Password propagation

Password Propagation allows privileged accounts passwords reset to be propagated to remote servers services. This topic covers Propagation by script and Active Directory specific propagation.

Propagation by script

The following sections describe the properties of the Propagation by script feature within the Privileged Access Management solution. The Steps section explains how to set up this feature by using a Devolutions template, but it is also possible to Create a template.

Steps (with template)

1. Download our template .json file from GitHub.

2. Log in to Devolutions Server with an administrator account.

3. Go to Administration – Modules – Privileged Access – Propagation (Preview).

   

4. Click on Script Templates.

   

5. Click on Import.

   

6. Select the previously downloaded template .json file and click Import.

   

7. Click Save.

   

8. Go back to the Propagation (Preview) page.

9. Click on Add.

   

10. Select the desired template and click on Select.

    

11. In the General tab, name this configuration.

12. In the Propagation Properties tab, enter the information for the remote machine.

13. In the Property Mapping tab, click on Configure a PAM entry to select a privileged account type.

    

14. Click on Continue.

15. Select the fields of the account (or provider) to associate with the variables and click Save.

16. Click Save to save this new configuration and close the window.

    

17. Go to the Privileged Access tab and select an account type previously configured with Propagation.

18. Click on Edit.

19. Go to the Propagation tab and click on the "+" button.

    

20. Select the configuration to link to that account, and click Confirm.

    

    It is possible to select multiple configurations.

21. Click OK to save the changes and close the window.

    

    To test if the link is successful, click on More and then Reset Password. If working correctly, the newly created file will appear on the remote machine. If not, it is recommended to check the logs of the account.

Create a PowerShell template

1. Log in to Devolutions Server with an administrator account.

2. Go to Administration – Modules – Privileged Access – Propagation (Preview).

   

3. Click on Script Templates.

   

4. Click on Add.

   

5. In the General tab, add a Name for this template.

   It is possible to add a Description. The icon can also be changed by clicking on it.

6. In the Propagation Properties tab, add the variables for the script by clicking on + Add property. The variables added in this tab should represent the URL to the remote machine (i.e., ComputerIP, Username, Password and RootFolder).

   

7. In the Property Mapping tab, add the variables for the script by clicking on + Add property. The variables added in this tab should represent the Field Mapping of the remote machine (i.e., FileName and FilePath).

   

8. In the Script tab, the previous variables appear as well as the NewPassword variable. This new variable will contain the new password for the account on script execution.

9. Click on Generate base script.

   

   Click on Edit to modify or add to the script.

10. Click Save to save this configuration and close the window.

    Learn more about custom scripts for this feature by visiting our public GitHub.

Active Directory specific propagation

The following section describes the properties of the Active Directory Password Propagation feature within the Privileged Access Management solution.

Properties