Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW
  • CPE

Netwrix: Removing Local Admin Rights with Least Privilege Manager

Netwrix
03/29/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


are removed. With PolicyPak's Lease Privilege Manager, getting out of the local admin rights business couldn't be easier. While removing local admins on endpoints is the end goal, users still need to be able to perform safe and secure activities to perform their daily job. The Lease Privilege Manager can help facilitate that control and be specific to running executables, installing software, or even updating drivers. The packs within our configuration allow you to get past the UAC prompts that will exist while removing admin access. An executable policy will have conditions for path, hash, signature, or file info. This allows administrators to set a specific version or later that a user can install. Additionally, you can apply to child processes where this will inherit elevation and other security settings in the rule. Now when a user goes to install software, they will be allowed to do so based on the created rules and configuration. Another example in a common scenario is easily setting up and allowing users to update drivers when needed. The Lease Privilege Manager within PolicyPak can simply create a control panel policy to elevate device manager allowing for users to make updates for drivers. As you can see there are other control panel applets which you can use in the same scenarios including Java, Keyboard and Mouse, Event Viewer, Flash Player, and more. PolicyPak is simple, easy, and quick allowing your organization to feel at ease while removing local admins at the endpoints and not hindering end users to be able to get work done.

TL;DR

  • Netwrix Least Privilege Manager enables organizations to remove local admin rights from endpoints while allowing users to perform necessary tasks through policy-based elevation controls.
  • Administrators can create granular rules based on file path, hash, signature, or version to control which executables users can run or install without triggering UAC prompts.
  • Pre-built policies for control panel applets like Device Manager allow users to update drivers and perform common tasks without requiring standing admin privileges or IT support tickets.

Summary

This demonstration showcases Netwrix's Least Privilege Manager (formerly PolicyPak) as a solution for organizations removing local administrator rights from endpoints while maintaining user productivity. The tool addresses the core challenge of endpoint security: eliminating standing admin privileges without blocking legitimate user activities like software installation and driver updates. Through policy-based controls, administrators can define specific conditions—including file path, hash, signature, or version requirements—that allow users to perform elevated tasks without UAC prompts or full admin access. The solution includes pre-built policies for common scenarios such as control panel applets (Device Manager, Java, Event Viewer) and executable elevation, enabling granular control over what users can install or modify. By applying elevation rules to specific processes and their child processes, organizations can implement true least privilege access while ensuring users can complete daily tasks without IT intervention or security compromises.

Chapters

0:00 - Introduction to Least Privilege Challenge
0:29 - Executable Elevation Policies
1:24 - Driver Update Scenario
2:02 - Summary and Benefits

Key Quotes

0:11 "With PolicyPak's Lease Privilege Manager, getting out of the local admin rights business couldn't be easier."
0:59 "This allows administrators to set a specific version or later that a user can install."
2:02 "PolicyPak is simple, easy, and quick allowing your organization to feel at ease while removing local admins at the endpoints and not hindering end users to be able to get work done."
Categories:
  • » Webinar Library » Netwrix
  • » Cybersecurity » Zero Trust
  • » Cybersecurity » Endpoint Security
  • » Data Protection
Channels:
News:
Events:
Tags:
  • Endpoint Management
  • Identity & Access
  • Zero Trust
  • Demo
  • Technical Deep Dive
  • Least Privilege Access
  • Endpoint Security
  • Privileged Access Management
  • Local Admin Rights Removal
  • User Access Control
  • Policy-Based Elevation
  • Driver Management
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: Netwrix: Removing Local Admin Rights with Least Privilege Manager

              View CPE Certificates

              Upcoming 360 View Events

              • Nov
                19

                Securing the Microsoft Enterprise: Strengthening Configuration Management, Identity Security, and Data Protection

                11/19/202601:00 PM ET
                More events

                XStreaminars (watch here)

                • Nov
                  12

                  Leaving VMware Means Leaving vSAN: Your VMware Exit Is Really a Storage Decision

                  11/12/202601:00 PM ET
                  More events

                  Industry Events (Sponsor Hosted)

                  • Nov
                    12

                    Hands-On Workshop: Connecting On-Prem Data to Databricks Using MinIO AIStor (Americas)

                    11/12/202601:00 PM ET
                    • Nov
                      18

                      Practical Session: Connecting On-Prem Data to Databricks via MinIO AIStor

                      11/18/202608:00 AM ET
                      • Nov
                        19

                        Zendesk Deep Dive: Get the work done faster with Employee Service AI Agents

                        11/19/202601:00 PM ET
                        • Nov
                          19

                          A Deep Dive into Muse, Dots, and Duet's Impact on Your Website

                          11/19/202601:00 PM ET
                          • Dec
                            03

