Remote Desktop Protocol Web Relay

Privileged session monitoring and management is important for achieving the compliance and security requirements, however, this can be complex and time-consuming to achieve. From Privileged Access Manager 4.0 you can monitor and manage RDP sessions with agent-based web relay capability.

Usage Scenario for Agent-based Windows Web RDP Relay

Consider a scenario where the administrator has to provide privileged access to Windows Agent and the Privileged Access Manager user can access the session from the browser. For this scenario, the administrator must perform the following configuration in Access Control:

  1. Create a Windows or LDAP type Credential Vault resource for the Windows agent and add the respective credentials.

  2. Go to Hosts console (Old Administration Console) and double click Windows Agent and add the vault created in the previous step to the vault label.

  3. Go to new administration console and click Users and add the users (LDAP or Local) who will be using the resource.

  4. Click Access Control > Users and create a user group and add the users who can access the resource. For more information, see Configuring a User Role.

  5. Click Access Control > Resource Pools and create a resource group and add the Windows Vault for Agent-based Windows Servers. For more information, see Resource Pools.

  6. Click Access Control > Assignments and create a Web Agent RDP. Add the user group and resource pool that you created in steps 4 and 5 to it.

  7. Assign the permissions as relevant.

  8. Click Finish. After the administrator configures the authorization rule in Privileged Access Manager, the Privileged Access Manager user can get access to privileged session using steps 9, 10, and 11.

  9. Log in using the Privileged Access Manager user credentials and click Login.

  10. Click > My Access and click the start session icon against the required resource name.

  11. You can administer the live Remote Desktop Protocol Web Relay session as it opens in > Active Sessions. The administrator audits the user actions in this privileged session and views these reports in the administration console.