---
title: "Introduction to EPM Windows"
slug: "epm-windows-introduction-windows"
updated: 2026-08-31T20:51:40Z
published: 2026-08-31T20:51:40Z
canonical: "docs.senhasegura.io/epm-windows-introduction-windows"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.senhasegura.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Introduction to EPM Windows

EPM Windows is a Privilege Elevation and Delegation Management (PEDM) tool for Microsoft Windows.

Our tool is fully integrated with the broader Segura® platform to allow end users to run applications requiring administrative privileges without gaining access to the privileged credential. It also performs routine password rotations with no human intervention required. Administrators can group and audit all user activity for better governance and decision-making.

## Core feature

- **Policy control**, creation of policy lists based on segregations and their maintenance:
  - Group-based
  - User-based
  - AD OU-based
  - Global policies
  - Comprehensive criteria for identifying application groups
- **Privilege control**:
  - Application elevation (Allowlisting)
  - Application blocking (Denylisting)
  - Control of unmanaged applications (Graylisting/General parameters)
  - DLL blocking
  - Control of parent and child processes
  - Integration with the operating system's native prompt (UAC)
  - Command control at the prompt level (Denylisting and Allowlisting)
  - One-time-access for applications not controlled by policy
  - Customization of privileges in tokens for elevations
- **Audit, compliance, and reporting**:
  - Functionality for control and monitoring of directories, files, logs, and management of their permissions
  - Tracking of events associated with executions intermediated by EPM (Reports)
- **Security**:
  - Protect against shell escaping
  - Protect against all types of pass-the-hashes and pass-the-tickets
  - Protect against Privilege escalation

## Other features

- Automation for authentication in local/Web applications
- One-screen workplace
- All-in-one solution (PAM 360)
- Approval Workflow for executions
- Session Recording linked to access lists
- Malware Analysis (without report)
- Offline Mode
- Single sign-on
- MFA OTP Token

## Read more

- [Learn about EPM's architecture](/v4-2/docs/go-endpoint-manager-windows-architecture-1).
- [How to install EPM](/v4-2/docs/how-to-install-go-windows-agent).

Privilege escalation is the process by which a user with limited access to IT systems can increase the scope and scale of their access permissions.