Skip to main content

Unanswered questions

44
P
prasadp87Trailblazer
 General
Password rotation through API user

Hello All,I am looking for guidance for API script which used for password rotation of any managed account.We are currently using shell script for password rotation, but it seems failing for Invalid user/Password event though password fetch script is working fine for same user.If anyone has sample script, please share or if anyone knows pointer to develop new script for this requirement please help. Thanks,Prasad 

214
P
C
Carlos MendonçaTrailblazer
 General
Password Safe - PWA - Extension BeyondTrust Google Chrorme

Hello, how are you?Please, how can the option be configured to not open this box for the user? The idea would be to only use the extension for auto-filling as I can use with the administrator account.    

122
C
A
ArnoApprentice
 General
Custom Link

Hi everyone,  Is there a possibility to display a custom link on the registered website at Password Safe, which points e.g. to a helpdesk page? We have documented all the steps in a portal. End users should read the documentation before opening a ticket. Regards

40
A
K
Kevin MUApprentice
 General
Feature requirement

Hello, is PASM able to do this : The solution must support backend database activity monitoring, including the ability to capture and log all database updates, including modifications made directly to the backend via SQL queries. The solution must be capable of tracking and recording executed SQL code, with sufficient detail to identify the nature of the changes. The solution functionality must include filtering and reporting capabilities based on date ranges, enabling administrators to view SQL activity executed within a specified timeframe. Thank you.

242
K
C
Carlos MendonçaTrailblazer
 General
Password safe - Features

Hello, how are you?I need support on how the features in password safe work. What would be the best practice recommendations for the solution and environment? Do you have any documentation? What to enable or not?

152
H
BeyondTrust Employee
W
way2qk4u2cApprentice
 Endpoint Security
Local admin rights required in an AD-HOC way

Hi All,  Currently I’m going through the EPM install / onboard process and was wondering if there is a way to give users local admin rights to install applications on the fly. Some installers just have so many commands to whitelist that this isn’t feasible during a 1 time install. I was hoping for like a “just in time” setup to raise full admin however, the on-prem version doesn’t include JIT setup only the cloud does. How have others accomplish this without the need to whitelist every individual command line? 

394
tclowater
BeyondTrust Employee
P
pvermaNewcomer
 General
Inspect /dev tools on a Web Jump on PRA

Does anyone know if we can leverage inspect /dev tools on a Web Jump on PRA? We have developers trying to inspect and open dev tools on the web page but looks like it doesn’t work?

141
M
BeyondTrust Employee
J
JCBassApprentice
 General
Insights on-premise appliance

When will Insights be available on-premise? For those under compliance rules and laws, cloud based is simply not an option. The product would be very beneficial to compliance and regulatory customers. 

262
J
K
kimberlyvApprentice
 General
Password Safe Propogation Actions: IIS Management Service Delegation

Hello, do you know if there is anything in the works to have managed account credentials also be updated in IIS > Management Service Delegation? 

172
K
R
rrueschjjApprentice
 General
PRA Shell Jump sudu/su and credential injection so that our admins can use sudo without needing to know their password.

In the ideas portal A10-I-249 someone suggested being able to re-inject credentials when running a sudo or su command. The idea was marked as already implemented. Is there any documentation on how to achieve this or can anyone provide steps to accomplish this without setting the sudoers file to passwordless?

203
Paulo144
A
abhatiaApprentice
 General
Onboarding of GCP, Azure and AWS assets

Hi Team, I’ve been trying to find the steps/process for onboarding of GCP, Azure and AWS assets. I’ve seen KBA for onboarding of accounts only from these cloud platforms. Regards,Aditya Bhatia

152
A
S
SanApprentice
 Windows & MacOS
How to uninstall EPM Windows agent, adapter, and package manager via Intune without using GUIDs

Hi all,Can we uninstall EPM components via Intune without using GUIDs in Uninstall Command.After update of every version of components, the GUIDs are changing and Intune doesn't have the capability of auto fetching updated GUIDs.So, are there any constant commands that can be used for uninstallation via Intune?

141
J
J
JasperVeteran
 Windows & MacOS
Remote helpers unable to see UAC prompts on EntraID joined Windows 11

Does anybody use EntraID joined Windows 11 devices with Intune? We have an issue with Remote Helpers not being able to see the UAC prompts when remoting in to other user’s machine as the prompts sit inside the Windows Secure Desktop. I have tried to disable the “User Account Control: Switch to the secure desktop when prompting for elevation” and rebooted my device but still unable to see the message from the secure desktop.

131
J
B
Binoy_DeyNewcomer
 Windows & MacOS
Can Privilege Management for Windows policy control User Account Control settings?

I am trying to modify User Account Control (UAC) settings on my test device where BeyondTrust Privilege management (BTPM) components (client, adapter, and package manager) are installed and running as expected. I am trying to set UAC as ‘Never notify’ but I am getting an error which says, ‘You must be logged on as an administrator on this computer to select this setting’. I am attaching the screenshot as well.This is required to be modified by few users in our environment for application installations, running scripts etc. Can anyone let me know if this modification of UAC settings can somehow be accommodated in BTPM Policy?

131
J
S
SFARising Star
 General
PRA-DATA AT REST ENCRYPTION INBUILT AVAILABLE?

Hello is there data at rest encryption available in PRA inbuilt? or need to configure with key management solutions? Found whitepaper etc but it just mentions steps to integrate with KMS.

