How does Privilege Manager work?
Privilege Manager uses “rules” to dictate which processes and applications a Normal User can run, even if those processes or applications would normally require the user to be a member of the Administrators security group. The advantages to defining which applications and processes a Normal User can run is that they can be run without the need for a Secondary Account. Privilege Manager rules are delivered to users via Microsoft Group Policy and can be defined in one of two basic ways: • Applications or processes requiring an administrative security token to run can be brought to the attention of NCI Computer Services. NCI Computer Services can then create the necessary rule at the network level which can correspondingly be applied to all Windows PCs (or even select PCs) across the Institute which will fix the issue permanently and seamlessly for all NCI staff. Rules set at this level can be based on a number of differing criteria: • Target an application or process based on its program
