Privilege Manager

Unlock the low-cost solution to elevating user rights

Now you can grant user accounts the least privileges necessary according to best practices, yet elevate specific applications and ActiveX controls as needed.  Set elevated execution privileges for just those applications, features, and controls you choose.

Elevate applications, Windows process and Active X controls

Grant users permission to install software, make desktop changes, and install Active X controls that you deem secure.

Digital certificate verification and support

Deploy custom or pre-defined elevation rules by leveraging Group Policy Objects.  Digital certificate support provides additional security for file elevation rules.  Automatically elevate all of the applications from a specific publisher.  That way, anything signed with that certificate will be elevated.  (e.g.  all Microsoft or Adobe programs).

Target rules specific to a user, computer, group, platform and organisation

Our Patented Validation Logic technology can target access rights to a specific user, user group, organisational unit, operating system, computer group, office or application.

Easily report on elevated privileges

Use Privilege Authority’s single-click reports to audit privilege activities across the domain.  These reports help organisations comply with internal policies and external mandates like USGCB/FDCC, PCI, SOX and HIPAA.  Single-click reports also allow organisations to manage privilege elevation policies with fewer resources.

Community Rules Exchange and technical support

Maximise your investment by sharing rules through the Rules Exchange, and tips among the Admin community at our Privilege Authority forum.  Also get a full year of support by phone, email, and web.

Elevate specific applications

Many applications require administrative permissions to run properly, either because they’re accessing admin functions or because they weren’t written with limited privileges in mind.  Privilege Authority allows you to create rules to elevate those applications to run with any of the elevated privileges you specify.  Optionally elevate automatically any child processes created by that application.

Elevate Windows processes

The Windows security model means that often limited privilege users can’t do even basic things like change the time or time zone on their computer.  This leads to running most travelling users as local admin.  With Privilege Authority, you can elevate the specific Windows processes you need, without running those users as local admin.

Elevate all files in a folder

Many applications can involve several exe files, making it hard to know how to pinpoint the right one.  With Privilege Authority, you can elevate every file in a specific folder, including subfolders.  This ensures that every feature of the application will run properly, even if that feature is in a different exe file.

Elevate Active X controls

Unfortunately, Internet Explorer security means that allowing Active X controls is an all or none proposition.  If you allow them because of essential controls, like Flash, you are also allowing them for any control a user may wish to install.  This reduces system stability and increases help desk calls.  With Privilege Authority, you can disallow Active X controls in IE, but elevate approved controls by specifying their URL.

Elevate application installers

One downside to running users under limited privileges is that installing even approved applications requires the help of an admin.  With Privilege Authority you can run approved installers (setup.exe and setup.msi files) under elevated credentials.

Verify approved installers

When you elevate an installer, you can have Privilege Authority create a secure SHA-1 hash of the file.  This digital “fingerprint” ensures that only the approved installer will run with elevated privileges and that users can’t bypass security by renaming other files to get them to run.

Verify files with digital certificates

You can be sure that only the files you want to elevate are being approved by specifying that file’s digital certificate when you create the rule.  Then, when the application launches, Privilege Authority will verify the digital certificate before it allows the program to run.

Elevate applications with a publisher’s certificate

It would be much easier to elevate applications if you could just specify a publisher’s certificate when you create a rule.  Now, if you want to automatically elevate all of the applications from a specific publisher, just create a publisher’s certificate rule.  That way anything signed with that certificate will be elevated automatically.

Target rules to workstations or servers

Do you have a rule that you only want to apply on workstation operating systems? Now you can target rules to workstations or certificates with a single checkbox.

Target rules to specific operating systems

To run properly, an application might need admin rights on XP, but not on Windows 7, for example.  Now you can target rules to specific desktop or server operating systems just by checking those operating systems when you create the rule.

Target rules using Validation Logic

ScriptLogic’s patented Validation Logic is a real-time targeting engine.  Using Validation Logic lets you target rules to specific users, user groups, organisational units, computers, computer groups, IP address ranges, or even if specific files or registry keys exist on the target machine.  Boolean logic lets you create very granular targeting for your elevation rules.

Report on usage of privilege elevation policies

Privilege Authority’s centralised reporting enables administrators to generate reports across their entire environment without having to manually pull data from each individual client machine.  With a single click, administrators can report on privilege elevation activities, frequency of privilege usage and policy configurations.  These reports can be filtered or sorted by multiple criteria and exported to HTML, PDF and RTF formats.  For more in-depth information, custom reports can be created using SQL based 3rd party reporting tools.

Access phone, email and web support

Have full access to ScriptLogic’s phone, email and web support, and get program updates as well.

Download rules from the Rules Exchange

Don’t start from scratch.  You can easily download rules created by the Privilege Authority community through the Rules Exchange.  Download the rule, test it, customise it and deploy it all from the Privilege Authority console.

Share rules with the Privilege Authority Community

Create a cool rule? Want the admiration and adoration of your fellow admins? Share your rule on the Rules Exchange for other users to try.  Then the community can rate your rule, comment on it, and generally give you the recognition you deserve.