Skip to main content

Recently active topics

94
P
prasadp87Trailblazer
 General
Password rotation through API user

Hello All,I am looking for guidance for API script which used for password rotation of any managed account.We are currently using shell script for password rotation, but it seems failing for Invalid user/Password event though password fetch script is working fine for same user.If anyone has sample script, please share or if anyone knows pointer to develop new script for this requirement please help. Thanks,Prasad 

214
P
C
ChaseApprentice
 General
Remote Support 25.1.1 constantly goes down

Has anyone else’s Remote Support appliance been going down constantly?  Our cloud appliance which is on 25.1.1 has been going down multiple times per week since upgrading.  We’ve opened numerous tickets and Support has been dead silent on the issue for weeks now.  Just curious if anyone else is experiencing issues with Remote Support 25.1.1Having no insight to the backend is proving it difficult to explain to our end users and leadership why this keeps occurring especially during business hours.

371
B
BeyondTrust Employee
C
Carlos MendonçaTrailblazer
 General
Password Safe - PWA - Extension BeyondTrust Google Chrorme

Hello, how are you?Please, how can the option be configured to not open this box for the user? The idea would be to only use the extension for auto-filling as I can use with the administrator account.    

122
C
C
Carlos MendonçaTrailblazer
 General
Password Safe - PWA - Session Time

Hello, how are you?How do you enable the session time for password safe? The session time is extremely short.

112
C
A
ArnoApprentice
 General
Custom Link

Hi everyone,  Is there a possibility to display a custom link on the registered website at Password Safe, which points e.g. to a helpdesk page? We have documented all the steps in a portal. End users should read the documentation before opening a ticket. Regards

40
A
K
Kevin MUApprentice
 General
Feature requirement

Hello, is PASM able to do this : The solution must support backend database activity monitoring, including the ability to capture and log all database updates, including modifications made directly to the backend via SQL queries. The solution must be capable of tracking and recording executed SQL code, with sufficient detail to identify the nature of the changes. The solution functionality must include filtering and reporting capabilities based on date ranges, enabling administrators to view SQL activity executed within a specified timeframe. Thank you.

242
K
C
Carlos MendonçaTrailblazer
 General
Password safe - Features

Hello, how are you?I need support on how the features in password safe work. What would be the best practice recommendations for the solution and environment? Do you have any documentation? What to enable or not?

152
H
BeyondTrust Employee
B
Community Manager
BeyondTrust CommunicationsCommunity Manager
 Company News
Who is BeyondTrust?

BeyondTrust is the global identity security leader protecting Paths to Privilege™. Our identity-centric approach goes beyond securing privileges and access, empowering organizations with the most effective solution to manage the entire identity attack surface and neutralize threats, whether from external attacks or insiders. BeyondTrust is leading the charge in transforming identity security to prevent breaches and limit the blast radius of attacks, while creating a superior customer experience and operational efficiencies. We are trusted by 20,000 customers, including 75 of the Fortune 100, and our global ecosystem of partners. Learn more at www.beyondtrust.com. 

30
B
Community Manager
W
way2qk4u2cApprentice
 Endpoint Security
Local admin rights required in an AD-HOC way

Hi All,  Currently I’m going through the EPM install / onboard process and was wondering if there is a way to give users local admin rights to install applications on the fly. Some installers just have so many commands to whitelist that this isn’t feasible during a 1 time install. I was hoping for like a “just in time” setup to raise full admin however, the on-prem version doesn’t include JIT setup only the cloud does. How have others accomplish this without the need to whitelist every individual command line? 

394
tclowater
BeyondTrust Employee
K
Kevin MUApprentice
 General
General EPM knowledge

If i use PASM to access my servers, do I need EPM on those servers ? 

162
K
B
bt101Veteran
 General
Log Retention Period for Session Recordings

Just trying to see what is your current data retention period for Session Recordings. I understand this depends on various factors - compliance requirements, deployment size/usage , cost-benefit, Org maturity level   etc. But posting this to get a sense of how other users are managing it . We have around 60-90 days live on appliance, plus another 90 days on a network share. As the usage increases the session recordings data is growing exponentially. But at the same time investigations may require some historical data as well. 

1736
P
BeyondTrust Employee
A
AnilreddyRising Star
 General
From On prem to password safe cloud migration

HI All, Good dayDo you have any document/article to migrate from on-prem to password safe cloud. Thanks and looking for your response

8110
H
BeyondTrust Employee
P
pvermaNewcomer
 General
Inspect /dev tools on a Web Jump on PRA

Does anyone know if we can leverage inspect /dev tools on a Web Jump on PRA? We have developers trying to inspect and open dev tools on the web page but looks like it doesn’t work?

141
M
BeyondTrust Employee
Scatts
BeyondTrust Employee
ScattsBeyondTrust Employee
 Windows & MacOS
You asked, we listened….Policy Difference: EPM Cloud 24.6

You asked, we listened…. with over 200 votes in our Aha! Ideas portal, the most popular feature request for EPM, and it is here….Policy Difference. Users will be able to compare policy revisions, pinpoint changes, track who made them and when, solving for auditing and streamlining policy troubleshooting use cases. This feature presents differences between two policy revisions in an easy-to-read, text-based format, allowing for enhanced control over policy management. Save time and gain full visibility into policy changes with our intuitive policy revision comparison tool, scheduled to be released in EPM Cloud 24.6. Here is a sneak preview:  

68415
M
J
JCBassApprentice
 General
Insights on-premise appliance

When will Insights be available on-premise? For those under compliance rules and laws, cloud based is simply not an option. The product would be very beneficial to compliance and regulatory customers. 

