IntelliPolicy for Clients

FullArmor IntelliPolicy gives you more control over managed workstations than you can achieve by using Group Policy alone. The product lets you elevate or reduce the privileges of applications running on clients and provides advanced filtering options to control policy application. IntelliPolicy's computer policies let you control services, disable hardware, restrict removable storage, and schedule tasks. The product's user policies let you control power schemes, map drives, and configure mail accounts. Some policies can be configured for users or computers.

IntelliPolicy also gives you limited control over local users and groups, letting you perform tasks such as adding members to local groups or setting the local Administrator password. But the product doesn't let you create or delete users or control passwords for other local accounts. I would have liked better control over local users and groups, but simply taking local Administrator privileges away from end users can help enforce your control over clients.

The ability to elevate or restrict application privileges is probably IntelliPolicy's most useful feature, although it has some limitations. I hope FullArmor continues to improve this handy feature. —Adam Carheden