Password propagation

Password propagation allows privileged accounts passwords reset to be propagated to remote servers services either by script or with Active Directory.

Propagation by script

The following sections describe the properties of the propagation by script feature within the Privileged Access Management (PAM) solution. This method covers all PAM account providers.

Seting up propagation by script

1. Download our .json template file from GitHub or create a your own template.
2. Log in to Devolutions Server with an administrator account.
3. Go to Administration – Privileged access – Propagation (preview).

   

4. Click on Script templates.

   

5. Click on Import.

   

6. Select the previously downloaded template .json file and click Import.

   

7. Click Save.

   

8. Go back to the Propagation (preview) page.
9. Click on Add.

   

10. Select the desired template and click on Select.

    

11. In General, name this configuration.
12. In Propagation properties, enter the information for the remote machine.
13. In the ***Property mapping, click on Configure a PAM entry.

    

14. Select a privileged account type, then click on Continue.
15. Select the fields of the account (or provider) to associate with the variables and click Save.
16. Click Save and close the Propagation configuration window.

    

17. Go to Privileged access and select an account type previously configured with Propagation.
18. Click on Edit.
19. Go to Propagation tab and click on Add.

    

20. Select the configuration to link to that account, and click Confirm. It is possible to select multiple configurations.

    

21. Click OK to save the changes and close the window.

    

    To test if the link is successful, click on More and then Reset Password. If working correctly, the newly created file will appear on the remote machine. If not, it is recommended to check the logs of the account.

Create a PowerShell template

1. Log in to Devolutions Server with an administrator account.
2. Go to Administration – Privileged access – Propagation (preview).

   

3. Click on Script templates.

   

4. Click on Add.

   

5. In the General tab, add a Name for this template. It is also possible to add a Description. The icon can also be changed by clicking on it.
6. In Propagation properties, add the variables for the script by clicking on + Add property. The variables added in this tab should represent the URL to the remote machine (i.e., ComputerIP, Username, Password, and RootFolder).

   

7. In Property mapping, add the variables for the script by clicking on + Add property. The variables added in this tab should represent the Field mapping of the remote machine (i.e., FileName and FilePath).

   

8. In Script, the previous variables appear as well as the NewPassword variable. This new variable will contain the new password for the account on script execution.
9. Click on Generate base script.

   

10. Click Save and close the window.

    Learn more about custom scripts for this feature by visiting our public GitHub.

Active Directory specific propagation

The following section describes the properties of the Active Directory Password Propagation feature within the PAM solution. This Password propagation feature is only available for Domain accounts.

Properties