Endpoint Administration Guide for Windows › Managing Policy Models › Automatic Rule-based Policy Updates › Update Subscribers › Propagate and Synchronize Passwords

Propagate and Synchronize Passwords

Once you set up a PMDB hierarchy, you can use it to keep user passwords synchronized throughout your system when the user passwords are changed with the Windows User Manager or software other than CA ControlMinder.

Note: CA ControlMinder also supports mainframe password synchronization.

Follow these steps:

1. Create a PMDB Hierarchy.
2. Enter the name of the appropriate parent PMDB as the passwd_pmd entry value in the registry on every station on which users or administrators may change passwords.

   HKEY_LOCAL_MACHINE\Software\ComputerAssociates\AccessControl\AccessControl\passwd_pmd
   

   The PMDB then propagates the password change to all its subscribers.

Note: If the PMDB sends a user password to a subscriber in which the user is not defined, settings are not changed and the user remains undefined for the subscriber.