Desktop Authority Management Suite

Centralized, secure and consistent desktop management of the Windows user environment.

Desktop Authority Management Suite enables administrators to proactively provision and manage the Windows user environment. With the suite, you can easily create a secure, consistent environment for each user, and ensure that applications run with only the privileges and access needed.

Desktop Authority Management Suite comprises two solutions: Desktop Authority and Privilege Manager.

Desktop Authority Management Suite provides Windows user environment management across:

  • Devices: Simplifies the hassle of securing devices by customizing the environment at first login, configuring the firewall and managing browser security for physical, virtual and published Windows environments. Centrally controls access to external devices to secure data.
  • Applications: Ensures applications remain available and ready by configuring shortcuts, customizing settings, maintaining access to network resources and providing only the administrative privileges needed.
  • Identities: Shapes the user environment to the user identity, instantly configuring drives, printers, folders, shortcuts, Outlook profiles, administrative privileges and more, tailored to the user’s unique needs.


Desktop Authority Management Suite is the right choice if you need user environment management functionality to complement your existing client management solution.

  • Real-time targeting engine:Desktop Authority and Privilege Manager tailor settings, administrative privileges and configurations by user, computer, network address or dozens of other criteria using the suite’s patented Validation Logic targeting engine. This simplifies initial provisioning and environment setup, enforces user access policies, and automatically updates configurations and settings. Learn more »
  • User environment configuration: Desktop Authority configures access to company resources, manages security settings, configures Outlook profiles and Office settings, and customizes registry settings. Learn More »
  • Environment security: Desktop Authority Management Suite prevents security problems where they’re most likely to occur: at the desktop. Set security policies, control administrative privileges, manage the firewall, lock inactive computers and manage browser security and privacy settings for machines, applications and data.
    Learn more »
  • Remote user support: Desktop Authority’s ExpertAssist remote management system manages more than 40 computer tasks without interrupting the user, including accessing system information, controlling processes, running remote command-line commands, and copying files. Learn more »
  • Powerful auditing of settings and activity: Use the robust reporting in Desktop Authority and Privilege Manager to audit user login activity and elevated privilege activity. You can easily track changes as well as generate a breadth of reports. Learn more »


  • Customize the User Environment: Desktop Authority Management Suite—through its patented Validation Logic—targets, configures and manages a unique user environment and user administrative privileges, no matter where users are or whether they are on a physical or virtual desktop.
  • Simplify Windows Administration: Desktop Authority Management Suite provides centralized management that makes it easy to deliver a secure and consistent user environment.
  • Eliminate Log-in Scripting: Eliminate the need to write, test and maintain login scripts to ensure each user's environment has the correct mix of hardware, applications and permissions. Eliminating script execution makes the log-in process as fast as possible for your users.
  • Maintain Control: Desktop Authority Management Suite tracks and reports on usage to ensure that all computers, applications and user sessions are secure and authorized, and that users and applications have only the administrative privileges needed.
  • Reduce Service Requests: Proactively manage user configurations and administrative privileges and optimize them for productivity while maintaining security. Providing users with the right access to resources from the start ensures that they can be productive and IT is not always in a reactive mode.

Sys Reqs

Desktop Authority Standard

Supported operating systems

The Desktop Authority Web Console (Manager) can be installed on any of the following servers:

  • Microsoft Windows Server 2003 & R2 Standard/Enterprise Edition with SP2 (including 64-bit)
  • Microsoft Windows Server 2008 Standard/Enterprise (including 64-bit)
  • Microsoft Windows Server 2008 R2 Standard/Enterprise
  • Microsoft Windows Server 2012 Standard/Enterprise

The Desktop Authority client side components can be installed on any of the following clients:

  • Microsoft Windows XP Service Pack 3 (SP3) or greater (including 64-bit)
  • Microsoft Windows Vista Service Pack 1 (SP1) or greater (including 64-bit)
  • Microsoft Windows 7 (including 64-bit)
  • Microsoft Windows 8 (including 64-bit)
  • Microsoft Windows Server 2003 & R2 Standard/Enterprise Edition with SP2 (including 64-bit)
  • Microsoft Windows Server 2008 Standard/Enterprise (including 64-bit)
  • Microsoft Windows Server 2008 R2 Standard/Enterprise
  • Microsoft Windows Server 2012 Standard/Enterprise

Desktop Authority server components can be installed on a domain controller; however the best practice recommendation is to install Desktop Authority on a member server.

