Layer7 Privileged Access Management

Expand all | Collapse all

Transparent Login of CA Privileged Access Manager on Windows Server 2016

Jump to Best Answer
  • 1.  Transparent Login of CA Privileged Access Manager on Windows Server 2016

    Posted 04-10-2019 04:00 PM

    Hi,

     

    I was configuring the Transparent Login on CA Privileged Access Manager to access and Microsoft SQL Management Studio, I follow the steps of docps.ca but not work, my question is. The Transparent Login works in Windows Server 2016? because in docops.ca says the suport goes to Windows Server 2012.

     

    Thanks,



  • 2.  Re: Transparent Login of CA Privileged Access Manager on Windows Server 2016

    Posted 04-10-2019 04:21 PM

    Hi
    Yes. based in this link from docops Windows 2016
    Transparent Login of CA Privileged Access Manager on Windows Server 2016 
    Have any event in Windows Event Viewer?
    Please, review this KB if is helpful to troubleshooting: 
    How-to: Troubleshooting RDP Application Transparen - CA Knowledge 
    Regards



  • 3.  Re: Transparent Login of CA Privileged Access Manager on Windows Server 2016
    Best Answer

    Posted 04-14-2019 09:52 PM

    Hi,

     

    I think it would be more to the CLASS information in the Transparent Login script then the Windows Server version.

    Especially when you are creating a Transparent Login Script for the SQL Server, I have experienced many times that the CLASS value that I captured turns out to be different when it fails. The script did not change so I know the CLASS value changed with the SQL Studio, possibly some updates to the product changes this value.

    So I had to modify the Login Script to be more tolerant to those changes.

     

    Following is my original script named "MS SSMS 17".

    You can see [CLASS:WindowsForm10.COMBOBOX.app.0.1974537_r44_ad1;INSTANCE:3]

    This value "0.1974537_r44_ad1" from the SSMS product keeps changing and breaks the PAM Transparent Login.

    Original

     

    To solve this problem I used "REGEXCLASS" instead of static "CLASS".

    Below is the new script I created.

    As you can see from below screenshot, the script will be able to detect the input fields even when those values change.

    Modified

     

    Hope this helps with your Transparent Login.

     

    Regards,

    Kim



  • 4.  Re: Transparent Login of CA Privileged Access Manager on Windows Server 2016

    Posted 04-22-2019 10:13 AM

    Hi Kim, 

     

    This solution solve my problem, thanks for your response! 

     

    Regards, 

    Rafael



  • 5.  Re: Transparent Login of CA Privileged Access Manager on Windows Server 2016

    Posted 04-22-2019 10:52 PM

    Glad that helped!