Viewfinity Privilege Management Version 3.5, launched today, meets multiple business needs of a Least Privileges environment through a variety of “must have” capabilities including:

• Granular and flexible management of locked down environments
• Elevation of both time-based and permanent privileges for workstations and users

Many organizations look at the migration to Windows 7 as an opportune time to re-evaluate polices associated with granting local administrator rights to users on Windows system.  There are a number of advantages when end users do not have local administrative rights on their Windows desktops.  These include:

-         Less chance for malware to successfully attack the system.   When the end user doesn’t have local administrator rights, the malware that tries to exploit vulnerabilities in software such as media players, mail clients, and internet browsers is much less likely to succeed.   A locked down desktop doesn’t eliminate the need for firewall, AV, and other security software, however it certainly does provide another layer of defense against malware.

-         Reduce chance for the end user to make unauthorized changes to the system.   When users are not able to make unauthorized changes to their system there is less chance for something to break that will lead to a support call from the user.   The more changes that are made to a system the more chance that there will be system or application errors introduced.  Locking down the desktop results in a more stable and predictable computing environment for the end users.

-         Better control on which applications are installed and used on the system.   When end users do not have local administrator rights there are many applications that they can no longer install.   This helps organizations better ensure compliance with software license counts.  Controlling which applications are installed and run on the desktop also limits the chances for application incompatibility issues.

-         Fewer support calls to the IT helpdesk.   When end users are running in an environment that is more stable from a perspective of system changes and applications that are installed, there are problems that the end user encounters.  This results in fewer calls to the IT helpdesk.   

11 tools for Windows 7 Migrations – Part 10 – Viewfinity User Migration
By Jon Brodkin, Network World, 9/27/2010

These software tools make upgrading to Microsoft's new operating system a lot easier

Product name: Viewfinity User Migration
Manufacturer: Viewfinity
Price: $10 to $25 per desktop

Key features: Viewfinity User Migration is wizard-based software that works with Microsoft’s User State Migration Tool “and adds out-of-the-box automation for multiple-user migration, all from a centralized status and monitoring console,” allowing automatic movement of settings and user data without the need for custom scripting.

http://www.networkworld.com/slideshows/2010/092710-windows-7-migration-tools.html#slide11

As the feature sets of PC lifecycle management (PCLM) suites have increased, so has the complexity of their software. Organizations that don't allocate enough effort to properly manage the PCLM infrastructure are often unable to provide the desired level of service to their users.

For this and many other reasons, cloud-based solutions are emerging for a variety of systems management functions. Just as some companies are well-suited for cloud-based CRM, some companies are more well-suited than others for cloud-based PCLM. Is your company one of them? Dwain Kinghorn, Partner at SageCreek Partners and member of the Viewfinity Board, addresses this issue in greater detail on ebizQ: http://bit.ly/9acbxS.

You can download Dwain’s complete white paper from Viewfinity here: http://bit.ly/9HPNoh

Managing desktops and laptops in a distributed environment is a top challenge for IT departments.  Current industry research shows that the most urgent and pressing issues are clear: 

• Providing better support and management for your mobile workforce
• Securing your environment through desktop lockdown without simply causing a shift in the type of help desk calls
• Deploying software versions and patch updates easily and with extended reach to mobile workers
• Resolving help desk calls faster

Yet, many solutions that exist on the market today to help alleviate these issues become a burden themselves.  With some legacy systems, in 50% of the implementations, the time to roll the system out takes over six months.  And for every 5,000 desktops an organization must manage, they must have at least one full-time employee on staff to simple tend to the administration of the systems management servers. 

We'd like to hear from you - what are some of the  systems management challenges you are dealing with in your organization?  Are they the same issues as noted above, or do you have an entirely different set of challenges?

There is a fair amount of pressure to resolve desktop and laptop problems instantly, over the phone, as the end user waits anxiously on the other end. For example, I got a call from my boss, who was at the airport having problems trying to run Outlook. Outlook was taking a very long time to start and when it finally started, he got a message related to a corrupted file. I launched into my standard troubleshooting methodology:

1. Information Gathering — What changes were made to the computer recently? What new applications have been installed? When was the last time the application worked properly? Usually I get mixed responses, with more details coming from technical users and less from business users. Most end users won't always "recall" exactly what they did.
2. Error Analyzing — Use typical tools including application event log, log files, user groups and application knowledge bases.
3. Invoke Remote Terminal — Establish remote control session with problematic PC. Try to recreate the problem and then take corrective action.
4. Execute Fix — This depends on what information is available from steps 1-3. In some cases the problem can be fixed by applying the latest patch, modifying the registry or other settings. Sometimes it's faster to just reinstall the application, although all user settings need to be recorded and reset (location of all PST data files, account settings such as email signature, etc.).

Viewfinity offers a feature, Activity Recording, that shows me, step by step, exactly what events were executed on the PC. I then simply undo the event that caused the problem. How much time would be saved and aggravation avoided in a day? A month? How much in a year?!