Secret Server

Remote Password Changing Add-On

Remote Password Changing works hand-in-hand with our Secret Expiration feature. When a Secret expires, a background process in Secret Server will automatically generate a new password - which can be customized - and set the new password on the remote account. Expiring Secrets are automatically given new passwords. We currently support changing passwords on Windows, Active Directory, Microsoft SQL Server, Unix, and Oracle accounts.

Screenshot: Active Directory add-on

Updating Windows Scheduled Tasks and Service Accounts

The Remote Password Changing (RPC) add-on provides immediate synchronization for Scheduled Tasks, Service Accounts and IIS App Pools. From any RPC secret, you can keep all the dependencies up to date with the appropriate account information.

Examples include:
  • An IIS AppPool that uses a Domain account as its identity.
  • A Service Account that authenticates as a local system user.
  • A scheduled task that was for a particular user.

Checkout Secrets

The Checkout feature forces accountability on Secrets by granting exclusive access to a single user. If a Secret is configured for Checkout, a user can access it, but after checking it in, Secret Server automatically forces a password change on the remote machine. No other user can access a secret while it is checked out unless Unlimited Administrator Mode is enabled. This guarantees that if the remote machine is accessed using the Secret, the user who had it checked out was the only one with proper credentials at that time.