One Identity
Safeguard Privilege
Manager for Windows
Straightforward and effective Windows privilege management

As your environment grows in number
applications and complexity, the balancing actof privilege access management (PAM) becomesthat much more complicated. Different types
of users need different levels of admin rights,
while more applications add call volume to youroverworked help desk and stretch your security
policies in ways you couldn’t have predicted a
few years ago. And managing traditional privilege
access management platforms can be as muchof a problem as the situation that they aresupposed to alleviate. But this doesn’t have to becomplicated. Learn how One Identity’s Safeguard
Privilege Manager for Windows can simplify
privileged access for Windows endpoints.
One Identity Safeguard Privilege Manager for
Windows helps end users quickly elevate andmanage their own user and administrative rights,
yet maintain a least-privileged, GDPR-compliantenvironment. It includes both prepackaged andcommunity elevation rules for you to address
the most common needs. Applying the elevation
rules is more effective with the integration ofQuest’s patented and powerful Validation Logic
targeting technology. Privilege Manager works
seamlessly with Active Directory and Group Policy
Objects (GPOs). You won’t find an easier or more
affordable way to maintain security while allowing
users more self-service capabilities in a lockeddown PC environment.

Benefits• Self-service – Allow users to quicklyand easily elevate and manage theirown user and administrative rights
while maintaining a least- privilegedenvironment.
• Automation – Avoid the pain ofmanaging each user and desktop
individually by automaticallyelevating permissions with privilege
elevation rules.
• Visibility – Discover applications
that require administrative privileges
and apply predefined privilege
elevation rules.
• Flexibility – Delegate privilege
management responsibilities toOU-level admins in organizations of
all sizes.
• Security – Control user-level access tounwanted or suspect applications.
• Integration – Seamlessly integratewith Active Directory and Group
Policy Objects.

®

Blacklisting — Deny user access to unnecessaryor unwanted applications for increased securityand efficiency.

Use cases
Perform core functions• Manage privileges centrally through anintuitive console• View, select and deploy common, predefinedor custom rules attached to GPOs
• View and assign rules to specific clients,
domains or OUs using Active DirectoryFeatures
Elevation on demand — Leverage myriad
options for end-user admin access to optimize
productivity and security. Options types
include Instant Elevation, Self-service Elevation,
Requested Elevation, Temporary Session Elevation
and No Elevation.
Validation Logic — Use our Validation Logic
technology to target access rights to any
combination of users, user groups, platforms
or applications.
Digital certificate verification and support —Automatically elevate all applications from aspecific publisher so that anything signed withthat publisher’s certificate will be elevated.

Import rules from a Rules Exchange
Apply rules developed by other users foractions such as:• Add a network printer• Run iTunes installer as administrator• Change time zone or date/time from taskbar• Change system date and time
• Allow Java Runtime updater to run asadministrator• Allow Adobe Reader updater to run asadministrator

Targeting for a user, computer, group, platformand organization — Use our Validation Logic
technology to target access rights to any
combination of users, user group, organizational
unit (OU), OS, computer group, office orapplications.
Reporting — Stay apprised of what’s happening
on your Windows desktops with reports thatprovide a quick and simple status of Elevation
Activity, Blacklist Activity, Rules Deployment,
Instant Elevation, Temporary-Session Elevation
Requests and Rule Details reports.
Community Rules Exchange and technicalsupport — Maximize your investment by using oradding to the more than 100 pre-existing rules inthe Community Rules Exchange.

Remove local admin rights and give users with elevatedexecution privileges.

2®

Create custom rules

About One Identity• Assign to an application publisher’s certificate
for one application or a brand (for example,Adobe, Microsoft)

One Identity delivers unified identity security
solutions that help customers strengthen theiroverall cybersecurity posture and protect
the people, applications and data essential
to business. Our Unified Identity Security
Platform brings together best-in-class Identity
Governance and Administration (IGA), Identityand Access Management (IAM), Privileged
Access Management (PAM) and Active DirectoryManagement and Security (ADMS) capabilities toenable organizations to shift from a fragmented
to a holistic approach to identity security. One
Identity is trusted and proven on a global scale –managing more than 250 million identities for morethan 5,000 organizations worldwide. For more
information, visit www.oneidentity.com.

• Assign to a digital or software publisher’s
certificate for one application or a brand (forexample, Adobe, Microsoft)• Assign to the path of an executable program• Assign to a folder path and apply to allprocesses run from the path
• Assign to an ActiveX object with a URLSYSTEM REQUIREMENTS
For a detailed and current list of system
requirements, please visit https://www.oneidentity.
com/products/privilege-manager-for-windows/© 2022 One Identity LLC ALL RIGHTS RESERVED. One Identity, and the One Identity logo are trademarks and registeredtrademarks of One Identity LLC in the U.S.A. and other countries. For a complete list of One Identity trademarks, please
visit our website at www.oneidentity.com/legal. All other trademarks, servicemarks, registered trademarks, and registeredservicemarks are the property of their respective owners. Datasheet-KACEPrivilegeManagerRebrand-KA-74134®