-
Title
How to push out pm.settings such as thishost _ out by using a group policy? -
Description
How to push out pm.settings such as thishost _ out by using a group policy? -
Resolution
If you have Authentication Services installed as well as Privilege Manager for Sudo or Privilege Manager for Unix, you can use a group policy to push out the pm.settings file.
1 - Open Group policy Management console.
2 - Create or edit a new policy
3 - Navigate to computer configuration | Policies | Unix Settings | Quest Privilige Manager
4 - Then to Privilege Manager Configuration Properties and set the desired settings
5 - After the policy is set go to the Authentication Services client and run the command: /opt/quest/bin/vgptool apply
It should show the following in the output:
[vgp_qpm4u.so]
Modifying pm.settings Configuration: /etc/opt/quest/qpm4u/pm.settings
thishost _Note: if this vgptool apply is not run the policy will be pushed out accorrding to the VGP refresh interval.
-
Additional Information
The default apply mode on policies is to merge the policy but you can also set it to replace mode to replace the settings. Please see the following KB which contains a screenshot of a policy and it Apply mode column: https://support.quest.com/authentication-services/kb/143850