|
Safeguard Privilege Manager for Windows |
|
Administration Guide |
TitlePageProxy
Copyright
Table of Contents
About this guide
What is Safeguard Privilege Manager for Windows?
Installing Safeguard Privilege Manager for Windows
Installing the Console
Configuring Client data collection
Configuring Instant Elevation
Configuring Self-Service Elevation
Using the Console Windows Installer file
Opening the Console
Applying a license
Viewing GPOs
Selecting target domains
Installing a second Console
Configuring the Server
Using the Server Configuration Wizard
Modifying the Server
Removing the Server
Offline installation of the Server and Data Collection service
Installing the Client
Using the Client Deployment Settings Wizard
Using the Client Windows Installer file
Using the Group Policy Management Console
Upgrading
Uninstalling
Configuring Self-Service Elevation
Troubleshooting
Using the Self-Service Elevation Request Settings Wizard
Selecting how users access the request form
Customizing Self-Service request email messages
Using Self-Service Notifications
Using the Self-Service Elevation Request Processing Wizard
Using the Console Email Configuration screen
Configuring Temporary Session Elevation
Configuring privileged application discovery
Using the Privileged Application Discovery Settings Wizard
Processing discovered privileged applications
Deploying rules
Using the Create GPO with Default Rules Wizard (Privilege Elevation Rules only)
Using the Group Policy Management Editor
Using the Create Rule Wizard
Removing local admin rights
Getting started
Creating file rules
Creating folder path rules
Creating ActiveX rules
Creating rules for Windows Installer files
Creating rules for script files
Using Active Directory user groups (Privilege Elevation Rules only)
Using Validation Logic
Granting or denying privileges (Privilege Elevation Rules only)
Differentiating security levels (Privilege Elevation Rules only)
Managing rules
Testing rules
Using the Active Directory Users and Computers utility
Using the Users with Local Admin Rights screen
Reporting
Elevation Activity Report
Blacklist Activity Report
Rule Deployment Report
Instant Elevation Report
Temporary Session Elevation Request Report
Temporary Session Elevation Usage Report
Rule Details Report
Advanced Policy Settings Report
Generating and using reports
Using the Applied Filters Wizard
Using the Scheduled Reports Details Wizard
Using the Resultant Set of Policy Wizard
Client-side UI customization
Using Microsoft tools
Maintaining a least privileged use environment
Database Planning
Safeguard Privilege Manager for Windows Database Diagram
Safeguard Privilege Manager for Windows Tables
Data Storage Estimates
Database hardware and software requirements
Auto-Growth
How to change auto-growth on SQL Server 2014
Initial database size
How to change the Initial Size on SQL Server 2014
Product Improvement Program
About us
TitlePageProxy
TitlePageProxy
Copyright
Copyright
Copyright 2024 One Identity LLC.
ALL RIGHTS RESERVED.
This guide contains proprietary information protected by copyright. The software described in this guide is furnished under a software license or nondisclosure agreement. This software may be used or copied only in accordance with the terms of the applicable agreement. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording for any purpose other than the purchaser’s personal use without the written permission of One Identity LLC .
The information in this document is provided in connection with One Identity products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of One Identity LLC products. EXCEPT AS SET FORTH IN THE TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, ONE IDENTITY ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL ONE IDENTITY BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF ONE IDENTITY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. One Identity makes no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserves the right to make changes to specifications and product descriptions at any time without notice. One Identity does not make any commitment to update the information contained in this document.
If you have any questions regarding your potential use of this material, contact:
One Identity LLC.
Attn: LEGAL Dept
4 Polaris Way
Aliso Viejo, CA 92656
Refer to our website (http://www.OneIdentity.com) for regional and international office information.
Patents
One Identity is proud of our advanced technology. Patents and pending patents may apply to this product. For the most current information about applicable patents for this product, please visit our website at http://www.OneIdentity.com/legal/patents.aspx.
Trademarks
One Identity and the One Identity logo are trademarks and registered trademarks of One Identity LLC. in the U.S.A. and other countries. For a complete list of One Identity trademarks, please visit our website at www.OneIdentity.com/legal/trademark-information.aspx. All other trademarks are the property of their respective owners.
Legend
|
|
WARNING: A WARNING icon highlights a potential risk of bodily injury or property damage, for which industry-standard safety precautions are advised. This icon is often associated with electrical hazards related to hardware. |
|
|
CAUTION: A CAUTION icon indicates potential damage to hardware or loss of data if instructions are not followed. |
Safeguard Privilege Manager for Windows Administration Guide
Updated - 26 September 2024, 13:36
For the most recent documents and product information, see Online product documentation.
