Meet the Essential Eight admin privilege requirements without slowing your team down
The Essential Eight requires local admin passwords that are long, unique and managed, admin rights granted just in time, and privileged access that is centrally logged. Lithnet Access Manager makes all three part of your team's normal working day, with one web app for every LAPS password, RapidLAPS logons without typing the password, and admin rights requested only when they're needed. Every request is recorded, so the evidence is ready for your next assessment.
Access Manager helps you meet three Essential Eight requirements
Unique, managed local admin credentials
"Credentials for break glass accounts, local administrator accounts and service accounts are long, unique, unpredictable and managed."
Windows LAPS covers your Windows computers, and Access Manager completes the picture. The Access Manager agent manages a unique, rotating password on every Windows, macOS and Linux device, including standalone devices, so every local admin account in your fleet meets the requirement.
Long, unique passwords are exactly what your team finds painful to use, and Access Manager takes that pain away. With RapidLAPS, your team logs on to a Windows computer as the local admin by scanning a QR code with their phone, so the password can be as long and random as you like.
Just-in-time administration
"Just-in-time administration is used for administering systems and applications."
Access Manager allows you to transition away from permanent admin rights to just-in-time access. You decide in advance who can request admin rights on which computers and for how long, and your admins request them in the Access Manager web app only when they need them. Access Manager removes the rights automatically when the time is up.
Some admin rights come from Active Directory groups instead. Access Manager can make a role out of any group, such as the one that administers an application, and your admins request it for a set time in the same way.
Central logging of privileged access
"Privileged access events are centrally logged."
Access Manager records every request for a LAPS password, a BitLocker recovery key or admin rights, whether it grants the request or denies it. Each event shows who made the request, for which computer or role, when, from which IP address and the reason they gave.
Access Manager writes these events to the Windows event log and can send them to your SIEM, email, Slack or Teams.
Quoted from the Australian Signals Directorate's Essential Eight Maturity Model (November 2023).
Get started today
Professional starts at USD 750 a year, including 100 devices and support from Lithnet.
The free trial unlocks every feature for 30 days on a free installation.