If you're looking to automatically import local administrator accounts by local group membership, please see Automatic Import for Local Administrator Accounts (Local Groups).
Prerequisites
- You have created customers in Quickpass either manually or by importing from IT Glue or Hudu via integration.
- You have installed the Quickpass Agent on a Member or Standalone Computer. https://support.getquickpass.com/hc/en-us/articles/360035206994-How-to-install-the-Server-Agent-Manual-and-Silent
- NOTE: The concept of this design is to automatically import Standardized Account(s) that are on Multiple Computers in your Customers' environment. You will be selecting an account to use as a "template" for the other workstations.
- You can have multiple types of sources for Administrative Imports configured.
If you want to import accounts by Local Security group, please see this KB
https://support.getquickpass.com/hc/en-us/articles/19493857369751-Automatic-Import-for-Local-Administrator-Accounts-Local-Groups-
-
- Click on the Customer you want to import accounts into
- Click on the Administrator Accounts Link in the left hand panel
- You must first enable the Administrator Account Rotation Schedule. For details on this please see the article: https://support.getquickpass.com/hc/en-us/articles/360052090173-How-to-Setup-Scheduled-Password-Rotation-of-Service-Accounts-with-External-Password-Vault
- Once Rotation Settings are configured, Click on +ADD Accounts dropdown and select Automatic Import
- Select Local Account
- You will be shown this screen
- Turn on the Pause Automatic Import if you want to Pause the Automatic Import (this is greyed out until you have configured the import the first time)
- Turn ON the Password Entry Matching if you want to store Administrator Account Password changes in whichever Password Storage option you have in your Tenant. (Note: This MUST be enabled for the Rotation to function properly) Existing Password entries will be automatically matched by Account Name (username), if they exist, and new Password entries will be created if there is no match. (Note: This option will not be available if you have not yet Integrated the Customer with IT Glue (if applicable) or Integrated the Customer with Hudu.)
NOTE: Quickpass makes extensive use of the ITGlue Category/Hudu Type values for the Automatic Matching process. If you have existing ITGlue/Hudu Password Entries that you want to ensure are automatically matched during import or during the Manual Matching process, please ensure that those entries are updated with the following Category/Type values:Account Source Category/Type Name On Premise Active Directory Active Directory Azure/O365 Office 365 OR Microsoft 365 OR Azure AD OR Azure Active Directory Local Account Local Account If an existing password entry does NOT have the Category/Type values populated, a new Password entry may be pushed into ITGlue/Hudu as a new password entry during an automatic import.
- Turn ON the Enable Password Rotation if you want any newly imported accounts to be Automatically rotated on the schedule you set above. (Note: If you Enable Password Rotation, the Password Entry Matching toggle will automatically be turned on)
- On the next screen, you will be
- Prompted to select what types of System Roles you want to automatically import Administrator Accounts for. Put checkmarks in all of the System Roles that are appropriate for your Customers' environment.
- Select Template accounts or Local groups. Please leave Template Accounts selected
- You will then be shown all Member Computers or Standalone Computers that you currently have the Agent installed on. This will be your "Reference" System that you will model the future Administrator account imports on. Select one computer that is representative of a typical configuration.
- Prompted to select what types of System Roles you want to automatically import Administrator Accounts for. Put checkmarks in all of the System Roles that are appropriate for your Customers' environment.
- After choosing the system, you will then be shown a list of account(s) that are on that "Reference" System
- Select any or all of the accounts that you want to be imported on any existing or future Member or Standalone Systems
- Hit Save and Run at the top of the page
- An initial Synchronization will be executed. Any of the selected accounts that exist on any of the Member or Standalone Systems that already have the Agent installed will be imported, and the options you selected on the Auto-Enrollment screen will be enabled.
- Further Synchronizations will occur every 3 hours. If an agent is installed on a system role that you had selected above in Step 7, those accounts with the same account name will be automatically imported.
- Click on the Customer you want to import accounts into
Troubleshooting Automatic Matching to IT Glue, or Hudu
On occasion the automatic import process may have troubles with matching to IT Glue, or Hudu.
Holding your mouse over the Automatic Import Status icon will show you the cause of the matching error.
- Manually match the accounts shown to the appropriate Integration that has failed to automatically create a match.
- Click Match Accounts at the top of the Administrator Accounts screen, then select IT Glue or Hudu.
- An Automatch will be performed and findings are displayed.
(If a "More than one Match" message is shown, click on the link and select the appropriate account.) - If no matches are found when clicking the Automatch button, click the check boxes for adding the IT Glue or Hudu entry, and click the Save button in the top right.
- You should now see the Integration Column displaying the ITGlue or Hudu Icon.
- You will now need to turn on the rotation for those accounts that you want to have rotated on the defined schedule by turning the Auto Rotate toggle on.
Adjusting the Automatic Import Settings
At times, you may want to adjust the Automatic Import Settings.
Click here to review the Article
NEXT STEPS:
- Automatic Import of Active Directory and O365 Administrative Accounts - https://support.getquickpass.com/hc/en-us/articles/4410104982295-Automatic-Import-for-Administrator-Accounts
Comments
0 comments
Please sign in to leave a comment.