Skip to main content

Unanswered questions

39
J
jcundiffNewcomer
 Windows & MacOS
Question about Beyond Trust On-Prem upgrade

Hi Everyone, We are an on-prem BeyondInsight appliance EPM customer for almost 2 years now and need to upgrade our agents as well as our server appliance.  Migrated over from Powerbroker. Someday in the future may go to cloud but not in the works yet.Currently on 23.9.225 for our agents and BI Server is at 23.1.0.2407.  I was told two different things by support, EPM support stated that the agent and server are independent of each other and can be updated separately whenever, and I was also told that the Server needed to updated first by BeyondInsight support.  Just looking for some guidance or experience on upgrading to the latest version on-prem.  We have close to 12,000 pc’s, so I would like it to go smoothly without much interruption.  Thanks for any help!

252
MikeK
G
gsacuxipoApprentice
 General
Automate Password Management for Windows Local Scan Accounts and Use it as Scan Credential

Hello dear all,We want to make the Windows local scan accounts manageable by onboarding them into Password Safe using a Managed Account Smart Rule. However, for this to work, the local account must appear under the Advanced Details of the asset before it can be automatically onboarded.The issue is that, for some managed systems (MS) where we want to onboard the local scan account, these accounts do not show up in the asset’s Advanced Details.To resolve this, I understand that we need to perform a new scan on those systems using the previous local scan credential, so the system can retrieve and display the local account information. But this process is quite painful, especially considering there are over 30 managed systems, and we’d have to reconfigure all scheduled scans afterward to use the new Managed Account scan credential. As you know, you can’t change the scan credential to a managed account after the scan is created — it must be set during the initial scan setup.Do you have any

494
MikeK
B
BeyondTrust Employee
Brett McNeilBeyondTrust Employee
 Technology Alliances & Integrations
Setting up a Zendesk integration with PMC Webhooks

The integration described in this guide uses webhooks to allow EPM to automatically send JIT Application Notifications using Zendesk.ImportantThird-party documentation is subject to change. Updates might not be reflected in BeyondTrust documentation. For the most up-to-date information, visit Zendesk's Creating webhooks to interact with third-party systems documentation.Requirements Admin access to Zendesk for service solution A Zendesk user account is assigned to a team member with the Agent Support role API Token access in the Zendesk API Access to a site with EPM An EPM account with administrator privileges Configure Zendesk for integrationCreate a team member with an Agent Support roleLog in to the Zendesk admin portal, and follow these steps to create a team member: In the left menu, click People. Under Team, click Team Members. Click Create team member. Enter a username. This name is used for creating the webhook in BeyondTrust EPM. Assign the Agent role to this u

100
B
BeyondTrust Employee
frank.colvin
frank.colvinVeteran
 General
SSH using Secure CRT, Winscp or sftp clients

we are rolling out linux/unix managed systems and we are having great success with putty, however our developers user Secure CRT, winscp and sftp clients. does anyone have any advice/guidance? 

1503
frank.colvin
M
mrvl-kblockApprentice
 General
Secrets Safe Entitlement Report Not Showing Secrets in Safe Folders

When running the Secrets Safe Entitlement report, it is not reporting on any secrets that are stored in any of the folders within the Safe.  Is this expected?

214
M
P
prasadp87Trailblazer
 General
Manage AWS secrets using BeyondTrust

Hi Team,We have a new business requirement regarding the management of AWS secrets. We need to handle these secrets in AWS Secret Manager in conjunction with BeyondTrust. Do we have any document or any integration KBA that explains the process.Does ‘AWS Scan Target Collector’ helps in this? What is the purpose this connector?Looking forward to your input on this.Thanks,Prasad

473
H
BeyondTrust Employee
D
donApprentice
 General
Failed to create Endpoint Privilege Management Policies in BeyondInsight

Hi guys, i cannot find a button for “ Create Policy” , anything i can do?

163
D
C
cmscottRising Star
 Windows & MacOS
Clear explaination on Global Priority

HelloOne feature of On-Prem EPM which I have not yet found a clear explanation in the documentation is how Global Priority actually works in on prem EPM. While I understand that it has to be configured when there is a default organization - a detailed explanation on  how it works (in relation to organizations) appears to be missing.

