Skip to main content

Unanswered questions

41
A
abhijitdikshitNewcomer
 Windows & MacOS
How to block old version applications

I want to block applications running old version. How to block it based on min and max version as I tried adding it for chrome and did not work. I have chrome version 138.x.x.x I want to block if user is running less than mentioned version on machine. Can some one help? Below is my rule:Type : ExecutableApplication: Google ChromePublisher: Google LLCMax Version: 137.x.x.xI am still able to execute chrome with 138 version.

71
H
BeyondTrust Employee
M
Mohan UpadhayaApprentice
 General
Local Functional Account password rotate Error

we recently deployed BeyondTrust in our environment. so far it has been a learning process for me. I need help desperately about an issue i hope i can get help here. Thank you I have few dmz boxes in an address group and with local functional and scan accounts.  They all use the same functional account and password. on one of the six boxes I am getting error alert emailed with a message that the password rotate was failed Functional account..I have tried many suggested solutions including the article available here: https://beyondtrustcorp.service-now.com/csm?id=kb_article&sys_id=53adfd211b65e2106fe95287624bcb05. This error only occurs on server that is newly added to the group. The rest of the five servers are fine. This seemed to relate the Functional account on the machine. This VM was newly added to the existing group that already used a Functional account rotated password. I tested and i can login with both Functional and Scan accounts, they both are in local administrators. H

30
M
Prudhvi Keertipati
Prudhvi KeertipatiGuru
 General
Password Safe - SSH Proxy Session - Keep-Alive Connection

Is there way for the users to set the keep-alive count on the Putty client for those are launched from Password Safe SSH Proxy sessions?

133
Paulo144
H
HamzaTrailblazer
 General
RDP Linux using XRDP from PRA

we have linux server in which XRDP is installed. from console I cannot RDP the linux but I can do RDP from a server (jumpoint host).what am I doing wrong here? 

181
P
BeyondTrust Employee
I
immi563Rising Star
 General
Bulk smartrules creation

Hi Everyone I have one requirement wherein Admin and Standard ids are not matching for local dmz servers. Hence i need to do one to one mapping. I have around 400 admin ids and hence i am required to create 400 smart rules.I have checked all the options and dedicated mapping is not possible since account is local and admin and Standard are not matching. I wanted to check is there any API available that i can use to create the Smart rules in bulk using Postman or powershell utility?Awaiting response. thanks in advance  Regards Imran Aliyani

333
I
H
HamzaTrailblazer
 General
PRA Virtual Machine sizing

we are planning to move from PRA B-200 physical to VM. the article below doesn’t explain that how many concurrent jump sessions (RDP/Shell/WEB) a VM can handle in Active-Passive configuration. ( considering not jump client installed)Virtual Appliance installation  

40
H
S
ssethurajanApprentice
 General
X window forwarding using the X11

Vendor user is facing issues while trying to launch a shell jump session (via Jumpoint) from Mac endpoint. User is typing the below command to invoke the web console on the shell jump session but getting display error. Target Endpoint: Rocky Linux 8.9, 64-bitsystemctl enable --now cockpit.socket~]$ DataEditorError: DataEditor: Can't Open Display They also want to know if PRA shell jump supports X window forwarding using the X11 protocol. Any suggestions to resolve this problem?

1232
R
leonoehlinger
leonoehlingerApprentice
 General
Jump Clients not reconnecting

We often hear from our techs that Jump Clients stay offline even though the PC is only and reachable.Trying to restart the sra-pin Service or the whole PC does nothing.The only way you get this client back online is with the user clicking onto “Reconnect now”.As soon as you click reconnect now the client comes back online.Does anyone else have this problem or has an idea how we can get around this?Another problem is that after a reboot the Jump Client often takes more than 10 minutes to get back online. 

