Recently active topics

Hello, everyone! As a quick reminder, the third Tuesday of every month is our predictable home for patches and maintenance releases across the self-hosted (aka on prem) portfolio. This cycle covers RS and PRA Base Software in June. Here's what's coming and when: RS & PRA Base Software 7.1.0, 7.2.1, 7.3.0, 7.4.0, 8.0.0, 8.1.0, 8.2.0 and 8.3.0For more information, please reference this knowledge article - What is included in SRA August 2026 monthly patch 2026-AUGUST-ROLLUP-BASE ? While there will be other maintenance activities for our SaaS customers, these are all handled by BeyondTrust’s teams, and will not affect service / functionality / availability / versions. If you encounter any issues post-update, please engage with support. If you have questions or feedback on this month's cycle, reach out to customer.success@beyondtrust.com. We're listening. All the best, Sean Cashin Chief Customer Officer

Active Directory best practicesBefore taking any actions with Active Directory, review these best practices carefully. AD Bridge Cells provide a means of directly managing Unix identities in Active Directory. Best practices are to use Cells rather than Unprovisioned mode wherever possible.This is so a user’s Unix group membership can be limited to less than 16 groups when required for NFS (or 32 groups for Solaris) without impacting normal Windows group membership management practices. Directory Integrated modeAfter installing the AD Bridge tools, the first determination that must be made regards Directory Integrated or ID Range. Directory Integrated Mode is strongly preferred.This causes all lookups to use indexed attributes in AD, lowering the cost of each lookup against the AD domain controller (DC). Windows 2012 Forest Mode forests with Windows 2012 R2 domain controllers can be transitioned to Directory Integrated Mode without extending the AD Schema. Cell designAD Bridge Cells all

BeyondTrust + Atlassian Jira: Securing Privileged Access Across Your ITSM Workflows See how BeyondTrust improves ITSM security in Jira Service Management, securing remote access, credential checkout, and audit trails. ITSM Security and the Hidden Risk in Your Service Desk Modern IT service desks are caught in a bind. Teams rely on powerful platforms like Atlassian Jira Service Management (JSM) to handle the flood of tickets, incidents, and change requests that define daily operations, but when privileged access enters the picture, those same workflows can become a security liability. Manual handoffs, credential sharing, and siloed tooling create gaps that attackers are increasingly exploiting.  BeyondTrust’s expanding suite of Atlassian integrations closes those gaps, without forcing your teams to abandon the tools they already know and trust.  The Problem with Disconnected Workflows IT service desks face a daily paradox: the more efficient access becomes, the harder it is for organiza

BeyondTrust Entitle status: real-time updates and service information Keeping your systems running smoothly requires visibility into the tools you rely on. The BeyondTrust Entitle status page provides up-to-the-minute information on service availability, component performance, and historical uptime. Whether you’re a system administrator, IT professional, or end user, monitoring Entitle status ensures you can respond quickly to incidents and minimize disruption. Why monitor BeyondTrust Entitle status?Understanding the current state of BeyondTrust Entitle is essential for planning and troubleshooting. Unexpected downtime or component issues can impact access management, reporting, and other critical workflows. By regularly checking the BeyondTrust Entitle status, you stay informed about ongoing incidents and overall system health. This transparency allows you to make data-driven decisions and communicate confidently with your team.For more information continue reading HERE. Customer Case

How to Strengthen Your Microsoft Defenses in 2026: Security Recommendations Relying entirely on patching or simple fixes is an inadequate defense strategy. Remediation must be paired with proactive architectural guardrails. Implement a multilayered defense-in-depth model built on these key report recommendations: Tailor vulnerability management to your environment and move away from a one-size-fits-all approach. Prioritize security updates based on your unique environment, ensure your operating system and third-party software are up-to-date, and avoid using end-of-life software. Implement least privilege and zero trust controls across the stack. Restricting privilege across network, identity, account, cloud, and application layers provides a safety net that limits lateral movement and the blast radius of zero day exploits. Secure remote access pathways by replacing common entry points such as RDP and VPNs. Enforce authentication and session monitoring to detect misuse early. Impl

Microsoft Security in 2026: Top Vulnerability Trends from the BeyondTrust Microsoft Vulnerabilities Report In this blog, we’ll break down some of the most noteworthy findings from the report, explore key trends in Microsoft’s vulnerability landscape, and share actionable insights to help security teams fortify their defenses against emerging threats. Inside the 2026 BeyondTrust Microsoft Vulnerabilities Report: Key Findings & Security Insights If you only look at the total Microsoft vulnerability volume this year, you might assume that we are entering a period of predictable stability. But as BeyondTrust’s 13th annual Microsoft Vulnerabilities Report reveals, surface-level findings can be deceptive. This year’s theme, “The Ghost in the Machine,” highlights a significant shift for security teams. While overall vulnerability counts dipped by about 6%, critical severity risks doubled over the past 12 months. At the same time, the rapid rise of autonomous AI agents and machine identiti

What is the EPM Package Manager? The EPM Package Manager (Package Manager) is an optional feature which helps organizations install and maintain the Endpoint Privilege Management client and the EPM adapter. The Package Manager runs on the endpoint as a Windows service (named BeyondTrust Endpoint Privilege Management Package Manager) on the endpoint. The Package Manager runs on the endpoint as a macOS process (named PMCPackageManager). How is it useful?The EPM Package Manager installs and maintains the EPM client and adapter across your estate, and it can automatically update your endpoints when it detects a new version of the EPM client and/or adapter. Important informationPackage Manager is designed to check for updates on the EPM-Mac and EPM-Windows clients, the EPM Adapter, and the Package Manager. Package Manager checks in with EPM after the initial installation. This occurs within three minutes of the Package Manager installation. After the initial check-in, Package Manager chec

Welcome to Privileged Remote Access on Pathfinder What is the BeyondTrust Pathfinder platform?The BeyondTrust Pathfinder platform ("Pathfinder") creates a single pane of glass view into all of your BeyondTrust SaaS products. It combines shared user login, access, navigation, and workflows from multiple SaaS products. Leverage Pathfinder for your entire organization and further organize your company or business entity into individual sites, each with their own product access for users and third-party connections. Pathfinder increases the ease and usability of BeyondTrust products through a unified interface where you can sign in and access all of your BeyondTrust SaaS products from a single interface. How is it useful to my organization?Use Pathfinder for an organized view of all connected BeyondTrust SaaS products.View all of your products at a glance, including Password Safe, Privileged Remote Access, Remote Support, Endpoint Privilege Management for Windows & Mac, Endpoint Privil

Policy language guide What is policy language?Security Policy Scripting Language (also referred to as "policy language") is a specialized scripting language used within the BeyondTrust Endpoint Privilege Management (EPM) software used to define policies. Policies are a set of rules, written in this specific syntax, to manage user access and privilege levels within the BeyondTrust platform. How is policy language useful to my organization?Use policy language to define detailed security policies to control which users can execute specific commands, applications, or tasks with elevated privileges on a system. Using the scripting language, create security policy files to control: the tasks a user or group of users may perform, the systems from which a task may be submitted, and the systems from which a task may be run, and determine: when a specific task may be run (day and time), where a task may be run from, if secondary security checks, such as passwords or checksums, are requir