Skip to main content

General

A general place for Privileged Remote Access conversations.

  • 94 Topics
  • 222 Replies
94 Topics
P
BeyondTrust Employee
Phillip LBeyondTrust Employee
published in General
Customer Success Quarterly - 2025-Q1 - Privileged Remote Access

 Greetings! I'm Phillip Lehner, the Senior Director of Education at BeyondTrust, and I'm thrilled to lead our efforts in delivering exceptional learning experiences. I'm excited to share how we're elevating your journey with a new, streamlined method of accessing training: Success Included with BeyondTrust University.      At BeyondTrust University, we believe our customers deserve nothing short of excellence in the tools they use. That’s why we’ve launched 'Success Included' — to elevate your learning experience and ensure you achieve success with BeyondTrust’s solutions.  Success Included is an education program that makes foundational knowledge accessible to customers at no additional cost. It features easy-to-follow, self-paced eLearning courses that empower system administrators to configure and manage BeyondTrust products using industry best practices. Our goal is to equip learners with the knowledge needed to maximize the value of their investment with BeyondTrust. Because your

270
P
BeyondTrust Employee
Sean Cashin
BeyondTrust Employee
Sean CashinBeyondTrust Employee
published in General
BeyondTrust Remote Support SaaS Service Security Investigation

As a result of our investigation into the Remote Support SaaS Security Incident detailed in our Security Advisory (link below), we have proactively completed an update for our Secure Remote Access (Remote Support and Privilege Remote Access) Cloud customers, fortifying the security of their solution overall. More information can be found as it becomes available via the Security Advisory on our website found here. Please note that we have updated the security investigation as of 28-Jan-25, 5:45 PM Eastern Time. Please follow the link for additional details.

5315
Sean Cashin
BeyondTrust Employee
E
edwinb77Apprentice
asked in General
group policy assignment not the same

We currently have a support group linked with a group policy and in turn session policy where the group policy is updated with members through SAML import from our EntraID. This generates the authorized access for all the members in this support group to all our devices. I'm currently trying to set up another group where we have only a few members in that gets access granted to devices that are allowed unattended access meaning no prompt when taking over the device. However whatever I apply and change, the account that is in the main SAML import group and now added to the unattended access policy as well, keeps the prompt when taking over the device and it seems that the main support group keeps overruling the unattended policies. Done some digging and when I use a local account (actual BT consol) and when entering this user account, I have a nice overview in the membership detail with priority. However when I look in the account that is imported through SAML, I don't see this overview

111
R
BeyondTrust Employee
B
bt101Veteran
asked in General
PRA web jump credential injection times out

Hello, we have set up PRA web jump for multiple websites including some Cisco device GUIs. With Cisco DNA / Catalyst center website it is timing out. This website uses HTML tags that change for each page refresh. Based on the jump point logs , PRA successfully detects the tags for username, password and submit button but at the end it gives credential injection timed out error. We have the timeout set to max value of 30 seconds. PRA version is 23.1.2. If we select no credential the website opens fine as PRA web jump. I can log in by manually entering the password. The webpages before and after login are different\. (I see a KB that says it may timeout of URL doesnt chnage after password injection). I read in another post that the ‘inject credentials in current URL’ doesn’t work for web-jumps .Is there any workaround method using PRA. Like RDP to a server , open browser and click on inject creds button. Or anything needs to be changed in web jump backend config on jump-point which can p

181
Lindsay Gallant
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
Privileged Remote Access - Knowledge Article Publications (Mar 24 - Mar 31)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022117 - Can SQL tunnels be created for multiple instances of a SQL database? KB0022140 - Error when accessing security tab after software upgrade - An unexpected error occurred KB0022149 - Android Jump Clients prompt to allow screen casting "Exposing sensitive info during casting/recording"

100
GloriaB
BeyondTrust Employee
E
edwinb77Apprentice
asked in General
BT jump client post install tags and possible other options

In our situation we currently create 1 BT jump client MSI installer which we then package and add to our Intune environment for deployment on all our workstations (approx 40k) From the consol perspective it is then just 1 big pool of devices and all our IT and support presentatives can access the workstations where required to provide the needed support. We are currently reviewing this strategy to reduce this visibility initiating RBAC like we also do in our Intune environment where many especially device visibilities are reduced due to applying scope tags and in turn apply security groups which limits the views of our IT. This of course is something we should/could do in BT, however there is no such rule or something available that if device starts with USLT or DELT it will be assigned to X group policy/session policy and then linked to the allowed representative and learned that this is initiated through the client itself hosting the tags and optionsWe've learned that you can add tag

162
E
A
AndyHRising Star
asked in General
PRA update stuck at 99%

I am trying to update our PRA on-prem instance but it stuck at 99% for almost 3 hours now. What is solution for this? The screenshot is below:Thank you!

