Adding accounts on endpoints using discovery
Steps for adding a discovery job
To add a new account discovery job, go to Manage → Account Discovery → +Add Account Discovery. Fill in the following details:
Attributes | Description |
|---|---|
Job details | |
Job Title | Enter a unique title for your scan job. |
Asset type | Select the desired asset type from the drop-down menu. |
Asset category | Select the asset category from the drop-down menu. |
Schedule type | Select a schedule type whether you would like to initiate this job once or schedule a recurring job. If you select a recurring job, you can choose days this job must be executed on. For example, you want to schedule a job every second day at 5:pm to scan your network. Recur every: 2 days |
Group Name | Select the groups on the Active Directory to be scanned. |
Task Start | Select the date when the task begins |
Schedule Time | You can either choose "Any" or schedule a proper time from when to start the task and when to end the task |
Action | |
Onboard accounts | If you do not wish to onboard accounts discovered in a scan, you may set the Onboard Accounts option as 'No'. Refer to the section on Handling assets & accounts Manually for more details. If you wish to onboard discovered accounts automatically to the Sectona PAM system, set Onboard Accounts option as 'Yes'. Please note that the password of the accounts will be reset when the accounts are on-boarded in the PAM by discovery. Refer to the section on Auto Onboarding discovered accounts for more details. |
Exclude Account(s) | If you want to exclude accounts from the account discovery, you can mention the names of the accounts separated by a comma. |
Tags (optional) | You can associate an account with your desired single or multiple tags like Infosec, Banking Core Server, ATM Switches, etc. Refer to section Applying conditions with tags for more information about adding context with tags. |
Account Category | Select an account category like "Interactive account" or "Service account." |
Enforce Password Change (optional) | You can disable this option by unchecking the Active checkbox to exclude the account from the scheduled password rotation job. |
Owner (optional) | If you have listed owner information for all assets, please include it here. |
Tick the Active checkbox and click on the Save button to add the account discovery job in the system.
Click on the Save + Run Now button to start the account discovery immediately.