Microsoft Gold Certified Partner
Lumension is a trusted and reliable Microsoft Gold Certified Partner that takes full advantage of Microsoft Active Directory integration features within Lumension Endpoint Security to enforce device and application use.
 |
Lumension has been a Microsoft Certified Partner since its first year of operations and is today a major player in Microsoft Windows Environments security. Through our Gold Certified Partner status, involvement in Microsoft Network Access Protection (NAP) program, our early SecureIT Alliance membership and our efforts to port Lumension Endpoint Security endpoint security solutions to Windows Embedded platforms, Lumension is on top of all Microsoft technologies in order to provide you the best integrated with seamless integration into your enterprise environment. |
Lumension Endpoint Security Active Directory Integration
Since the introduction of Active Directory to Windows, users now benefit from an industry standard directory structure that suits well small or large, homogeneous or heterogeneous networks equally well. Past burdens as those related with security, delegation, maintenance, and updates, are gone or mitigated. Lumension Endpoint Security capitalizes in your investment by taking advantage of all the features of Active Directory.
Beginning with Windows 2000 server, Microsoft included Active Directory as part of their network strategy. An Active Directory (AD) structure makes it possible to represent and store all those components that comprise a network in the form of objects, i.e. a set of attributes that represent a concrete element. These objects are arranged hierarchically according to a schema that defines their attributes and organization.
The directory service places this information to the disposal of users, administrators, and applications according to their granted access rights and can interact with other Active Directory structures.
Lumension Endpoint Security takes advantages of the AD structure by allowing authorized administrators to grant and deny applications/device I/O access permissions to all objects they are allowed to administrate. Using this feature you can, for example, grant the use of a specific application for a certain user group or block all access to USB memory sticks except the specific corporate authorized model to specific users. Those devices/applications that have not been specifically configured are assigned the most restrictive policy: they are all denied by default to protect your organization from the unknown.
Want to know more?