Overview

Microsoft’s System Center Configuration Manager (SCCM) is used by many organizations worldwide for centralized PC lifecycle management but SCCM features do not include privilege management. However SCCM does provide mechanisms to add additional data to the SCCM database. Viewfinity Privilege Management uses these mechanisms to store summary privilege management feedback data in the SCCM database.

SCCM provides deployment, inventory, and software management functions. SCCM does not provide process level privilege controls. Viewfinity Privilege Management allows the administrator to create detailed policies that control when and how applications and their features are accessed. The integration allows IT Administrators to monitor the privilege policies in addition to the base configuration management features that are provided in SCCM. Desktop administrators that are already using SCCM for PC lifecycle management functions are able to leverage their existing infrastructure for privilege management features.

Download the software for evaluation and testing in your environment.

Benefits of Integrating SCCM with Viewfinity Privilege Management

Viewfinity Privilege Management provides a number of benefits that allow administrators to better implement least privilege features. Organizations of all sizes have more secure and stable desktops when users do not have local administrative rights on their desktops because lockdown provides an added layer of protection that helps mitigate security risks.

Viewfinity uses Microsoft defined methods to integrate privilege management with the SCCM agent and server resulting in a more secure and a better managed endpoint. Integrating SCCM and Viewfinity Privilege Management helps IT administrators by providing general system management tasks and privilege access activity from one management console.

Download our white paper to learn the details related to the Microsoft SCCM Integration with Viewfinity Privilege Management.

How it Works

Viewfinity integrates directly with SCCM to provide extended visibility into privilege management policy usage status and information regarding privilege requests from end users. This is accomplished through an add-on component which is deployed on the SCCM server. The SCCM agent collects Viewfinity policy events such as policy usage, insufficient privileges to install applications or ActiveX, requests from users to perform Administrative tasks such as disk defragmentation or the ability to change power options, etc. The information that is collected is transferred to the SCCM server through the add-on component. The status of Viewfinity policies and privilege access requests are tracked through the SCCM Console.

These SCCM reporting capabilities are beneficial during audits to track which policies are active, which applications are running with elevated rights, which are blocked, and for applications that users are requesting additional permissions.

Next steps: Download the software for evaluation and testing in your environment.