                            CISO Insights: Steering Cybersecurity Strategies in an AI-Driven Era

                            12/03/202601:00 PM ET
                            More events

                            Upcoming Webinar Calendar

                            • 11/12/2026
                              01:00 PM
                              11/12/2026
                              Leaving VMware Means Leaving vSAN: Your VMware Exit Is Really a Storage Decision
                              https://www.truthinit.com/index.php/channel/2192/leaving-vmware-means-leaving-vsan-your-vmware-exit-is-really-a-storage-decision/
                            • 11/12/2026
                              01:00 PM
                              11/12/2026
                              Hands-On Workshop: Connecting On-Prem Data to Databricks Using MinIO AIStor (Americas)
                              https://www.truthinit.com/index.php/channel/2202/hands-on-workshop-connecting-on-prem-data-to-databricks-using-minio-aistor-americas/
                            • 11/18/2026
                              08:00 AM
                              11/18/2026
                              Practical Session: Connecting On-Prem Data to Databricks via MinIO AIStor
                              https://www.truthinit.com/index.php/channel/2194/practical-session-connecting-on-prem-data-to-databricks-via-minio-aistor/
                            • 11/19/2026
                              01:00 PM
                              11/19/2026
                              Securing the Microsoft Enterprise: Strengthening Configuration Management, Identity Security, and Data Protection
                              https://www.truthinit.com/index.php/channel/2076/securing-the-microsoft-enterprise-strengthening-configuration-management-identity-security-and-data-protection/
                            • 11/19/2026
                              01:00 PM
                              11/19/2026
                              Zendesk Deep Dive: Get the work done faster with Employee Service AI Agents
                              https://www.truthinit.com/index.php/channel/2181/zendesk-deep-dive-get-the-work-done-faster-with-employee-service-ai-agents/
                            • 11/19/2026
                              01:00 PM
                              11/19/2026
                              A Deep Dive into Muse, Dots, and Duet's Impact on Your Website
                              https://www.truthinit.com/index.php/channel/2228/a-deep-dive-into-muse-dots-and-duets-impact-on-your-website/
                            • 12/03/2026
                              01:00 PM
                              12/03/2026
                              CISO Insights: Steering Cybersecurity Strategies in an AI-Driven Era
                              https://www.truthinit.com/index.php/channel/2231/ciso-insights-steering-cybersecurity-strategies-in-an-ai-driven-era/
                            • 01/19/2027
                              02:00 PM
                              01/19/2027
                              HUMAN Dialogue: Embracing the Rise of the Empowered AI Consumer.
                              https://www.truthinit.com/index.php/channel/2160/human-dialogue-embracing-the-rise-of-the-empowered-ai-consumer/
                            • 03/18/2027
                              01:00 PM
                              03/18/2027
                              Securing Access for People, Partners and AI Agents
                              https://www.truthinit.com/index.php/channel/2251/securing-access-for-people-partners-and-ai-agents/
                            • 06/17/2027
                              01:00 PM
                              06/17/2027
                              Stop the Leak: Data Loss Prevention for the AI Era
                              https://www.truthinit.com/index.php/channel/955/360view-stop-the-leak-data-loss-prevention-for-the-ai-era/
                            • 08/19/2027
                              01:00 PM
                              08/19/2027
                              Who Has Access to What...and Should They?
                              https://www.truthinit.com/index.php/channel/2252/who-has-access-to-what-and-should-they/
                            • 10/21/2027
                              01:00 PM
                              10/21/2027
                              After VMware: Building the Private Cloud You Actually Want
                              https://www.truthinit.com/index.php/channel/2253/after-vmware-building-the-private-cloud-you-actually-want/
                            • 11/18/2027
                              01:00 PM
                              11/18/2027
                              Assume Breach, Prove Recovery
                              https://www.truthinit.com/index.php/channel/2254/assume-breach-prove-recovery/
                            • 12/16/2027
                              01:00 PM
                              12/16/2027
                              The Self-Running Service Desk
                              https://www.truthinit.com/index.php/channel/2255/the-self-running-service-desk/
                            Truth in IT
                            • Sponsor
                            • About Us
                            • Terms of Service
                            • Privacy Policy
                            • Contact Us
                            • Preference Management
                            Desktop version
                            Standard version