Thycotic Community - Recent Posts

Thycotic Community - Recent Posts http://www.thycotic.com/forums/recent.aspx Thycotic Community - Recent Posts en-us http://blogs.law.harvard.edu/tech/rss Jitbit AspNetForum Mon, 17 Jun 2013 13:14:32 GMT Mon, 17 Jun 2013 13:14:32 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=585 Reports [1 reply] last message by

Joshua C in Secret Server
Hi Peter,

Sorry to hear that you are having trouble. When a users Secret Server contains more than 30 active users Secret Server switches from a drop-down selection to a search bar with auto-fill. This is down so that administrators do not have to go through long scroll boxes. To use the search box begin by typing the name of the user (both the short and long user name works) highlight the desired name and hit Enter to add/select the user. If you are still having troubles please give us a call at 202-233-6680 We are open 9:00AM-5:30PM EST Monday-Friday and I would be glad to assist you.

Kind Regards,
Joshua Conroy]]> Mon, 17 Jun 2013 13:14:32 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=584 Desktop Client [3 replies] last message by

Joshua C in Secret Server
Hi Peter,

The Secrets are encrypted and cached on the device(computer or mobile device) and will stay there till cache is cleared whether that is done manually or by a built in timer that can be set within Secret Server. The Desktop Client and Mobile Apps are good solutions should your Secret Server become inaccessible.

Kind Regards,
Joshua Conroy]]> Mon, 17 Jun 2013 13:10:15 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=583 Web Password Filler - Not configured message [1 reply] last message by Jessica M avatar

Jessica M in Secret Server
Hi Michael,

Each Secret that is used by the Web Password Filler must have the required fields mapped before it is considered "configured" for this purpose. Because a user must be an Owner of the Secret to configure the Web Password Filler mappings, this must be done for a Secret before non-Owners may use it in this way.

If you have any further questions, please note that you may submit a ticket at any time by going to support.thycotic.com.

Thanks!
Jessica]]> Thu, 13 Jun 2013 16:13:46 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=582 Currently possible or feature request? [1 reply] last message by Jessica M avatar

Jessica M in Secret Server
Hi Erich,

Thanks for the post. Secret Server does allow you to use one Secret Launcher for multiple servers, however it will only provide Remote Password Changing and Heartbeat capabilities for the server primarily listed on the Secret. We recently posted an article in our blog that provides more detailed information on this capability:

http://blog.thycotic.com/2013/05/03/restricting-user-input-for-launcher/

As best practice, we encourage using unique local account passwords rather than universally identical local accounts. This brings us to your second question:

Secret Server Enterprise Plus edition provides a feature called Discovery Rules. This allows you to create rules that can be applied to Local and/or Domain accounts. Configuration of each Rule allows you to specify criteria for importing the account information such as domain, computer name and account name. You may also specify how the information will be formatted within Secret Server by declaring a Secret Type, Folder destination, Secret Name, and Secret permissions. Lastly, you are given the option to change the password to a predetermined or randomly generated new password as the information is imported.

If you have any further questions, please feel free to submit a web ticket at support.thycotic.com.

Thanks!
Jessica]]> Wed, 12 Jun 2013 15:07:39 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=574 API Code Examples [1 reply] last message by Christopher B avatar

Christopher B in Secret Server
Hey Frank

I made this a couple of days ago, maybe you'll find it useful, it's based off of the example here on Thycotics site.

function GetFieldId($template, [string]$name) {
Return ($template.Fields | Where {$_.DisplayName -eq $name}).Id
}

function CreateNewSecret {
param($accountUserName, $accountPassword)

#fill in username, password, and baseUrl for your Secret Server.
$username = 'SS_Account'
$password = 'SS_Account_Password'
$domain = 'yourDomain'
$baseUrl = 'https://yoursecretserver.com'
$url = $baseUrl + '/SecretServer/webservices/SSWebService.asmx'
$proxy = New-WebServiceProxy -uri $url -UseDefaultCredential
$tokenResult = $proxy.Authenticate($username, $password, '', $domain)
if($tokenResult.Errors.Count -gt 0)
{
$msg = "Authentication Error: " + $tokenResult.Errors[0]
echo $msg
Return
}

