Does Full Control run on the server or the client machine?
Full Control includes a server component that will take advantage of a network if one is available. However, Full Control is designed to self-manage on each individual client machine even when its server component is unavailable. Not all computers are always connected to a network. For example, consider an account rep who carries a laptop containing sensitive information. Even when it’s not connected to a network, it still needs to be secure, managed, and protected against malware. Also, servers and networks can go down. When that happens, you don’t want your security going down with it. Full Control will protect the client machine so long as that machine can run.