Modifying a Command

  1. On the home page of the console, click Command Control.

  2. In the navigation pane, click Commands.

  3. In the details pane, select the command you want to modify and click on the edit icon next to it.

  4. Configure the following fields:

    Name: Specify a different name for the command.

    Disabled: Select this check box to disable the command. A disabled command is dimmed.

    Description: Describe the purpose of this command.

    Rewrite: In the Rewrite field, define a command to be used in place of the commands listed in the Command field. You can also enter command arguments. Positional parameters can be used, as described in Using the Command Rewrite Functionality for Command Arguments. To use the Rewrite field to enable auditing of the command, see Configuring Auditing with the Rewrite Functionality

    Commands: Define one or more commands, one on each line. You can also enter command arguments. For example:

    vi *
/usr/bin/vi *

    To add a regular expression term to the list, prefix the regular expression with =~. For example,

    =~/^vi .*$/

    =~#/usr/bin/vi .*#

    You can copy and paste a list of commands from elsewhere. You can use the Sort button to sort the commands into alphabetical order.

    Sub Commands: From the list of command definitions you have already created, select the subcommands you want to include in this command definition. You can also add subcommands to a command definition by dragging and dropping them to the command definition in the navigation pane.

    Refer the following table to modify the command fields based on the endpoint access methods:

    Methods

    Command fields

    Unix/Linux

    pcksh

    Specify values for the fields Rewrite and Commands.

    For example:

    Rewrite: /usr/bin/pcksh -o audit 1 Commands: (Specify the commands in separate line)

    pcksh

    shell

    cpcksh

    Specify values for the fields Rewrite and Commands.

    For example:

    Rewrite: /usr/bin/pcksh -o audit 1 Commands: -cpcksh

    usrun

    Specify the commands that require privileged access in the Commands field.

    For example:

    Commands: *passwd

    Windows

    RDP Relay

    Specify <rdp>* in the Command field.

    Credential Provider

    Specify <NPAMCP>* in the Command field.

    Direct RDP

    Specify <rdpDirect>* in the Command field.

    Run as privileged user

    Specify the process or files that require privileged access in the Command field.

    For example, if you want to give privileged access to notepad, you can specify the value in following ways:

    Command:*notepad.exe*

    Command:*note*d.e*e*

    Command:*n........ex.*

    You can also provide the absolute path of the application. For example, C:\Windows\System32\notepad.exe. If the absolute path contains space, include the absolute path between quotes. For example, "C:\Program Files (x86)\WinSCP\WinSCP.exe".

  5. Click Finish.