For the best web console performance it is recommended that the web components be installed on a dedicated IIS server to help reduce the potential for side effects from other Web based applications or system performance degradation  (Desktop Authority 9.0 and later requires IIS for its Web based console).

The dedicated server hosting Desktop Authority should have a minimum of a 2.0 GHz, dual core equivalent and a minimum of 4 GB of memory.

Supported domains

  • Microsoft Windows 2003 domain
  • Microsoft Windows 2008 domain
  • Microsoft Windows 2008 R2 domain
  • Microsoft Windows 2012 domain

Required software applications

Web Console (Manager)
The following applications are required and will be installed as part of the Desktop Authority installation. Installation of these applications may require a system reboot:

  • Microsoft .NET Framework version 3.5 SP1
  • Microsoft .NET Framework, Hotfix KB981119
  • Microsoft Visual C++ 2005 Redistributable Package
  • Microsoft SQL Server 2005 Backward Compatibility
  • Microsoft SQL Server 2008 R2 Express – Installed if an existing SQL Server instance is not selected. Desktop Authority will prompt to start the Computer Browser Service (if disabled)
    • Microsoft Windows Installer 4.5
      Installed for Microsoft Windows XP SP3, Microsoft Windows Server 2003 SP1/SP2 (x86/x64), Microsoft Windows Vista, Microsoft Windows Vista SP1, Microsoft Windows Server 2008 (x86/x64),
  • Microsoft Internet Information Services (IIS) 6,7, 7.5,or 8.0 based on the operating system of the server
    • IIS 6 will be installed to 2003 servers
    • IIS 7 will be installed to 2008 servers
    • IIS 7.5 will be installed to 2008 R2 servers
    • IIS 8.0 will be installed to 2012 servers
  • Once installed, the Desktop Authority web console (Manager) has the following Web browser requirements:
    • Minimum browser versions
      Internet Explorer 8
      Firefox 3.6
    • Recommended browser versions
      Internet Explorer 9 or later
      Firefox 4 or later

The minimum screen resolution for the Desktop Authority web console is 1024 x 768.

Desktop Authority supports Microsoft SQL Server version 2005 and later.

Client side applications

  • Microsoft Windows Installer 3.1
    • Microsoft Windows XP, Microsoft Windows XP SP1/SP2, Microsoft Windows Server 2003
  • Microsoft .NET 2.0 SP1

User account permission requirements
For use with Desktop Authority services:

  • One admin level account is required by the Desktop Authority services. This account is required to have read/write access to all NETLOGON share(s) and to be a member of the local Administrators group on all applicable workstations (if installed on a domain controller, user account must be a domain admin)
  • One domain user level account

Carefully consider all requirements, specifically the additional server software prerequisites, when deciding where to install Desktop Authority. If you choose to install on a domain controller, make sure these prerequisites are acceptable before starting the installation.

back to top


Privilege Manager

The Privilege Manager setup file comprises both the console and client applications. Once both applications are installed, Privilege Manager will use Microsoft Group Policy to distribute rules from the console to the client machines.

The console application requires Microsoft .NET Framework 3.5 for its installation and Microsoft Group Policy Management Console (GPMC) to run. The client can be installed on a Windows workstation or server.

The following applications are necessary for proper installation and operation.

Console system requirements

  • NET Framework 3.5 Service Pack 1 or later
  • Microsoft Group Policy Management Console (required to run Privilege Manager)

Console operating system requirements

  • Windows XP SP3 or higher
  • Windows Server 2003 SP1 or higher
  • Windows Vista
  • Windows Server 2008
  • Windows Server 2008 R2
  • Windows 7 Enterprise, Professional or Ultimate Editions
  • Windows 8
  • Windows Server 2012


Client system requirements

No special requirements

Client operating system requirements

  • Windows XP SP3 or higher
  • Windows Server 2003 SP1 or higher
  • Windows Vista
  • Windows Server 2008
  • Windows Server 2008 R2
  • Windows 7
  • Windows 8
  • Windows Server 2012

Reporting services requirements

Choose between:

  • Microsoft SQL Express 2008 or later version.
  • Microsoft SQL Server 2008 or later version.

Network requirements

Both Privilege Manager Console and clients should be deployed as a part of the Active Directory infrastructure.

Required permissions

  • Local administrator rights to start Privilege Manager Console
  • Write permissions to Group Policy Objects to be configured

back to top


Desktop Authority Standard

Privilege Manager