Privileged (administrator) accounts represent a large security vulnerability that many organizations, including the Texas A&M University Health Science Center, face today. In the hands of an external attacker or malicious employee, privileged accounts could allow attackers to disable security controls, steal confidential information or PHI, commit financial fraud, and disrupt daily operations.

With this growing threat, TAMHSC needs to put controls in place to proactively protect against, detect, and respond to in-progress cyber attacks before they strike vital systems and compromise sensitive data. To help solve this problem, OIT has launched CyberArk Endpoint Privilege Manager which will allow OIT to remove administrative rights from computers across the Health Science Center, while allowing continued access to all your normal software and resources. This article will provide information to guide you through using this new software and describe what to do if you encounter a dialog box from the software.

When an application is blocked by the Cyberark software, you will see this dialog box:

This block is based on policies put in place by OIT Security. If you have questions regarding this decision, or require a blocked piece of software to be reevaluated by the OIT Security group, please email them directly at

OIT has worked very hard to ensure that all of the most common software is white-listed and allowed to run. This means that most of your software will open as it always has. You will notice no change!

There will inevitably be software that OIT has not yet encountered. For this software, when you attempt to install or run the software, you will see the following dialog box:

To run this software you have a couple options.

  • Fill out the text box briefly explaining why this software is needed. Be sure to include any licensing information (if applicable).
  • For urgent requests, call the Help Desk at 800-799-7472.