1597
A
J
Juan IslaNewcomer
asked in General
PRA Failover configuration on AWS provision appliances

Has anyone had any challenges When configuring Failover with a shared IP on AWS Cloud host Manager appliances. We previously had Virtual appliance provisioned in VMWare (Failover configuration worked properly) and moved to AWS cloud host, since then Failover configuration does not seem to work. Wonder if we should have any additional setting in AWS or if there are any caveats to the Failover settings in Cloud-hosted PRA appliances.

332
T
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
Privileged Remote Access - Knowledge Article Publications (Mar 17 - Mar 24)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022045 - Windows 11 24H2 - RDP graphics issue - Little colored squares over everything (screen artifacting) KB0022114 - How to add IP address and name to hosts file KB0022116 - Web Jump option missing under Access Permissions section KB0022125 - Is Remote Support and Privileged Remote Access Affected by CVE-2025-27636 ? KB0022127 - What is the default driver location for new databases on SQL server? KB0022131 - The Organizational Unit (OU) is missing from the CSR request in /appliance KB0022133 - Unable to create new Jump Client. Error - The total number of deployable Jump Clients for this site has been reached

140
GloriaB
BeyondTrust Employee
S
SolBApprentice
asked in General
PRA - Auto backup

Hi,I am looking for an article/reference/document that could help me setup a backup for PRA software configuration automatically. This means, I am planning to set a schedule to backup the PRA software. Any thoughts and help are greatly appreciated!  Thank you.

644
P
BeyondTrust Employee
Prudhvi Keertipati
Prudhvi KeertipatiVeteran
asked in General
Jump Shortcut Import Wizard Missing

In the PRA Cloud 23.3.4 instance, Jump Shortcuts Mass Import Wizard  is missing under Jump Items. Is there any configuration or setting has to be enabled for this wizard to show? Thanks,Prudhvi

894
L
M
MarcusHApprentice
asked in General
No update notification emails

Hello,We have a BeyonTrust PRA OnPremise Virtual Machine (latest version). We have admin email configured in the /appliance settings, and test mails are successful. But we do not receive emails when a new version is available.How can we be notified when there is an update available?Thanks in advanceMarcus

233
M
A
alexsilvabunkerApprentice
asked in General
PRA Vault

Team, what are the platforms that are supported for password rotation using the PRA Vault?Does it support Linux, Windows (Ad and Local), and Network Devices (i.e Fortinet, Cisco, etc)? I didn't find the list of supported platforms in the Beyondtrust documentation.​​​​​

772
C
T
Travis JApprentice
asked in General
Domain user prompted for credentials on web jump

We have an in/out board application we want to present to domain users through beyondtrust when offsite. In testing the user logs in to beyondtrust with domain credentials, and then is prompted again 2x on the website.  Internally it tries sso with logged in user, then prompts if user not found. Is there way to run the web jump as the domain user that logged into PRA so they don’t have to re-enter username and password?  Or any other way around that?

353
T
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
Privileged Remote Access - Knowledge Article Publications (Mar 10 - Mar 17)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021317 - Unable to login to Remote Support or Privileged Remote Access after adding certificates to a clustered LDAP provider "Failed to authenticate with 'password' using provider [4]: Unable to bind" KB0022055 - Domain discovery error - Failed to get information about discovery account KB0022075 - Unable to RDP - How to troubleshoot RDP KB0022081 - Approval emails for sessions have stopped working error - STMP error [450] Service unavailable KB0022085 - How to disable session recordings KB0022093 - Canned scripts with multiple files fail "Cannot find initialization file at... Please specify a valid initialization file"

110
GloriaB
BeyondTrust Employee
N
naidu_jstsRising Star
asked in General
How to Import using jump shortcuts for Network Tunnel, we do not have any template for that.

