Skip to main content

Recently active topics

84
S
Shiva BillaNewcomer
 General
BeyondTrust during password rotation—specifically the Microsoft.Graph.Models.ODataErrors.ODataError

We are facing issue in password rotation after enabling MFA in Entra ID and our current version is 23. We are currently using o365 for reading the accounts & systems in AD. When we reached out to BT support they have suggested to onboard Entra ID or Azure in BT. Firstly we have onboarded BT in Azure and followed the below process in BT . Password Safe setupAdd the Entra ID Functional Account1. Log in to the Webconsole with a BT administrator account2. Click Quick Navigation, search for function and select Privileged Access Management: Functional Accounts.3. Click Create New Functional Account4. Select the Entity Type Directory5. Select the Platform Microsoft Entra ID6. Enter the Username in UPN format of the test account. This is used for testing.Note:This account looks up accounts that are added. If the test account gets results back, the test is marked as okay and the user can be added. 7. Enter the following values:Application (client) ID - from the first application created Tes

20
S
H
HigorTrailblazer
 General
Automatic Password Management for Manages Systems?

Hi, can someone tell me in a very clear way what is the role of Enable “Automatic Password Management” in a windows and Linux Managed System? I understand that password rotation will happen in managed account not in managed systems.

71
H
BeyondTrust Employee
D
David BubbApprentice
 Windows & MacOS
Agent Protection Causing Logon Performance Issues

Hi all,Has anyone else seen massive performance issues during logon with Agent Protection enabled (on Windows 11 endpoints in my case)?I have a customer that has been seeing problems for a while, and I also got my own environment set up and running in the last week and see the same thing.Basically, after a clean logon to the device (happening on multiple, not isolated to 1 or 2), it just takes forever to get a usable desktop. For me, it can take a minute or more for even the taskbar to show.To test, I created an identical EPM policy to my production policy, but with AgentProtectionState=0. When I flick my machine over to the associated Computer Group it is responsive again during logon (reboot, log on; taskbar loads almost instantly, apps load, desktop responsive…. normal operation).Running latest versions of agent and client (leveraging Package Manager for that and double-checked manually).The customer that raised it has been having issues for several months, so I feel this is a semi-

172
D
A
Anshuman PatidarNewcomer
 Windows & MacOS
Privilege Management Adapter install fails

getting error of failed to install performance counter while installing privilege management console adapter application. Does anyone know how to resolve this issue

174
MikeK
R
RidwaanKApprentice
 General
Platform update or migration

Hello Beekeepers We have a scenario where we want split out managed system from one platform to another with removing the systems from password safe as manage system.Example we have Redhat Linux servers using a custom Linux platform and also have centos on the same platform and now we want to separate it so we can apply separate functional account and rules .Is this possible somehow without impacting the managed systems 

72
R
Chitta2019
Chitta2019Trailblazer
 General
Not Able to Delete Workgroup

I tried this KB article https://beyondtrustcorp.service-now.com/csm?id=kb_article_view&sysparm_article=KB0020899 still I am not able to delete workgroup. I have checked everything still not able to delete.What to Check Location in BeyondInsight Functional Accounts Configuration > Privileged Access Management > Functional Accounts Managed Accounts Configuration > Managed Accounts Session Agents Configuration > Privileged Access Management Agents > Session Agents Scanner Agents Discovery > Discovery Scanners Smart Rules Configuration > Smart Rules Worker Nodes Configuration > Privileged Access Management Agents > Worker Nodes Resource Zones Configuration > Privileged Access Management Agents > Resource Zones

81
H
BeyondTrust Employee
Arno
ArnoApprentice
 General
Direct Connect with more options

Hi, Is there already a time frame for when Direct Connect will be expanded to include the attributes “Reason” and “Ticket”? Or is this not planned at all?https://beyondtrust-public.ideas.aha.io/ideas/T2PSM-I-753 Regards Arno

251
H
BeyondTrust Employee
I
immi563Rising Star
 General
Black background colour when server accessed using BeyondTrust password Safe

Hi team, We are seeing one issue for Windows Server accessed using the password safe. When user is trying to connect the server from Password safe, RDP session is launched and user sees the black background. However when users, tries to connect the same sever outside of BT, user sees the blue background.Has anyone seen this kind of issue? Can anyone please guide to understand what's the problem and how to get is resolved.? Regards,Imran Aliyani

141
rhagerm
MichelB
BeyondTrust Employee
MichelBBeyondTrust Employee
 Technology Alliances & Integrations
Agentic AI and privileged credentials governance: ServiceNow and Password Safe example

