BeyondTrust Endpoint Privilege Management for the win!
Use Cases and Deployment Scope
It allows us to not make users local administrators on their machines while not impacting their ability to install legitimate business use software.
Pros
- Elevates installs when allowed
- Allows administrators to elevate non policy items
- Allows us to not make end users local administrators on their machines
Cons
- Maybe some minor UI changes
Return on Investment
- Adds another layer to our security model
- Makes cyber insurance happy
Usability
Alternatives Considered
CyberArk Privileged Access Management
Other Software Used
BeyondTrust Privileged Remote Access, BeyondTrust Remote Support, PDQ Deploy & Inventory