Skip to main content

Solved

73 Topics
K
kmkarthickRising Star
asked in General
Endpoint Automation Question in 24.3.2

Have anyone upgraded to Remote Support 24.3.2 and using Endpoint Automation….  24.3.1 promised a new Endpoint Automation admin permission, and various UI improvements….. but i don’t see any such information in the release notes for 24.3.2 https://docs.beyondtrust.com/rs/changelog/remote-support-24-3-1https://docs.beyondtrust.com/rs/changelog/remote-support-24-3-2

1822
K
T
Tina_KRising Star
asked in General
Copy / Move jump clients to jump groups via API?

Hello, sorry, I have another question…I read the API guide and it seems that there is no way to copy / move a jump client (aka computer) to another jump group. There are only commands for users.I want to move or copy a client (or a list of clients via Powershell) from one jump group to another one. I can do that in the console one by one, but I would love to do that automatically via API.Is there a way?

888
T
J
JasperRising Star
asked in Windows & MacOS
Windows Store Apps definition

I had been trying to define Windows Store Apps as my Windows 11 devices keep getting these executables targeted under Default - Any Application which is generally Blocked under my definition. c:\windows\system32\securityhealth\10.0.27703.1006-0\\microsoft.sechealthui_8wekyb3d8bbwe.appxc:\windows\system32\securityhealth\10.0.27703.1006-0\\microsoft.ui.xaml.appxc:\windows\system32\securityhealth\10.0.27703.1006-0\\microsoft.vclibs.appx I tried to use “Application Name” of “Microsoft.SecHealthUI” and “Application Publisher” of “Microsoft Corporation” (based on the analytics logs) but is not getting triggered. Under my definition, I used the filter “Windows Store Pkg Name” to point to the “Application Name” from the log and the “Windows Store Publisher” pointing to the Application Publisher, also based on the log. Amy I doing something wrong with my definition?  

1405
C
BeyondTrust Employee
T
Tina_KRising Star
asked in General
Selecting a list of jump clients by hostname?

Hello there,we are using BT Remote Support and we often have to select and move / delete a lot of jump clients at once (because devices get scrapped or moved somewhere else).It is pretty tiring to select them one by one… (and no, waiting for the auto deletion of non-connected jump clients after x days is no solution in this case...)It would be so easy if there was a way to make a selection for more than one hostname in the search bar, so I could copy a list of ten or more hostnames in there and get a list with all the clients.I would also appreciate an API to do so, but I did not find a way to select a list of clients by hostname. Does anybody have the same issue and a solution for this? Best regards,Tina

775
T
S
samiTrailblazer
asked in General
Discovery Scan Issue

Hi. I have recently performed a detailed discovery scan against one asset, it completed successfully but I am not seeing any details for services, tasks etc etc. Scan was completed three hours ago.Is it normal to take a long time to get this information populated? Are there any logs I need to check to see why I am not seeing the details yet?   

1234
S
I
iansynNewcomer
asked in General
AD Bridge Management Console not installing the ADUC and GPOE plugins.

I installed AD Bridge Management Console on my server running Windows Server 2022. However, while running the configuration wizard, I found that the ADUC and GPOE plugins were not installed despite me leaving the default options to install those plugins. Asking to see if anyone may know why this is the case?

421
A
BeyondTrust Employee
M
mlajoieRising Star
asked in Windows & MacOS
Windows Terminal Shortcust

Hello.  I’m working on a way to elevate wt.exe.  If I right-click on the windows flag and select Terminal (Admin) or if I right-click on it from within the start menu, I am presented with a BT authentication message (as designed).  I enter my admin creds and it takes me to the Windows UAC.  It is hitting the application group “(Recommended) Add Basic Admin - Restricted LOLBAS” How can I pass the token through?

