Skip to main content

Solved

77 Topics
A
AndyHTrailblazer
asked in General
PRA failover: Is there a way to automatically have the first appliance reclaim the primary role once it comes back online?

Hello,I am currently testing our PRA failover setup, which uses the DNS Swing method.Configuration:Setting Primary site setting Backup site setting Enable Backup Operations off on Auto data-sync interval 5 minutes 5 minutes Bandwidth limiting unlimited  unlimited Enable Automatic Failover on on Primary site instance timeout 5 minutes 5 minutes Below are the test steps and observations:Test Steps:1. Both appliances synchronized successfully.2. Shut down the primary appliance.3. The load balancer automatically updated the DNS to point to the secondary appliance.4. After a few minutes, the secondary appliance became the primary.5. Powered the first appliance back on.6. The load balancer automatically updated the DNS back to the first appliance.7. However, after waiting for 10 minutes, the primary role remained with the second appliance.Question:Is there a way to automatically have the first appliance reclaim the primary role once it comes back online?Thank yo

442
A
B
bt101Veteran
asked in Windows & MacOS
app parameters for PRA - BT Desktop Agent based app launch and cred injection

Hello! is there any documentation that includes example parameters/strings that should be used while launching apps using PRA BT desktop agent. Admin guide has details of configuration options but nothing further e.g. example strings. I am able to connect to RDP using first set of  credentials , at one time was able to launch web browser but later started seeing error in chat windows that says file name/path could not be found. 

252
B
B
bt101Veteran
asked in Windows & MacOS
access denied error while installing dinocapture app

Hello, I am seeing access denied error while installing below app. The policy allows child processes with Full Admin token. In EPM Analytics I see that child processes are getting the token assigned. https://www.dinolite.us/download/  Dinocapture 2.0 In Process Explorer it shows only 4 child processes. These are getting Full Admin assigned per PMC logs.I couldn’t see any processes accessing the said files from error screenshot when checked in handle.exe.Attaching the logs , in case anyone has seen similar errors in other apps and got any pointers to troubleshoot further. The install works fine with local admin user. 

223
N
BeyondTrust Employee
A
AndyHTrailblazer
asked in General
Questions Regarding PRA Failover Implementation

Hello,I am currently implementing PRA failover using the guide available at BeyondTrust PRA Failover Documentation, and I have a few questions that I hope you can help with: I’ve attached our network diagram. Based on the failover guide, it seems that the only applicable method for our setup is DNS Swing. This is because the two appliances are located in separate data centers with different IP schemas, making the Shared IP method unfeasible. Additionally, since the data centers have different public IP addresses, NAT Swing would not work either. Could you please confirm if my understanding is correct? Regarding DNS Swing: When the primary PRA fails, do I need to manually log in to the DNS server and update the domain name to point to the backup PRA's public IP address? Do I also need to log in to the backup PRA to change its role to primary, and conversely, log in to the original primary PRA (once recovered) to switch its role to backup? The guide mentions the following no

313
T
BeyondTrust Employee
R
Rohit NikamApprentice
asked in General
Issue with BYOT Option – Remote RDP Sessions Terminating

Hello,I am experiencing an issue with the Bring Your Own Tool (BYOT) option when attempting to open a Remote RDP session using an external tool. For some endpoints, the session initiates but terminates within 1-2 seconds. This behavior is inconsistent, as it works fine for other endpoints.Could you please assist in identifying the cause of this issue and suggest a resolution?

1566
I
M
mjhallVeteran
asked in General
Updating the Jump Client

Is there a command line we can run on machines to prompt them to update the jump client? i.e.: Simulate right clicking on a jump client in the representative console and clicking update?  We just updated our site software, and I am wondering about the best way to slowly rollout the jump client updates. Generally, the process we take would be updating the IT department, the business pilot, then start staging it out to production. We deploy our jump client via the generic .msi install. There are a couple methods that I can think of, but each has their downsides. Selecting jump items through the console and clicking “Update”. Downsides: This would take forever to manually do for a few hundred pilot machines Deploying via the Jump Client Auto Update settings. Downsides: No control over who gets the updates Deploying via the .msi installer. Downsides: You must uninstall the old version, then install the new version (This resets all of the audit history for that jump client instance ID)What

6254
T
O
orionnwraApprentice
asked in General
New jump clients not appearing in representative console

We are having an issue where newly installed jump clients are not appearing in the representative console.  I filed a support request two days ago but have had no response.  I enabled debug logging on the client but there isn’t anything there that seems wrong.Anything else I can check on our end?

