Devolutions Unveils Device Enrollment and Software Management

The PAM solution module aims to govern what runs on enterprise machines, not just manage who gets into them, combining privileged access and everyday connections in one workflow

Devolutions, a global leader in secure and accessible IT management solutions, announced major updates to its Devolutions platform with new device enrollment and UniGetUI-powered centralized software management features, marking the first phase of its endpoint privilege management roadmap. The new features will enable IT teams to enroll devices from their existing mobile device management (MDM) solutions and centrally approve, install and update software without granting local administrator rights.

Read more – MariaDB Launches AI Agent-Ready Database Platform

The new capabilities extend Devolutions’ existing privileged access management (PAM) functionality beyond managing who can access enterprise systems to help IT teams govern the software running on them. Designed to work alongside Microsoft Intune, the new functionality will allow administrators to view enrolled devices in the same workspace they use for PAM and manage software across major package managers. By bringing these functions together, Devolutions aims to simplify everyday IT operations while reducing unnecessary administrator privileges.

The expansion builds on recent enhancements to Devolutions PAM, which is the first PAM solution to combine privileged access management and remote connections in one workflow. Unlike traditional PAM solutions that can take months to deploy, Devolutions PAM is designed to deploy in hours, giving IT teams enterprise-grade security controls without lengthy implementation projects. The company’s focus on productivity is reflected in a recent customer survey of 1,372 users conducted by Devolutions, in which Remote Desktop Manager users reported saving an average of 5.7 hours per week.

Read more – Aviz Networks and Clastix Partner to Automate AI Networking

“PAM has historically been built for large security teams with big budgets and months to spare, but that’s not how IT teams work,” said Devolutions CEO David Hervieux. “As cyber insurers and auditors increasingly expect PAM coverage, we’re giving IT teams and MSPs controls they can roll out in hours and use every day without slowing down. Extending our platform is a natural next step in making enterprise-grade security practical for teams of every size.”

Read more –ZeroTier and Redapt Partner for Quantum-Secure Infrastructure

Enterprise-Grade PAM Built for Everyday IT Operations

The upcoming device enrollment and software management capabilities build on Devolutions’ continued investment in making PAM more accessible for internal IT teams, system administrators, and Managed Service Providers (MSPs). Recent enhancements strengthen access controls, simplify privileged workflows and help meet enterprise security and compliance requirements.

Key capabilities include:

• Scoped administrator roles. The administrator roles are no longer all-or-nothing. A Workspace administrator can manage users and platform settings without seeing vault contents, applying least privilege to administrators. This is especially valuable for MSPs managing multiple client environments and organizations with strict separation-of-duties requirements.
• Dedicated Auditor role. Security and compliance teams can review activity logs and session metadata without accessing privileged credentials, making it easier to resolve a long-standing difficulty in audit workflows.
• One vault for connections and PAM credentials. Most administrators already connect to their assets with a PAM account. Now those privileged credentials sit in the same vault as the entries they’re used with. Starting a session and retrieving its credentials happen in one place; there’s one set of permissions to manage, and each credential stays tied to the connection that uses it.
• Checkout request and approvals. Users can request time-limited access, with multi-factor authentication (MFA) available. Reviewers approve, deny or modify the request from the web interface, the mobile app or Remote Desktop Manager. When the checkout ends, the password is rotated automatically, and the just-in-time (JIT) permissions are removed.
• Extendable checkouts and reusable just-in-time accounts. Work that runs past its window can continue without starting over, with approval and time limits available to keep access controlled. Reusable JIT accounts keep mailboxes, licenses, and history tied to the same identity.
• Session recording and audit logging. Privileged sessions can be recorded and played back, and every privileged action is logged, with predefined PAM reports that give auditors a starting point.