After 2 factor redirect it send me to server name and not FQDN
Hi, i have modificed the certificate for a local wildcard ... *.contoso.com i enter to the server as https://pmp.contoso.com:7272 and the certificate is OK When i authenticate and use 2fa (Duo) it send a websdk request, and after that returns to the platform
How to set a record session only for selected users?
Hi Folks I tried to set the resource computer to disable the record RDP session but this is not working, it seems PMP only allows disabling record/enabling the record of all remote session? Also, does PMP have settings that allow selected users to record
Request: Support for MSSQL Availability Groups
The currently available HA options for PMP are *odd* to say the least. In our environment we had to use Veeam replication with a local MSSQL installation to workaround the issues noted below. #ISSUES# Bidirectional SQL replication -Does not scale past
Claim your 25$ gift card by submitting a review | ManageEngine Password Manager Pro
Hello, customers! Happy thanksgiving week from ManageEngine! We'd like to take this time to thank you for your continued support for ManageEngine Password Manager Pro. Do you have time to show your support by reviewing Password Manager Pro on Gartner
PMP service status STOP
The PMP server was unable to start the service after updating the SSL certificate. I followed the instructions to update the SSL certificate on the WEB UI interface, and the WEB prompted that the update was successful. Then, I restarted the PMP service,
LDAP Sync
So I have LDAP sync/auth working for PMP. I assume the daily scheduled sync will pick up new users added to LDAP. Will it also delete users that have been removed from LDAP? If not, is this a feature on the roadmap? I'd be nice to know that if an employee leaves and we remove them from our corporate directory, their PMP account will also be automatically deleted.
How to install custom SSL certificate to Read-Only Server?
Hi, It is possible to install unique custom SSL certificate for Primary and Secondary servers with High Availability (PostgreSQL) configuration. While installation of custom SSL certificate on Primary server with Read-Only Server configuration is still
VNC Accounts - Password Conflicts
Hi, How do you avoid Password Conflicts on VNC accounts? Since build 12100, " VNC passwords have to be added as an account under the respective resources." The issue is the VNC account is not a local account on the machine, so can't be verified. There's
video recording
recording session can be activated only for some privileged accounts and not others ?
Incorrect Username
#Issue# The username field in the users tab shows firstname+lastname. Username is usually synonymous with login name so this is likely to cause confusion. #Reccomendation# Add an additional field called full name for firstname+lastname and have username
Request: Allow User/Computer Import Time Change
#Issue# Currently you are only able to change the run time on "scheduled tasks" (Admin>Scheduled Tasks) not on synchronization scheduled for AD users or AD computers. This means I found have to be awake and schedule a device import at 1am if that is the
Request: Change Superuser Notification
#ISSUE# I don't think it makes much sense to list all superuser accounts to all users. This has the potential to give users a list of people to randomly email with problems, and isn't useful to them anyway. #Solution# I think the superuser list should
Request: 2FA Codes
There is currently no way to add 2FA codes to passwords. It would be nice to have the ability to see current 2FA codes for an account.
[Analytics Plus e-book] Key metrics that should be part of your cybersecurity dashboard
Hey there, Are you tracking seemingly-endless security metrics? Discover the critical metrics that are essential in fortifying your organization's security posture, and build powerful consolidated security dashboards to combat emerging threats with ease.
Password Sync Notification
#Issue# The "Passwords not in sync" alert includes web accounts, which PMP cannot check. #Solution# Add an option to ignore a password/resource for sync check. It makes no sense to notify on a password it can't check.
Need AD import filtering
The AD import feature is not adequate enough to import. We need the option to filter what and what not to import by the use of LDAP query strings and a way to selectively choose the domains and OUs to import from.
Connect to a RDP ressource and leave user typing login/password ?
Hello, I've added a Windows server ressource not in my domain and i would like PMP to let user type it's login/password in that domain rather than ask all users to add their credential for this specific resource. Is it possible ? Thank you
ansible plugin
I'm trying to get ansible plugin work with PMP but I've a problem... Ansible plugin issues two api requests apparently: (1) https://<URL>/restapi/json/v1/resources/getResourceIdAccountId?APP_AUTHTOKEN=<TOKEN>&APP_NAME=Ansible&RESOURCENAME=<RESOURCE_NAME>&ACCOUNTNAME=root which returns RESOURCEID and ACCOUNTID. This one works fine. But the second call: (2) https://<URL>/restapi/json/v1/resources/getResourceAccountDetails?APP_AUTHTOKEN=<TOKEN>&APP_NAME=Ansible&RESOURCEID=45022&ACCOUNTID=48640 which
PMP ApiKey
If I generate an apiKey for a user and set the key to expire in 90 days, then in 30 days generate a new apiKey that expires in 90 days, is the first key still valid for the original 90 days or does it get invalidated when the second key is generated?
Grouping resources using a hierarchy.
