BeyondTrust Case Studies University of Winchester Uses Privilege Management to Lock Down Security Risk

Edit This Case Study Record

	University of Winchester Uses Privilege Management to Lock Down Security Risk BeyondTrust

University of Winchester Uses Privilege Management to Lock Down Security Risk

BeyondTrust

Technology Category	Cybersecurity & Privacy - Identity & Authentication Management
Applicable Industries	Education
Applicable Functions	Business Operation
Use Cases	Cybersecurity
Services	System Integration
Challenge	The University of Winchester, a 175-year-old institution, was facing a challenge in securing its vast IT infrastructure. The university had to protect and support around 1500 Windows desktops, used by approximately 8000 students and around 1000 staff members across 16 different departments. The network was set up so that both staff and students could not just connect their own devices to back-end systems, and access was limited to the Internet. The university had not experienced any security breaches, but there was no room for complacency. The challenge was to manage user privileges in a way that would not impact productivity or create additional administrative workload. Read More
About Customer	The University of Winchester is a 175-year-old institution that was ranked among the top 20 universities in England for overall satisfaction in the National Student Survey 2014. The university has a strong emphasis on security and managing any vulnerabilities inadvertently caused by staff and students. The IT management team is responsible for the smooth-running of the campus, which includes managing around 1500 Windows desktops, used by approximately 8000 students and around 1000 staff members across 16 different departments. The university also runs Windows back-end servers in an Active Directory environment. Read More
Solution	The university identified that managing user privileges was a simple and effective way to make their security more robust. Privilege management is about eliminating unnecessary rights – for example, administrator rights – to minimise the risk of malware attacks. However, the university also needed to retain the flexibility that some of their users required. For instance, some staff members needed their privileges to be elevated so that they could install and manage applications themselves. After a thorough investigation of the marketplace, the university implemented privilege management software from BeyondTrust called PowerBroker for Windows Desktops and Servers. This centralised solution uses a ‘least privilege’ model and has proved a perfect fit for the university’s needs. Read More Log in to view content
Contents

Technology Category

Cybersecurity & Privacy - Identity & Authentication Management

Applicable Industries

Education

Applicable Functions

Business Operation

Use Cases

Cybersecurity

Services

System Integration

Challenge

The University of Winchester, a 175-year-old institution, was facing a challenge in securing its vast IT infrastructure. The university had to protect and support around 1500 Windows desktops, used by approximately 8000 students and around 1000 staff members across 16 different departments. The network was set up so that both staff and students could not just connect their own devices to back-end systems, and access was limited to the Internet. The university had not experienced any security breaches, but there was no room for complacency. The challenge was to manage user privileges in a way that would not impact productivity or create additional administrative workload.

About Customer

The University of Winchester is a 175-year-old institution that was ranked among the top 20 universities in England for overall satisfaction in the National Student Survey 2014. The university has a strong emphasis on security and managing any vulnerabilities inadvertently caused by staff and students. The IT management team is responsible for the smooth-running of the campus, which includes managing around 1500 Windows desktops, used by approximately 8000 students and around 1000 staff members across 16 different departments. The university also runs Windows back-end servers in an Active Directory environment.

Solution

The university identified that managing user privileges was a simple and effective way to make their security more robust. Privilege management is about eliminating unnecessary rights – for example, administrator rights – to minimise the risk of malware attacks. However, the university also needed to retain the flexibility that some of their users required. For instance, some staff members needed their privileges to be elevated so that they could install and manage applications themselves. After a thorough investigation of the marketplace, the university implemented privilege management software from BeyondTrust called PowerBroker for Windows Desktops and Servers. This centralised solution uses a ‘least privilege’ model and has proved a perfect fit for the university’s needs.

Impact #1	The university has completely removed automatic administrator rights among its users, while simultaneously providing adequate rights to perform the tasks that students and staff need.
Impact #2	The university no longer needs to ‘punch holes’ in its security in order to complete certain tasks.
Impact #3	The added bonus is decreased time spent dealing with user support issues, meaning that the team can spend more time on other activities.

Impact #1

The university has completely removed automatic administrator rights among its users, while simultaneously providing adequate rights to perform the tasks that students and staff need.

Impact #2

The university no longer needs to ‘punch holes’ in its security in order to complete certain tasks.

Impact #3

The added bonus is decreased time spent dealing with user support issues, meaning that the team can spend more time on other activities.

Download PDF Version

Overview

University of Winchester Uses Privilege Management to Lock Down Security Risk

Operational Impact