This article provides an answer to whether GFI EndPointSecurity manages users or machines.
GFI EndPointSecurity manages permissions set on users. Therefore, if you log on to a machine which has the updated GFI EndPointSecurity Agent deployed to it, the permissions which are configured on this machine for you will apply.
Different user-based permissions can be configured for different Protection Groups - groups of computers which can be configured in GFI EndPointSecurity. For example, you can be allowed access to your CD drive on the machine but you will not be allowed access to the CD drive on a server. Another user (Administrator) may be allowed access to the CD drive on both machines.