Endpoint Administration Guide for Windows › Managing Policy Models › Automatic Rule-based Policy Updates › Update Subscribers › Propagate and Synchronize Passwords

Propagate and Synchronize Passwords

Once you set up a PMDB hierarchy, you can use it to keep user passwords synchronized throughout your system when the user passwords are changed with the Windows User Manager or software other than CA Access Control.

Note: CA Access Control also supports mainframe password synchronization.

To propagate and synchronize passwords

1. Create a PMDB Hierarchy.
2. Enter the name of the appropriate parent PMDB as the passwd_pmd entry value in the registry on every station on which users or administrators may change passwords.

   HKEY_LOCAL_MACHINE\Software\ComputerAssociates\AccessControl\AccessControl\passwd_pmd
   

   The PMDB then propagates the password change to all its subscribers. If the passwd_pmd value is blank, CA Access Control checks the secondary_pmd value and sends new and updated passwords to the PMDB listed in this value, unless it also is blank.

Note: If the PMDB sends a user password to a subscriber in which the user is not defined, settings are not changed and the user remains undefined for the subscriber.