Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.


06:25 AM
Connect Directly

Microsoft Buys DesktopStandard

Microsoft gains group policy technology for Active Directory, but not DesktopStandard's new application security product

Microsoft yesterday acquired group policy software developer DesktopStandard, but the independent software vendor's application security tool was not part of the deal.

By purchasing the privately-held ISV, Microsoft obtains DesktopStandard's GPOVault, ProfileMaker, Dragnet, PolicyMaker Standard Edition, Registry Extension, Share Manager, and Software Update. These applications already integrate with Microsoft’s existing Active Directory Group Policy management tools. Terms of the deal were not disclosed.

But DesktopStandard's PolicyMaker Application Security tool is now the flagship product of BeyondTrust, formerly a subsidiary of DesktopStandard that has spun off into a separate company. BeyondTrust is now selling the renamed Privilege Manager application security product, which helps prevent desktop security breaches by ensuring that users get only the privileges they need.

Why didn't Microsoft get DesktopStandard's application security tool as part of the deal? "We didn't really want to sell it [to another vendor]," says John Moyer, former CEO of DesktopStandard and now CEO of BeyondTrust. "It was our fastest-growing product, and it's still growing."

Privilege Manager manages the "least-privilege" user environment, says Marco Peretti, CTO of BeyondTrust. "It lets them define rules on specific applications and keep users running with minimum privileges, so they are less vulnerable to spyware and viruses." And it lets them safely add plug-and-play printers and ActiveX controls to desktops, too, he adds.

Meanwhile, many enterprises use Active Directory Group Policy for managing network access and security policies, including patch management. So the DesktopStandard group policy tools are a natural fit for Microsoft.

"These tools are also used to ensure software policies are consistently applied, and most of those policies have security as their core reason for being these days," says Rob Enderle, president and founder of the Enderle Group. "For companies that move to use this tool, the result should be an increase in the effectiveness of both prevention and response efforts to security threats."

GPOVault, PolicyMaker Standard Edition and Share Manager will still be sold by DesktopStandard resellers as well as from Microsoft. ProfileMaker will be sold only resellers. Microsoft is discontinuing PolicyMaker Software Update -- it recommends users run its Windows Server Update Services product instead.

— Kelly Jackson Higgins, Senior Editor, Dark Reading

  • Microsoft Corp. (Nasdaq: MSFT)
  • BeyondTrust Kelly Jackson Higgins is the Executive Editor of Dark Reading. She is an award-winning veteran technology and business journalist with more than two decades of experience in reporting and editing for various publications, including Network Computing, Secure Enterprise ... View Full Bio

    Recommended Reading:

    Comment  | 
    Print  | 
    More Insights
  • Comments
    Newest First  |  Oldest First  |  Threaded View
    COVID-19: Latest Security News & Commentary
    Dark Reading Staff 8/10/2020
    Researcher Finds New Office Macro Attacks for MacOS
    Curtis Franklin Jr., Senior Editor at Dark Reading,  8/7/2020
    Hacking It as a CISO: Advice for Security Leadership
    Kelly Sheridan, Staff Editor, Dark Reading,  8/10/2020
    Register for Dark Reading Newsletters
    White Papers
    Cartoon Contest
    Current Issue
    Special Report: Computing's New Normal, a Dark Reading Perspective
    This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
    Flash Poll
    The Changing Face of Threat Intelligence
    The Changing Face of Threat Intelligence
    This special report takes a look at how enterprises are using threat intelligence, as well as emerging best practices for integrating threat intel into security operations and incident response. Download it today!
    Twitter Feed
    Dark Reading - Bug Report
    Bug Report
    Enterprise Vulnerabilities
    From DHS/US-CERT's National Vulnerability Database
    PUBLISHED: 2020-08-13
    Buffer overflow in a subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged user to potentially enable denial of service via local access.
    PUBLISHED: 2020-08-13
    Uninitialized pointer in BIOS firmware for Intel(R) Server Board Families S2600CW, S2600KP, S2600TP, and S2600WT may allow a privileged user to potentially enable escalation of privilege via local access.
    PUBLISHED: 2020-08-13
    Improper initialization in BIOS firmware for Intel(R) Server Board Families S2600ST, S2600BP and S2600WF may allow a privileged user to potentially enable escalation of privilege via local access.
    PUBLISHED: 2020-08-13
    Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows local users to gain access to the RiskDB username and password via unprotected log files containing plain text credentials.
    PUBLISHED: 2020-08-13
    Out-of-bounds write in Kernel Mode Driver for some Intel(R) Graphics Drivers before version may allow an authenticated user to potentially enable denial of service via local access.