Share a DVLS PAM Local Account provider amongst multiple computers

0 vote

Published 3 years ago

Hello,

Currently to manage local accounts on a computer a dedicated provider needs to be created for each machine. This is cumbersome to configure when needing to manage local accounts hundreds/thousands of machines, for example rotating the local administrator account on domain joined devices. It would make more sense to configure a single (or small set) of providers, and then be able to use these to connect to multiple endpoint machines to do the credential rotation. I suspect the same applies for managing local accounts of Linux machines.

Please let me know if further clarification is required.

Thanks
Joe

All Comments (3)

Maurice Côté

Published 3 years ago

Hello,

Its on the feature request board and we will discuss this at our planning retreat next week. I cannot promise anything as far as timing goes.

Thanks

Maurice

pirayotte

Published 3 years ago

Hello Maurice, any news on this?

jm2

Published 3 years ago

Hi Pirayotte,

The AnyIdentity template 'Windows Accounts' can be used as a single shared provider for multiiple computers. https://github.com/Devolutions/PAM-Providers/tree/master/Providers/Windows%20Accounts

Additionaly, I'm working on an enhancement to this that will support retrieving the list of computers from an Active Directory domain. Hopefully this enhanced version it will be ready for uploading to GitHub soon.

Joe