Table of Contents
Table of Contents
Contents
| TitlePageProxy |
| Copyright |
| About this guide |
| What is Safeguard Privilege Manager for Windows? |
| Editions |
| Components |
| Installing Safeguard Privilege Manager for Windows |
| Installing the Console |
| Using the Console Windows Installer file |
| Opening the Console |
| Applying a license |
| Viewing GPOs |
| Selecting target domains |
| Installing a second Console |
| Configuring the Server |
| Using the Server Configuration Wizard |
| Modifying the Server |
| Removing the Server |
| Offline installation of the Server and Data Collection service |
| Installing the Client |
| Using the Client Deployment Settings Wizard |
| Using the Client Windows Installer file |
| Using the Group Policy Management Console |
| Upgrading |
| Uninstalling |
| Configuring Self-Service Elevation |
| Troubleshooting |
| Configuring Client data collection |
| Using the Client Data Collection Settings Wizard |
| Configuring Instant Elevation |
| Using the Instant Elevation Wizard |
| Configuring Self-Service Elevation |
| Using the Self-Service Elevation Request Settings Wizard |
| Selecting how users access the request form |
| Customizing Self-Service request email messages |
| Using Self-Service Notifications |
| Using the Self-Service Elevation Request Processing Wizard |
| Using the Console Email Configuration screen |
| Configuring Temporary Session Elevation |
| Using the Temporary Session Elevation Passcode Manager |
| Configuring privileged application discovery |
| Using the Privileged Application Discovery Settings Wizard |
| Processing discovered privileged applications |
| Using the Generate Rules Wizard |
| Deploying rules |
| Using the Create GPO with Default Rules Wizard (Privilege Elevation Rules only) |
| Using the Group Policy Management Editor |
| Using the Create Rule Wizard |
| Getting started |
| Creating file rules |
| Creating folder path rules |
| Creating ActiveX rules |
| Applying ActiveX rules |
| Creating rules for Windows Installer files |
| Creating rules for script files |
| Using Active Directory user groups (Privilege Elevation Rules only) |
| Using Validation Logic |
| Using standard rules |
| Using Validation Logic rules |
| Granting or denying privileges (Privilege Elevation Rules only) |
| Differentiating security levels (Privilege Elevation Rules only) |
| Managing rules |
| Import/Export Rules |
| Testing rules |
| Removing local admin rights |
| Using the Active Directory Users and Computers utility |
| Using the Users with Local Admin Rights screen |
| Reporting |
| Elevation Activity Report |
| Blacklist Activity Report |
| Rule Deployment Report |
| Instant Elevation Report |
| Temporary Session Elevation Request Report |
| Temporary Session Elevation Usage Report |
| Rule Details Report |
| Advanced Policy Settings Report |
| Generating and using reports |
| Using the Applied Filters Wizard |
| Using the Scheduled Reports Details Wizard |
| Using the Resultant Set of Policy Wizard |
| Client-side UI customization |
| Language translation files |
| Using Microsoft tools |
| Maintaining a least privileged use environment |
| Processing Self-Service Elevation Requests |
| Using the Console Email Configuration screen |
| Using Group Policy Settings |
| Database Planning |
| Safeguard Privilege Manager for Windows Database Diagram |
| Safeguard Privilege Manager for Windows Tables |
| Data Storage Estimates |
| Database hardware and software requirements |
| Auto-Growth |
| How to change auto-growth on SQL Server 2014 |
| Initial database size |
| How to change the Initial Size on SQL Server 2014 |
| Product Improvement Program |
| About us |
| Contacting us |
| Technical support resources |
About this guide
About this guide
The Safeguard Privilege Manager for Windows Administration Guide is intended for system administrators and describes how to use Safeguard Privilege Manager for Windows. The document contains detailed instructions on how to:
-
Prepare your environment for least privileged use.
-
Maintain a least privileged environment.
-
Run reports.
-
Interface with Microsoft tools.
For more information on how to configure and deploy the product, and how to use it by end users, see the following resources.
For system administrators
-
Safeguard Privilege Manager for Windows Quick Start Guide: This document lists the system requirements of the product, and also provides instructions on how to set up the Safeguard Privilege Manager for Windows Console, Server, and Client components. The document also provides an overview of the key product features and the wizards that will help you use them.
-
Safeguard Privilege Manager for Windows Console: To find additional information within the Console, navigate to the Additional Resources > Getting Started tab.
For end users with Safeguard Privilege Manager for Windows Client installed on their computers
-
Safeguard Privilege Manager for Windows User Guide: Learn the basics of using the Safeguard Privilege Manager for Windows Client, including how to use the Self-Service Elevation and Instant Elevation features, and how to view rules.