Skip to main content

Events
Groups
Product Updates
BeyondTrust University
Ideas Portal
BeyondTrust.com

Why BeeKeepers?

16 days ago

Welcome to the BeyondTrust BeeKeepers Community!

Ask questions, get answers and engage with your peers

57 Topics
34 Replies
746 Members

Community

Start discussions, ask questions, get answers

Events

Explore and RSVP for upcoming events

Groups

Connect with like-minded professionals

Product Updates

Read the latest news from our product team

Featured topics

The latest & greatest from the community

Recent activity
Help others
Categories

JasperApprentice

iisreset.exe access denied error via elevated CMD

Anybody else encountered an issue with iisreset via commandline where the error coming up is “Access Denied” after running an elevated CMD?

RJ.Newcomer

WPE policy signing (CERT_MODE=2)

Hi everyone,With ON-PREM BI/EPM-W it is my understanding that the WPE is generally planned to replace the MMC policy editor at some point, but that point hasn’t yet occurred. This is unlike PMCloud where MMC policy editor is deprecated and no longer supported.My organization uses CERT_MODE=2 to require the clients to only recognized code-signed policies. This is seen as a valuable control to reduce risks related to internal or external bad actors plausibility reverse engineering corporate policy XMLs and creating their own (overly permissive or malicious) policy.To the best of my knowledge BeyondTrust does not have a plan or timeline to add WPE-based code-signing. I figured policy signing would be added to WPE but now ~2 years after it’s introduction I see no indication of it coming.As CERT_MODE=2 only recognizes code-signed policies and WPE cannot provide code signing, this makes WPE unusable for my organization.BeyondTrust, respectfully - do you plan to add code-signing to WPE or do

Jsizzle45Apprentice

Jump Clients offline

Running: Privileged Remote AccessI have this issue where Jump Clients randomly go offline. The when going to the apps and features the app is gone and has been uninstalled. For instance, Saturday (9/14) I upgraded the appliance From 24.1.4 to 24.2.3Strangely 60 machines were still connected and upgraded the jump client to the new version automatically. 40 were offline. The 40 offline showed that 21.1.4 had been uninstalled. The new version never got installed. What is really quit frustrating is that when I redeploy the jump client, it shows up as a new machine. Now I have the same machine in there twice, one online and one offline. Because its a new machine, I have to re-add the machine to 5 jump groups, I lose all my logging and recordings, I have to reset the password vault matching. Its a real pain. Why cant beyondtrust match MAC addresses or serial numbers or something so that when I have to redeploy it matches the machine already in my system. I tried to restart the appliance, but

Devin ChurchillBeyondTrust Employee

New MFA Option for identity.beyondtrust.com - FIDO2

In an effort to enhance security, while simplifying the user experience, BeyondTrust has now enabled FIDO2 for authentication to https://identity.beyondtrust.com FIDO2 is an authentication standard that enhances security by allowing users to log in to online services without passwords. It uses cryptographic keys stored on devices like security keys, smartphones, or biometrics, providing strong protection against phishing and other attacks. For more information on how to configure this for your Okta account, please see the following Knowledge Base article within our Customer Portal. Regards, Devin ChurchillVP, Customer Success and Adoption

Nervous-EquivalentNewcomer

MacOS 15 - Screen & System Audio Recording

After moving to MacOS 15 I had a user notice that their Privacy and Security > Screen & System Audio Recording permissions for Microsoft Edge were disabled. This is a High Flex user, but they are unable to re-enable those permissions for Edge in the Screen & System Audio Recording settings page. They get a stock MacOS Admin prompt popup when they attempt to do so, and no record of the event in Analytics. Does anyone know how to allow High Flex users to edit settings in Privacy and Security > Screen & System Audio Recording? Edit: Not sure how to delete posts yet but turns out EPM wasn’t working at all after MacOS 15 because the admin accounts required for EPM to work were removed during the update. Repushing the client fixed the problem.

BeyondTrust CommunicationsCommunity Manager

Endpoint Privilege Management Cloud 24.5 MR 2 (September 2024)RELEASE NOTES

BeyondTrust is happy to announce a new version of Endpoint Privilege Management Cloud has been made available to the market.Please click the following link to view the full release notes: Endpoint Privilege Management Cloud 24.5 MR 2 (September 2024).