$token = $tokenResult.Token
$templateName = "yourTemplateName"
$template = $proxy.GetSecretTemplates($token).SecretTemplates | Where {$_.Name -eq $templateName}
if($template.id -eq $null)
{
$msg = "Error: Unable to find Secret Templete " + $templateName
echo $msg
Return
}

$domain = "yourDomain"
if( $accountUserName -eq $null)
{
$accountUserName = "New User"
}

$msg = "Creating Account: " + $domain + "\" + $accountUserName;
echo $msg

#If no password is set, it will generate a new password

if($accountPassword.length -lt 1)
{
#echo "Generating New Password for account"
$secretFieldIdForPassword = (GetFieldId $template "Password")
$accountPassword = $proxy.GeneratePassword($token, $secretFieldIdForPassword).GeneratedPassword
}

$secretName = $domain + "\" + $accountUserName
$secretItemFields = ((GetFieldId $template "Username"), (GetFieldId $template "Password"), (GetFieldId $template "Notes"))
$secretItemValues=($accountUserName,$accountPassword, "")

$folderName = 'yourSecretsFolder'
$folderObject = $proxy.SearchFolders($token,$folderName)
$folderId = $folderObject.Folders | Foreach-Object {$_.Id}

$addResult = $proxy.AddSecret($token, $template.Id, $secretName, $secretItemFields, $secretItemValues, $folderId)
if($addResult.Errors.Count -gt 0)
{
$msg = "Add Secret Error: " + $addResult.Errors[0]
echo $msg
Return
}
else
{
$msg = "Succesfully added Secret: " + $addResult.Secret.Name + " (Secret Id:" + $addResult.Secret.Id + ")"
echo $msg
Return
}

}

$newSecretName = 'test3'
$newSecretPassword = '12345678'
CreateNewSecret $newSecretName $newSecretPassword]]> Tue, 11 Jun 2013 02:11:08 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=581 Feature Request: Secret Sharing Steps [1 reply] last message by

Kevin in Secret Server
Hi Ralph,

I am not aware of any behavior changes around that particular functionality. I am going to create a support ticket for you so that we can investigate this problem with you. A support engineer will be in contact soon.

Thanks!]]> Thu, 06 Jun 2013 13:53:01 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=580 Feature Requests: Add user to secret [1 reply] last message by

Kevin in Secret Server
Hi Joel,

This is an interesting idea, thanks for the feature request. I've entered your feature request into our tracking system for review by our product owner.

Thanks!]]> Tue, 04 Jun 2013 16:22:45 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=578 Feature Request: Personal Secret Defaults [5 replies] last message by

Kevin in Secret Server
Hi Peter,

Great! I've captured a feature request. We'll reach out to you when we have a better idea of where this feature request fits in our timeline.

Thanks,
Kevin]]> Tue, 04 Jun 2013 10:10:14 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=579 Password Reset Server 2.3.000000 Released [no replies] last message by

Ben in Password Reset Server
Release notes:
http://www.thycotic.com/products_passwordresetserver_releasenotes.html

How to Upgrade Password Reset Server:
http://support.thycotic.com/KB/a123/upgrading-password-reset-server.aspx]]> Tue, 28 May 2013 21:42:34 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=577 Exception in KeepAliveMonitor [1 reply] last message by Jessica M avatar

Jessica M in Secret Server
Hi Cal,

The purpose of the KeepAliveMonitor is to prevent the IIS application pool from recycling or timing out. I would recommend configuring your IIS application pool to not recycle or time out (see the following Knowledge Base article: http://support.thycotic.com/KB/a56/changing-iis-to-not-stop-worker-process-in-iis-70.aspx), so the KeepAliveMonitor process is no longer necessary and you will no longer receive these error messages. The KeepAliveMonitor feature can be turned off by going to Administration>Configuration within Secret Server and changing the setting for "Prevent Application from Sleeping When Idle" to "No" under the General tab.]]> Fri, 24 May 2013 13:44:45 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=576 Database setup error [1 reply] last message by Jessica M avatar

