discover domain accounts

[rene_p]

When I do an account discovery on hosts it discovers all local accounts in the local admin group.  Is there a way to also discover domain accounts that are added to the local admin group?  Ideally what I would like to do is discover all domain service accounts that are located in one ou and configure them for both check in and check out as well as random password change on a quarterly basis.  Is that possible?

 

Thanks,

Rene 

[support]

Hi Rene_p,

 

The 'Windows Local Admin Accounts' discovery job is only designed to discover Windows accounts, not Active Directory ones.

 

For your AD Accounts, you can instead use the 'Windows Dependency Accounts' discovery job, and it will find on your hosts where AD Accounts are being used for Windows Services, Scheduled Tasks or IIS Application Pools. If you're are needing anything more than this for AD accounts, you will need to add this records manually into Passwordstate - either via the UI, or our API.

 

We hope this helps.

Regards
Click Studios

[rene_p]

Thanks for the response.  Is there any documentation on how to add the Ad accounts via UI or API?

 

Thanks,

Rene

[support]

Hi rene_p,

 

We do have a forum post here which outlines how to manually set up a Password Record:  https://www.clickstudios.com.au/community/index.php?/topic/1733-active-directory-password-reset-example/

 

 

Alternatively, there is documentation in Passwordstate for this under Help -> User Manual -> KB Articles -> Password Resets -> Resetting Active Directory Passwords.

 

Hope this helps!

 

Support