PRA Vault - Endpoint automation

Question

Hello!We are using PRA Jump Client to rotate local account password on a workstation.  Is there a way to update it in auto-logon configuration . Preferably by running sysinternals auto-logon via a batch script. I think we can update the password in a service (log-on user) using PRA vault but not auto-logon .Is there a way to pass this vaulted password to a script via Endpoint automation ?

PhillC · Accepted Answer

Hello ​@bt101- I believe this is possible through the Config API, and it’sVault section - I have linked the specific Vault Credential Check Out API Feature here:https://docs.beyondtrust.com/pra/reference/apiconfigvaultaccountcheck-outand Credential Rotate API Feature:https://docs.beyondtrust.com/pra/reference/apiconfigvaultaccountrotatePlease let us know how you get on here!

bt101 · Answer

Thank you ​@PhillCInteresting, basically in Endpoint Automation I should deploy and launch a script that will fetch the credential from PRA vault (which is being rotated on schedule via Jump Client) and use it to run commands that will update the auto-logon config .I think the Endpoint Automation related scripts and logs get cleared from the system ( I will go through documentation) .I think this will work . I will test it out. Thank you so much!

PRA Vault - Endpoint automation

4 replies

Badge Earners

Badge Earners

Sign up

Login to the community