151
A
BeyondTrust Employee
A
Avishka VithanageApprentice
 General
CISCO 'Enable' Password Management

We have a requirement to onboard Cisco devices into Password Safe. For privilege escalation, we need to use the 'enable' secret. The non-privileged user account and the enable secret use separate passwords.Is there a way to manage this scenario in Password Safe?

282
A
T
timbrigham-ocApprentice
 General
Netbios name when connecting via PRA not available?

Can the netbios name be made available for PRA and Password Safe, not just the domain name? domainname\username doesn’t work on all applications; some legacy platforms it has to be the netbios name. 

577
T
M
MudupuriApprentice
 General
On Privilege Remote access how can I link the Session policy to a bulk group policy with the help of API. I do not see any parameter of Session policy in Group policy

On Privilege Remote access how can I link the Session policy to a bulk group policy with the help of API. I do not see any parameter of Session policy in Group policy

81
R
BeyondTrust Employee
N
naveen_muduNewcomer
 General
Linking of Assets, Accounts & applications

I have a use case where we are using the domain accounts for accessing Network devices and windows. Say abc.domain@domain.com which is linked to a network device, Windows and an application. Similarly abc2.domain@domain.com, abc3.domain@domain.com. Linked with all the Network device, windows and application.I have done the linking of the managed accounts to systems (Network device, windows and application.)I have configured in the managed account smart rule mentioned that Managed account field=abc.domain@domain.com & Asset smart group= Windows. in the condition i have given the show managed account as smart group. Also mapped the user group to this smart group.We have also got applications which are running with the same account abc.domain@domain.com. applications are in Windows, network devices.We are able to see in the directory linked accounts it is showing only windows which is as expected and the account abc.domain@domain.com. But when seeing in the applications it is showing

271
J
BeyondTrust Employee
M
mcencienzoRising Star
 General
Difference between Scheduled Password Change and Force Change Password

Hi, Does anyone encountered scheduled password change fails due to permission denied error however if you use force change password, it successfully changed the password? The system is Ubuntu and I wonder, what’s the difference between those 2 functionality. The account settings option for the Ubuntu managed account is configured to use a functional account when changing password and Use Own Credential is disabled. If I try to simulate the changing of password on the server, the passwd <managed account> command doesn’t work due to an error showing “passwd: You may not view or modify password information for <managed account>”. If I run the command, sudo passwd <managed account>, it requires us to input the sudo password. With this two commands unable to work properly, I wonder why the force change password works? Any idea?  Cheers~!

261
J
BeyondTrust Employee
B
bpkothariApprentice
 General
Comparison between Privileged Identity and Password Safe

Need Comparison between Privileged Identity and Password Safe (including features, scalability, audit, troubleshooting, integration, APIs, architecture, User Interface etc etc? Is there any refernce document available to higlight why its a better than PI to management?

191
H
BeyondTrust Employee
S
SathishNewcomer
 General
how to setup email notifications to the service account owners once the password is rotated in password safe

We have the following use case:  Onboard the service account to password safeNotify the service account owners with the new password when the password is rotated in password safe. The password need to be communicated to the service account owners for any external service account usage beyond password safe  The service account password should be updated by the password safe on the underlying windows services/scheduled tasks/ IIS application pools.I would like to understand the feasibility on the email notifications, password updates on the services and any challenges that anyone faced while onboarding the service accounts. 

1063
H
BeyondTrust Employee
T
tmontagueNewcomer
 General
System Event viewer filled with warnings. What do these even mean?

I’ve noticed lately that our system event viewer in is filled with warnings.  Most of them are complete gibberish to me.  Most are like this but with different IDs: CPP: Postpone CQ item due to active Release Request Id:(3753), Expiration time: 5/29/2025 10:33:17 PM UTC - ChangeQueue: id=18576, MAid=663, FAid=, MSid=5, SubDt=2025-05-29 13:33:07 UTC, ChgDt=2025-05-29 13:33:07 UTC, Reason=R, ProcStartDt= UTC, NumFail=, RelID=, ReqID=3751, RemoteCl=false, OWA= These come in sometimes multiple times a minute.  Just for the last 15 minutes, there are 130 of these. There are over 5000 in the past 24 hours.  What is this trying to tell me?

141
MikeK
K
kimberlyvApprentice
 General
Secret Safe API 404 Error when using Python script

Hello,We are using the secret safe api to pull secrets and plug them into our applications. When testing our script in  PowerShell it works, however, in Python, we are seeing a 404 error. Any idea? Our RunAs user is a domain account. TIA!

334
K
A
Avishka VithanageApprentice
 General
Customer having issue that functional account saves files when user download files in remote app sessions

If a shared functional account is used to log into the application server (RDS), users can see files downloaded by others in the Downloads folder from previous sessions. Is there a way to prevent this behavior?

141
MikeK

Badge Earners

  • BCA: AD Bridge
    ErenYenerhas earned the badge BCA: AD Bridge
  • BCA: Endpoint Privilege Management - Linux
    ErenYenerhas earned the badge BCA: Endpoint Privilege Management - Linux
  • BCIE: Password Safe
    JawaadKhas earned the badge BCIE: Password Safe
  • BCA: Password Safe
    AJZhas earned the badge BCA: Password Safe
  • BCIE: Privileged Remote Access
    Tom Rattanachokhas earned the badge BCIE: Privileged Remote Access
Show all badges
Terms & ConditionsCookie settings