This document summarizes a presentation about a privilege management solution called Privilege Guard. It discusses how least privilege access reduces risks and costs by standardizing the desktop environment. It outlines challenges like users having admin rights and high support costs. Privilege Guard allows assigning privileges based on user roles to control unauthorized software and central management. Benefits include on-demand access, auditing, and broad application support. The architecture provides policy lifecycles and event centralization. Examples are given of deploying Privilege Guard locally and blocking or allowing applications.

1. Privilege Management Solution
Least Privilege = Least Risk = Least Cost
Presenter:
Syed Sajjad Jaffer Rizvi
IS-Analyst-Network Monitoring, Security & Control
MS-Information Technology

2. Agenda
 Privilege Management
 Challenges
 Privilege Guard Solution
 Privilege Guard Benefits
 Privilege Guard Architecture
 Market Experience

3. Why Privilege Management ?
 Enables a standardized, compliant desktop for all users
 Lower cost through:-
 Fewer help desk calls
 Stream-lined management of software
 Simplified management of privilege requests
 User satisfaction improvements
 Improved security, auditing and reporting

4. Challenge
Standard Users
ADMIN RIGHTS
Admin Task
Software Installation
• High Support Cost
• High Security Risks
• Compliance Issue
Problem Application
Standard Applications

5. Standard Users
Standard User Rights
Standard Application
• High Support Cost
• Less productive Users
• Poor User experience
Administrator
Grant
permission
Contd…

6. Controls
 Inventory of Authorized and Unauthorized Software
 Controlled Use of Administrative Privileges
 Maintenance, Monitoring, and Analysis of Audit Logs
 Account Monitoring and Control
 Controlled Access Based on the Need to Know
 Limitation and Control of Services
 Application Software Security
 Disk Quotas
 Power management
 System restore and backup
 Various Windows components
 Environment variables
 File and folder management
 Registry keys and values
 Shares
 Shortcuts
 Drive mappings etc..

7. PRIVILEGE GUARD
Windows Privilege Management Solution

8.  Deploy all users as standard users
 Assign privilege to individual applications based on user roles
and needs
 Prevent the execution of unauthorized applications
 Centrally managed through Active Directory Group Policy
 Detailed auditing and application reporting
The Privilege Guard Solution

9. Privilege Guard Benefit
 On-demand access to privileges
 Targeted assignment of privileges
 Broad application support
 Patent URL Control
 Simple to Use and Manage

10. Policy Process Lifecycle

11. Privilege Guard Architecture

12. Event Centralization Approach

13. Reasons To choose Avecto
1. Helps achieve desktop compliance (Sarbanes – Oxley, PCI
Security, HIPAA, USGCB)
2. Works seamlessly with User Account Control (UAC) and
eliminates or replaces inappropriate UAC prompts
3. Most integrates and automated solution
4. Easy to do business with by backend channel relationship
5. Easily scales and deployment with security policies

14. Market Experience

15. Demo
 Privilege Guard Management Console
 Privilege Guard Client
 Windows 7
 Working on Local Group Policy
 Use Cases
 Blocking Application
 Allow Shell rule for Privilege User
 Elevation prompt with Authentication for Monitoring

16. Thank You