262
J
K
kimberlyvApprentice
 General
Password Safe Propogation Actions: IIS Management Service Delegation

Hello, do you know if there is anything in the works to have managed account credentials also be updated in IIS > Management Service Delegation? 

172
K
G
gabriel.restrepoApprentice
 General
How to Perform SCP/SFTP Transfers Between Managed Linux Systems via Password Safe?

Hello community,I have a question regarding our use of Password Safe. In our organization, we use Password Safe to access privileged SSH sessions. However, a question recently came up: since Password Safe is our only access method to managed Linux systems and credentials are never exposed to users, we're wondering how we could securely perform SCP or SFTP file transfers between two of our managed Linux systems.Has anyone encountered a similar scenario or found an effective approach for handling file transfers in a Password Safe-controlled environment?Any suggestions would be greatly appreciated.

283
Paulo144
C
Carlos MendonçaTrailblazer
 General
How to reset the admin console password for Password Safe. Admin account

How do I change the administrator password for the password safe console?

254
C
R
rrueschjjApprentice
 General
PRA Shell Jump sudu/su and credential injection so that our admins can use sudo without needing to know their password.

In the ideas portal A10-I-249 someone suggested being able to re-inject credentials when running a sudo or su command. The idea was marked as already implemented. Is there any documentation on how to achieve this or can anyone provide steps to accomplish this without setting the sudoers file to passwordless?

203
Paulo144
A
abhatiaApprentice
 General
Onboarding of GCP, Azure and AWS assets

Hi Team, I’ve been trying to find the steps/process for onboarding of GCP, Azure and AWS assets. I’ve seen KBA for onboarding of accounts only from these cloud platforms. Regards,Aditya Bhatia

152
A
S
SanApprentice
 Windows & MacOS
How to uninstall EPM Windows agent, adapter, and package manager via Intune without using GUIDs

Hi all,Can we uninstall EPM components via Intune without using GUIDs in Uninstall Command.After update of every version of components, the GUIDs are changing and Intune doesn't have the capability of auto fetching updated GUIDs.So, are there any constant commands that can be used for uninstallation via Intune?

141
J
J
JasperVeteran
 Windows & MacOS
Remote helpers unable to see UAC prompts on EntraID joined Windows 11

Does anybody use EntraID joined Windows 11 devices with Intune? We have an issue with Remote Helpers not being able to see the UAC prompts when remoting in to other user’s machine as the prompts sit inside the Windows Secure Desktop. I have tried to disable the “User Account Control: Switch to the secure desktop when prompting for elevation” and rebooted my device but still unable to see the message from the secure desktop.

131
J
B
Binoy_DeyNewcomer
 Windows & MacOS
Can Privilege Management for Windows policy control User Account Control settings?

I am trying to modify User Account Control (UAC) settings on my test device where BeyondTrust Privilege management (BTPM) components (client, adapter, and package manager) are installed and running as expected. I am trying to set UAC as ‘Never notify’ but I am getting an error which says, ‘You must be logged on as an administrator on this computer to select this setting’. I am attaching the screenshot as well.This is required to be modified by few users in our environment for application installations, running scripts etc. Can anyone let me know if this modification of UAC settings can somehow be accommodated in BTPM Policy?

131
J
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
 General
Remote Support - Knowledge Article Publications (Jun 2 - Jun 9)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021283 - How to configure Remote Support for representatives for integration with PortalGuard KB0022421 - Is the IP address assigned to the RS or PRA Cloud instance static? Can it be provided? KB0022428 - RDP Jumps failing when using xRDP or FreeRDP "Unknown connection error. 2001C" KB0022444 - Can USERID and DATETIMESTAMP be used in the Integration Client recording file format name? KB0022475 - Jump Client prompts for application selection after upgrade despite configuration KB0022483 - Is the recording session retention configurable? KB0022487 - Can the timeline for keeping Session Recordings be reduced to less than 90 days? KB0022488 - Is there a way to stop sessions from being recorded? KB0022495 - How to uninstall a Jump Client from a Linux system KB0022509 - Unable to concurrent

70
GloriaB
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
 General
Privileged Remote Access - Knowledge Article Publications (Jun 2 - Jun 9)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022421 - Is the IP address assigned to the RS or PRA Cloud instance static? Can it be provided? KB0022428 - RDP Jumps failing when using xRDP or FreeRDP "Unknown connection error. 2001C" KB0022444 - Can USERID and DATETIMESTAMP be used in the Integration Client recording file format name? KB0022452 - Using an AD vault account to launch an SQL tunnel fails - Login failed. The login is from an untrusted domain and cannot be used with Integration authentication. KB0022475 - Jump Client prompts for application selection after upgrade despite configuration KB0022483 - Is the recording session retention configurable? KB0022488 - Is there a way to stop sessions from being recorded? KB0022495 - How to uninstall a Jump Client from a Linux system KB0022505 - Unable to OIDC authenticate in Access Console -

60
GloriaB
BeyondTrust Employee

Badge Earners

  • BCA: AD Bridge
    ErenYenerhas earned the badge BCA: AD Bridge
  • BCA: Endpoint Privilege Management - Linux
    ErenYenerhas earned the badge BCA: Endpoint Privilege Management - Linux
  • BCIE: Password Safe
    JawaadKhas earned the badge BCIE: Password Safe
  • BCA: Password Safe
    AJZhas earned the badge BCA: Password Safe
  • BCIE: Privileged Remote Access
    Tom Rattanachokhas earned the badge BCIE: Privileged Remote Access
Show all badges
Terms & ConditionsCookie settings