Chat now with support
Chat with Support

Safeguard Privilege Manager for Windows 4.7.1 - Administration Guide

TitlePageProxy Copyright Table of Contents About this guide What is Safeguard Privilege Manager for Windows? Installing Safeguard Privilege Manager for Windows Configuring Client data collection Configuring Instant Elevation Configuring Self-Service Elevation Configuring Temporary Session Elevation Configuring privileged application discovery Deploying rules Removing local admin rights Reporting Client-side UI customization Using Microsoft tools Maintaining a least privileged use environment Database Planning Product Improvement Program About us

Maintaining a least privileged use environment

Detailed information about this topic

Maintain a least privileged use environment by processing Self-Service Elevation requests, using the Console Email Configuration screen, and using group policy settings.

Processing Self-Service Elevation Requests

Detailed information about this topic

Monitor and process Self-Service requests from users using Self-Service Notifications and the Self-Service Elevation Requests screen under the Discovery & Remediation tab. You can approve or deny requests for access to run privileged applications. If approved, an Elevation rule is automatically generated for each request. For more information, see Using Self-Service Notifications and Using the Self-Service Elevation Request Processing Wizard.

Using the Console Email Configuration screen

If you want Safeguard Privilege Manager for Windows to send an email message to the user after approving or denying their Self-Service Elevation request, configure the settings using the Setup Tasks > Console Email Configuration screen.

To configure the Server to send your Self-Service Elevation request approval or refusal:

  1. Select Console Email Configuration from the Setup Tasks section.

  2. Configure the following fields:

    1. Host Name: Enter the SMTP Server name of the email account from which you are going to send your emails.

    2. SMTP Port: Enter the port number.

    3. SMTP User Name and Password: If necessary, enter the authentication information and check the SSL check box.

    4. From Email: Enter the corresponding email.

  3. Click Send Test Email to send an email to the account specified in the From Email field.

    1. If Safeguard Privilege Manager for Windows succeeds in sending the email, the corresponding message appears.

    2. Log into an email program with the corresponding account and locate the sent email folder, with Privilege Manager Test Email in the subject.

  4. Click OK to save the settings and quit.

Using Group Policy Settings

Use the Group Policy Settings screens to create custom Elevation rules or modify existing ones for your environment. The Advanced Policy Settings tab can also be used to modify the settings for advanced features at the GPO level. These features include Client deployment settings, Client data collection settings, Instant Elevation settings, Self-Service Elevation request settings, and Privileged application discovery settings.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating