BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

PowerBroker for Windows – Solution Deployment

Posted October 11, 2012    Morey Haber

PowerBroker for Windows (PBW) is designed to integrate directly into your corporate Active Directory (AD) structure without modifying your existing schema. In the asset labeled “1” below, an administrator simply loads a Group Policy Option (GPO) snap-in onto an asset that uses the Microsoft Management Console (MMC).  The administrator can then create policies and rules that are stored in the AD domain labeled “2”.  An administrator can also access the management console (Retina CS labeled “3”) via a web interface to run reports or create additional rules based on collected events from the environment.

As domain assets log on (servers, workstations, or remote clients labeled “4”) they receive policy from the domain controller that is processed by the PBWagent. This agent is installed on each device and can be distributed through a software delivery solution or even through GPO itself. This enforces privilege identity management rules on the endpoint and sends status events back to Retina CS for additional reporting, trending, and rule creation.

In a traditional deployment, your organization needs to consider deploying the following three components:

  1. PBW Agents on Servers, Desktops, and Remote Clients
  2. PBW GPO Snap-In for Rules on Administrator Workstations
  3. Retina CS Management Console for Reporting and Event Management (optional).

PBW Agents are lightweight MSI installers, under 30MB, that can be pushed down to assets using everything from logon scripts to GPO. The GPO snap-ins should only be deployed where needed for policy creation. And,Retina CS (available soon for PBW) is generally a one-time server installation (software, virtual, or appliance) for management. It can also be deployed as multiple servers in atiered architecture for enterprise clients if needed.  Below is an example of this approach.

For more information on how to take advantage of PowerBroker for Windows and Retina CS within your environment, please click here. BeyondTrust is the thought leader for integrating privilege identity management and vulnerability assessment in a single solution.

Tags:
, , , , , , , ,

Additional articles

ovum-research

New Analyst SWOT Assessment Identifies Key Strengths of PowerBroker

Posted November 24, 2014    Scott Lang

Following on the heels of the Gartner PAM market guide and Frost & Sullivan review of Password Safe comes a new analyst review of our BeyondInsight and PowerBroker platforms, a SWOT assessment of BeyondTrust written by Ovum. Ovum’s honest and thorough review of BeyondTrust indicates that we are delivering, “…an integrated, one-stop approach to PAM….

Tags:
, , ,

Patented Windows privilege management brings you unmatched benefits

Posted November 24, 2014    Scott Lang

We are pleased to announce that BeyondTrust has been granted a new U.S. Patent (No. 8,850,549) for privilege management, validating our approach to helping our customers achieve least privilege in Windows environments. The methods and systems that we employ for controlling access to resources and privileges per process are unique to BeyondTrust PowerBroker for Windows….

Tags:
6

A Quick Look at MS14-068

Posted November 20, 2014    BeyondTrust Research Team

Microsoft recently released an out of band patch for Kerberos.  Taking a look at the Microsoft security bulletin, it seems like there is some kind of issue with Kerberos signatures related to tickets. Further information is available in the Microsoft SRD Blogpost So it looks like there is an issue with PAC signatures.  But what…

Tags:
, , , ,