On-Demand Privileges Manager™ for Windows | Products

We have thousands of privileged accounts managed by CyberArk. Never in our wildest dreams would we have attempted the application integration, as well as the Windows local system administrators and some of the Windows services accounts that we're managing this way. The new approach really improves our ability to manage all access to privileged accounts.

Mike Brannon
Senor Manager of Information Systems
National Gypsum

Mitigate 90% of Windows vulnerabilities when running without admin rights

CyberArk’s On-Demand Privileges Manager for Windows™ (OPM) empowers users to perform tasks that otherwise require administrative rights in a controlled and fully audited manner. 

CyberArk’s On-Demand Privileges Manager™ for Windows* dramatically reduces the usage of privileged rights within an enterprise and enforces 'least privilege' policies for administrative rights on desktops and servers. This leads to better productivity, improved network security, and a reduced total cost of ownership.

Looking to control the unnecessary admin rights business users have on their Windows desktops? Want to enhance security by pre-defining the applications users can access across the enterprise, even if these do not require admin rights, while restricting access to others?

CyberArk’s On-Demand Privileges Manager for Windows™ empowers users to perform tasks that otherwise require administrative rights in a controlled and fully audited manner. By defining the necessary policies for business users to perform their daily tasks, you are no longer jeopardizing security by giving them too strong privileges or limiting them by not giving them any privileges at all.

Key Benefits:

  • 90% of Windows vulnerabilities are mitigated when running without admin rights resulting in less malware attacks.
  • Users can independently perform daily tasks, resulting in fewer helpdesk calls and reducing desktop management costs by 20%, according to Gartner.
  • Control application accessibility across the enterprise so that only trusted applications can be run/installed while blocking others.
  • Enable Windows server administrators to work under least privilege with an audit trail of privilege operations.

*Delivered by CyberArk, based on Avecto Software

Features & Benefits