Devolutions Expands PAM With Device Enrollment and Software Controls
Devolutions is expanding its privileged access management platform with device enrollment and centralized software management, giving IT teams tools to approve, install and update software without granting local administrator rights. The features are expected to become generally available in December 2026.
- Device enrollment and software management are expected in December 2026.
- IT teams can manage software without granting local administrator rights.
- The features are designed to work alongside Microsoft Intune.
- Devolutions PAM combines privileged access and remote connections in one workflow.
- A 14-day free trial is available for Devolutions PAM.
Extending PAM beyond access control
The new capabilities are the first phase of Devolutions' endpoint privilege management roadmap. They are designed to let IT teams enroll devices through existing mobile device management solutions and manage software from the same workspace used for privileged access management.
The functionality is designed to work alongside Microsoft Intune and will support software management across major package managers through UniGetUI. According to Devolutions, the aim is to help organizations govern what runs on enterprise machines, rather than only control who can access enterprise systems.
Administrators will be able to centrally approve, install and update software without giving users local administrator rights. Devolutions said the approach is intended to simplify everyday IT operations while reducing unnecessary administrator privileges.
New controls for administrators and auditors
The announcement builds on recent enhancements to Devolutions PAM, which combines privileged access management and remote connections in one workflow. The platform now includes scoped administrator roles, allowing a Workspace administrator to manage users and platform settings without seeing vault contents.
A dedicated Auditor role gives security and compliance teams access to activity logs and session metadata without exposing privileged credentials. Devolutions also said connections and PAM credentials can be kept in one vault, so starting a session and retrieving its credentials happen in the same place.
Other capabilities include checkout requests with approval, optional multi-factor authentication and automatic password rotation when a checkout ends. Just-in-time permissions are removed at that point. Extendable checkouts, reusable just-in-time accounts, session recording and audit logging are also included. Privileged sessions can be recorded and played back, while predefined PAM reports provide a starting point for auditors.
Availability and what it means for IT teams
The upcoming device enrollment and software management features will be demonstrated at Microsoft Ignite from November 17 to 20 at Devolutions' booth 6271R. General availability is expected in December 2026.
Devolutions PAM is available now through the Devolutions download center. Existing customers can add the PAM module to a current Remote Desktop Manager cloud or self-hosted workspace. New customers receive the workspace with Devolutions PAM, with a choice of self-hosted or cloud-based deployment. A 14-day free trial is available.
Devolutions CEO David Hervieux said, "Extending our platform is a natural next step in making enterprise-grade security practical for teams of every size." The company said its focus is internal IT teams, system administrators and Managed Service Providers, offering controls intended for everyday operations as well as security and compliance work.