BeyondTrust CommunicationsCommunity Manager

Endpoint Privilege Management for Mac 24.5.1 (Sep 2024)RELEASE NOTES

BeyondTrust is happy to announce a new version of Endpoint Privilege Management for Mac has been made available to the market.Please click the following link to view the full release notes: Endpoint Privilege Management for Mac 24.5.1 (Sep 2024).

BeyondTrust CommunicationsCommunity Manager

Endpoint Privilege Management for Windows 24.5 MR1 (August 2024)RELEASE NOTES

BeyondTrust is happy to announce a new version of Endpoint Privilege Management for Windows has been made available to the market.Please click the following link to view the full release notes: Endpoint Privilege Management for Windows 24.5 MR1 (August 2024).

BeyondTrust CommunicationsCommunity Manager

BeyondInsight and Password Safe 24.2.1 (Sep 2024)RELEASE NOTES

BeyondTrust is happy to announce a new version of Beyond Insight and Password Safe has been made available to the market.Please click the following link to view the full release notes: BeyondInsight and Password Safe 24.2.1 (Sep 2024).

BeyondTrust CommunicationsCommunity Manager

AD Bridge 24.1.2 (June 2024)RELEASE NOTES

BeyondTrust is happy to announce a new version of Active Directory Bridge has been made available to the market.Please click the following link to view the full release notes: AD Bridge 24.1.2 (June 2024).

JasperApprentice

iisreset.exe access denied error via elevated CMD

Anybody else encountered an issue with iisreset via commandline where the error coming up is “Access Denied” after running an elevated CMD?

RJ.Newcomer

WPE policy signing (CERT_MODE=2)

Hi everyone,With ON-PREM BI/EPM-W it is my understanding that the WPE is generally planned to replace the MMC policy editor at some point, but that point hasn’t yet occurred. This is unlike PMCloud where MMC policy editor is deprecated and no longer supported.My organization uses CERT_MODE=2 to require the clients to only recognized code-signed policies. This is seen as a valuable control to reduce risks related to internal or external bad actors plausibility reverse engineering corporate policy XMLs and creating their own (overly permissive or malicious) policy.To the best of my knowledge BeyondTrust does not have a plan or timeline to add WPE-based code-signing. I figured policy signing would be added to WPE but now ~2 years after it’s introduction I see no indication of it coming.As CERT_MODE=2 only recognizes code-signed policies and WPE cannot provide code signing, this makes WPE unusable for my organization.BeyondTrust, respectfully - do you plan to add code-signing to WPE or do

Jsizzle45Apprentice

Jump Clients offline

Running: Privileged Remote AccessI have this issue where Jump Clients randomly go offline. The when going to the apps and features the app is gone and has been uninstalled. For instance, Saturday (9/14) I upgraded the appliance From 24.1.4 to 24.2.3Strangely 60 machines were still connected and upgraded the jump client to the new version automatically. 40 were offline. The 40 offline showed that 21.1.4 had been uninstalled. The new version never got installed. What is really quit frustrating is that when I redeploy the jump client, it shows up as a new machine. Now I have the same machine in there twice, one online and one offline. Because its a new machine, I have to re-add the machine to 5 jump groups, I lose all my logging and recordings, I have to reset the password vault matching. Its a real pain. Why cant beyondtrust match MAC addresses or serial numbers or something so that when I have to redeploy it matches the machine already in my system. I tried to restart the appliance, but

Nervous-EquivalentNewcomer

MacOS 15 - Screen & System Audio Recording

After moving to MacOS 15 I had a user notice that their Privacy and Security > Screen & System Audio Recording permissions for Microsoft Edge were disabled. This is a High Flex user, but they are unable to re-enable those permissions for Edge in the Screen & System Audio Recording settings page. They get a stock MacOS Admin prompt popup when they attempt to do so, and no record of the event in Analytics. Does anyone know how to allow High Flex users to edit settings in Privacy and Security > Screen & System Audio Recording? Edit: Not sure how to delete posts yet but turns out EPM wasn’t working at all after MacOS 15 because the admin accounts required for EPM to work were removed during the update. Repushing the client fixed the problem.

Chitta2019Newcomer

PasswordSafe User Management

users which are inactive in Active Directory but in Password Safe it's showing Active, I don’t know how it’s possible!!

