- 1 minute to read
- Print
- DarkLight
- PDF
Introduction Windows
- 1 minute to read
- Print
- DarkLight
- PDF
GO Endpoint Manager for Windows is a Privilege Elevation and Delegation Management (PEDM) tool for Microsoft Windows.
Our tool is fully integrated with the broader senhasegura platform to allow end users to run applications requiring administrative privileges without gaining access to the privileged credential. It also performs routine Password rotations with no human intervention required. Administrators can group and audit all user activity for better governance and decision-making.
Core features
Policy control, creation of policy lists based on segregations and their maintenance:
Group-based
User-based
AD OU-based
Global policies
Application of policies via GPOs
Comprehensive criteria for identifying application groups
Privilege control:
Application elevation (Allowlisting)
Application blocking (Denylisting)
Control of unmanaged applications (Graylisting/General parameters)
DLL blocking
Control of parent and child processes
Integration with the operating system's native prompt (UAC)
Command control at the prompt level (Denylisting and Allowlisting)
One-time-access for applications not controlled by policy
Customization of privileges in tokens for elevations
Audit, compliance, and reporting:
Functionality for control and monitoring of directories, files, logs, and management of their permissions
Tracking of events associated with executions intermediated by EPM (Reports)
Security:
Protect against shell escaping
Protect against all types of pass-the-hashes and pass-the-tickets
Protect against Privilege escalation
Other features
Automation for authentication in local/Web applications
One-screen workplace
All-in-one solution (PAM 360)
Approval Workflow for executions
Session Recording linked to access lists
Malware Analysis (without report)
Offline Mode
Single sign-on
MFA OTP Token
Read more
Learn about GO Endpoint Manager's architecture.
How to install Go Endpoint Manager.