8/31/2010 9:10:39 AM
 Jeremy A Posts: 61
|
What determines who can see the Heartbeat out of sync alert on the SS Home page?
Is this is only viewable to people who have view permissions on the secret, Administrators, etc...?
-- http://www.ignitionmsp.com/
|
|
|
0
• link
|
8/31/2010 11:18:01 AM
 Scott Posts: 45
|
Hello Jeremy,
The user needs a minimum of Edit share permission on the Secret to both run Heartbeat and see the "There are out of sync Secrets" alert on the Home screen.
Scott Thycotic Support
|
|
|
0
• link
|
9/1/2010 5:11:31 AM
 Jeremy A Posts: 61
|
great,
2nd question. more of a scenario question, hoping you can help sort it out.
We have a large number of AD passwords using our Active directory Account template, however we only want heartbeat testing for some of those passwords.
Is there a way to have heartbeat testing on some passwords but not all passwords that use the same template? If so, can it be restricted or enabled by folder?
-- http://www.ignitionmsp.com/
|
|
|
0
• link
|
9/1/2010 5:32:53 AM
 Jeremy A Posts: 61
|
also, if I enabled heartbeat testing, and an account failed the heartbeat, and then disabled heartbeat testing. How can I remove the heartbeat failed alerts for those secrets no longer being monitored?
-- http://www.ignitionmsp.com/
|
|
|
0
• link
|
9/1/2010 7:37:47 AM
 Scott Posts: 45
|
Hello Jeremy,
You can disable heartbeat on a Secret by going into the Secret Edit page and un-checking the Heartbeat Enabled checkbox and clicking the Save button.
At present, there is no way to enable/disable based on folder location. Also, there is no bulk setting to enable/disable.
If you only have a few that require heartbeat, you may want to create a new template which mirrors the existing Active Directory template. The original one does not have heartbeat while the new one does.
Scott Thycotic Support
|
|
|
0
• link
|
9/16/2010 11:26:35 AM
 Jeremy A Posts: 61
|
yes another question.
can heartbeat testing be done across a domain trust? If so is there anything special that needs to be considered? can the trust just be one-way, or does it need to be two way?
-- http://www.ignitionmsp.com/
|
|
|
0
• link
|
9/17/2010 6:24:57 AM
 Tucker Posts: 87
|
Hello Jeremy,
Heartbeat can work across domain trust. I believe one-way trust is all that would be needed where the server's domain is trusted by the other domain.
Another option would be using Agent (7.1). The Agent could be installed on the other domain and no trust would be needed as the agent operates within the domain.
-- Regards, Tucker
|
|
|
0
• link
|