Migrating to Windows 7?
Thinking about Locking Down Your Desktops?
Most IT professionals are looking to take advantage of the Windows 7 desktop refresh as an
opportunity to move to a least privileges environment to secure and gain better control of its PCs.
With this change, however, legacy applications and routine Windows desktops tasks that require
administrative rights will need to be considered. Rather than locking down 90% of desktops and
leaving the remaining 10% unprotected because these end users need administrative rights to perform their job,
IT professionals can use Viewfinity Privilege Management to elevate privileges as needed.
Viewfinity Privilege Management secures your
desktop and server environment without affecting the end user’s day-to-day tasks. Read our white paper,
Windows 7 Desktop Lockdown with Privilege Management, for best practice approaches on this topic.
You can also download TechTarget's FAQ guide, "Windows 7 migrations provide the ideal time to lock down endpoints".
Elevate administrative rights through granular level control for:
- Applications requiring administrative rights to execute
- Active X installations
- Windows Administrative functions (updating the system clock, disk defragmentation, etc.)
- Application Blocking/Whitelisting
Supports your Mobile Workforce - does not require PCs to be part of the Active Directory domain or to be directly connected to the corporate network to enforce policies
Validates Compliance Enforcement - audit trail reporting provides confirmation that a policy has been delivered and activated on endpoint devices.
Propagates Policies and Elevates Privileges in Real Time - all elevation rules are applied in a real time and do not require users to cycle through the power down or log on process.
Read more about Viewfinity Privilege Management.
OS Image Deployment
As you migrate to Windows 7, be prepared to manage and control administrative privileges by incorporating the Viewfinity Agent as part of the standard operating system image. This way you avoid having to separately deploy the agent after provisioning a new desktop or performing a migration.