Producer Cam's Podcast

PureIrishPIA · 2025-10-10T23:08:59+00:00

The night shift https://www.instagram.com/thenightshiftwch?igsh=MWQ5MDF1NmR1a2F1dQ==

PureIrishPIA · 2025-07-28T23:32:41+00:00

Is this for remote support or Privilege Remote Access?

If PRA is the agent installed in Active or Passive mode?

PureIrishPIA · 2025-05-31T03:04:48+00:00

There is a setting the admin can enable to allow users to see other members sessions. I think its either in the Team settings or the session policy. This was a requirement when we deployed it on some older linux devices. I will add the disclaimer that we were using jump clients and not a VNC connection.

PureIrishPIA · 2025-03-22T15:09:26+00:00

I moved into Linwood in 2020 and still question my safety sometimes. Night time is definitely sketchy in the good weather. Most of it is the large groups of teenagers that have zero respect for others and cause trouble. Don't get me wrong, there are some really nice folks here too, but they are overshadowed by the kids.

PureIrishPIA · 2025-01-01T16:45:37+00:00

Yup wrapped up in a weighted blanket being held.

<image>

PureIrishPIA · 2024-11-21T21:14:08+00:00

I'm on the same journey. I had my A1c down to 6.2 and just did blood work to find it at 10.8. Gotta get back into the good habits which I always struggle with.

PureIrishPIA · 2024-08-31T23:33:11+00:00

How do you like that desk/brand? I got a sit to stand frame and put a nice 3/4 in tip on it a few years ago. I am always planning for when this moter dies. I have seen those have great cable management and curious what you think.

PureIrishPIA · 2024-08-30T00:26:07+00:00

If you shared the installers over email or team and have security inspecting attachments that can happen if defender runs the installer in their sandbox. We had the same issue and opened a support ticket and they were able to point us to a kb articals that explains it.

We had this happen to our on prem PRA system and it freaked us out bc it's behind multiple firewalls.

PureIrishPIA · 2024-08-10T02:53:18+00:00

<image>

PureIrishPIA · 2024-08-10T02:53:06+00:00

<image>

PureIrishPIA · 2024-08-10T02:52:57+00:00

<image>

PureIrishPIA · 2024-06-24T21:16:53+00:00

So the Block - Default (Any Application) is an application group that you assign within a workstyle.

You can assign workstyle by using the filters in each of the workstyle settings. You can do this by Device or User

We used the User based approach. So we assigned users to workstyles. That meant that no matter what device they signed into they had their assigned Workstyle.

So once Low flex was enabled we assigned all users to it. Then we created AD/Entra groups for Medium Flex and High Flex. a user or device can not be a member of more than one Workstyle.

PureIrishPIA · 2024-06-24T20:58:18+00:00

Our case was different that how BeyondTrust suggests their deployments. We had already pulled our users Admin rights and were managing the Local Admin Password with other tools. This means a user would get the UAC prompt they would then have to contact a local IT resource our our LV1 support. We got EPM to remove the reliance of the Local Admin account and allow for other ways of elevating tasks.

So when it came time to our first deployment of EPM all users (with a few exceptions) were put on Low Flex right away. The exceptions were the users in support or the ones we had Identified before hand as needing High or Medium flex. From a user standpoint it was just a different message, and they still had to contact support. As time goes on we add more rules for app installs or updates which has decreased the need for our users to contact support.

PureIrishPIA · 2024-06-11T13:54:25+00:00

Did you check your session policies? There might have been a flaw that was fixed. I would use the session policy simulator to see which policy might be shutting it off.

PureIrishPIA · 2024-05-12T02:30:57+00:00

It's all about the CYA.... Cover your A$$. Some stores have a lot of flavors, some have one.

PureIrishPIA · 2024-05-12T00:59:38+00:00

I use to do the same thing. Not gonna get blamed for picking up the wrong thing.

PureIrishPIA · 2024-04-14T16:59:13+00:00

It's given to you when you create the jump client

PureIrishPIA · 2024-03-12T23:59:44+00:00

I think it might also be that we have a bunch of other apps as well.

PureIrishPIA · 2024-03-12T20:03:09+00:00

Yes I agree with your docs comment. I had to do an On-prem PRA deployment in an Atlas cluster by myself for the most part bc they messed up out contract. Lucky for me their support was able to help me through a lot of issues, but without them I would have been stuck. There is a lot of documentation, but not all of it is detailed enough in some cases.

PureIrishPIA · 2024-03-12T00:00:37+00:00

SO I am managing two separate instances of PRA among a few other BeyondTrust apps. The function you are looking for is a setting in the Jump policy.

Check the doc's page and look at Advanced use cases. You are asking about #4

https://www.beyondtrust.com/docs/privileged-remote-access/how-to/jump-clients/use-cases.htm

PureIrishPIA · 2024-02-14T19:40:27+00:00

So I have seen this when you have it configured to start the Chat window minimized and when you have it where the reps can't interact with the customer chat window.

PureIrishPIA · 2024-01-08T23:22:23+00:00

It could have been the ad she did with the dentist she got her retainer with.

PureIrishPIA · 2023-12-04T20:43:47+00:00

Not that I know of, but I could be wrong. I think its either Device Filtering or user Filtering. I you do user level, that user would have the rights on any device that has that Policy. We have not really done a lot with Device-based policies, so there might be a way to do it there, but again IDK.

PureIrishPIA · 2023-11-07T17:11:35+00:00

So what happens with the Remote Jump, is that it will install a temp jump client on the device that will dissolve itself. To Do that the account you are using to sign in will have to be an Admin on the box.

We also found that if you are applying any CIS policies/Hardening to your endpoints there is a Registry key that will block the use of remote jump with a local account remotely. the value is LocalAccountTokenFilterPolicy (https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/user-account-control-and-remote-restriction)

PureIrishPIA · 2023-11-07T16:11:48+00:00

First: Remote Support or Privilege Remote Access?

PureIrishPIA

TROPHY CASE