3014
M
A
AmilaKRising Star
asked in General
How that Password Safe Asset based Licenses are calculated

Hi guys,Just want to clarify,how that asset based license works in password safe  ? For example, For one IP based asset ,If we establish a SSH connection to the OS, a web-based session to the application, and a desktop-based session to the database for the same virtual machine with the same IP address, is the license requirement one or three?Further according to the below article,total number of assets found in assets page utilizes the licenses .In that case what about the applications through RDS ? https://beyondtrustcorp.service-now.com/csm?id=kb_article_view&sysparm_article=KB0019502  

1096
A
Prudhvi Keertipati
Prudhvi KeertipatiVeteran
asked in General
Password Safe - PRA Integration : View Password on Access Policy

Hi Team,We have Password Safe and PRA Integrated. We have some users who use both Password Safe and PRA to launch remote sessions.SRA Access Policy must have the View Password option enabled, so the users can retrieve the credential in PRA console. Because of this requirement in SRA access policy, users are able to view managed account passwords in Password Safe.How can we restrict users to NOT View Passwords in Password Safe and should be able to retrieve the credential in PRA Jump Session? Thanks,

792
Prudhvi Keertipati
K
kgujasApprentice
asked in General
Password safe - Management and worker nodes notworking

In the active active configuration where we have management and worker nodes, how the PAM Worker node will recognize which network interface the communication will use ? thanks

562
K
X
xNourahxApprentice
asked in General
cisco catalyst switches and Routers

We are planning to onboard all Cisco Catalyst switches and routers into PAM and manage the associated local accounts.Previously, I only onboarded Windows servers, so onboarding Cisco devices is new for me, and I’m unsure where to start.Do I need to create a functional account on all devices to perform detailed discovery? and what is after that? Any insights or recommendations would be greatly appreciated.Thank you.  

532
GloriaB
BeyondTrust Employee
M
MichaelDRising Star
asked in Windows & MacOS
EPMfM Awaiting Update from 24.5.2.3 to 24.7.0.1

Good morning -- I have our Client & Adapter updates enabled in our environment and it should be updating the clients to the latest version of both the adapter and the client. However, my client has stayed on version 24.5.2.3 when 24.7.0.1 is available.  In the update section, it does see we have two devices “awaiting update”.  Am I missing something or isn’t this suppose to occur when the machine checks in?   The machine is online and the console see that it last spoke about 30 minutes ago.  Have I misunderstood and or misconfigured something? I’m new to the management space on the EMPfM side so forgive my slowness. 

1155
J
K
kgujasApprentice
asked in General
BI Password Safe networking

  Password safe physical appliane comes with 4 network cards. It is possible to have more than one network card in virtual appliance? Can we have more IP adressess for one network card in virtual appliance? If yes, where can I found the documentation? Thanks.

332
K
D
dennedyApprentice
asked in Windows & MacOS
Possible to update group assignment through local script?

Starting to use PM Cloud now and looking to see if it is possible to update group assignment using a local scripting job. We used to do this before with stopping services, changing some registry keys, and starting services. This is helpful if we want group membership to change dynamically based on something that might not be in AD.

705
J
T
tnitNewcomer
asked in General
Rep console crash - jump point

Hello , I have created a jump point recently and installed on one of our machines . I am able to RDP into windows machines unattended but everytime i establish a connection my representative console crash. on logging back i see the session in waiting window and i can successfully establish the connection. What could be the reason of my rep console crashing everytime on RDP using jump point method . I am on MacOs

761
R
BeyondTrust Employee
C
Cygnus-x1Rising Star
asked in General
Cloning U-Series Appliance

Hi,We have 2 U-Series Virtual Appliances in Active/Active mode with an external SQL Server database.Our cybersecurity team needs to have a clone of our BeyondTrust setup. Is it possible to clone and have a working setup while also running the actual setup?What will be the major challenges/obstacles to overcome?Would highly appreciate any help/guidance.Thanks

1844
MikeK
B
bt101Veteran
asked in Windows & MacOS
EPM Policy - Applying specific rules to User Groups

Hello,What is the best way to apply specific rule(s) to a group of users e.g. a team wants to have yes/no message for elevation for certain commands run in CMD. (others will have Password prompt). I see I can create a new workstyle and assign to AD based user group, but there is a possibility of many such requests and I will end up creating 50-100 workstyles. Alternatively, I can use the SG as designated user group in Password (authentication) Message, but I want yes/no prompt which doesn’t have designated user option. 

