Indeed PAM 2.1 – now even more functional and convenient management tool

We are happy to announce the new version of Indeed PAM, a software suite for managing privileged accounts. Version 2.1 introduces PostgreSQL storage support, import of resources from Active Directory and new functionality to manage permissions and user sessions. Please read on to learn more about these and other new features.

PostgreSQL support

In previous versions of Indeed PAM, only Microsoft SQL Server and its free version Microsoft SQL Express were used to manage storage. Version 2.1 introduces support of PostgreSQL and Postgres Pro RDBMS.

Import of resources from Active Directory

In previous versions, resources could be imported in bulk only from a CSV file through the command-line utility. The new version allows adding Active Directory resources using the management console interface. This feature is available when domain servers and workstations are located in separate organizational units.

Flexible settings to manage user permissions and sessions

There is another important new feature – now permissions can be suspended, for example, while an incident is investigated or an employee is absent, and then re-enabled. And if a permission is suspended during an active user session, this session will be closed. Before, permissions could only be permanently removed without further re-enablement.

All disabled permissions are now marked with a warning icon and validity periods are displayed under each permission in the user console.

The list of conditions for automatically closing a user session has been extended and now a session is also closed when:

  • The end date of a permission validity period ends
  • A permission expires according to the working schedule
  • A session runs out of the allowed time

Logging of transferred files’ names in a text log

If a user opens a session and copies any file to a resource drive, the name of this file will be recorded in a text log of the session. This feature make it possible to look into events which precede and concur with file copying. In the previous version, names of transferred files were recorded only in a separate section of the user session profile.

Load balancing using built-in features of Remote Desktop Services

The new version enables to use the built-in load balancer of Remote Desktop Connection Broker. Its name can be specified as an address of Indeed PAM Gateway component. Once a session is launched, RDS automatically redirects a user to the least loaded server.

Help section in the management console

A new “Help and Support” section has been added to the management console. It shows the version of Indeed PAM system kernel. Indeed PAM administrator can also expand the help section with links to documents or technical support sites.

More