Enterprise Administration Guide › Implementing Privileged Accounts › PUPM Endpoint and Privileged Account Creation › Create an Endpoint › Windows Agentless Connection Information

Windows Agentless Connection Information

The Windows Agentless endpoint type lets you manage privileged Windows accounts.

Note: If you configure a domain user on a local computer, PUPM cannot change the password of the domain user. This limitation is due to Windows behavior.

When you create endpoints of this type, provide the following information so that CA Access Control Enterprise Management can connect to the endpoint:

User Login

Defines the name of an administrative user of the endpoint. PUPM uses this account to perform administrative tasks on the endpoint, for example, to connect to the endpoint, discover accounts, and change passwords.

Note the following points:

If you specify the Advanced option, PUPM does not use the User Login account to perform administrative tasks. Instead, PUPM uses the specified privileged account to perform administrative tasks on the endpoint.

Password

Defines the password of the administrative user of the endpoint.

Host

Defines the host name of the endpoint.

Example: myhost-ac-1

Host Domain

Specifies the domain name that this host is a member of.

Note: Specify the host domain name with only the prefix. For example, if the full domain name is company.com, you enter only the prefix company.

Is Active Directory

Specifies that the endpoint is an Active Directory domain controller.

User Domain

Specifies the domain name that the user is a member of.

Note: Specify the user domain name with only the prefix. For example, if the full domain name is company.com, you enter only the prefix company.

Important! Verify that you specify the host domain name if you want to log in to the endpoint using PUPM Automatic Login. If the endpoint is a member of workgroup, specify the host name and not the workgroup name.

Advanced

Specifies whether you want to use a privileged administrative account to perform administrative tasks on the endpoint, for example, to connect to the endpoint, discover accounts, and change passwords. For example, you can specify a privileged domain account that can perform administrative tasks on multiple endpoints.

If you specify this option, PUPM does not use the User Login account to perform administrative tasks.

Disable Exclusive Sessions

Specifies whether to disable the exclusive sessions check on this endpoint. When selected, PUPM does not check for open sessions on the endpoint.