903
C
BeyondTrust Employee
M
mlajoieRising Star
asked in Windows & MacOS
Make Admin on macOS

if a user is in high-flex, ia user can access the users & groups and then turn themselves into a local admin.  we’re going to block this access by doing the following but I was wondering if there was a better way?Remove from (Recommended) Restricted Functions: Type: System Preference pane; Filename: *;  Auth Request URI: system.preferences.accounts Remove from (Recommended) Restricted Functions: Type: System Preference pane; Filename: /System/Library/ExtensionKit/Extensions/UsersGroups.appex;  Auth Request URI: * Add to Blocked - Blocked Apps: Type: System Preference pane; Filename: *;  Auth Request URI: system.preferences.accounts Add to Blocked - Blocked Apps: Type: System Preference pane; Filename: /System/Library/ExtensionKit/Extensions/UsersGroups.appex;  Auth Request URI: *

1372
M
C
Cygnus-x1Rising Star
asked in General
Assign Access Policy to a Specific Application

Hi,How can I assign an Access Policy to a specific application only?Thanks 

1208
C
V
Varuns29Apprentice
asked in General
Password Safe Cloud RDS Server Architecture & Port Requirements

Hello Guys, I’m new to BeyondTrust world but have fair understanding of PAM architecture.I’m trying to understand the RDS server role in the Password Safe Cloud architecture. The current architecture shared by BT emphasises on Resource Broker and thats where I have clear understanding of Resource Broker from application & network perspective. However, RDS Server is not covered in detailed in any document or article. I only understand that RDS Server is required for session management for non RDS/SSH connections. But, where does it fit in the architecture?I assume the flow of Database session management may look like:End user Workstation -→ Resource Broker (TCP/4489)  -→ RDS Server (TCP/3389)   --→ Database (e.g. TCP 1521/1433) I’m keen to understand below points with respect to RDS Server:Network requirements for RDS Server. Does it connect to any other component (PS Cloud) except Resource Broker & target system (DB etc.) Does RDS Server store the session recording temporarily?

2435
V
J
jbwood919Apprentice
asked in Windows & MacOS
ARM

has anyone gotten the new pmw 24.7 arm64 client installed? the same method weve been using to install pmw x64 msi results in 1603 error. thanks.

42216
A
C
chiragNewcomer
asked in Buzz Board
How to get Certifications and Badges?

Hello everyone, I’m new to BeyondTrust University and Beekeeper. Can anyone please guide me how to browse through/get a Passwordsafe certifications and badges? Can we also get a learning path for the same? I have checked the whole console and the learning path is empty and there are no certifications mentioned anywhere. There are only fair few courses available. Thanks.  

3272
Rich
BeyondTrust Employee
S
SFARising Star
asked in General
RDCMAN tool bulk import connection strings

Anyone has setup RDCMAN tool ( the microsoft remote desktop manager tool) for multiple servers via script or csv? We have 1000 servers to configure, any way to do automate the import or the connection string configurations?

492
S
M
malipeddiNewcomer
asked in Linux / Unix
pbksh.log shows error " [368244] 1171 pbSSLAtomicWrite error 32: Broken pipe" on 23.1 (BIUL)

After the installation of BIUL 23.1 we are seeing below errors in logs. This is a custom installation of BIUL 23.1 on master server. pbksh.logDec  8 19:06:48 [368244] 1171 pbSSLAtomicWrite error 32: Broken pipe pbmasterd.logDec  8 19:18:24 [369488] 3018 LIBMANGLE_mangleRecvStart failure on fd 4. No data returned  

881
A
BeyondTrust Employee
B
BMontanyeApprentice
asked in General
Easy way to find and remove duplicate clients in Admin console.

I keep getting duplicate devices in the console, how do you prevent these from running up your license count? Is there a tool we can use to find the duplicated devices or is it just hunt and peck through thousands of devices?

5917
M

Badge Earners

  • BCA: AD Bridge
    Techwriter40has earned the badge BCA: AD Bridge
  • BCA: Endpoint Privilege Management - Windows
    joselopezhas earned the badge BCA: Endpoint Privilege Management - Windows
  • BCSE: Endpoint Privilege Management - Windows
    toufic.chehaibarhas earned the badge BCSE: Endpoint Privilege Management - Windows
  • BCA: Remote Support
    Techwriter40has earned the badge BCA: Remote Support
  • BCA: Privileged Remote Access
    Techwriter40has earned the badge BCA: Privileged Remote Access
Show all badges
Terms & ConditionsCookie settings