Least Privilege and Application Control for Endpoints

BeyondTrust PowerBroker for Windows and PowerBroker for Mac are least privilege and application control solutions that eliminate excessive or administrator privileges, maintain application control, and log privileged activities on physical and virtual Microsoft Windows servers and desktops, and Mac desktops. PowerBroker for Windows and PowerBroker for Mac helpIT and security teams to close security gaps, improve operational efficiency, and achieve compliance objectives.

  • Secure and automate the process for discovering, managing and cycling privileged account passwords and SSH keys
  • Eliminate local admin privileges from desktop machines
  • Grant privileges to applications and tasks – not users – without providing administrator credentials
  • Enforce least-privilege access based on an application’s known vulnerabilities via patented Vulnerability-Based Application Management
  • Ensure users are only running approved applications with the proper privileges, stopping malware before it is installed
  • Utilize a single solution for policy, management, reporting and threat analytics

Supported Platforms


  • Oracle
  • MongoDB
  • PostgreSQL
  • SQL Server
  • MySQL
  • Sybase
  • Teradata
  • Windows Server 2008 R2
  • Windows Server 2008
  • Windows Server 2003 SP1 or later
  • Windows Server 2012
  • Windows Server 2016
  • Windows 7
  • Windows 8
  • Windows 10 Pro, Enterprise and Enterprise LTSB
  • Apple OS X El Capitan 10.11
  • Apple OS Sierra
  • Mac OS High Sierra 10.13.x