Aegis MDM

Who signs in decides what the machine can do.

Verify identity. Enforce policy on Windows and Mac. Act live when risk appears - from one SecureGen command console.

Download Windows agent See it work

Phone approve for Windows logon — Approve at logon

Fleet operations console — Fleet under policy

VDI kiosk desk — Kiosk that still opens RDP

Activity and presence wall — Who was active - and where

The problem

A password is a shared secret. Aegis binds the human to the machine.

Stolen credentials open the shell. Soft MDM waits for the next reboot. Assigned Access breaks the cloud RDP apps your desks actually use. Aegis closes those gaps with live policy on one agent.

MFA phone approve next to Windows lock screen

01 - Verify

No shell until someone says yes.

After the password, Aegis sits in the Windows credential provider. Push to phone. Authenticator. Offline packs for travel. Deny the push - the session never starts.

Push with a visible code - not a blind tap
Works with Windows Hello when you allow it
Optional TrustScore gate before Verify runs

Verify deep dive →

02 - MDM

Policy that sticks in seconds, not after reboot.

Groups, priorities, excludes. USB off. AppLocker on. Browser channels locked. The agent reconciles about every twenty seconds so the desk matches the console.

USB / removable deny by All, Device, or User
Shell lockdown + software whitelist
Browser upload, download, clipboard, print DLP

MDM deep dive →

03 - AppKiosk

Lock the desk. Keep cloud RDP alive.

Assigned Access cages break apps that write a Temp .rdp and launch mstsc. AppKiosk clears that cage: soft locked desktop, writable Temp, auto-start your V2Cloud-style client.

AppKiosk for cloud RDP launchers
VdiOnly - hide drives, kill clipboard
Browser allowlist for portal-only desks

Kiosk & VDI →

04 - Activity

Active. Idle. Locked. Plus where the browser went.

Daily presence from the agent. Social Media watch estimates time on Facebook, Instagram, X, YouTube, LinkedIn and more from browser history - honest estimates, not keylogging.

Presence rollups for the day
Social minutes by site
Lost Mode + BitLocker escrow when a device walks

Activity & Social →

Full surface

Everything Aegis covers

Windows logon MFAPush · TOTP · offline packs Desired-state MDMGroups · merge · drift USB denyAll · device · user scope AppKiosk + VDITemp→RDP · thin client Browser & DLPUpload · clipboard · print Presence & SocialActive · idle · site minutes Escrow & tamperBitLocker · uninstall key Lost ModeStolen device playbook

Security model

Encryption escrow. Tamper key. Labels you can trust.

BitLocker recovery when you need it. Uninstall protection so users cannot quietly remove the agent. Console labels say ON, LIVE, READY, or OFF - same truth for pilots and audits.

Read the security model

Aegis

Put it on a real Windows desk this week.

SecureGen Tools runs the pilot with you - Verify, MDM, or AppKiosk first. You choose the desk that hurts most.

Request a pilot Talk to sales