A user asked if it is possible to have a ControlUp monitor server in a DMZ while managing Citrix desktops not in the DMZ. Connectivity over port 40705 to the agent is possible, but DNS resolution and AD connections must also be in place for it to work.
Read the entire article here...
Microsoft Active Directory Related Training & Support Archives
Microsoft Active Directory training and support-related archives from inside the ControlUp Community on Slack.
Syncing Between AD and ControlUp
A user asked about putting in place a sync between AD and ControlUp and wondered what the folderpath attribute should look like in their case. The universal sync script is the replacement for the CVAD script, and should be used for EUC. It was suggested to add an introductory section comparing the AD Sync and EUC Sync to the documentation, which the team is now doing. The link in the EUC Sync documentation was removed due to being deprecated. The updated documents can be found at https://support.controlup.com/docs.
Read the entire article here...
Read the entire article here...
How to: Service Account for a Monitor in ControlUp
A user asked about setting a service account for a Monitor - the user had already created the shared credential with the necessary permissions. The user was unsure if the Monitor needed an additional service account when performing actions requiring the 'Allow Log on as a Service' permission. It was clarified that the shared credential could be set as the Monitor service account / domain identity through the ControlUp Console. The user found the article 'User Permissions in ControlUp' (https://support.controlup.com/docs/user-permissions-in-controlup) helpful.
Read the entire article here...
Read the entire article here...
Targeting Machines for Surveys in ControlUp Edge DX
A user asked if it is possible to target certain machines for surveys in ControlUp Edge DX, with the current options being AD groups or individual machines. It was mentioned that machine group selection may need to be requested as an enhancement. Linux agents do not currently support user sentiment. The survey is sent to users, and Edge is not installed on Citrix desktops.
Read the entire article here...
Read the entire article here...
How to specify the user security context when upgrading agents from the ControlUp Console?
A user asked if it was possible to specify the user security context when upgrading agents in ControlUpConsole, as they couldn't use Domain Admins in their environment. It was suggested to add admin accounts to AD Connections and specify one per domain, and the credentials were stored in the user profile and used only for agent deployment and "agent control". This solution worked for the user.
Read the entire article here...
Read the entire article here...
How to add new users to ControlUp Real Time DX?
A user asked a question about adding users to a ControlUp setup, with the question of whether it needs to be done via the Login Setup screen in version 8.7 or if it can be done through adding people to an AD group. In order to do this, users need to be added manually. However, ControlUp is working on enhancing its Solve/SAML integration, which will enable new users to be auto created as needed. This would be done with the new DEX platform/login when configured to use SAML. ControlUp will keep @member updated on its progress with the DEX platform.
Read the entire article here...
Read the entire article here...
Obtaining a ControlUp License for a Test Environment
A user asked if they could obtain a license for a test environment when they already had a production license. They were informed that a free trial license can be obtained with a new org. If the test environment is on the same domain of the production, they can just use a separate org for the same license. If the test environment is on a different domain, they would need to contact the sales team with their query. They were also informed about the Expert Program at https://www.controlup.com/products/controlup/expertprogram/, which they can get in touch with @member about.
Read the entire article here...
Read the entire article here...
Implementation Questions for ControlUp in Corporate and Isolated Environments
A user asked questions about implementing ControlUp in a corporate and isolated environment. The answers explained that Monitors and Data Collectors don't need to be in the same domain, credentials can be used even without trust relationship, and port 40705 needs to be added. Professional Services from ControlUp can be sought for resolving automation issues in an environment with extensive security policies.
Read the entire article here...
Read the entire article here...
How to give access to ControlUp insights without giving access to the Controlup Console
The discussion considered what options are available for providing access to Insights data for third-party users without access to the ControlUp console. While registering in the console is necessary, uploading a CSV file with UPNs can be done with the Login Setup feature in 8.7. Insights will be deprecated soon and, as some customer's security policies can remove accounts if they are not used after a certain amount of time, there is the option of creating a bogus user with an email distribution. There are no limitations on the number of users in ControlUp itself, though some Microsoft licenses may be consumed based on a single AD account.
Read the entire article here...
Read the entire article here...
How to configure ControlUp to allow fist level support only the permissions to logoff User sessions
A user asked how to set permissions for first-level support to logoff user sessions - the recommendation is to keep everything as "Not Set" and set specific permissions to "Allow". For more information, there is an article on creating a read-only permission set at https://support.controlup.com/v1/docs/security-policy-view-only-role.
Read the entire article here...
Read the entire article here...