Bulk Reset PAM Account Passwords

Bulk Reset PAM Account Passwords

0 vote

avatar

We have a situation where we need to reset all PAM passwords. At this time it is user by user which is time consuming.

All Comments (3)

avatar

Hello,

It is already possible using the Devolutions.PowerShell module with the Reset-DSPamPassowrd cmdlet.

This is a sample script to achieve this.

$PamAccounts = Get-DSPamAccounts
foreach ($PamAccount in $PamAccounts)
{
    Reset-DSPamPassword -AccountID $PamAccount.ID
}


Let us know if you have any more questions about this.

Best regards,

Érica Poirier

avatar

Thank you Erica for all accounts this is great, however I have admins that on a daily basis check accounts for out of sync. Is it possible to add a new column for "Out of Sync" PAM accounts in "Reports > Password rotation"? Looking for a bulk check\multi checkbox to reset many passwords at the same time that may be out of sync

1b58635b-a5b8-4ba2-ae74-76c452258965.png

2deac812-a153-49cb-b3c7-ef23ad667ff6.png

avatar

Hello,

Thank you for your request. It is true that it could be useful to find easily all passwords out of sync and add a way to reset those passwords. I'm taking not of that and will see what could be done to improve our system. We will post back here once we have an update on that.

Best regards,

François Dubois