Chat now with support
Chat mit Support

Password Manager 5.13.2 - Administration Guide

About Password Manager Getting started Password Manager architecture
Password Manager components and third-party applications Typical deployment scenarios Password Manager in a perimeter network Management Policy overview Password policy overview Secure Password Extension overview reCAPTCHA overview User enrollment process overview Questions and Answers policy overview Password change and reset process overview Data replication Phone-based authentication service overview
Management policies
Checklist: Configuring Password Manager Understanding Management Policies Configuring access to the Administration Site Configuring access to the Legacy Self-Service Site or Password Manager Self-Service Site Configuring access to the Helpdesk Site Configuring Questions and Answers policy Workflow overview Custom workflows Custom activities Legacy Self-Service or Password Manager Self-Service Site workflows Helpdesk workflows Notification activities User enforcement rules
General Settings
General Settings overview Search and logon options Importing and exporting configuration settings Outgoing mail servers Diagnostic logging Scheduled tasks Web Interface customization Instance reinitialization Realm Instances Domain Connections Extensibility features RADIUS Two-Factor Authentication Internal Feedback Password Manager components and third-party applications Unregistering users from Password Manager Bulk Force Password Reset Fido2 key management Working with Redistributable Secret Management account Email templates
Upgrading Password Manager Administrative Templates Secure Password Extension Password Policies Enable 2FA for administrators and helpdesk users Reporting Password Manager integration Accounts used in Password Manager Open communication ports for Password Manager Customization options overview Feature imparities between the legacy and the new Self-Service Sites Third-party contributions Glossary

Propagating Q&A profile-related changes

Select this option to propagate information about editing, locking and unlocking Questions and Answers profile, and passcodes issued by Helpdesk. It is recommended to use this option when users and Password Manager Service use domain controllers from different sites. In this case, if users update their Q&A profiles using Secure Password Extension (via the domain controller in one site), and then attempt to use the profiles on the Self-Service (via the domain controller in another site), they may encounter the issue when the updated Q&A profile is not yet available because of intersite replication latency.

Propagating password-related changes

Select this option to propagate information about changing or resetting user password. It is recommended to use this option in the following environment. You have several Active Directory sites in your environment; a user’s computer and Password Manager Service are located in different sites. User authentication is performed via a read-only domain controller (RODC).

In this environment, users may experience downtime in the following scenario:

  • A user changes password via a domain controller used by Password Manager Service in site A.

  • The user attempts to authenticate to an RODC in site B, the RODC forwards the authentication request to a writable domain controller in the site, but the password has not be replicated yet to site B.

  • User authentication is failed because of intersite replication latency.

To mitigate this issue, after selecting the corresponding Active Directory site (in which the RODC is located) and the writable domain controller from the site, select the Propagate password-related changes check box to immediately propagate password changes to the selected writable domain controller and enable user authentication via the RODC.

Changing domain management account

To access a managed domain, you can use either a domain management account or Password Manager Service account. For more information on how to configure a domain management account, see Configuring permissions for domain management account. Password Manager Service account is the account that was configured during Password Manager installation. Password Manager Service account may be used as a domain management account only when the Service account has all the permissions required for the domain management account.

To modify account used to access a domain

  1. On the Administration Site, select the Management Policy you want to configure and click the User Scope link.

  2. On the User Scope page, select the domain connection for which you want to change access account and click Edit.

  3. On the User Scope Settings for #Domain# page, click Edit.

  4. In the Access account section of the Edit Domain Connection dialog, select Password Manager Service account to have Password Manager access the managed domain using the Password Manager Service account. Otherwise, select Domain management account, then enter user name and password for the domain management account.

  5. Click Save and select how you want to apply the updated settings. You can either apply the new settings for this user scope only, or everywhere where this domain connection is used.

Removing a domain connection

This section provides information on how to remove a domain connection.

To remove a domain connection

  1. On the Administration Site, select the Management Policy you want to configure and click the User Scope link.

  2. On the User Scope page, select the domain connection you want to delete and click Remove.

    NOTE: The domain connection will be removed from this user scope only. If you want to permanently remove the domain connection, remove it from everywhere where it is used, and then on the General Settings > Domain Connections tab, click Remove under the required connection.

Verwandte Dokumente

The document was helpful.

Bewertung auswählen

I easily found the information I needed.

Bewertung auswählen