Documentation

Regulatory Compliance and Least Privilege Security - by Russell Smith MCSE

This whitepaper discusses the concept of least privilege security for personal computers, why it’s needed to meet requirements set out by regulatory bodies and how to overcome problems in its implementation.

Implementing Windows Security With Group Policy – by Derek Melber MCSE, MVP (Group Policy)

This paper shows how Windows Group Policy can be used to secure corporate desktops. It provides a tour of the most important security settings within Group Policy and how to locate and apply these settings. It also introduces a number of Microsoft tools that can be used in conjunction with Group Policy to help secure the desktop. Finally the paper addresses one area that isn’t covered by Group Policy, which is the ability to reduce user privileges and implement least privilege.

An Introduction to Least Privilege

This paper introduces the principle of least privilege, the benefits of following this practice and the barriers to implementation. It then goes on to suggest approaches to adopting a least privilege approach. Finally it gives a brief overview of Privilege Guard, a solution that enables privileges to be assigned to individual applications, providing a practical implementation of least privilege for corporate environments.

Applying the Principle of Least Privilege to Windows 7

This paper introduces the application of least privilege on Windows 7 (and applies equally to Windows Vista). It provides an overview of User Account Control (UAC), its benefits and limitations, and why a policy driven approach is more suitable for corporate environments.

Centralizing Windows Events with Event Forwarding

This document provides guidance on how to centralize Privilege Guard events to a central server using Windows Event Forwarding. Event Forwarding is provided by Windows Remote Management (WinRM) which is Microsoft’s implementation of WS-Management Protocol, a SOAP based, firewall-friendly protocol, which provides a common way for systems to access and exchange management information across an IT infrastructure.

Privilege Guard Datasheet

Privilege Guard Getting Started Guide

Privilege Guard Administration Guide