BeyondTrust Privileged Identity

What do you like best?

ERPM works very well in a clean environment. As long as your DNS is accurate it will do its job.

What do you dislike?

The big flaw is you cannot set rights at the management set level. It treats a Directory (Active Directory) like a single server. As a result you have to set granular rights on each account. Also account checkout times are universal. Also to do an patch the entire ERPM system has to be taken off line.

Recommendations to others considering the product:

Make sure you understand the limitations of this software. As I stated earlier the support for an Enterprise Directory is poor at best.

What problems are you solving with the product? What benefits have you realized?

Randomizing local passswords on servers and desktops. Checking out generic directory accounts.