How to Import using jump shortcuts for Network Tunnel, we do not have any template for that.

263
T
BeyondTrust Employee
H
HamzaTrailblazer
asked in General
Web Jump Time Out PRA 24.3.2

almost every attempt on web jump times out. changing the Authentication Timeout works but next time have to changed it again and again.some URL launched but appears as below. checked outside PRA URL is working fine. 

211
P
BeyondTrust Employee
Fabien Landais
Fabien LandaisRising Star
asked in General
Input file for btapi tool

Hi, I’m alooking for some example around the btapi.exe usage. Command lines are pretty understandable and usable with options and arguments but I don’t know the file format for inputs. Apparently we can use json format or key=value format but I have never been succeeded to provide inputs to command as “add user”.If somebody can provide me a json file example to create local users through btapi it will be wonderful :)

2526
N
B
bt101Veteran
asked in General
PRA Cloud-hosted vs on-prem

Has anyone moved from cloud-hosted PRA instance to on-prem virtual or physical appliance ? or vice-versa. Was there any significant difference noticed on remote access session performance - jump clients , RDP using JumPoint. I know many factors will impact this but lets say PRA user and remote server both are on-prem and PRA appliance is moved from cloud to on-prem. Theoretically, there should be performance improvement. Trying to see if this is worth the time and effort , if someone has already done it :-)

583
B
K
Koem1977Newcomer
asked in General
SQL tunnels on SQL Server with multiple instance

Hi team Do you know if SQL tunnel support connection to multiple instance of the same SQL Database ?Customers can configure SQL Server Tunnel jump items to connect to the default instance but how does a customer configure a SQL Server Tunnel jump item to connect to databases installed on non default SQL server instances? Is this even supported?

531
P
BeyondTrust Employee
A
AndyHRising Star
asked in General
No "Web Jump" option in Group policy

Hello,I have a Windows 2022 Jumpoint. I tried to create a group policy but found the “Web Jump” option is missing on “Access Permissions” section. Anyone knows why? Thanks, 

352
A
V
vilasboasApprentice
asked in General
PRA Console on Ubuntu Freezing When Retrieving Credentials

On Ubuntu 24.04, the PRA console freezes when attempting to load the credential injection screen. When this happens, the process becomes completely unresponsive, requiring a manual termination. I’ve tested multiple PRA versions, and the issue occurs in all of them. Is anyone else experiencing this behavior, or does anyone know how to fix it?

262
V
A
AndyHRising Star
asked in General
How many concurrent session that a Jump client support?

Could multiple users connect to the same Jump client? Windows RDP has 2 users limitation. Does it also apply to Jump client? Thanks,

353
A
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
Privileged Remote Access - Knowledge Article Publications (Feb 24 - Mar 3)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021306 - Issue clearing Windows clipboard sync on jump client KB0021309 - Jump Clients in a Jump Zone Proxy show online but some timeout when starting a session KB0021327 - Remote Sessions with Android TV - buttons do not work as expected KB0022060 - How to install an update set for RS or PRA in ServiceNow KB0022065 - Unable to install Jumpoint on Debian 11 OS. Error - PUSH_AGENT:ERROR exception occurred while connecting to gateway KB0022071 - Accessing Jump items is slow

110
GloriaB
BeyondTrust Employee
A
AndyHRising Star
asked in General
Is the URL(host name) of On-prem PRA pre-defined?

Hello, we imported the PRA on-prem appliances to the DMZ, downloaded the console but the console uses a pre-defined hostname that came from the BeyondTrust license email. Would it be possible to change this hostname to match our naming conventions? Thanks,

422
A

Badge Earners

  • BCIE: Privileged Remote Access
    Rupak_Sahahas earned the badge BCIE: Privileged Remote Access
  • BCSE: Password Safe
    Rupak_Sahahas earned the badge BCSE: Password Safe
  • BCIE: Password Safe
    Rupak_Sahahas earned the badge BCIE: Password Safe
  • BCIE: Endpoint Privilege Management - Windows
    Rupak_Sahahas earned the badge BCIE: Endpoint Privilege Management - Windows
  • BCA: Privileged Remote Access
    Murtuza Sadriwalahas earned the badge BCA: Privileged Remote Access
Show all badges
Terms & ConditionsCookie settings