Presidium: the IT support agent for your users' Windows PCs
A lightweight agent on every PC, a single multi-customer server and a web management console. Inventory, tickets, approved software and remote interventions drawn only from a closed catalog of signed commands, with the user's explicit consent and a full audit of every operation.
- Welcome Kit
- Open a support ticket
- Install approved software
- TeamViewer QuickSupport
- Allow remote control
- PC info
IT support under control, PC by PC
Presidium (code name Praesidium) is Eulogika's IT support agent for customers' Windows PCs. On the PC it runs as a Windows service with SYSTEM privileges, alongside a system tray app and a command-line interface; every agent talks to a single multi-customer server, managed through a web console.
Agent on the PC
Windows service (SYSTEM), dark-themed system tray app and CLI: support is one click away for the user.
Automatic inventory
Hardware, operating system, network and user data from Active Directory, including password expiry.
Secure remote interventions
Never arbitrary scripts: only signed commands from a closed catalog, with typed and validated parameters.
Multi-customer web console
One server for every customer, with data separated per customer, roles and an audit of every operation.
What the user finds in the system tray
The system tray app menu brings together everything the user needs to ask for and receive support.
Welcome Kit
The welcome kit with useful information to get started.
Open a support ticket
A support request pre-filled with the PC's hostname and the user.
Install approved software
Install applications chosen from an approved catalog.
TeamViewer QuickSupport
Start TeamViewer QuickSupport for guided assistance.
Allow remote control
The user's consent to remote interventions, time-limited and revocable.
PC info
The PC's key details, always available to the user.
Presidium's capabilities
From inventory to remote interventions, every function is designed to give the IT team visibility and control without giving up security.
Inventory
Hardware, network and user at a glance
The agent collects PC and user data and makes it available in the web console, so support knows straight away which machine and which user it is working with.
- Hostname, OS and build, CPU, RAM, disks and free space
- IP and MAC addresses, BIOS serial number, uptime
- User data from Active Directory, with password expiry highlighted when it is close
Remote interventions
A closed catalog, never arbitrary scripts
Remote interventions run only by picking commands from a closed catalog, with typed and validated parameters. Every command must pass a double allowlist before it runs on the PC.
- Double allowlist: server-side per customer and local on the PC, with the script's SHA-256
- Signed commands (HMAC), with expiry and anti-replay protection
- Runs in System or User context, with exit code, output and duration shown in the console
User consent
No intervention behind the user's back
Remote interventions require the user's explicit consent, granted from the system tray app. Consent is time-limited, can be revoked at any time, and every execution triggers a notification on the PC.
- Explicit consent from the system tray app
- Time-limited, revocable consent
- User notification at every execution
Communication security
Every request authenticated and signed
Agent and server communicate only over HTTPS with TLS 1.2 or later, with optional certificate pinning. Every request is signed with HMAC-SHA256 using a per-client secret protected with DPAPI, which can be rotated.
- HTTPS with TLS 1.2+ and optional certificate pinning
- HMAC-SHA256 signature on every request
- Per-client secret protected with DPAPI, with secret rotation
Multi-tenant web console
One server, many customers, separate data
The customer (tenant) is derived only from the client credentials, never from data sent by the agent, and data is partitioned per customer. The web console uses local accounts with PBKDF2 passwords, lockout after failed attempts and optional two-factor authentication.
- Admin, Operator and Reader roles
- Read-only access for customer IT contacts, limited to their own tenant
- Optional two-factor authentication with an authenticator app (TOTP)
Audit and compliance
Who, what, when and where: always
Every operation is recorded in a full, append-only audit trail that can be exported to CSV. Data retention is configurable per customer and collection follows data minimisation, in line with NIS2 and GDPR.
- Full append-only audit (who, what, when, where) with CSV export
- Retention configurable per customer
- Data minimisation, in line with NIS2 and GDPR
How a remote intervention works
Every intervention goes through the same checks, from choosing the command to the result in the console.
- 01CatalogThe operator picks a command from the closed catalog and fills in its typed parameters, which are validated.
- 02Server allowlistThe server checks that the command is allowed for that customer.
- 03SignatureThe command is signed (HMAC), with an expiry and anti-replay protection.
- 04Local allowlist and consentThe PC checks its own allowlist against the script's SHA-256 and the user's active consent.
- 05Execution and resultThe command runs in System or User context, the user is notified, and exit code, output and duration come back to the console.
Security and compliance, not just support
Presidium comes from Eulogika, which supports companies with information security and NIS2 compliance.
Aligned with NIS2 and GDPR
A full audit trail, per-customer retention and data minimisation help demonstrate control over access to endpoints.
Traceable interventions
Every command executed stays on record with who requested it, on which PC, when and with what outcome.
Transparency for the customer
The customer's IT contacts can view their own tenant's data and audit trail in read-only mode.
Lean deployment
Presidium is designed to be simple to roll out and to maintain.
No SQL database
The system does not require a SQL database to install and manage.
No registry usage
Presidium does not use the Windows registry.
Install = copy a folder
It is installed by copying a folder, with self-contained .NET 10 included.
Code-signing ready
The executables are ready for digital code signing.
Frequently asked questions about Presidium
What is Presidium?
Presidium (code name Praesidium) is Eulogika's IT support agent for customers' Windows PCs. It includes an agent on the PC (Windows service, system tray app and CLI), a single multi-customer server and a web management console available at presidium.eulogika.net.
Can Presidium run any script on the PCs?
No. Remote interventions are only possible with commands from a closed catalog, with typed and validated parameters. Every command must be allowed both by the server's allowlist for that customer and by the PC's local allowlist, which checks the script's SHA-256; commands are signed with HMAC, have an expiry and are protected against replay.
Does the user know when someone intervenes on their PC?
Yes. Interventions require the user's explicit consent, granted from the system tray app, time-limited and revocable. The user receives a notification at every execution.
How is each customer's data kept separate?
The tenant is derived exclusively from the client credentials and data is partitioned per customer. In the web console the Admin, Operator and Reader roles define what each account can do, and the customer's IT contacts can be given read-only access to their own tenant only.
Does Presidium help with NIS2 and GDPR compliance?
Presidium keeps a full, append-only audit of every operation (who, what, when, where) that can be exported to CSV, lets you configure retention per customer and collects only the data it needs, in line with the principles of NIS2 and GDPR.
What does it take to install?
No SQL database and no use of the Windows registry: installation means copying a folder, with self-contained .NET 10 included. The executables are code-signing ready.
Bring Presidium to your users' PCs
Contact us for a demo: we will show you the agent, the web console and how remote interventions work with consent and audit.