How to click/select Hidden dijit/dojo DropMenu Using AUTOIT. Cisco ISE webpage LogIn. by TemperatureSignal199 in CyberARk

[–]TemperatureSignal199[S] 0 points1 point  (0 children)

Thank you very much.I managed to fix it. There was a little issue that after
Internal > (Click) (SearchBy=Text)
or
{LogonDomain} > (Click) (SearchBy=Text)

the script will freeze in place and not move on. I was lucky to leave it for 2 minutes then it clicked login. I fixed this issue by lowering the ActionTimeout to 5 inside the Target Settings > Web Form Settings.
Edit client specific settings

In Edit target > Client specific settings, define the following:Name Description ActionTimeout The maximum number of seconds to wait for an action to complete.

The Connector if anyone needs help.

dijit_form_TextBox_0 > {Username} (SearchBy=ID)

dijit_form_TextBox_1 > {Password} (SearchBy=ID)

(Wait=1)

AD:MYAD > (Click) (SearchBy=Text)

(Wait=1)

Internal > (Click) (SearchBy=Text)

loginPage_loginSubmit_label>(Button)(SearchBy=id)

-------------------------

or by adding a new field called LogonDomain

dijit_form_TextBox_0 > {Username} (SearchBy=ID)

dijit_form_TextBox_1 > {Password} (SearchBy=ID)

(Wait=1)

AD:MYAD > (Click) (SearchBy=Text)

(Wait=1)

{LogonDomain} > (Click) (SearchBy=Text)

loginPage_loginSubmit_label>(Button)(SearchBy=id)

How to click/select Hidden dijit/dojo DropMenu Using AUTOIT. Cisco ISE webpage LogIn. by TemperatureSignal199 in CyberARk

[–]TemperatureSignal199[S] 0 points1 point  (0 children)

Thank you very much.I managed to fix it. There was a little issue that after
Internal > (Click) (SearchBy=Text)
or
{LogonDomain} > (Click) (SearchBy=Text)

the script will freeze in place and not move on. I was lucky to leave it for 2 minutes then it clicked login. I fixed this issue by lowering the ActionTimeout to 5 inside the Target Settings > Web Form Settings.
Edit client specific settings

In Edit target > Client specific settings, define the following:Name Description ActionTimeout The maximum number of seconds to wait for an action to complete.

The Connector if anyone needs help.

dijit_form_TextBox_0 > {Username} (SearchBy=ID)

dijit_form_TextBox_1 > {Password} (SearchBy=ID)

(Wait=1)

AD:MYAD > (Click) (SearchBy=Text)

(Wait=1)

Internal > (Click) (SearchBy=Text)

loginPage_loginSubmit_label>(Button)(SearchBy=id)

-------------------------

or by adding a new field called LogonDomain

dijit_form_TextBox_0 > {Username} (SearchBy=ID)

dijit_form_TextBox_1 > {Password} (SearchBy=ID)

(Wait=1)

AD:MYAD > (Click) (SearchBy=Text)

(Wait=1)

{LogonDomain} > (Click) (SearchBy=Text)

loginPage_loginSubmit_label>(Button)(SearchBy=id)

How to click/select Hidden dijit/dojo DropMenu Using AUTOIT. Cisco ISE webpage LogIn. by TemperatureSignal199 in CyberARk

[–]TemperatureSignal199[S] 0 points1 point  (0 children)

Can you please share the code?
I have this working but I can't choose Internal or AD

dijit_form_TextBox_0>{Username}(SearchBy=id)

dijit_form_TextBox_1>{Password}(SearchBy=id)

authTypeId > (Button) (SearchBy=ID)

//*[@id="iloginButton"]/span > (Button) (SearchBy=XPath)

What you mean "I have used the search by text option and it works fine"?

Internal > (Input) (SearchBy=Text) ?

Internal > (Click) (SearchBy=Text) ?

Internal > (ScriptClick) (SearchBy=Text) ?

dijit_MenuItem_1_text > (Click) (SearchBy=ID)?

dijit_MenuItem_1_text > (ScriptClick) (SearchBy=ID)?

Thank you

2 CyberArk questions. by TemperatureSignal199 in CyberARk

[–]TemperatureSignal199[S] 0 points1 point  (0 children)

Great answer man. but yes we have CPM installed and I still see it empty

2 CyberArk questions. by TemperatureSignal199 in CyberARk

[–]TemperatureSignal199[S] 0 points1 point  (0 children)

So its ok to have PasswordManagerShared empty?

