Viewfinity logo
Viewfinity Header

Viewfinity Privilege Management

Better Operations Control through Privilege Management

Viewfinity Privilege Management offers IT Administrators a flexible approach for controlling its corporate desktop and laptop environment. With tighter, yet flexible control over the types of applications and privileges your distributed workforce are allowed, the more stable your desktop environment becomes. With this enhanced control over managing your environment, the number of end user support calls to the help desk are reduced.

Try it now for 14 days. In four easy steps and in less than ten minutes, the software can be installed and ready for evaluation.

Managing and Elevating Privileges for Otherwise Locked Down PCs

For organizations who are presently, or who are planning to move to a locked down desktop environment, Viewfinity provides IT administrators with the ability to manage administrative rights by desktop function and application. Our Privilege Management features are integrated with Active Directory allowing IT administrators to set flexible privilege elevation policies for managing administrator rights. Desktops continue to operate within the least privileges mode except for those functions flagged for elevated privileges, such as:

  • Applications: Elevate privileges to administrative rights per application, not per desktop
  • ActiveX: Manage permissions for non-administrative users to install ActiveX applications
  • Printers: Manage permissions for non-administrative users to install printers or perform application installations (optional)
  • Windows Services: Raise privileges to perform specific administrative functions (Device Management, Disk Defragmenter, Manage Services and User Accounts & Shares)
Figure 1

Viewfinity's Elevate Privileges Capabilities

Source: Viewfinity

Viewfinity offers the following Privilege Management features:

Granular Level Control

Through the use of automated policy settings, corporate guidelines can be established and applied for multiple dimensions of configurable, logical groupings: departments, applications, end users, connectivity status, time of day and more. Our automated policies, combined with our Privilege Management features, offer a flexible yet secure approach to ensuring all your laptops and desktops automatically adhere to your corporate regulations. Viewfinity also supports an organization's compliance needs as they relate to FDCC, PCI Compliance and SOX, as well as other desktop-level control procedures.

By leveraging encapsulation, Viewfinity's privilege management features provide application-level control and policy customization on the desktop. Many policies that formerly required complete lockdown can now be enforced without creating excessive limitations on the end user machine.

Figure 2

Example of granular-level elevation control for ActiveX

Source: Viewfinity

Automatic Propagation of Privilege Elevation

All elevation rules are applied in a real time and do not require users to cycle through the log on process. Viewfinity doesn't require desktops to be part of the domain or to be attached to the corporate network in order for privilege elevation policies to be delivered. Reports can be used to monitor the status of polices being applied.

Support for Mobile Workers

Viewfinity does not require laptops or desktops to be part of the Active Directory domain or to be directly connected to the corporate network in order to activate policies that manage administrator privileges. As soon as the PC connects to the internet, Viewfinity delivers the policies and rules established by the IT Administrator. Once delivered, all policies continue to be enforced even while working offline.

Intelligent Reporting through Policy Auditing

To ensure compliance, Viewfinity has built-in audit reporting that provides automated confirmation of delivery and enforcement of policies. Viewfinity provides detailed reporting on all administrator privilege policies, including an audit trail report that provides confirmation that a policy has been delivered and activated on endpoint devices. This includes validation of policy delivery to mobile and remote users, single or group of computers and/or for a specific application.

Figure 3

Viewfinity Policy Audit and Validation Reports

Source: Viewfinity

Policy Management: Automating Compliance Policies

An effective privilege management tool allows policies to be designed and enforced in a way that achieves the objectives of the company without creating unnecessary restrictions on the end user. Viewfinity offers automated policy management that can be customized to meet the needs of any organization. From automated laptop and desktop power down and pre-scheduled logoff policies, to any capabilities that require IT administrators to centrally control the operation of laptops and desktops automatically, our policy management can be flexibly configured to support your environment.

Corporate Compliance Adherence

Management sets forth regulatory and corporate compliance objectives based on the risks and requirements of the business, and IT is responsible for enforcing these objectives through rules and policies. IT is also responsible for ensuring compliance with software licensing agreements, even on machines that are frequently outside of the corporate network. Due to limitations in available compliance tools, enforcement tactics are often overly restrictive at the desktop-level in order to meet all compliance objectives set forth by the company. Viewfinity supports an organization's compliance needs as they relate to FDCC, PCI Compliance, SOX and HIPAA.

Source: Viewfinity