903
Kenny Lyman
BeyondTrust Employee
V
VarunsUni29Apprentice
asked in General
Onboard TOTP Seed File to generate OTP Code in Password Safe

Dear Team, The client has a use case to upload TOTP seed file and generate the new OTP on the console [similar to the retrieve password option]. For example, BeyondTrust Password Safe acts like Google/Microsoft authenticator app. I can't find any platform to upload the seed file, which will generate the OTP as output. Anyone who implemented such use case before? This kind of usecase is already available in BitWarden. Please find the link below:Viewing TOTP Code: https://bitwarden.com/help/integrated-authenticator/ Thanks in advance!!Varun

611
tclowater
BeyondTrust Employee
A
AndyHTrailblazer
asked in General
Document not found error when browsing /login

I tried to access my PRA /login page but got “Document not found” error. I followed https://beyondtrustcorp.service-now.com/csm?id=kb_article_view&table=kb_knowledge&sys_kb_id=1d533ad2471ce290b77b3ddbd36d43d9&searchTerm=document%20not%20found but it doesn’t help.I still couldn't see any sites in the default site drop down list. Please help. thanks, 

995
P
BeyondTrust Employee
C
Carlos MendonçaRising Star
asked in General
Credential injection remote PRA WEB Jump

Hello,I'm having trouble with the credential injection feature in the web jump section. It doesn't fill in and even selecting the options and looking at the documentation isn't working. Is anyone else having the same problem?

966
C
V
VarunsUni29Apprentice
asked in General
Discovery Best Practice & API Usage

Hi Experts, I’m trying to find if there are any APIs available to initiate an adhoc discovery scan to specific set of systems? I failed to find any discovery APIs.Also, how does other customers are handling (discover & onboard) the newly created servers in day to day?Periodicity of discovery? Daily/Weekly? And if weekly then how do you handle the new systems? Please share your thoughts on this :) Regards,Varun

892
C
E
edwinb77Apprentice
asked in General
group policy assignment not the same

We currently have a support group linked with a group policy and in turn session policy where the group policy is updated with members through SAML import from our EntraID. This generates the authorized access for all the members in this support group to all our devices. I'm currently trying to set up another group where we have only a few members in that gets access granted to devices that are allowed unattended access meaning no prompt when taking over the device. However whatever I apply and change, the account that is in the main SAML import group and now added to the unattended access policy as well, keeps the prompt when taking over the device and it seems that the main support group keeps overruling the unattended policies. Done some digging and when I use a local account (actual BT consol) and when entering this user account, I have a nice overview in the membership detail with priority. However when I look in the account that is imported through SAML, I don't see this overview

291
R
BeyondTrust Employee
E
EAKGNewcomer
asked in General
Would like to require 2 Factor when user RDPs to a specific set of servers.

Is there anyway, using PWS, to require a 2nd factor of authentication when using RDP to connect to a set of servers from PWS?

171
J
BeyondTrust Employee
M
mcencienzoRising Star
asked in General
Issue: PS Automate - Chrome Browser not opening

Hi Everyone, Is there someone also experience browser not opening upon running PS_Automate using the latest Chrome Browser as of today? We are on BeyondInsight 24.2.0.1324 and uses Enhanced Utility Tool with the same version. I have deployed this on my RDS server last January and was able to work this out. But as of today, I built again a Windows Server 2022 with RDS role however as of the moment, the PS_Automate does not work. I have to test this again due to my colleagues reported that they couldn’t make it work on their environment and some of their implementations. See sample screenshot below: I can’t find any reliable KB articles to resolve this and I have already created a ticket support for this and unfortunately, the action items provided by the support is questionable and no certainty that it will work.  Regards,Fellow BCIE

1448
L
A
AndyHTrailblazer
asked in General
PRA update stuck at 99%

I am trying to update our PRA on-prem instance but it stuck at 99% for almost 3 hours now. What is solution for this? The screenshot is below:Thank you!

