Safeguard Privilege Manager for Windows 4.4

Using the Self-Service Elevation Request Settings Wizard Selecting how users access the request form Customizing self-service request email messages Using self-service notifications Using the Self-Service Elevation Request Processing Wizard Using the Console Email Configuration screen

Configuring temporary session elevation Configuring privileged application discovery Deploying rules

Using the Create GPO with Default Rules Wizard Using the Group Policy Management Editor Using the Create Rule Wizard

Getting started Creating file rules Creating folder path rules Creating ActiveX rules Creating rules for Windows Installer files Creating rules for script files Using Active Directory user groups Using validation logic Granting/denying privileges Differentiating security levels

Managing rules Testing rules

Removing local admin rights Reporting

Elevation Activity Report Blacklist Activity Report Rule Deployment Report Instant Elevation Report Temporary Session Elevation Request Report Temporary Session Elevation Requests Report Rule Details Report Advanced Policy Settings Report Generating and using reports Using the Applied Filters Wizard Using the Scheduled Reports Details Wizard Using the Resultant Set of Policy Wizard

Client-side UI Customization Using Microsoft tools Maintaining a least privileged use environment Database Planning Product Improvement Program

Configuring access to ports, websites, and processes

Your firewall must allow the Privilege Manager Console to access the following domains on ports 80 (non-SSL) and 443 (SSL). In addition to those ports, the Privilege Manager uses a configurable port for the data collection service (8003 by default), to recieve information from managed target devices.

Domain	Used for
download.microsoft.com	Microsoft updates
webservices.scriptlogic.com	Privilege Manager web server
support.quest.com	Quest Support Portal
dams-service.kace.com	Data collection

The following features and processes must be allowed through the firewall on target devices:

Discovering users with local administrative rights:
- Windows Management Instrumentation (WMI)
- Distributed Component Object Model (DCOM)
- File and Printer Sharing
- Remote Administration
Testing rules:
- Windows Management Instrumentation (WMI): dllhost.exe
- Host process for Windows services: svchost.exe for 32-bit OS and %SystemRoot%\SysWOW64\svchost.exe for 64-bit OS

Safeguard Privilege Manager for Windows 4.4 - Administrator Guide

Configuring access to ports, websites, and processes