Context ServiceNow Integration Hub includes a spoke for Password Safe that supports many Actions, for example Create Credentials Request for credential check-out.  Allowing a ServiceNow workflow, subflow, or AI Agent, to check-out privileged credentials from Password Safe at runtime allows for accessing information in various application or systems.  For this article, we will look at a specific example:  Allow ServiceNow AI Agent to check-out credentials for Entra ID and use the credentials to obtain a security report for Users.  Then it is possible to ask the Agent to create a visualization for the report. ServiceNow AI Agent flow example    Configure Password Safe Onboard the Entra ID App Registration using Client or Application ID.  Password is the Client Secret.Make sure API Enabled is set for the Managed Account. Note: It is possible as an option to use the Password Safe Custom Plugin for Entra ID Service Principal, to allow Password Safe to automatically rotate the Client Secret.

271
C
Sean Cashin
BeyondTrust Employee
Sean CashinBeyondTrust Employee
 General
Salesforce / Drift Security Incident

For details regarding the Salesforce/Drift security incident, please refer to the following link: Incident Summary.

280
Sean Cashin
BeyondTrust Employee
J
JosmayNewcomer
 General
Does Workforce support SAML?

I'm having a use case issue: we bring the group and user directly from AD. When I log in through Workforce, it takes a long time and doesn't inject the credentials. I don't know if the tool only supports local users? I have that question. Regards.

651
frank.colvin
D
DerekApprentice
 General
I couple issues since PRA 25.1.2 update

I’ve noticed a couple annoying issues since updating PRA from 25.1.1 to 25.1.2. We only exclusively use Jump Clients to Windows Servers and Clients through the console, and here’s what I’ve noticed:During the connection process after logging into Windows, if you switch focus to a different tab/connection and then come back, the jump client will have connected, but you will not have mouse control. You can use keyboard control or use any of the quick commands from the Console, but in order to get mouse control back, you must fully disconnect and reconnect back into the jump client, ensuring you don’t switch focus to a different server. This one is pretty consistent and can be reproduced almost every time. This one is a little more random and doesn’t always happen, but I’ve noticed it happening often now since the PRA update. In order to launch applications in Windows, I have the habit and clicking the Windows Start key and immediately start typing the product/application I need to launch

1357
X
P
prasadp87Trailblazer
 General
How to Stop running Scan jobs from background

Hello All, We have one discovery scan job running from long time. We are looking for option from background (possibly from DB query) to stop running scan job.We tried to stop from UI but it seems it's still running.Any help will be appreciated. Thanks,Prasad

275
P
A
akelApprentice
 Windows & MacOS
Windows EPM Workstyle filter for BUILTIN\Administrator

Hi everyone! I am trying to filter a workstyle to only the built-in local admin.I dont think wildcards can be used in the SID field and using just the username is not super reliable.. but seems to be the only option...  Anyone done this and have any tips?

302
A
M
mlinkeyApprentice
 General
Password Safe API linking managed account to Managed System

We are looking to create a script that will use the Password Safe API calls to link a managed account to a managed system.  Not finding many examples on this.  Trying to follow the API doc’s but it is not clear in those which API calls to use.  Wondering if someone has does this already and willing to share some information how they did it?  Can easily get the list of managed systems, but not sure which call is the correct to link the managed account

3075
A
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
 General
Remote Support - Knowledge Article Publications (Aug 25 - Sep 1)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022808 - Jump Client Direct Download link does not work. Incorrectly prompts for Pathfinder authentication KB0022811 - How to run the session policy to simulator to check for permission issues KB0022815 - SAML IdP cloud groups showing as GUID's under Group Policies in Pathfinder KB0022828 - What is the 'Verified Administrator' for RS or PRA? Can it be changed or updated?

100
GloriaB
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
 General
Privileged Remote Access - Knowledge Article Publications (Aug 25 - Sep 1)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022808 - Jump Client Direct Download link does not work. Incorrectly prompts for Pathfinder authentication KB0022811 - How to run the session policy to simulator to check for permission issues KB0022815 - SAML IdP cloud groups showing as GUID's under Group Policies in Pathfinder KB0022820 - Vendor user cannot register recieves error: Email address from this domain is not allowed KB0022828 - What is the 'Verified Administrator' for RS or PRA? Can it be changed or updated?

