PowerBroker Desktops Features
With BeyondTrust PowerBroker Desktops, organizations control the execution of applications, software installs, ActiveX controls, and system tasks that require elevated or administrative rights—all while keeping the user locked down and preserving the user’s security context.
PowerBroker Desktops is integrated with Active Directory and applied through Group Policy. Policy is applied by creating rules in the Group Policy Object Editor.
PowerBroker Desktops Allows Standard Users to:
Run any authorized application that requires administrator privileges
- Off-the-shelf
- 3rd Party developed
- In-house developed
- Software from specified publishers with signed digital certificates
Manually change authorized system level configurations
- Local printers
- System time etc.
Install approved ActiveX Controls
- Installing ActiveX controls and other Internet Explorer components
- Named ActiveX controls
- ActiveX controls from specific URLs
- ActiveX controls from wildcard URLs
Install approved applications
- Self-service software installation points (unmanaged software installs)
- Software installation from specified CDs or DVDs
Additional Features & Functionality
- Operates transparently to the end-user without pop-ups or consent dialogues
- Configure rules by targeting applications, computers and users using standard Group Policy conventions and PowerBroker Desktops filters
- Authorize on-demand user initiated elevation, to help manage traveling laptop users, developers, and others that need more flexibility.
- Log application execution information including privileges and permissions, as well as when PowerBroker Desktops rules are executed for auditing
- Manage admin rights on file system browsing within targeted application
- Set Vista and Windows 7 integrity levels for any application, to provide additional protection from potentially damaging system changes
- Supports Windows 2000, XP, Server 2003/2008, Vista, 7, and Windows 64-bit platforms