Workgroup Targets

[Nikki Ceamin]

​Can someone tell me how you can rotate passwords on the Targets that CA PAM 3.3.1 has if the Target is a workgroup server not a domain joined ???

I was able to add a local account and connect via PAM but not able to rotate using the Remote windows feature ??

------------------------------
FCA Company
------------------------------

[Edward Vogel]

You have to make sure that the accounts have the appropriate privileges assigned on the Windows server.  One of the accounts needs to be an administrator, and be able to change its own password.  The other accounts need not be administrators, and must be configured as a User account with the Change Process configured to use the administrator account to change the password.  In addition, all the accounts must be configured with the Remote Desktop privilege.  Lastly, make sure that the ports used by the Windows Remote connector are open.  You can see these in the documentation:  https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-enterprise-software/layer7-privileged-access-management/privileged-access-manager/3-3-2/ip-addresses-and-ports-for-network-connectivity.html.  Give this a shot.  If you still have a problem open a Support ticket and we'll investigate further.

------------------------------
Principal Support Engineer
Broadcom
------------------------------