20
GloriaB
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
 Windows & MacOS
Endpoint Privilege Management (Windows/Mac) - Knowledge Article Publications (Aug 25 - Sep 1)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021482 - Windows PowerShell (Admin) from start menu WinX menu does not match expected EPM-W on-demand rule KB0022376 - EPM-M limitation with Network Link Conditioner tool KB0022803 - Application definiton does not 'paste' after being successfully copied in Chrome KB0022810 - Windows Terminal prompts UAC instead of EPM-W message KB0022817 - Analytics is slow or times out after upgrade to EPM Cloud 25.6 MR1

50
GloriaB
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
 General
Entitle - Knowledge Article Publications (Aug 25 - Sep 1)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021522 - What are the differences between the Mongo databases that can be integrated with Entitle?

40
GloriaB
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
 General
BeyondInsight / Password Safe - Knowledge Article Publications (Aug 25 - Sep 1)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021463 - Password rotation failing - Functional account test fails with Error 53 - "The network path was not found". KB0022786 - Unable to view Workgroup from Smart Rule - Workgroup removed from Smart Rule KB0022804 - U-Series appliance Security Technical Implementation Guides (STIG) KB0022812 - After updating Appliance Management remote SQL server port get reset to port 1433 KB0022813 - How to setup Password Safe Mobile app KB0022814 - SQL memory shows 0% on appliance dashboard KB0022821 - ERRINFO_RPC_INITIATED_DISCONNECT_BY_USER KB0022823 - Unable to receive application audit events after upgrade KB0022826 - Failed to connect RDP session - NTSTATUS: STATUS_ACCOUNT_EXPIRED [0xC0000193] - ERRCONNECT_ACCOUNT_EXPIRED [0x00020019] KB0022830 - Unable to log in to Password Safe Mobile

50
GloriaB
BeyondTrust Employee
S
Straffe LyckeNewcomer
 General
Loss of elevation after appliance upgrade to 25.1.2

We’re having issues with our RS sessions automatically passing elevation to our technicians.  we were previously at 25.1.1 and had no issues with automatically passing elevation.  when we upgraded to 25.1.2 our rs sessions suddenly stopped automatically passing elevation on the majority of our rs sessions.  tia.

261
P
BeyondTrust Employee
J
JasperVeteran
 General
RDS Server

Do we have any documentation about making use of RDS servers for Application Session Management?I am trying to figure out how do we scale up RDS servers, whether we add additional RDS servers later on or is it just increasing the CPU/RAM on the RDS VM itself? Do we need a redundant RDS server for multi site (we have a multi-site Active-Active setup with a load balancer so just checking if we also require this redundancy)?

251
H
BeyondTrust Employee
H
HigorTrailblazer
 User Research
RODC

I am in a environment with 30 RODC and 3 RWDC. How to make sure my FA, MA and my Resource Brokers are forced to use one specific RWDC so I don´t have issue as I am facing today where my tasks are going to RO almost always

294
H
M
MichaelDVeteran
 Windows & MacOS
Microsoft Autopilot Release 2508 - Windows builds broken with EPMfW 24.3.334.0

Hi all -- MS released an update for Autopilot (2508) and since then, we are seeing our builds crash. If we remove EPMfW, build completes successfully. Is anyone else seeing this?  We just started seeing this on Monday, Aug. 25

935
M
B
Community Manager
BeyondTrust CommunicationsCommunity Manager
 General
Monthly Buzz - August - Insights
Monthly Buzz - August - Insights

Connecting Identity Security Insights to Microsoft Active Directory IntroductionIdentity Security Insights (Insights) connectors allows the integration of first- and third-party identity and account information with the BeyondTrust Insights console. The Insights platform uses this data to build identity analytics, detect identity security threats, and make security recommendations. Once configured, Insights automatically schedules and pulls data from the enabled connectors, and updates the console's dashboards and reports with new or changed recommendations and detections. Prerequisites The Microsoft Active Directory connector should be installed and configured on a member server within the Active Directory. The installer is provided for the tenant after completing the initial configuration. Ensure the following requirements are met before installation: Member Server: The installer must be run on a Windows Server joined to the domain the user would like Insights to access.  Service A

30
B
Community Manager

Badge Earners

  • BCA: AD Bridge
    Arif_786has earned the badge BCA: AD Bridge
  • BCIE: Password Safe
    KKadiogluhas earned the badge BCIE: Password Safe
  • BCSE: Password Safe
    Artvinlothas earned the badge BCSE: Password Safe
  • BCA: Password Safe
    spuwarhas earned the badge BCA: Password Safe
  • BCA: Endpoint Privilege Management - Mac
    T-Dawghas earned the badge BCA: Endpoint Privilege Management - Mac
Show all badges
Terms & ConditionsCookie settings