BeyondTrust

Security In Context

BeyondTrust’s blog tackles important issues for your company including network and data security.
Learn more and protect your company!

Reducing Help Desk Costs Is a Least Privilege Benefit

Post by admin December 15, 2010

The problem exists between the keyboard and the chair (PEBKAC).  This is the recurring mantra of most help desk technicians and a leading cause of budget dollars bleeding out of most organizations.  Why, you may ask?  The answer is simple:

  • Users use computers
  • Users are human (usually)
  • Humans make mistakes often: sometimes intentionally, usually accidentally and occasionally indirectly
  • When users have excessive admin rights these mistakes can be very costly

Implementing a privilege identity management solution will effectively limit the potential for impact on these mistakes through a least privilege environment.  One of the most compelling areas will be for the desktop users as there are over 200 documented vulnerabilites in MS Windows. Check out the “3 Ways to Reduce Help Desk Costs” blog for specifics on cost savings, but the intangible benefit that your techs will appreciate the most is the reduction of PEBKAC calls.  With the implementation of a least privilege solution, the user community will only have enough privilege to get their job done but not enough to have a misuse of privilege problem. Now the problem won’t be the user (what lies between the keyboard and the chair), but a genuine technical problem, like installing a print driver.  What price can be put on the sanity of your help desk staff?

Leave a Reply

Additional articles

2

Organizing your PowerBroker Desktops Rules

When tackling a project to remove administrator privileges from users, it is critical to understand what applications and tasks will be impacted. Some things just break or won’t function properly when users are no longer administrators. Of course, PowerBroker Desktops is designed to elevate those apps and tasks that require administrator privileges so that there…

Post by admin October 20, 2012
Tags:
,
img

Don’t say “Lockdown”!

Here at BeyondTrust, we have been fortunate to be able to speak with thousands of security professionals in dozens of industries, and it is astonishing how differently organizations assess risk and approach computer security. Some organizations are very strict about security and are able to completely lock down desktops. Others are significantly more lax about…

Post by admin October 15, 2012
Tags:
, ,
img

PowerBroker for Windows – Solution Deployment

PowerBroker for Windows (PBW) is designed to integrate directly into your corporate Active Directory (AD) structure without modifying your existing schema. In the asset labeled “1” below, an administrator simply loads a Group Policy Option (GPO) snap-in onto an asset that uses the Microsoft Management Console (MMC).  The administrator can then create policies and rules…

Post by Morey Haber October 11, 2012
Tags:
, , , , , , , ,