DATASHEETApplication Control for Windows Servers
Secure Windows Servers with Role-Based User Access

Ivanti® Application Control for Windows Servers lets

Privilege Elevation

you control server access and reduce risk by limiting

Providing full admin rights on a server to users

the administrative rights of users who must log onto
a server to perform specific, job-related tasks. Thisis especially advantageous if the server is multipurpose (for example, SQL and IIS) with multiple
admin users, or if the organization must comply withregulations that dictate computing infrastructure
security practice.

untrained as IT system administrators creates multiple
risks, like starting or stopping services and installing orremoving software in error. This can increase security
risk and manageability costs, decrease productivity,
create legal and liability issues, and make it difficult toachieve compliance. By removing full admin rights fromusers and providing them with elevated privileges forjust the tasks they need for their job, you can simplify

With Application Control for Windows Servers, IT canlimit administrative privilege to specific consoles,
applications, services and commands.

Limit users to performing specifictasks only when logging onto servers

endpoint security, reduce support calls, and lower TCO.

Using Ivanti Application Control for Windows Servers,Ivanti Application Control for Windows Servers allows

Additionally, IT can check file metadata – including

IT can limit administrative privilege to specificauthorized access to server applications, services, andvendor, certificate, publisher, version, and more – toconsoles, applications, services, and commands,components, based on application whitelisting. Using

ensure applications, components, and scripts arereducing the risk of admins introducing malware,

Application Control, IT can assign an SHA-1, SHA-256,

original and are preventing modified or spoofed

halting essential services, or affecting performanceor ADLER32 digital signature to ensure file integrity.

applications from executing.

of mission-critical services.

ivanti.com

Application Control

System Controls Protection

Application Network Access Control

Apply System Controls to elevate or restrict accessThis capability prevents network access without

to specific services, prevent removal or modification

employing complex controls like routers, switches,of server applications and processes, and preventand firewalls. It can eliminate security vulnerabilities

clearing of named event logs.

caused by IT admins who gain access to secured

ivanti.com

data center or network resources from specific

1 800 982 2130

servers.

sales@ivanti.com

Application Denied Listing
Quickly implement denied lists to control admin
access to critical applications and server operating

Contextual Control

system components. Denied Lists prevent key

Application Control employs extensive condition

server resources from being modified and increasechecking to manage server resource access based

server protection within the data center.

on the context of the logged-on user. You can assess

Command Line Matching
With Application Control for Windows Servers, you
can apply security policies to launching applications
and their associated command line arguments.
For applications like Windows PowerShell in server
environments, you can limit admin access tolaunching specific files and scripts or running theapplication only under certain conditions.

Copyright © 2021, Ivanti. All rights reserved. IVI-2651 12/21 MM/FG

context based on conditions that include, but are
not limited to: user, group or OU membership, device
name, device IP or MAC address, connecting client
info, operating system, site membership, date andtime, or even custom rules created using PowerShell,
VBscript, or Jscript. In addition, fully integrated
support for Microsoft RDSH, Citrix XenApp, Citrix,
XenServer, and VMware ensures security policies canalso be applied to remote sessions.