Security

App Registrations in Entra permit client secrets or certificates to be used for authentication. Client secrets are simple and convenient, but they allow anyone with the secret to use it to authenticate to the application. Rotating the client secre...

Currently, restricting access to applications such as PowerShell, Command Prompt, Registry Editor, and Task Manager requires separate policies or scripts. It would be highly beneficial to have a built-in option within Kiosk Manager that allows adm...

If endpoints are properly configured, you can use remote desktop launching mstsc.exe with the /restrictedAdmin switch, which does not require re-entering credentials and does not send the password to the remote computer. Per Microsoft's documentat...

Since users are constantly on VPN and there are issues with duplicate IP addresses/DNS names come back to a different computer names. This is our most security flaw that we are encountering, where computers are not getting updates from WSUS/SCCM/R...

Our environment has separate administrator logins for our endpoint team. When we launch MECM with our admin accounts, RCT uses the admin account to access and manage devices, etc. The Intune plugin uses the user context that the browser is running...

Please add the ability to log ship Activation Code and Retrieved Password logging to a SIEM. Our Cyber Security Ops team needs the ability to see these events in the SIEM console, without having to view the logging in the RMS console or SQL. Alter...

It would be extremely beneficial to show in privilege manager for any activation codes used, what was actually launched... if we give out the activation code, we are blind to what they are actually doing behind the scenes.

This really would be for all RMS actions. But instead of storing in the database, we could keep only a few days here and then ship them all off to our syslog server for future discovery. I'm thinking about utilizing Recast Builder more for admin t...

In Carillon we do not allow long activation code validity times. There should be a central place where the allowed times can be configured and which one is the default. e.g. Carillon: ServiceDesk \ ActivationCodeValidityTimes .xml" <?xml versio...

Privilege manager support would be fantastic for MacOS as there are large gaps with intune and credential management on MacOS. Even just basic support for elevation on demand would be a great first step.