Many users need access to admin rights to do their work, for example software developers managing Visual Studio plug-ins or configuring tools such as Docker or Windows Services. But in many cases, they’re not needed most of the time. The proliferation of administrator accounts on end-user’s workstations and laptops, or end-user accounts that have administrator rights, is a major security risk as these accounts can be used by attackers to breach cyber defences. Removing these rights is a common goal, but usually means an increased load for the IT Help Desk dealing with requests to install software or make configuration changes.

EPM lets IT create policies so that users can elevate the permissions for approved applications rather than letting users have standing access to administrator privileges. Sometimes, it is necessary for senior admins to run their sessions with elevated privileged which is also supported by EPM and EPM can even be used when end-users are not connected to the corporate network.

To reduce the effort in creating approved application policies, EPM runs in “learning mode” to identify which applications are run with elevated privileges. IT reviews the list and creates policies for approved applications. Users can continue using their apps as administrators even once more enforcement is enabled without having to contact the IT help desk.

To find out more about Osirium EPM, please visit https://www.osirium.com/epm. EPM is a part of Osirium Privileged Access Security that also includes Osirium PAM (https://osirium.com/pam) for privileged access management, and Osirium Privileged Process Automation (PPA) (https://www.osirium.com/ppa) for secure automation and delegation of IT and business processes.

Benefits:

• Reduce risk by elevating privileges for approved applications
• Simple management by learning which applications are needed before enforcing rules
• Familiar interface for users used to being able to run apps as administrator