Jessica M in Secret Server
Hi Duncan,

I'm sorry to hear that you're running into problems with the setup - please contact technical support at your earliest convenience for assistance with this issue. We are available Monday through Friday, 9am-5:30pm EST at 202-223-6680 and would be happy to assist.]]> Wed, 22 May 2013 11:05:35 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=575 Admin Password Reset [1 reply] last message by Jessica M avatar

Jessica M in Secret Server
Hi Chris,

We can reset the password for a local Secret Server account with access to the SQL database. If you would like assistance with this, please give us a call at 202-223-6680, M-F 9:00am-5:30pm EST and we can do this via a remote support session.]]> Tue, 21 May 2013 13:47:52 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=573 Load Balancing [1 reply] last message by

Kevin in Secret Server
Jonathan,

Various features of Secret Server require sticky session due to storing some user information in memory of that server. If the user were to be hitting different web servers at a time, that memory would be inconsistent between the two servers.

We currently do not have a specific timeline on roadmap to change this, however I have opened a support ticket with our product manager for you to discuss and to get a better understanding of your needs.]]> Fri, 10 May 2013 09:49:03 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=572 Web password filler for Sonicwall GUI [1 reply] last message by

Joshua C in Secret Server
Good Morning Erich,

Thanks for the feedback, we are aware of the issue with the Web Filler and Sonicwall Firewalls. We have a task for the development team to look into getting that working.

Kind Regards]]> Fri, 10 May 2013 09:33:30 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=571 Group Management Server 1.2.000006 Released [no replies] last message by

Ben in Group Management Server
Full release notes are here:

http://www.thycotic.com/groupmanagementserver_releasenotes.html

-----
To upgrade:
http://support.thycotic.com/KB/a283/upgrading-group-management-server-single-instance.aspx]]> Mon, 06 May 2013 12:12:54 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=565 BlackBerry 10 version? [2 replies] last message by Todd M avatar

Todd M in Secret Server
Thank you for the reply. On the same subject, the Secret Server web app works on the BlackBerry 10 browser, but an intentionally mobile-friendly HTML5 web app would make it even more useful.]]> Mon, 06 May 2013 12:01:58 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=570 Scheduled task discovery? [1 reply] last message by

Joshua C in Secret Server
Good Afternoon Erich,

Thanks for the feedback, this is something that has been requested before. We have this logged as a feature request and is something we are planning to work on. At the moment we do not have a definite ETA.

Kind Regards]]> Fri, 03 May 2013 15:23:06 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=569 Generate password button [2 replies] last message by John B avatar

John B in Secret Server
Fantastic! That was exactly what I was looking for.]]> Thu, 02 May 2013 10:21:57 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=554 Webinar tomorrow - 8.1 Web Password Filler [12 replies] last message by

Joshua C in Secret Server
Thanks for the feedback, I have added the sites to our list and have passed it along to our development team.

Kind Regards,
Joshua Conroy]]> Thu, 25 Apr 2013 10:25:54 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=568 Feature Request: AD User Synchronization [1 reply] last message by

Kevin in Secret Server
Hi Jason,

Thank you for your feedback. I've captured your feature request for our team.

In the mean time as a work around, you could change the "User Account Options" under Active Directory User Synchronization" when configuring your domain synchronization to a manual enable/disabled mode. When set to "users are enabled by default" Active Directory users are enabled when they are brought in, however must be manually disabled when the account is no longer active.

However, I understand that can be tedious to manage user enabled status for everyone, which your feature request is trying to resolve.

Kevin Jones
Thycotic Technical Support]]> Wed, 24 Apr 2013 10:01:23 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=567 Secret Server 8.1.000014 Released [no replies] last message by

Jacob S in Secret Server
Full release notes are here:

http://www.thycotic.com/secretserver_releasenotes.html

-----
For existing customers to upgrade:
http://support.thycotic.com/KB/a17/upgrading-secret-server.aspx

For new customers to install:
Go to http://support.thycotic.com/KB/a17/upgrading-secret-server.aspx for the MSI file and complete instructions on how to install Secret Server.