421
N
BeyondTrust Employee
D
DerekNewcomer
 General
I couple issues since PRA 25.1.2 update

I’ve noticed a couple annoying issues since updating PRA from 25.1.1 to 25.1.2. We only exclusively use Jump Clients to Windows Servers and Clients through the console, and here’s what I’ve noticed:During the connection process after logging into Windows, if you switch focus to a different tab/connection and then come back, the jump client will have connected, but you will not have mouse control. You can use keyboard control or use any of the quick commands from the Console, but in order to get mouse control back, you must fully disconnect and reconnect back into the jump client, ensuring you don’t switch focus to a different server. This one is pretty consistent and can be reproduced almost every time. This one is a little more random and doesn’t always happen, but I’ve noticed it happening often now since the PRA update. In order to launch applications in Windows, I have the habit and clicking the Windows Start key and immediately start typing the product/application I need to launch

521
R
R
rgrimmNewcomer
 General
Jump Client Installer Best Practices

I’m in the process of re-doing some Jump Client installers (previously team configured it all) and I’ve got some questions burning a hole in my brain.What are the primary benefits / drawbacks of using a Windows MSI vs EXE installer for persistent connections? In my testing, I’ve had far more install success with EXE’s than MSI’s in Configuration Manager deployments. Are the Jump Client installers tied to the user that created it in any way? We seem to run into weird issues with clients failing to install when the user that created it has left the organization. As a result, a BT support rep suggested creating the Jump Clients as the local admin. Is there any way, whatsoever, to view/edit all the settings created for a Jump Client after hitting Create? All I can see is Delete/Extend/Download. Do you have any reasons for using installation Overrides in your organization? Do you have any other useful nuggets of wisdom around Jump Client installers?Again, I’ve gone through all the documenta

331
M
L
lineVeteran
 General
Functionnal account and RDS Apps

Hi, I set the functionnal account for application (using RDS) for many users, I have one RDS Server on which i install all the apps. I can see that when one users launch the apps, the functionnal account disconnect on the other person that was using the apps, why? Is there any setting i missed? The functionnal account is suppose to work at the same time, for many users. Best,

402
L
S
Sathiya.KNewcomer
 General
Discovery Scan did not retrieve all details of the Windows server

We performed a discovery scan using both the Scan account and the Functional account. However, the scan only returned the IP addresses—hostnames and full server details were not retrieved.Kindly assist and guide me on the troubleshooting steps I should follow to resolve this issue.

282
J Glasscock
I
immi563Rising Star
 General
how to find who added user in Password safe

Hi All IS there any way we can find who added a user in password safe using audit report/audit eventI have one user in BT for which I need to find who has actually added it in BT console. Awaiting response.  Regards,Imran Aliyani

321
rhagerm
M
MudupuriApprentice
 General
more than one Integration of ServiceNow ITSM with Remote Support

Create more than one Integration with Service now ITSM tool, if a customer has different entities and has different ITSM tools like Servicenow and Fresh Desk. 

141
T
BeyondTrust Employee
A
Ajay ChaurasiaNewcomer
 Windows & MacOS
Exam Retake

I have exhausted my exam attempts for Endpoint Privilege Management - Windows: Administration Exam? How can I get another attempts for this?

421
H
BeyondTrust Employee
S
Suresh ChimmiriNewcomer
 General
BeyondInsight/PAssword Safe - Application Wrong password Injection

Hi All,We are experiencing an ongoing issue affecting a single user. When launching the application via the user’s PasswordSafe vault, incorrect credentials are being injected exclusively for this user. Application launch functions correctly for all other users. The application is deployed on an RDS server, and the affected user has the appropriate permissions on the RDS environment.Troubleshooting steps performed: Password reset in BeyondInsight User profile recreated on the RDS server Application removed and re-added in the user’s PasswordSafe vault Application launch attempted via incognito browser session Steps not yet performed: Removing the user’s privileged account from PasswordSafe and reprocessing the SmartRules to add it back Please advise if any troubleshooting steps are missing.

161
Prudhvi Keertipati
I
immi563Rising Star
 General
Change Reprocessing Limit on smartrule using API

Hi TeamIs there any API available that we can use to Set/change reprocessing limit on Smart rule. We have a requirement where we need to change the reprocessing limit of smart rules form default to once. I dont want to go for quick rule option. I need to change it on smart rules .I am not able see the API that allows to set it . Need help here. Regards,Imran Aliyani

161
Paulo144
J
JackRising Star
 Windows & MacOS
In-place upgrade of Privilege Management for Windows agent

When upgrading EPM by deploying the latest version and allowing it to upgrade silently, we have seen that the fingerprint reader and camera stop working until a reboot is performed. Has anyone seen this issue before?Ideally we want to upgrade the agent silently with no reboot, without affecting the fingerprint reader and camera. If there is no alternative, we will need to prompt the user to reboot.We used the same upgrade method for the last upgrades we did and didn’t see this issue before.Thanks.

