ManageEngine Application Control Plus

Automatically creates and manages lists of allowed applications based on specified rules.

Prevents specified applications and malicious executables from running.

Assigns need-based, application-specific privileged access to prevent privilege elevation attacks.

Discovers and centrally removes excessively distributed local administrator rights.

Enables temporary application access and elevated privileges that are automatically revoked after a set period.

Creates global policies to control the execution of child processes generated by applications.

Allows users to request access to essential applications that are currently restricted.

Provides fine-tuned control over which applications are allowed or blocked.

Reduces the risk of unauthorized access by managing and removing unnecessary admin rights.

Helps ensure compliance with organizational policies and regulations through privilege management.

Offers detailed reports for auditing and compliance purposes, logging every app launch attempt.

Provides users with necessary tools and access to perform jobs effectively, reducing delays.

Ensures necessary applications and privileges are available on demand, minimizing interruptions.

Offers just-in-time access and audit mode for adaptable policy enforcement.

Monitors application activity without enforcing restrictions immediately, for policy validation.

Supports the establishment of a Zero Trust security model.

Ensures users only have the minimum necessary access to perform their tasks.

Automates allowlisting and blocklisting based on specified control rules.

Allows specifying prerequisites for application control rules.

Enables grouping applications by type or business function for consistent policy application.

Operates at the executable level to control scripts, DLLs, installers, and other associated files.

Validates digital signatures and automatically permits applications from trusted software publishers.

Logs who executed an application, when, and from where, supporting incident response and threat hunting.

Allows administrators to tailor the application control process around specific enterprise requirements, with modes like Strict and Audit.

Supports managing computers in distributed setups like branch or remote offices and for mobile users, using low bandwidth.

Controls applications for users in local offices, remote offices, and on-the-go from a single console.

Integrates with Active Directory for user authentication.

Provides an additional layer of security for access.

Allows users to download or schedule comprehensive reports.