CyberArk Privileged Access Management vs. Microsoft Enterprise Mobility + Security

The system is great for enterprise or larger IT departments or teams where temporary or full access may be given using privileged IDs. Requirements for needing local admin access is also eliminated which can help with specific Windows workstation related tasks. It can be very useful when working with remote teams or contractors who may need temporary access to a system when required.

Incentivized

Microsoft Enterprise Mobility + Security has been ideal for our organization (and would be for any I can think of) for securing user accounts through MFA and admin accounts through PIM. Its end-point management is also great for set-up and configuration as well as management of your devices. It also provides you with useful metrics and feedback on your devices.

Incentivized

• Automatically discover new servers on the network and take control of the local admin password by vaulting it and ensuring nobody knows the password. A different password on every server.
• Automatically roll the password in a configurable manner - after each use, after a certain period of time, etc.
• Track and govern sensitive account usage by ensuring only properly authorized users can access the vault and obtain the credentials and then monitor usage.

Incentivized

• Simple pre-packed solution for many popular Microsoft products
• Advanced threat protection
• Simplified end user management with Intune

Incentivized

• GUI - right now everything is on one page/dashboard. Some level of folder/Safe type view would be great
• More options when storing passwords - especially for network based passwords
• Better integrations with vendors like Cisco so that admins dont need to really get the password from the vault (think Last Pass type add on)

Incentivized

• InTune deployment via Hybrid Azure AD. The instructions seem very simple but there are lots of little areas you can get tripped up and there is little logging to see where you've gone wrong.
• Advanced Threat Protection anti-impersonation. It is WAY too sensitive. Users emailing themselves from personal accounts get their mail sent to quarantine just because the name/label of the personal account matches their Office 365 mailbox name/label? HUH???
• Licensing. Typical of Microsoft, what you're actually getting and details of licensing are confusing.

Incentivized

Customer support and technical support have always been great when we require assistance. Especially when we come across issues that we're not familiar with.

Incentivized

It is known as one of the safest products in the market. It has good support and is also available as on-premise. You can run it virtually on VMWare (and probably on other hypervisors as well). You can have a second instance on bare metal and that makes it a very safe system.

Incentivized

Microsoft Enterprise Mobility + Security is better than any of the products I have used that do similar things. There is a huge convenience to all the things Microsoft Enterprise Mobility + Security brings together in one place. Also, the speed and streamlining nature of Intune helps with the management and set up of devices.

Incentivized

• Decreased the probability of an external cyber attack to privileged accounts..
• Management can control privileged account life cycle management more effectively
• Recording privileged sessions allows our organization to play back exactly the point of a breach or malicious behavior
• Automated system to manage and verify passwords, as privileged accounts are constantly created and deleted
• Automatic PWD change functionality will substantially decrease probability of PWD theft or misuse.

Incentivized

• Increased productivity, including service requests for our customers
• Reduced operational costs, and threat/risk of cyber-attacks

Incentivized