Prudhvi KeertipatiApprentice

Discovery Scan - Oracle Scan Credentials

As per the BeyondTrust Docs, Oracle scan credential supports IP address range and CIDR notation in the Host field. I tried multiple scenarios with IP address range or CIDR notation, discovery scan never worked. It works fine with single IP address and named host but not with IP address range or CIDR notation.Please advise on how to make discovery scan works with IP address range or CIDR notation?Create Oracle Credentials in BeyondInsight (beyondtrust.com) Thanks

postuserNewcomer

Whitelisting Onedrive & MS teams in Windows Medium Flex policy

How to whitelist the two events below on Windows Medium Flex policy?

dan-snelsonNewcomer

BeyondTrust EPM: Inspector

Leverage swiftDialog to display a user-friendly message about the health of BeyondTrust Endpoint Privilege Management for Mac, while capturing various under-the-hood settings behind-the-scenesInspirationDuring a recent case with BeyondTrust Support, we were asked to obtain the output of several elevated Terminal commands from the affected user’s Mac.Having previously written a similar solution for CrowdStrike Falcon, creating a health inspector for BeyondTrust EPM seemed like the obvious solution.Continue reading …

ssethurajanNewcomer

EPM-W PMC Package Manager

Are there any documentation/KB available for the mass deployment of EPM-W Package Manager?

General Topics

Everything you need to know about this community

Buzz Board

9 topics
2 Replies

Community News

3 topics
0 Replies

Company News

1 topic
0 Replies

Discuss Industry Trends

This is a place to share what you are seeing in the industry.

Identity Management

0 topics
0 Replies

Password Management

0 topics
0 Replies

State of AI

0 topics
0 Replies

Active Directory (AD) Bridge

Achieve streamlined identity management and access control by extending Microsoft AD authentication, SSO capabilities, and Group Policy configuration management to Unix and Linux systems.

General

1 topic
0 Replies

Integrations

0 topics
0 Replies

Endpoint Privilege Management

Enforce least privilege dynamically to prevent malware, ransomware, and identity-based attacks, achieve compliance across Windows, macOS, and Linux endpoints, and enable your zero trust strategy — without compromising on productivity.

Linux / Unix

1 topic
0 Replies

Mac

4 topics
1 Reply

Windows

8 topics
10 Replies

Integrations

0 topics
0 Replies

Entitle

Entitle takes the risk management burden off IT/DevOps teams and brings it back to Security, where it belongs. Our automated platform eliminates the tradeoff between productivity and security — the holy grail of access management.

General

0 topics
0 Replies

Integrations

0 topics
0 Replies

Identity Security Insights

Proactively strengthen identity security posture and build resilience against threats by uncovering identity vulnerabilities and hidden paths to privilege.

General

0 topics
0 Replies

Integrations

0 topics
0 Replies

Password Safe

Manage privileged passwords, accounts, keys, secrets, and sessions for people and machines and secure non-privileged employee passwords for business applications.

General

4 topics
10 Replies

Integrations

1 topic
0 Replies

Privileged Remote Access

Create identity-secure, just-in-time access to all your enterprise environments: cloud, on-premises, and OT.

General

3 topics
10 Replies

Integrations

0 topics
0 Replies

Remote Support

Supercharge your service desk with secure access and support for any device, any system, from anywhere – including Windows, macOS, Linux, Android, & iOS.

General

2 topics
1 Reply

Integrations

0 topics
0 Replies

Leaderboard

Show full leaderboard

Show full leaderboard

Earned Badges

AhmedOmarhas earned the badge BCIE: Password Safe
aymaan96has earned the badge BCA: Password Safe
aymaan96has earned the badge BCIE: Password Safe
LeeAtkinsonhas earned the badge BCIE: Endpoint Privilege Management - Windows
LeeAtkinsonhas earned the badge BCIE: Privileged Remote Access

Show all badges

Upcoming Events

Microsoft Vulnerabilities Report 2024

The 11th Edition of the Microsoft Vulnerabilities Report

Since the annually-published BeyondTrust Microsoft Vulnerabilities Report debuted in 2013, it has garnered over 16,000 downloads and helped thousands of users leverage its detailed data analysis and expert findings to improve their cyber defenses.

More Information & Download

Need more help?

Resources

Technical Documentation

Contact Support

Powered by Gainsight

Terms & Conditions Cookie settings

Sign up

Already have an account? Login

Login with the BeyondTrust Identity Service

Login to the community

Login with the BeyondTrust Identity Service

Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.

Enter your e-mail address

Back to overview

Scanning file for viruses.

Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.

OK

This file cannot be downloaded

Sorry, our virus scanner detected that this file isn't safe to download.

OK