Devolutions, a provider of secure IT management solutions, has announced new capabilities for its platform, introducing device enrollment and centralized software management powered by UniGetUI. The enhancements represent the first stage of the company’s endpoint privilege management roadmap, enabling IT teams to enroll devices through existing mobile device management (MDM) solutions and centrally control software approvals, installations, and updates without providing users with local administrator privileges.
The new functionality expands Devolutions’ privileged access management (PAM) capabilities beyond controlling access to enterprise systems to include oversight of installed software. Designed to complement Microsoft Intune, the features will allow administrators to monitor enrolled devices within their existing PAM workspace and manage applications through major package managers. This integrated approach is intended to streamline routine IT administration while limiting unnecessary privileged access.
The announcement follows a series of improvements to Devolutions PAM, which combines privileged access management and remote connections within a unified workflow. While conventional PAM deployments can require months of implementation, Devolutions PAM is designed to be deployed within hours, providing enterprise-level security controls with reduced deployment complexity. According to a recent Devolutions customer survey involving 1,372 respondents, Remote Desktop Manager users reported average time savings of 5.7 hours per week.
“PAM has historically been built for large security teams with big budgets and months to spare, but that’s not how IT teams work,” said Devolutions CEO David Hervieux. “As cyber insurers and auditors increasingly expect PAM coverage, we’re giving IT teams and MSPs controls they can roll out in hours and use every day without slowing down. Extending our platform is a natural next step in making enterprise-grade security practical for teams of every size.”
Expanded PAM Capabilities for IT Administration
The planned device enrollment and software management features are part of Devolutions’ broader efforts to make privileged access management more practical for internal IT departments, system administrators, and Managed Service Providers (MSPs). Recent platform updates introduce more granular access controls, simplify privileged account workflows, and support enterprise security and compliance requirements.
The enhancements include:
- Scoped administrator roles. Administrators can now receive permissions tailored to their responsibilities rather than unrestricted access. Workspace administrators can configure platform settings and manage users without viewing vault contents, supporting least-privilege principles. This separation is particularly relevant to MSPs overseeing multiple customer environments and organizations enforcing separation-of-duties policies.
- Dedicated Auditor role. A specialized role enables security and compliance personnel to examine activity logs and session metadata without exposing privileged credentials. This provides greater visibility into administrative activity while maintaining credential confidentiality.
- Unified vault for connections and PAM credentials. Privileged credentials and their associated remote connection entries can now be managed within the same vault. Administrators can initiate sessions and retrieve credentials through a single interface, with consistent permission controls and credentials linked directly to their corresponding connections.
- Checkout requests and approvals. Users can request temporary privileged access, with optional multi-factor authentication (MFA). Authorized reviewers can approve, reject, or adjust requests through the web interface, mobile application, or Remote Desktop Manager. Once the approved period expires, passwords are automatically rotated and just-in-time (JIT) permissions are revoked.
- Extendable checkouts and reusable just-in-time accounts. Administrators can extend privileged access sessions when tasks exceed their original time allocation, subject to configurable approval requirements and time restrictions. Reusable JIT accounts also preserve associated mailboxes, licenses, and account history under a consistent identity.
- Session recording and audit logging. Organizations can record and replay privileged sessions while maintaining logs of privileged actions. Built-in PAM reporting templates provide security and compliance teams with a foundation for auditing administrative activities.
Availability and Pricing
Devolutions expects the new device enrollment and centralized software management capabilities to reach general availability in December 2026. The company plans to demonstrate the functionality at Microsoft Ignite, taking place November 17–20, at booth 6271R.
Devolutions PAM is currently available through the Devolutions download center. Existing Remote Desktop Manager customers can integrate the PAM module into their current environment using either a cloud-based or self-hosted workspace.
For new customers, Devolutions PAM includes the required workspace, with cloud and self-hosted deployment options available. The company offers a 14-day free trial. The Privileged Access Management package costs $650 USD per named user annually, with annual billing and standard support included.
About Devolutions
Founded in Canada in 2010, Devolutions develops secure access and IT management solutions designed to help organizations manage privileged access, passwords and remote connections while simplifying and securing IT operations. More than one million users across 140 countries use Devolutions solutions. For more information, visit devolutions.net.
Media Contact: Jenn Zimmer- The Hoffman Agency, Devolutions-US@hoffman.com, 408-621-3352
Join our LinkedIn group Information Security Community!
