Activate Policy Groups
To centrally manage a policy, view events, or reply keystroke logs for a policy group, you must activate it.
|
Note: You can only activate an inactive policy group if it has been previously configured. (See Configure a Service Account for details.) |
To activate policy groups
- Log in as supervisor or an Active Directory account with rights to change System Settings; that is, as an Active Directory account in the Console Administration role.
- From the top-level Settings menu, navigate to System settings | Privilege Manager.
- Select the Active box next to the policy group(s) you wish to activate and click OK to save the change and return to the mangement console.

|
Note: If your policy group is not listed, make sure you have added and profiled the host where Privilege Manager software is installed as the primary policy server to the mangement console; then re-profile the host. |
Deactivate Policy Groups
You cannot remove policy group(s) directly from Privilege Manager system settings. However, if you decide you no longer want to manage the policy file, view events or replay keystroke logs for a particular policy group, you can deactivate it. Deactivating the policy group does not unconfigure the service account; it simply disables console access to the policy and keystroke logs on the primary policy server. (See Unconfigure a Service Account for details about unconfiguring the Service Account.)
To deactivate policy groups
- Log in as supervisor or an Active Directory account with rights to change System Settings; that is, as an Active Directory account in the Console Administration role.
- From the top-level Settings menu, navigate to System settings | Privilege Manager.
- Deselect the Active box to deactivate the policy group and click OK to save the change and return to the mangement console.
Software & Licenses
Use the Software & Licenses settings to
- Set the Privilege Manager software location on the server
- Check for Privilege Manager licenses
|
Note: Centralized policy management and keystroke logging are licensed separately. |
Set Privilege Manager Software Path
When you install from the product ISO, the setup wizard copies available software packages to a default location on the local computer.
The default directories are:
- On Windows 32-bit platforms: %SystemDrive%:\Program Files (x86)\Quest Software\Management Console for Unix\software\qpm\default
- On Windows 64-bit platforms: %SystemDrive%:\Program Files\Quest Software\Management Console for Unix\software\qpm\default
- On Mac and Unix: /opt/quest/mcu/software/qpm/default
|
Note: If you install Management Console for Unix from the Privilege Manager for Unix ISO, the "default" directory is replaced with the product version number. |
If you plan to install Privilege Manager software onto your hosts from the console, you must ensure the path to the packages is correctly set in System Settings.
To ensure the path to the Privilege Manager software packages is correctly set
- Make note of where your Privilege Manager software packages are located.

- Log into the mangement console with the supervisor account or an Active Directory account with rights to change System Settings; that is, an account in the Console Administration role. (See Console Roles and Permissions System Settings for details.)
- From the top-level Settings menu, navigate to System settings | Privilege Manager | Software & Licenses.

- In the Path box, enter the path to where the Privilege Manager software packages are located on the server and click OK.
|
Notes:
- The path to the software packages must point to the folder containing the agent, server, and sudo_plugin directories. It is typically the version number of Privilege Manager for Unix.
- When running Management Console for Unix on Windows, the location of the Privilege Manager software packages must be accessible to the mangement console service which runs as 'NT AUTHORITY\NetworkService.
|