Good Afternoon, Is there a way that you can group resources so they are in a hierarchy tree, example - a folder that shows Rochester and under that folder lists all the resources for that location. I know that we can create groups and add resources to
Bulk user deletion
Hello I accidently imported all users from AD (like 111 000 users) - in fact i do not know how its happened (i added some ad group to be imported but they should contain smaller number of users) In logs i can see a lot "Inside createUserGroup mentod....|"
Allow on resource level if an user may retrieve/view the plain text passwords
In PMP the administrator can control the plain text view of passwords only on group level. Want to be more in control. The user must be able to retrieve the passwords from some of the resources.
Backing up PMP
Is it ok to shut down the PMP server and just do a snapshot instead of copying the "PMP" install folder? The install folder keeps getting bigger and longer to backup and its becoming distruptive in the amount of time it takes to make a copy.
Failed Logon Attempts
Hi, We're noticing that whenever PMP changes the password of an account on a remote client device a failed logon attempt is recorded on the client and on the domain controllers. We first spotted this when ADAudit started reporting hundreds of failed logons.
PMP RADIUS Console Authentication using Microsoft NPS Server
Hi, Does anyone out there have PMP set up to allow login to the console using RADIUS authentication (and I don’t mean use RADIUS for 2FA with Active Directoy authentication), using Microsoft NPS Server as the RADIUS server? If so, can you advise on the
Setting up MFA on Password Manager Pro utilising Microsoft NPS as the RADIUS authenticator
Hi all Has anyone been able to correctly set up PMP with MFA that uses Microsoft NPS as the RADIUS server. We have managed to get it working fine using Microsoft Authenticator, however when it asks for the RADIUS code you can input anything into this
Implementing a Password Manager Pro read only server
Hi all I saw with interest that a recent update has implemented a read only server option to PMP. We currently use a High Availability set up and thought that a read only server would remove the downtime when we are patching and upgrading the Primary
How to automate update of Resource's hostname and/or IP address change
Hi, We add new Resource and Accounts to PMP via API automatically when a new VM is created (using post install script). We need to manage a Privilege account and a Service account with PMP. Once the VM is turn over to user, the user might change the hostname
How to add DNS NAME via API?
Hi, I'm adding Resource via API, it was created successfully, but DNS NAME is not updated. What am I doing wrong? curl -X POST -k -H "AUTHTOKEN:1XXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXX98" -H "content-Type: text/json" https://10.10.10.10:443/restapi/json/v1/resources
PMP recommended vCPU for VM Installation
Hi, What is the required/recommended vCPU of PMP for VM installation (WinServer OS)? I cannot find this in the sizing guidelines. Regards, Bryan
Problem renaming data directory
URGENT, We need to restore password manager pro from the backup .ezip file on a newly created server due to a server crash of the prod server and we are unable to do so due to this error, R0DD03: Problem renaming data directory. also the directory :\PMP\pgsql
Subgroup option is not avalible
Hello I have two Password Manager Pro instances. One old (kept just for backup) version 9.3.0. The other one is newest (i believe) version 12.3.0 And my issue is that on the old one I can create Subgroups, but on the newest one this option is missing
Problem logging into PMP
Hello, my scenario is: For some reason the admin user of my PMP does not let me login to the console, so I opened a ticket with Manageengine support and they provided me with some .bat files to reset the password via pmp_key.key. These files did let me
Dynamic Group and Resources added by API
Hi, I have a Dynamic Group with criteria to match a specific user account name. This works fine with Resources added manually and by Agent. However, it does not work for Resources added by API and shared with my id. These API added resources showed up
Database size issue due to broken HA not fixed after removing HA configuration
We recently had to engage support because our HA deployment of PMP was broken and had been probably since deployment of the servers. The status page for HA showed an ever increasing number under the pending replication count and what triggered us to the
API User for multiple host
Could someone provide the steps to configure an API user to be used in multiple hosts instead of associate to one host only? I saw a thread from last year and Support mentioned an option that can be configured. Thank you!
update command for re-Installing agent don't work
Hi, In the context of automating the deployment of the PMP agent. I realized that the "update" command of the AgentInstaller.exe executable was not fully working. The re-installation seems to run but in the end the agent is not authorized. While with
Password reset of local accounts - Password Manager Pro
Hello everyone, how are u? I have PMP on premise running on my enviroment, and I wanna configure it to reset local accounts passwords (of others servers that where is installed the app) when I request those passwords from PMP app. Is this possible? Data:
Approve password access requests without viewing the password.
All password accounts shared with a user approving password access requests, the user enables administrator privileges; and can view all password accounts shared with that user. It would be an improvement to remove approving users from seeing passwords
Agent installation from DS server
i encounter this issue alot, whenever u try to install an agent on computers in a remote office that has the DS UP and running, it shows the following Error msg "Unable to get the agent status. Operation timed out." the local firewall is down, and the
Next Page