About this guide
Welcome to the Safeguard Privilege Manager for Windows Quick Start Guide. Safeguard Privilege Manager for Windows lets system administrators grant selected privileges to users so they can update their own PCs, reducing help desk calls while maintaining a secure network. This guide instructs system administrators on how to set up the Safeguard Privilege Manager for Windows Console, Server, and Client. This guide also provides an overview of the key features and wizards of the product.
For more information, refer to these additional resources:
For system administrators
-
Safeguard Privilege Manager for Windows Administration Guide: Learn how to use Safeguard Privilege Manager for Windows. Find in-depth instructions on how to prepare your environment for least privileged use, maintain a least privileged environment, run reports, and interface with Microsoft tools.
-
Safeguard Privilege Manager for Windows Console: Find more information on the Getting Started screen under the Additional Resources tab.
For end users with the Privilege Manager Client service installed on their computers
-
Safeguard Privilege Manager for Windows User Guide: Learn the basics of using Safeguard Privilege Manager for Windows for Windows, including how to use Self-Service Elevation, Instant Elevation, and view rules.
System requirements
Before you begin using Safeguard Privilege Manager for Windows, make sure that you meet the minimum hardware, software, network and permission requirements of the product. For more information, see System Requirements in the Safeguard Privilege Manager for Windows Release Notes.
Components
There are three software components included with Safeguard Privilege Manager for Windows:
Console
The Safeguard Privilege Manager for Windows Console, installed via PAConsole_Pro.msi, is a management application. It is installed on a domain computer (server or workstation) and is used to create and manage rules within the Group Policy. Any user who has permission to edit a GPO can use the Console to set privileges.
Server
The Safeguard Privilege Manager for Windows Server, installed through the Console, is a service which has several functions. It can deploy the Client, collect and report on data, and discover and process applications that require elevated privileges.
Client
The Safeguard Privilege Manager for Windows Client, installed through PAClient.msi, is a service that runs on each client computer. It applies the rules created in the Console by monitoring processes as they are launched on the Client and elevates or lowers the privileges for processes that are configured to be monitored. This is done by injecting an administrative token into the process or revoking it.
Microsoft Active Directory and Group Policy are used to distribute Safeguard Privilege Manager for Windows rules to client computers.
Privilege Manager can modify privileges only for a standard user account, not a guest account. Elevated privileges can be revoked even if the user is a local admin.
Preparing your environment for least privileged use
Preparing your environment for least privileged use
