adds support, yes. > * What is the frequency of updates? It depends on how much spare time the devs have to develop ffmpeg. > * Are updates mandatory or optional? It depends on your requirements for ffmpeg's functionality and buggyiness. If you want the latest and greatest features and bug fixes, then your IT department will have to make it mandatory. > * Is there a notification mechanism for available updates? ffmpeg-announce .... how did you miss that? You obviously found the user mailing list. > Implementation and Rollout > Please provide: > > * Packaging and deployment guide for Intune Again, this has yet to be developed. You'll need to have your company either fork ffmpeg or help develop it. > * Detailed implementation timescales for pilot and production > rollout Whatever your IT department says. ffmpeg places no requirements nor recommendations on the above. > * Resources required from Ideagen for testing and deployment None. > * User acceptance testing requirements Whatever your IT department says. > * Training requirements for end users Read the docs for a change!?! > * Support model during and after rollout If you want paid support, you'll have to reach out to the devs and ask if anyone is interested in working for your company on ffmpeg. > * Known compatibility issues with enterprise security tools > (antivirus, DLP, etc.) It depends on what tools you use and how they're setup. Ordinarily, they wouldn't complain, but if you've actually researched antivirus SW, MS defender, etc., you'll quickly notice that not only do they have problems with normal SW on occasion, but they also have huge vulnerabilities found in them from time-to-time, and they fail to detect known computer viruses. But then, you did ask all these enterprise companies that provide your anti-virus SW about such things, right? ;) > > > Linden Beaumont > Data Analyst and Developer > +44 1629 699 100 > LinkedIn > https://ideagen.ai/<https://ideagen.ai/> > > > Ideagen acknowledges the Traditional Owners and Custodians of Country > throughout Australia. We recognise their enduring connection to the > lands, the waterways, and the skies. We acknowledge the Gadigal people, > on whose lands our head office is located, as well as all other First > Nation Countries we operate across. We pay our respects to Elders past, > present and to all Aboriginal and Torres Strait Islander peoples > > This email has been sent from a PC belonging to Ideagen. Its contents > are confidential to the sender and the intended recipient. If you > receive it in error, please tell us by return and then delete it from > your system; you may not rely on its contents nor copy or disclose it > to anyone. Opinions, conclusions and statements of intent in this email > are those of the sender and will not bind Ideagen unless confirmed by > an authorised representative independently of this message. We do not > accept responsibility for viruses; you must scan for these. Please note > that emails sent to and from Ideagen are routinely monitored for > record-keeping and quality control, to ensure regulatory compliance and > to prevent viruses and unauthorised use of our computer systems. > Ideagen is committed to the environment. Please think before you print. > Ideagen, registered in England No. 2805019. Registered office: One Mere > Way, Ruddington Fields Business Park, Ruddington, Nottinghamshire, NG11 > 6JS. This is laughable. It's totally unenforceable on a public mailing list. David _______________________________________________ ffmpeg-user mailing list -- [email protected] To unsubscribe send an email to [email protected] _______________________________________________ ffmpeg-user mailing list -- [email protected] To unsubscribe send an email to [email protected]
