Troubleshooting

I am unable to import the Password Capture Agent Windows PowerShell module.

Windows PowerShell has an execution policy to restrict what may run. For more information about troubleshooting, see http://technet.microsoft.com/en-us/library/hh847850.aspx.

• Is the folder "OneIM-PasswordCaptureAgentMgmt" in any folder listed in $env:PSModulePath?

I am unable to establish a connection to the domain controllers.

The connection to the domain controllers requires Windows PowerShell Remoting to be configured and enabled. Also the firewall may block this connection by default. For more information about troubleshooting, see http://technet.microsoft.com/en-us/library/hh847850.aspx.

I am experiencing problems installing the Password Capture Agent. Is there a way to get a log file?

Yes. Both Install-PasswordCaptureAgent and Uninstall-PasswordCaptureAgent have parameters that allow you to specify a log file and if logging should be verbose. The log file will be used by msiexec.exe.

Example 1

Uninstall-PasswordCaptureAgent`

-ComputerName "DC01.DEMOCORP.COM"

-LogFile \\StorageServer\SHARE\DC01.uninstall.log`

-LogVerbose

Example 2

Install-PasswordCaptureAgent`

-ComputerName "DC01.DEMOCORP.COM"`

-LogFile \\StorageServer\SHARE\DC01.install.log`

-LogVerbose`

-Setup "\\StorageServer\SHARE\PasswordCaptureAgent.msi"

Is it possible to automatically reboot the domain controllers after installing / uninstalling Password Capture Agent?

Yes. Both Both Install-PasswordCaptureAgent and Uninstall-PasswordCaptureAgent have a switch called restart which will do exactly this. It is $False by Default.

Example 1

Uninstall-PasswordCaptureAgent -ComputerName "DC01.DEMOCORP.COM" -Reboot

Example 2

Uninstall-PasswordCaptureAgent -ComputerName "DC01.DEMOCORP.COM" -Reboot:$True

Advanced Scenarios and More Examples

With the Password Capture Agent Windows PowerShell module, there are many ways to install Password Capture Agent on your domain controllers. Use the built-in Windows PowerShell® help to find more examples of usage:

Get-Help Get-PasswordCaptureAgentServiceConfig -Full

Get-Help Set-PasswordCaptureAgentServiceConfig -Full

Get-Help Install-PasswordCaptureAgent -Full

Get-Help Uninstall-PasswordCaptureAgent -Full

Event Log for the Password Capture Agent

Event Log for the Password Capture Agent

You can read the log Password Capture Agent in the event viewer, in the folder "Applications and Services Logs". It shows you details of hints, warnings and errors if they occur.

• Level
• Date and time
• Source
• Event ID
• Track category

In addition, you find information about the configuration summary on every startup process.

Example

Configuration summary:

• This DLL: “C:\WINDOWS\system32\PCA_Driver.DLL”
• File Version: “1.0.1.9”
• DLL File Version: “1.0.1.9”
• Used log in event log: “One Identity Manager Password Capture Agent”, with source name: ‘Driver’
• Configuration key: “HKEY_LOCAL_Machine\SOFTWARE\One Identity\One Identity Manager\Password Capture Agent\Driver”
• Diagnostic mode: No
• Diagnostic beep frequency: Beep Off
• Deactivate on start: No
• Retry on error after seconds: 120
• Storage time of pending captures in days: 7
• Log file: “<no log file specified>”
• Domain name for accounts: “democorp”
• Companion service: "One Identity Manager Password Capture Agent” has successfully initialized
• Number of unfinished captures in queue: 0
• Driver initialization completed.

Related Topics

• Advanced and Diagnostic Settings for the Password Capture Agent

Customizing Security for the Password Capture Agent Service

Customizing Security for the Password Capture Agent Service

You can limit the scope of users and groups that are permitted to configure the Password Capture Agent using built-in Windows techniques.

Use the COM+ Management Console to specify permissions for the task SetConfigParameter under "Component Services\Computers\My Computer\COM+ Applications\One Identity Manager Password Capture Agent\Components\PCA.Com_Class\Interfaces\COM_Interface\Methods".