Documentation

An Introduction to Least Privilege

This paper introduces the principle of least privilege, the benefits of following this practice and the barriers to implementation. It then goes on to suggest approaches to adopting a least privilege approach. Finally it gives a brief overview of Privilege Guard, a solution that enables privileges to be assigned to individual applications, providing a practical implementation of least privilege for corporate environments.

Applying the Principle of Least Privilege to Windows 7

This paper introduces the application of least privilege on Windows 7 (and applies equally to Windows Vista). It provides an overview of User Account Control (UAC), its benefits and limitations, and why a policy driven approach is more suitable for corporate environments.

Centralizing Windows Events with Event Forwarding

This document provides guidance on how to centralize Privilege Guard events to a central server using Windows Event Forwarding. Event Forwarding is provided by Windows Remote Management (WinRM) which is Microsoft’s implementation of WS-Management Protocol, a SOAP based, firewall-friendly protocol, which provides a common way for systems to access and exchange management information across an IT infrastructure.

Privilege Guard Datasheet

Privilege Guard Getting Started Guide

Privilege Guard Administration Guide