262
J
S
ShrayApprentice
 Windows & MacOS
Installation of BT EPM on VDIs(Persistent and Non-Persistent)

Installation of BT EPM on VDIs(Persistent and Non-Persistent) - What’s the process, does master image report to cloud console or only child images report? also what is the duplication that can happen

913
J
J
JasperVeteran
 Windows & MacOS
Multiple policies applied to same endpoint

Is it possible to point different policy to the same endpoint if I have multiple environment? I have a Prod and a Test Environment. At the moment, I install the Production Package Manager on endpoint 1 if I want to deploy the prod policy but if I want to do a test or play around with some policies from Test environment, I have to uninstall the Prod app installed on endpoint 1 and install it the Test instance definition for the Test PkgMgr. Is there an easier way to do this instead of doing the uninstall/reinstall pkg? I have seen one time from the vendor support showing me two different policies running from one machine. You can view this when you refresh your BT policy and it showed the two different Active policies at the top. I believe that would be adding the policy xml on the same folder where it sits inside the DPC Cache folder.

161
J
A
Anil ReddyApprentice
 Windows & MacOS
How the process of adding exclusions and clearly explain which settings would need to be altered

HI Team, I am trying to configuring the EPM for windows .Can any one please provide me the process of exclusions. Thanks. 

1324
Caleb Kershaw
BeyondTrust Employee
E
edwinb77Apprentice
 General
Team activity event types explained

We're extracting the team activity reports and add this to our BI reporting to monitor usage.On the event type we see several events and I'm looking to filter the ones to connect and disconnect from a session.I think the below are the ones that I'm looking for but not sure: Conference Member Added -> connecting to a workstation Conference Member Departed -> disconnecting from a workstation Am I correct in this assumption?

181
T
BeyondTrust Employee
M
MudupuriApprentice
 General
Can we connect to SQL DB with a different instance example sqlserver\abc

Can we connect to SQL DB with a different instance example sqlserver\abc. how can I use on the SQL Server Tunnel in the PRA to connect.

241
M
BeyondTrust Employee
M
Mohan UpadhayaApprentice
 General
Local Functional Account password rotate Error

we recently deployed BeyondTrust in our environment. so far it has been a learning process for me. I need help desperately about an issue i hope i can get help here. Thank you I have few dmz boxes in an address group and with local functional and scan accounts.  They all use the same functional account and password. on one of the six boxes I am getting error alert emailed with a message that the password rotate was failed Functional account..I have tried many suggested solutions including the article available here: https://beyondtrustcorp.service-now.com/csm?id=kb_article&sys_id=53adfd211b65e2106fe95287624bcb05. This error only occurs on server that is newly added to the group. The rest of the five servers are fine. This seemed to relate the Functional account on the machine. This VM was newly added to the existing group that already used a Functional account rotated password. I tested and i can login with both Functional and Scan accounts, they both are in local administrators. H

162
Paulo144
I
immi563Rising Star
 General
Unable to assign Smart Groups to user group via API

Hello All, I have one requirement where I am required to assign the smart group to user group VIA API. I am using below API to get this done in password Safe POST UserGroups/These are parameters I am setting in Body {"groupName":"from API","groupType": "BeyondInsight","description": "from API","SmartRuleAccess" : "[ { SmartRuleID: 10249, AccessLevelID: 1 } ]"} After executing the API, group is getting created however , Smart group is not getting assigned to user group.  Smart rule with Rule Id 10249 exists in environment and it is active. AccessLevelID=1 is to be used to provide the readonly permission. Hence I am setting the same .  Can anyone please check and let me know what’s the problem here, why Smart group not getting enabled via API? Is there anything that I am missing while configuration ?Awaiting your response  Regards,Imran Aliyani

231
Arno

Badge Earners

  • BCA: Password Safe
    SFAhas earned the badge BCA: Password Safe
  • BCIE: Endpoint Privilege Management - Windows
    Abuhas earned the badge BCIE: Endpoint Privilege Management - Windows
  • BCIE: Password Safe
    Abuhas earned the badge BCIE: Password Safe
  • BCIE: Password Safe
    Charulatha Shas earned the badge BCIE: Password Safe
  • BCA: Privileged Remote Access
    Peruhas earned the badge BCA: Privileged Remote Access
Show all badges
Terms & ConditionsCookie settings