1. The Essential Guide to Least Privilege: A Use Case-Based Approach
This Essential Guide explains which tools administrators and users can utilize via Windows out-of-the-box, from XP to Windows 7, and GPO, to manage privileges for standard users. It also explains how third-party applications can complement the least-privilege controls embedded in Windows to further lock down access to the Windows platform and its resources. Four years after Microsoft introduced User Account Control (UAC) in Windows Vista, most organizations today continue to use Windows with administrator accounts instead of a least privileged configuration. Sometimes it's due to legacy client operating systems that don't allow enough flexibility. But sometimes it's because out-of-box controls aren't flexible enough to meet a company's application requirements. You have many different ways to better manage least privilege in your Windows infrastructure; be sure to select the solution most targeted for your specific needs.
PDF, 7 MB

2. Viewfinity Privilege Management Mitigates MS Patch Vulnerabilities
As part of the process of releasing patches, Microsoft provides an executive summary to provide details about each security bulletin. In this overview, Microsoft highlights those vulnerabilities that are mitigated when local logged on users do not have administrative rights. A review of all the software updates that Microsoft released in 2010 demonstrates that month after month there are vulnerabilities in Windows, Internet Explorer, and Microsoft Office that are mitigated when the user is not running with administrator privileges. Simply stated, when end users do not have administrator rights, the desktop is less vulnerable to a variety of malware. Desktop lockdown compliments other security measures and provides an additional layer of defense against malware.
PDF, 863 KB

3. Windows 7 Desktop Lockdown with Privilege Management
With the Windows XP sunset date fast approaching, plans for Windows 7 migrations are in full swing. This has prompted most organizations to also re-assess their approach to PC lockdown. With the advanced privilege management capabilities offered by Viewfinity, enterprises have an alternative to the “all or nothing” approach to least privileges – because an “all or nothing” methodology prohibits organizations from meeting compliance, security and desktop operations goals. This white paper discusses how Viewfinity Privilege Management allows IT professionals to reach these objectives, without sacrificing user productivity or increasing support call volume. We offer granular, multi-level user permission control, including support for endpoints that are not part of the Active Directory domain or do not regularly connect to the corporate network.
PDF, 731 KB

4. EMA Research: The Business Case for Striking an Optimal Balance of Endpoint Control
This EMA white paper details the business case for using a privilege management solution to manage least privilege environments. Based upon EMA research, and through interviews conducted with Viewfinity customers, the study provides the business justification for going beyond the “all or nothing approach” to desktop lockdown.
PDF, 189 KB

5. 3 Key Benefits of Desktop Lockdown with Privilege Management
There are a number of advantages when end users do not have local administrative rights on their Windows desktops. Download this white paper and learn more about three of the top benefits that your business can recognize by managing your locked down environment with a privilege management solution.
PDF, 492 KB

6. Best Practices for PC Lockdown and Control Policies
End point lockdown is not a new practice. In general, an environment that is more locked down has less changes and less variation from a known good configuration. Non administrative users are more limited in their ability to install applications, printers and perform desktop functions. This secures the desktop which in turn leaves the company less venerable to malware, virus, etc. Yet a completely locked down environment may result in lowering productivity and creating a shift in the types IT support calls coming into the help desk. Rather than blindly moving forward with an all or nothing lockdown methodology, IT Administrators need a flexible approach for controlling its corporate desktop and laptop environment. With enhanced control over managing your environment, the number of end user support calls to the help desk are reduced, not simply shifted from one type of call to another.
PDF, 162 KB

7. Viewfinity Privilege Management Integration with Microsoft SCCM.
Desktop administrators that are already using SCCM for PC lifecycle management functions are able to leverage their existing infrastructure for privilege management features. Viewfinity Privilege Management provides a number of benefits that allow administrators to better implement least privilege features. Viewfinity uses Microsoft defined methods to integrate privilege management with the SCCM agent and server resulting in a more secure and a better managed endpoint.
Organizations of all sizes have more secure and stable desktops when users do not have local administrative rights on their desktops because lockdown provides an added layer of protection that helps mitigate security risks. Integrating SCCM and Viewfinity Privilege Management helps IT administrators by providing general system management tasks and privilege access activity from one management console.
PDF, 162 KB