--
Thycotic Development Team]]> Fri, 19 Apr 2013 14:45:18 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=310 Can you set a default folder for a secret? [5 replies] last message by

Jonathan in Secret Server
Peter C wrote:

+1

Peter - we will soon be rolling out a customer feature request system that will allow you to vote on items. We aren't building it ourselves (R&D already has so much to do!!) - we are just integrating another service that will allow feature request suggestions, discussion, status updates on feature requests and voting.

Thanks for your feedback on feature requests - it is really valuable and always appreciated. Hopefully we can meet face to face again at a European show later this year.]]> Wed, 17 Apr 2013 17:56:03 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=544 Desktop client : launchers ? [2 replies] last message by Daniel S avatar

Daniel S in Secret Server
+1]]> Mon, 15 Apr 2013 10:05:31 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=566 Secret Server 8.1.000011 Released [no replies] last message by

Jacob S in Secret Server
Full release notes are here:

http://www.thycotic.com/secretserver_releasenotes.html

-----
For existing customers to upgrade:
http://support.thycotic.com/KB/a17/upgrading-secret-server.aspx

For new customers to install:
Go to http://support.thycotic.com/KB/a17/upgrading-secret-server.aspx for the MSI file and complete instructions on how to install Secret Server.

--
Thycotic Development Team]]> Thu, 11 Apr 2013 16:35:26 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=564 Auditing Feature Request [1 reply] last message by

Joshua C in Secret Server
Hi Micheal,

Thanks for the feedback, we currently have that request on our development backlog. I have added your name to the list of parties interested in that feature and have passed it along to our Product Manager.

Kind Regards,
Joshua Conroy]]> Tue, 02 Apr 2013 13:33:18 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=563 Email Issues [1 reply] last message by

Joshua C in Secret Server
Good Morning,

At the moment Secret Server only allows one email address per user. I have taken this down as a feature request and have passed it along to our Product Manager for Review.

Kind Regards,
Joshua Conroy
Thycotic Software]]> Thu, 28 Mar 2013 09:46:57 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=562 Group Management Server 1.2.000000 Released [no replies] last message by

Ben in Group Management Server
Full release notes are here:

http://www.thycotic.com/groupmanagementserver_releasenotes.html

-----
To upgrade:
http://support.thycotic.com/KB/a283/upgrading-group-management-server-single-instance.aspx]]> Mon, 25 Mar 2013 13:21:52 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=559 iPhone App [2 replies] last message by

Joshua C in Secret Server
Good Afternoon,

After taking this offline, Thank you for reporting the issue, after some research it is an issue with iPhone app. The app will clear the cache whenever it tries to make a call back to Secret Server. I have logged the issue and have passed it along to our development team.

Kind Regards]]> Mon, 18 Mar 2013 16:22:34 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=561 Password Reset Server 2.2.000014 Released [no replies] last message by david c avatar

david c in Password Reset Server
Release notes:
http://www.thycotic.com/products_passwordresetserver_releasenotes.html

How to Upgrade Password Reset Server:
http://support.thycotic.com/KB/a123/upgrading-password-reset-server.aspx ]]> Fri, 15 Mar 2013 17:41:54 GMT http://www.thycotic.com/forums/messages.aspx?TopicID=560 Monthly Webinar- March 28th at 11:30am EST [no replies] last message by Kaitlin avatar

Kaitlin in Secret Server
Easily Manage and Secure all your Windows local administrator passwords

Use discovery to quickly find all your local Windows administrator accounts – import them into the Secret Server vault (even if you don’t know the current password). Then set a schedule (30, 90 days etc.) for regular password changing and never worry about those passwords again. Whenever a sysadmin needs a password, they just come to Secret Server to find it. Using Discovery Rules allows all of this to be automated.

Register for our upcoming Webinar on Thursday, March 28th 2013 at 11:30am EST (requires active support). This will be the first of a new Webinar series that will happen on the 4th Thursday of each month. Change your email preferences to receive updates about these upcoming webinars.

These webinars will also be recorded so you can view them after the event or share them with your team members. Each Webinar will have two engineers speaking about best practices, features, security and general problems you can solve using Thycotic products. If you have specific items you would like to see covered, please email your Account Manager.

Thanks,
Kaitlin]]> Fri, 15 Mar 2013 15:51:43 GMT