Managing Elevated Privileges in the Enterprise Environment

Explore strategies for managing elevated privileges in enterprise environments through this conference talk from BSides Indy 2016. Delve into the importance of privilege management, potential end-user damages, and implementation challenges. Discover various solutions for limiting access, including editing service permissions, custom Windows solutions, and Linux/OSX approaches. Learn about monitoring and tracking elevation, easing administrative burdens, and the positive and negative effects of implementing these strategies. Gain insights into justifications for elevated privileges and prepare for future developments in this critical area of enterprise security.

Syllabus

Intro
Why THIS talk?
Possible End User Damages
Getting Started
End User Challenges
Possible Solutions
Limiting Access
Possible Scenarios
Editing Service Permissions
Typical Application Scenario
Windows Custom Solution
Workflow / Tracking
Windows Scripting Solution
Windows Script File Format
(Win)Sudo Solution
Linux / OSX Custom
OS X Authorization Database
AuthDB Example
Monitoring and Tracking Elevation
Easing The Administrative Burden
Positive Effects
Negative Effects
What Next?
EP Justifications