A technology company replaces BeyondTrust EPM with Admin By Request

The challenge

• Cumbersome upkeep. The IT team found BeyondTrust EPM very cumbersome to maintain as admins.
• Settings that didn’t work. Many vendor tickets about settings that didn’t work as expected, with long waits for a fix, and sometimes no fix at all.
• Slow compilation. Compilation, a critical part of development, was significantly delayed, which hurt engineers’ productivity.
• Developers who need to install software. Engineers work with development tools that need rights to install and update.

What we did together

1. 1Moving to Admin By Request

   We rolled out Admin By Request in place of the previous product, with policies by computer group. The project took a little over two months, and users kept working as usual throughout the move.

   The benefit: Admin rights managed from one console, without the heavy upkeep of the previous product.

2. 2Fixing development tool issues

   We sorted out installs of development and backup tools, and found a wrong UAC setting in Group Policy that was causing problems. Compilation ran without delays again too.

   The benefit: Engineers install what they need, without standing admin rights.

3. 3Connected to the SOC

   Admin By Request events go to the company’s SOC through webhooks.

   The benefit: Every elevation request and every install is logged and monitored.

4. 4Web access control (Web Access Management)

   Next, the company added Web Access Management, and the rollout was done in a few days.

   The benefit: The same platform now manages web access too, with no new system to maintain.

What changed

• Simpler for the IT team. One policy set by computer group, instead of the heavy upkeep of the previous product.
• Engineers back to full speed. Compilation runs at normal speed again.
• No standing admin rights. People get elevated rights only when they need them, and engineers keep working with their own tools.
• Every action monitored. Elevation requests and installs reach the SOC.
• One platform that grows with the company. When the company wanted web access control too, it added it on the same platform, in a few days and with no extra system to maintain.

The services behind this project: Admin rights management · Web Security