264
leonoehlinger
J
JackApprentice
 Windows & MacOS
EPM install issue in Autopilot build since July 2025 Windows patches

Hi all, has anyone seen the following issue we have been experiencing?Autopilot pre-provisioning has problems in the final stages if the EPM agent is installed during the Hybrid build and the OS level is Windows 11 23H2 July 2025.The Avecto driver (PGDriver.sys) seems to be clashing with the Autopilot final OOBE stage preventing the device from finishing on the correct Windows logon screen

1114
J
J
JackApprentice
 Windows & MacOS
EPM Feature Requests

Hi Beyond Trust community,I have a couple of Beyond Trust - Endpoint Privilege Management suggestions that I would like to share please: We recently found many devices had become disconnected from the EPM Console due to them being deleted. This was likely due to inactivity, where many machines were built in advance of a laptop migration and kept in storage. From the machines, it was not obvious there was a problem until some devices started to show symptoms that were fixed in an earlier policy revision. When the machine is checked, it still had an old policy revision listed. This means even our latest block rules were not working on these devices. To mitigate this issue, we would find the following agent features extremely useful:Feature Request: Ability to check policy name and revision in the Windows Registry / file or WMI etc.Reason: We can keep an active deployment that checks for the revision and if it falls behind we can have an automatic remediation.How we are currently evaluati

533
J
T
tmontagueRising Star
 General
Automatically linking multiple managed accounts to managed systems based on services

I’m trying to figure out if this is even possible.  I feel like it is, but I’m probably missing how to accomplish it.So we have 60 something Windows servers running SQL server.  We have 20 something AD accounts that run SQL on these various servers.  Ideally what I’d like to do is build a rule that adds the appropriate linked managed system to each managed account that is running the SQL services on those systems. So the end result would be I could go into each account, and see the system or systems that it is running SQL on.I’d really like this to work automatically so that any time a new server is added, or an account is added to another system, it automatically gets added to the list of linked systems for that account.    I can easily create rules to get a list of all of these servers running sql.  I can also easily create a rule that shows me all of these accounts (they all start with the same thing).  But is there a way to then just link each account to the appropriate server with

7410
rhagerm
P
pvermaNewcomer
 General
Inspect /dev tools on a Web Jump on PRA

Does anyone know if we can leverage inspect /dev tools on a Web Jump on PRA? We have developers trying to inspect and open dev tools on the web page but looks like it doesn’t work?

552
R
B
bt101Veteran
 General
PasswordSafe Discovery Scan returns IP instead of hostname

Hello, we have BI PasswordSafe on-prem . When we do IP Discovery scan against 50+ network devices for some of the devices , IP address is added as an Asset after the scan, instead of hostname , I think IP Discovery scan would just query the DNS and add the hostname as an asset along with IP address as details for that asset. All devices have similar DNS entries (hostname : IP ). But for some devices the scan add hostname as an asset - which is the desired outcome , but for others IP address is added as asset

503
H
M
MudupuriApprentice
 General
Can we connect to SQL DB with a different instance example sqlserver\abc

Can we connect to SQL DB with a different instance example sqlserver\abc. how can I use on the SQL Server Tunnel in the PRA to connect.

70
M
E
edwinb77Apprentice
 General
Team activity event types explained

We're extracting the team activity reports and add this to our BI reporting to monitor usage.On the event type we see several events and I'm looking to filter the ones to connect and disconnect from a session.I think the below are the ones that I'm looking for but not sure: Conference Member Added -> connecting to a workstation Conference Member Departed -> disconnecting from a workstation Am I correct in this assumption?