1857
A
Prudhvi Keertipati
Prudhvi KeertipatiVeteran
asked in General
Jump Shortcut Import Wizard Missing

In the PRA Cloud 23.3.4 instance, Jump Shortcuts Mass Import Wizard  is missing under Jump Items. Is there any configuration or setting has to be enabled for this wizard to show? Thanks,Prudhvi

1884
L
K
kgujasApprentice
asked in General
Active/Active Password Safe Configuration

Hi. I need to configure an Active Active PS configuration. I have installed the managament node and connect it to external SQL database and everything is OK for this. Now I start to configure the worker node and I need to connect this nod to the same SQL database but after I put in the credentials and the crypto key from managament node I am getting this error when click on test > Connection test failed. Could not connect to existing database. Can anyone, please, help me with this...what is the problem, what is the right way to configure an Active/active configuration 1managament/1workernode.

1294
K
M
MarcusHApprentice
asked in General
No update notification emails

Hello,We have a BeyonTrust PRA OnPremise Virtual Machine (latest version). We have admin email configured in the /appliance settings, and test mails are successful. But we do not receive emails when a new version is available.How can we be notified when there is an update available?Thanks in advanceMarcus

313
M
A
ArnoNewcomer
asked in General
How to onboard Windows Server with special rights system ?

We have an administrators group for each server in AD. Each member of this group has the local administrator rights for the respective server due to their membership. The servers are all in the same OU in AD. Unfortunately, nothing can be changed to the AD structure in the foreseeable future.We now want to onboard the Windows servers in the PWS. For compliance reasons, we have to work with named accounts on the servers.What is the best way to onboard the approx. 500 servers and the 300 managed linked accounts now?Creating a smart rule for each server, each administrator and then creating a mapping rule is not really a solution, is it?Regard Arno

723
rhagerm
M
maulik shahApprentice
asked in General
ps_automate for application launching in admin context

Hi All , Thanks in advance for your input .i am trying to launch powershell_ise.exe as admin in managed application session but when i send subsequent command it doesn’t work, same task sequence works when powershell_ise.exe launch as normal window.following is my script block --------------------------[General]EnableLogging=4LogMethod=2LogPath="D:\Log";RunApp="powershell -Command "Start-Process PowerShell_ISE -Verb RunAs "RunApp="C:\Windows\system32\WindowsPowerShell\v1.0\powershell_ISE.exe";AppWindowTitle="Administrator: Windows PowerShell ISE"[TaskSequence1]SequenceDelay=40000Sendkeys=^i  Any suggestion? Regards,Maulik

975
P
BeyondTrust Employee
P
prasadp87Trailblazer
asked in General
Export Accounts from BeyondInsight

Hello, We have one environment of BeyondTrust Insight with scanned accounts and managed accounts. We are planning to setup backup environment at different location with different domain. We wanted to export the accounts from environment 1 to this new one. Is there any way by which we can export those and re-import in other environment. Thanks,Prasad

14912
P
G
gabriel.restrepoApprentice
asked in General
Radaware Load Balancer - Custom Platform SSH for PWS

Hello Community,I have a platform that is a Radware load balancer. I would like to know if anyone has a custom SSH platform for this device that they could share with me.I would greatly appreciate your support.Thanks in advance!

372
G
P
prasadp87Trailblazer
asked in General
How to configure Discovery Scanner Agent

Hello All,I am looking for some information about discovery scan configuration.How do we setup scan agent and how its shown in list as to select for scanning? Thanks,Prasad

1217
B
BeyondTrust Employee
K
Koem1977Newcomer
asked in General
SQL tunnels on SQL Server with multiple instance

Hi team Do you know if SQL tunnel support connection to multiple instance of the same SQL Database ?Customers can configure SQL Server Tunnel jump items to connect to the default instance but how does a customer configure a SQL Server Tunnel jump item to connect to databases installed on non default SQL server instances? Is this even supported?

721
P
BeyondTrust Employee
A
AndyHTrailblazer
asked in General
No "Web Jump" option in Group policy

Hello,I have a Windows 2022 Jumpoint. I tried to create a group policy but found the “Web Jump” option is missing on “Access Permissions” section. Anyone knows why? Thanks, 

402
A

Badge Earners

  • BCA: Password Safe
    Tony Forsterhas earned the badge BCA: Password Safe
  • BCIE: Endpoint Privilege Management - Windows
    Angelahas earned the badge BCIE: Endpoint Privilege Management - Windows
  • BCIE: Endpoint Privilege Management - Windows
    Edward Vhas earned the badge BCIE: Endpoint Privilege Management - Windows
  • BCA: Privileged Remote Access
    EArayahas earned the badge BCA: Privileged Remote Access
  • BCA: Password Safe
    EArayahas earned the badge BCA: Password Safe
Show all badges
Terms & ConditionsCookie settings