Enforcement of least privilege on endpoints to allow non-administrators to perform certain management tasks |
Elimination of admin rights on user desktops and laptops is a great start to reducing the attack surface of your endpoints. However, this can lead substantial productivity losses and even fail the whole least privilege initiative, because users or helpdesk operators are not able to perform their duties that require certain administrative privileges on endpoints.
Action1 provides a free endpoint least privilege management solution that allows to implement the principle of least privilege and enable separation of duties via desktop management delegation and role-based administration (also known as role-based access control or RBAC).
Action1 allows to grant access to certain users to execute specific tasks, such as the ability to launch predefined applications or scripts, manage users and control some security settings. Such as you can whitelist a number of predetermined PowerShell scripts that require administrative rights to execute, while disallowing execution of all other admin-level scripts. It additionally brings full accountability of all management actions, because Action1 audits execution of all such actions along with the user name and time stamp to help proactively eliminate security threats and ease incident investigations.
Sign-up for Action1 Free Edition to receive real-time alerts and view instant data from your endpoints, such as alert on Least Privilege and Delegated Administration created, deleted or modified or run live or scheduled queries with the ability to export to CSV or Excel. Action1 Endpoint Security Platform is entirely SaaS, with online web interface (no management tools to install) and it has zero cost for basic functionality. Running in the Cloud, Action1 discovers all of your endpoints in seconds and you can query your entire network in plain English.
Endpoint configuration management in the Cloud
Manage endpoint configuration using plain English from the Cloud. Such as type 'Windows services' or 'reboot computer'.
Get results instantly from live systems and run automated actions.
Related Alerts and Reports:
Find more information on Least Privilege and Delegated Administration at Microsoft TechNet.