Overview
BeyondTrust Endpoint Privilege Management (EPM) is a security tool that helps protect company devices by managing how and when administrative (privileged) access is used.
EPM is already installed on all company‑managed devices and works in the background to keep systems secure while still allowing employees to get their work done.
This article explains what BeyondTrust EPM is, why we use it, and what you might notice while using your device.
What Is BeyondTrust EPM?
BeyondTrust EPM controls administrative privileges on company devices. Instead of users running with full admin rights all the time, privileges are granted only when they are needed and approved.
This approach is known as least privilege and is a security best practice used across many organizations.
Why Are We Using BeyondTrust EPM?
Administrative access can be powerful, but it also increases risk. BeyondTrust EPM helps reduce those risks while still supporting productivity.
Benefits to You and the Company
- Improved security – Reduces the risk of malware and unauthorized changes.
- Protection against cyber threats – Prevents attackers from automatically gaining admin access.
- Safer software installation – Ensures only approved actions run with elevated rights.
- Compliance and auditing – Helps meet security and regulatory requirements.
What Does This Mean for Me?
For most day‑to‑day tasks, you should not notice any changes.
However, when an application or action requires administrative access, you may:
- See a prompt asking to confirm or request elevated privileges
- Be notified that an action is blocked or requires approval
- Have an application run with elevated privileges automatically if it is approved
These prompts are part of protecting your device and company data.
What Happens If Something Is Blocked?
If BeyondTrust EPM blocks an application or action:
- The block is usually intentional for security reasons
- You may see a message explaining the restriction
- You may have an option to request approval, depending on the situation
If the blocked action is required for your job, IT can review and approve it if appropriate.
Things to Keep in Mind
- Do not attempt to bypass or disable BeyondTrust EPM
- Avoid repeatedly trying the same blocked action
- Only install software needed for business purposes
- Provide details when requesting approval to help IT process requests faster
Need Help?
If you encounter an issue related to BeyondTrust EPM or are unable to complete a required task, please contact the IT Service Desk:
Email: help@davey.com
Phone: 330‑673‑9515 x8555
Knowledge Base: help.davey.com
Please Include the following in your request:
- Your full name/employee number
- A call-back number
- Your device name listed under Settings > About
- The name of the application or task being blocked
- What you were trying to do
- A screenshot of the error, if available
IT can review the request, validate business need, and provide assistance.