Denying and granting access to applications is a vital part of managing a user’s desktop. In today's enterprise, whether a user is on a virtual desktop infrastructure or a physical PC, best practice is to provide them with the minimal privilege they need to be productive. The alternative, giving them full admin rights, allows the user to introduce untrusted and potentially malicious executable code, which in the new world where AV is no longer effective, can destabilize a desktop infrastructure and increase security, risk and compliance exposure.
The problem is, how do you give users the privileges they need to be productive without compromising your environment?
With AppSense Application Manager, IT teams are now fully enabled to enforce corporate policy and licensing requirements. Application entitlements can be defined on a per-user basis based on factors such as location, device name, IP address, firewall settings or even time of day.
With AppSense’s “Trusted Ownership” technology, only applications installed by select administrators are allowed to execute, while user-introduced applications are prevented from launching by default.
IT teams can also control user rights at a much more granular level, making it possible to finally implement “least privilege ”; to eliminate local administrator accounts. IT can specify which applications or tasks users can run with elevated rights. We even offer granular access to system level components such as date & time, network settings and disk formatting tools.
This approach to application access control even has positive licensing implications. Microsoft has recognized Application Manager as a valid method of managing software license enforcement by controlling application usage on a per device basis.
By controlling user privilege at a granular level, you can provide users with the least privilege required to perform their tasks and run their applications, enhancing desktop security and reducing costs. The downside is that your users will occasionally be blocked from performing tasks they deem critical. For that situation, our on-demand change request feature allows you to offer a ‘white glove’ instant response to their requests without impacting your gold image management or the user’s productivity.