One Identity recommends the following resolutions to some of the common problems you may encounter as you deploy and use Safeguard for Privileged Passwords. For more information about how to troubleshoot Safeguard for Privileged Passwords, refer to the Appliance settings.
The most common causes of failure in
Safeguard for Privileged Passwords are either connectivity issues between the appliance and the managed system, or problems with service accounts.
Always verify network connectivity and asset power before troubleshooting.
The following topics explain some possible reasons that Check Password, Change Password, and Set Password may fail, and gives you some corrective steps you can take.
A local account password change can fail when you are using a Windows asset that is configured with a service account with Administrative privileges, other than the built-in Administrator.
NOTE: Before Safeguard for Privileged Passwords can change local account passwords on Windows systems, using a member of an administrators group other than built-in Administrator, you must change the local security policy to disable User Account Control (UAC) Admin Approval Mode (Run all administrators in Admin Approval Mode) option.
To configure Windows assets to change account passwords
-
Run secpol.msc from the Run dialog,
-OR-
From the Windows Start menu, open Local Security Policy.
- Navigate to Local Policies | Security Options.
- Disable the User Account Control: Run all administrators in Admin Approval Mode option.
- Restart your computer.
For more information, see Preparing Windows systems.
You must have the correct user name and password to authenticate to an asset.
To resolve incorrect service account credentials
- Verify the service account credentials match the credentials in Safeguard for Privileged Passwords asset information (Administrative Tools | Assets | Connection). For more information, see About service accounts.
- Perform Test Connection to verify connection. For more information, see About Test Connection.
- Attempt to check, change, and set password again. For more information, see Checking, changing, or setting an account password.