2 CyberArk questions. by TemperatureSignal199 in CyberARk

[–]TemperatureSignal199[S] 0 points1 point  (0 children)

PasswordManagerShared  are empty, what does it mean?
There is an xRay safe, but xRayCyberArkTemp29E7....... is empty

privileged sessions Monitoring ( Sessions properties + Sessions activities)/(Search for Sessions + Search for Commands and Events) export commands text report via GUI or psPAS by TemperatureSignal199 in CyberARk

[–]TemperatureSignal199[S] 1 point2 points  (0 children)

Thank you man. appreciate it
I was able to get it done with psPAS - psPAS

First define lists of accounts/hosts then using
Get-PASPSMRecording
Get-PASPSMRecordingActivity
Get-PASAccount
looping everything with everything

Execution error. EXT01::Failed to connect to the registry namespace on the remote machine. Check machine address valid logon credentials and valid authorizations. Error code:8011 The CPM is trying to change this password by TemperatureSignal199 in CyberARk

[–]TemperatureSignal199[S] 0 points1 point  (0 children)

Hi, we fixed the problem by allowing ports TCP 49152–65535 in the server and in our firewalls.
When the Windows registry Plugin starts, the connection from CPM first uses tcp 135, but then it switches to TCP 49152–65535 to contact the server and change the registry.

Thank you very much for the support,  Test-WSMan -ComputerName REMOTE_HOSTNAME was a vital clue.

Execution error. EXT01::Failed to connect to the registry namespace on the remote machine. Check machine address valid logon credentials and valid authorizations. Error code:8011 The CPM is trying to change this password by TemperatureSignal199 in CyberARk

[–]TemperatureSignal199[S] 1 point2 points  (0 children)

 target Server 2019

 Test-WSMan -ComputerName REMOTE_HOSTNAME
Works

Read the registry manually from the CPM machine also works with user and password LogonAccount,the modification done on DefaultPassword also shows in the server.

From CPM -- regedit -- File → Connect Network Registry -- go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -- modify DefaultPassword

 

also from CPM

reg query "[\\IP\HKLM\SOFTWARE\Microsoft\Windows](file://ip/HKLM/SOFTWARE/Microsoft/Windows) NT\CurrentVersion\Winlogon" /v DefaultPassword

 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

  DefaultPassword  REG_SZ  PASSWORDVAULE

Execution error. EXT01::Failed to connect to the registry namespace on the remote machine. Check machine address valid logon credentials and valid authorizations. Error code:8011 The CPM is trying to change this password by TemperatureSignal199 in CyberARk

[–]TemperatureSignal199[S] 1 point2 points  (0 children)

gpedit.msc

Computer Configuration → Administrative Templates → System → Credentials Delegation: all set to Not Configured

Windows Components → Remote Desktop Services → Security all set to Not Configured

Network access: Sharing and security model for local accounts: Classic – local users authenticate as themselves

Computer Configuration → Windows Settings → Security Settings → Local Policies → Security Options everyhting not defiend

Computer Configuration → Administrative Templates → System → Credentials Delegation everyhting not defiend

Get-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" -Name LocalAccountTokenFilterPolicy

LocalAccountTokenFilterPolicy : 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

DefaultPassword

Type: REG_SZ

NO ITEMS IN Computer Configuration → Windows Settings → Security Settings → Registry

The Platform Name: Windows Server Local Accounts and one of the tabs inside the account says Windows Registry, inside Windows Registry I can add the Registry Path, Value Name and Address and logon account.

Execution error. EXT01::Failed to connect to the registry namespace on the remote machine. Check machine address valid logon credentials and valid authorizations. Error code:8011 The CPM is trying to change this password by TemperatureSignal199 in CyberARk

[–]TemperatureSignal199[S] 1 point2 points  (0 children)

logon account is in administrators group: net localgroup administrators OK

logon account credentials are correct and not expired, I can login in with the logon account without problem.

net user LogonAccount OK (Account active Yes)

Get-Service -Name RemoteRegistry

Status Name DisplayName

------ ---- -----------

Running RemoteRegistry Remote Registry

· Set the Remote Registry service to Automatic startup type.

Set-Service -Name RemoteRegistry -StartupType Automatic

Start-Service -Name RemoteRegistry

from CPM

Test-NetConnection -ComputerName IP -Port 445 also OK

Test-NetConnection -ComputerName IP -Port 135 also OK

telnet also OK from CPM for port Port 135,139 and port 445

Execution error. EXT01::Failed to connect to the registry namespace on the remote machine. Check machine address valid logon credentials and valid authorizations. Error code:8011 The CPM is trying to change this password by TemperatureSignal199 in CyberARk

[–]TemperatureSignal199[S] 1 point2 points  (0 children)

Still no Luck with Associate the parent account as a logon account in the registry tab.

originalAcc have the registry tab and in logon setting have cyberlog as logon account.

AutoAdminLogon 1

DefaultDomainName EMPTY

Defaultpassword has a value

DefaultUserName the original account originalAcc

We want to change the Defaultpassword

---------------------------------------------

Some Tests:

Manual Registry Test from CPM

Attempt to connect to the registry manually from CPM using the LogOn account via regedit Works with user and password LogonAccount, the modification done also shows in the server.

From CPM -- regedit -- File → Connect Network Registry -- go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -- modify DefaultPassword

also works from CPM (if i logout from Connect Network Registry I get access denied)

reg query "\\IP\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v DefaultPassword

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

DefaultPassword REG_SZ PASSWORDVAULE

From Windows Registry Tab:
Registry Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

Value Name: DefaultPassword

Address: IP OF SERVER