For changing these resource passwords, Privileged Account Manager uses tasks. Tasks contains the script that must be executed for password change and the scheduling option required to execute the script. The tasks are associated to a vault. For more information about vaults, see Contextual Help. By default, every vault will have a password change task associated with it. This task is executed for the credentials in the vault which has the Password Change option set to Yes.
In addition, if you want to perform any automated task after password change, it can be added as a service task. For example, if you want to perform backup after changing the account password, it can be defined as a service task. These service tasks are custom tasks for which you need to create a custom script and add it in the task. For more information about the template for creating a custom script, contact Customer Support.
For Windows and Active Directory:
Privileged Account Manager provides out-of-the-box scripts to change password of Windows local machine and Active Directory.
In addition to windows account password change, Privileged Account Manager also provides the capability to change the password of service accounts. Privileged Account Manager provides out-of-the-box scripts to change password of service accounts, such as such as Windows Services, COM+, Task Scheduler, and IIS Pool. For other service accounts, you can define a custom script for password change and associate it to a service task.
These service account tasks are executed only for those credential which have the appropriate service account associated with it. This association can be defined when adding a credential. When you are adding a credential for active directory, Privileged Account Manager provides a capability for you to define the machines where the credential is used for service accounts. This will help in end to end password change of the Active Directory accounts.
For Linux and Network Devices:
Privileged Account Manager provides out-of-the-box script to change password of Linux and Network devices that can be connected using SSH protocol. Privileged Account Manager can rotate both the password or the SSH key that is configured for a credential.
If you want to change password of associated service accounts, you can define a custom script for service account password change and associate it to a service task.
For more information about configuring tasks and scripts, see Contextual Help.
The following section explains in detail the prerequisite for configuring Password Management and also the checklist for configuring Password Management in an upgraded environment of Privileged Account Manager.