Endpoint Privilege Management for Windows 25.4.221

June 13, 2025

🛠️ Issues resolved

DescriptionResolution
Message Host can fail to authenticate in environments where NTLM-auth isn't functional.Fixed domain authentication failing in certain environments.
GIT for Windows performance degradation since upgrade to 25.2.Improved performance of file metadata retrieval, including file description, version, product name, and product version.
Power Rules messages are narrated in the wrong order.Improved ability of JAWS screen reader to narrate Power Rules messaging in correct order.
'Enter Reason' field on Power Rules request-message is missing alt-text (JAWS)All input fields on Power Rules messages now have specific alt-text added which can now be narrated by screen readers.
Power Rules messages not narrated because window not focused.Fixed an issue where window focus was not functioning correctly, this now allows JAWS to accurately narrate Power Rules messages.
Access violation crashes when manually stopping DefendpointService on ATMs running Windows LTSB 1607Fixed a condition that could cause DefendpointService to crash when shutting down after a GPO policy update.

📝 Requirements

  • Microsoft .NET Framework 4.6.2 (required to use Power Rules, PowerShell audit scripts, PowerShell API, and Agent Protection)
  • Microsoft .NET Framework 4.8 (required to use Multifactor Authentication with an OIDC provider)
  • PowerShell 3.0 (required to use Power Rules, PowerShell audit scripts, and PowerShell API)
  • Trellix (formerly McAfee) Agent (required if you are installing the Privilege Management client with switch EPOMODE=1)

🔄 Compatibility

ProductSupported
Endpoint Privilege Management Policy Editor25.4
Privilege Management ePO Extension25.4
Privilege Management Console Adapter25.4
BeyondInsight/Password Safe24.3
Trellix Agent 5.7+5.7+
Trellix ePO Server5.10 Service Pack 1 Update 4 (recommended), Update 13+

⏰ Upcoming deprecation notice: EPM for Windows tools

As per the deprecation notice provided in 2019 via the 5.5 admin guide (BeyondTrust End User Utilities section), the following tools will be removed with the EPM for Windows 25.6 release:

  • PGProgramsUtil.exe
  • PGNetworkAdapterUtil.exe
  • PGPrinterUtil.exe

If you or your team rely on any of these executables, or have concerns about their deprecation, reach out to us immediately. We value your input and will work to ensure a smooth transition.

©2003-2025 BeyondTrust Corporation. All Rights Reserved. Other trademarks identified on this page are owned by their respective owners. BeyondTrust is not a chartered bank or trust company, or depository institution. It is not authorized to accept deposits or trust accounts and is not licensed or regulated by any state or federal banking authority.