Security Controls Evaluation Guide

Home 

Why use Privilege Management?

Issue: Organizations that use local administrator accounts for theirs users may need to lock down elements of the desktop, such as the Control Panel component, Add Hardware or Add and Remove Programs\Programs and Features.

Solution:By dynamically dropping the user account from administrator to a standard user for specific controls, the user is now prohibited from accessing the control and executing an unwanted task.

Issue: Some applications require administrator rights because the application itself interacts with certain parts of the desktop operating system or registry. However, the organization does not wish to provide users with full administrator accounts.

Solution: User privileges management can elevate the user rights for the named application to an administrator level, enabling the user to run their application while protecting the desktop.

Issue: Automatic update elements of some applications can require administrator rights to perform the update actions and therefore not function in the context of a standard user.

Solution: User privileges managements can enable the named application to run under the context of an administrator account while all other applications remain in standard user context.

Issue: Mobile users may need to manually change their IP address, configure a wireless network, or change date and time properties, all of which require administrative rights.

Solution:User privileges management can elevate the user rights to administrator level for named tasks, enabling the user to make the changes they require.

Your next step

How to apply Privilege Management rules to your configuration


Was this article useful?