100
E
P
prasadp87Trailblazer
 General
Failover Process for Active Passive Setup

Hello Everyone,We have a setup of Active -Passive environment for Beyond Trust.We are planning to test Failover for these environments. I am looking for any pointers or document about stepwise process to conduct this failover and process to fail back. Thanks,Prasad

151
H
BeyondTrust Employee
H
HigorTrailblazer
 General
Permission to SAML group

Hi, I am trying delegate the following permission to SAML group but nothing happens with end user permission. Is there a reason for that?Analytics and ReportingLicense ReportingUser Audits Higor

131
rhagerm
B
bt101Veteran
 General
PRA web jump credential injection times out

Hello, we have set up PRA web jump for multiple websites including some Cisco device GUIs. With Cisco DNA / Catalyst center website it is timing out. This website uses HTML tags that change for each page refresh. Based on the jump point logs , PRA successfully detects the tags for username, password and submit button but at the end it gives credential injection timed out error. We have the timeout set to max value of 30 seconds. PRA version is 23.1.2. If we select no credential the website opens fine as PRA web jump. I can log in by manually entering the password. The webpages before and after login are different\. (I see a KB that says it may timeout of URL doesnt chnage after password injection). I read in another post that the ‘inject credentials in current URL’ doesn’t work for web-jumps .Is there any workaround method using PRA. Like RDP to a server , open browser and click on inject creds button. Or anything needs to be changed in web jump backend config on jump-point which can p

1362
B
X
xNourahxApprentice
 General
Unauthorized RDP Sessions via Resource Brokers

We have discovered that some users are initiating RDP sessions from inside Password Safe Resource Brokers to other internal servers. Please advise on recommended configuration, policy settings, or network restrictions to prevent this behavior.

271
Prudhvi Keertipati
P
prasadp87Trailblazer
 General
Email notifications for Password change and next password change date

Hello,We have the following use case related to email notification - Notify certain email IDs with message about password is rotated in password safe. Notify certain email IDs about next password change date.I have seen below KBA article for email notification- BeyondInsight / Password Safe - How to add, change or remove email notificationsDoes ‘release notifications for Managed Accounts’ help with above requirements.I would like to understand the feasibility on these email notifications. Thanks,Prasad

163
H
BeyondTrust Employee
N
Nagapriya JRising Star
 General
Import Secrets in Secret Safe

The notes is not getting imported while i am importing the secrets

3015
R
H
HigorTrailblazer
 General
Is there any documentation or guide to help users to use Copy and Past file in Linux system?

Is there any documentation or guide to help users to use Copy and Past file in Linux system?

103
MikeK
V
vinothNewcomer
 General
Unable to login Support portal

The service portal logs out immediately after logging in via SSO, preventing access to open cases.

302
MikeK
P
prakash.rRising Star
 General
How to enable "Automatic Password Change" for local Linux servers?

Hi all,I’m in the process of onboarding over 100 local Linux servers into BeyondTrust Password Safe, and I’m looking for a more efficient way to handle FA (Functional Account) assignment during setup.Steps I’ve taken so far: Added all 100+ servers to an Address Group Created an asset-based Smart Rule Set the assets within the Smart Rule to be Managed by Password Safe However, when I try to enable Automatic Password Change Options, I’m only able to assign one FA (From smart rule). Since each server requires a unique FA, manually creating individual Smart Rules for each server would be highly inefficient.Question:Is there a way to automate or bulk assign one FA per server without having to create a separate Smart Rule for each one?Thanks in advance for your help!

11211
Paul Dann
BeyondTrust Employee
P
Pritish189Newcomer
 General
Automation of elevation report in EPM PMC

Hi everyone, Does anyone know how to automate downloading and sending elevation report in EPM PMC ?Can it be done using API? If yes, then how?If there is any KB articles related to this, please share.

91
H
BeyondTrust Employee

Badge Earners

  • BCIE: Privileged Remote Access
    Flohas earned the badge BCIE: Privileged Remote Access
  • BCIE: Privileged Remote Access
    Ro-Manhas earned the badge BCIE: Privileged Remote Access
  • BCSE: Privileged Remote Access
    Ro-Manhas earned the badge BCSE: Privileged Remote Access
  • BCA: Endpoint Privilege Management - Linux
    Mudupurihas earned the badge BCA: Endpoint Privilege Management - Linux
  • BCIE: Privileged Remote Access
    vilasboashas earned the badge BCIE: Privileged Remote Access
Show all badges
Terms & ConditionsCookie settings