2.1 Windows

You can start the Windows session in the following ways based on the type of access granted to you by the administrator:

2.1.1 SSO to Windows Session Using Privileged Account Manager Proxy

These are remote desktop sessions to target computers through Privileged Account Manager proxy where Privileged Account Manager does a single sign on as a privileged user.

To launch the Windows SSO session:

  1. You can launch a Windows session by clicking either of the following:

    • Resource Name: Allows you to select the display resolution of the RDP session to the target machine and add session notes before launching the session.

    • The Icon: Allows you to directly launch the session.

      An RDP file is downloaded after you click either of the above.

      Save and open the RDP file to launch the session.

      The downloaded RDP file is valid only for 1 minute. After 1 minute, repeat the above steps to download a new RDP file. These RDP files are not deleted automatically. Hence, after using delete these files manually.

    • The Icon: Allows you to directly launch the live session for web RDP.

2.1.2 SSO to Windows Session Using Privileged Account Manager Credential Provider

These are remote desktop sessions to target computers that can be accessed using your user console credentials. These resource accesses are not displayed in the user console as you cannot launch these sessions from the user console.

To start a remote desktop connection by using credential provider, you must save the Remote Desktop Connection to a separate file, which creates a shortcut for the remote desktop session. You can directly launch the Remote Desktop Connection from the shortcut you created.

Perform the following steps to save the Remote Desktop Connection to a separate file:

  1. Open the Remote Desktop Connection client.

  2. Specify the IP address of the target computer.

  3. Click Options and then click Save As to save the Remote Desktop connection as a separate file.

  4. Add the following to the saved Remote Desktop Connection file by using a text editor and save the file:

    enablecredsspsupport:i:0

  5. Click the saved Remote Desktop Connection file.

    For subsequent sessions you can just click the saved Remote Desktop Connection icon.

  6. Click the Credential Provider tile.

  7. Specify your user console credentials to log in to the computer.

    NOTE:Ensure that you provide the user name in uppercase.

2.1.3 Direct Access to Windows Machine

These are direct sessions to the computer using the respective server credentials where Privileged Account Manager authorizes the access. This type of resource accesses are not displayed in the user console, as you cannot launch these sessions from the user console.