A user asked about the use of the ControlUp real time console diagnostics and if they run as the user logged into the console or the monitor service account. Another user responded that it can depend on the action being taken, with some actions using the console user's AD account and others using the services account. More details were requested for a more specific answer. Both users confirmed that the same user that ran the console will also be used for the Diagnostics items such as tracert, ping, eventlog, admin$.
Read the entire article here...
Security Related Training & Support Archives
Security training and support-related archives from inside the ControlUp Community on Slack.
Troubleshooting Time Zones with ControlUp
Some users reported experiencing incorrect time zones on Windows endpoints in the Netherlands, with some showing locations in the US and Australia. ControlUp uses location services or IP address to determine location, with location services being the primary option. However, devices not using location services may still have incorrect locations based on their IP address. Disabling location services does not solve the time zone issue. It is possible that Microsoft's IP to location database has errors.
Read the entire article here...
Read the entire article here...
Episode #20 – Conversation with Ryan Mangan, Founder of EfficientEther
Tune in to Episode #20 of ControlUp Community Radio, where host Douglas Brown welcomes Ryan Mangan, founder of EfficientEther, a cutting-edge platform dedicated to optimizing cloud costs through AI technology. With nearly 20 years of expertise in user computing, Ryan brings deep insights from his extensive work with RDS, VMware, and Azure Virtual Desktop.
Ryan shares his journey and the motivation behind launching EfficientEther, highlighting how organizations face increasing complexities and waste in managing cloud expenditures due to subscription-based models.…
Read the entire article here...
Read the entire article here...
How to Set Up Credentials for ControlUp Scripts
A user asked for help on creating credentials for ControlUp to run scripts. They questioned if they were in the right place and what would happen if their profile was deleted. Someone suggested creating shared credentials in the Monitor settings and checking the permissions in the Security Policy.
Read the entire article here...
Read the entire article here...
Troubleshooting ControlUp Agent Connectivity for Azure Machines
A user is having trouble with ControlUp agent connectivity for Azure machines. The recommended method for this is agent outbound, and ports 40705 and 40706 are required for this. When Windows Defender is turned off, the agent connects only. More information can be found at https://support.controlup.com/v1/docs/agent-outbound-communication.
Read the entire article here...
Read the entire article here...
Setting Up a Trigger for Identifying Unused VMs in ControlUp Focus Discussion.
Several users discussed how to set up a trigger for identifying unused VMs older than 45 days, specifically in relation to the ControlUp environment. Suggestions were given about using the built-in Session Activity report or APIs to identify machines with no recent logins. Some users mentioned testing and recoding scripts for different hypervisors. One user also brought up the issue that not all VMs have a Horizon agent.
Read the entire article here...
Read the entire article here...
Important Notes for Setting Up ControlUp
A user shares a reminder for those setting up ControlUp - be aware that security policies may require manual deployment of browser add-ins. Relevant information and links can be found at https://support.controlup.com/docs/deploy-controlup-for-apps.
Read the entire article here...
Read the entire article here...
Filtering the Session Activity Report for Remote VDI Users.
A user was trying to filter the Activity Report to show only remote VDI users. They were investigating the OU workaround to get the desired data, and questioned how ControlUp determines which OU to show. It was explained that the user would be in a single OU, which is usually determined by a registry key or AD query. However, ControlUp does not query AD by default to minimize congestion. There was a suggestion to go back to the drawing board.
Read the entire article here...
Read the entire article here...
Troubleshooting the ControlUp Agent Installation Process
Multiple users discussed an issue where over 100 machines were not showing up or installing the ControlUp Edge DX SIP Agent. A suggestion was made to check the windows event log for events from the SIP agent, as well as running a network tester and ensuring AV exclusions and other prerequisites were in place. Mentioned links include the support article and a related download.
Read the entire article here...
Read the entire article here...
How to Bypass Step Verification with ControlUp
A team member was looking for help with bypassing a step verification for a client's request. Suggestions included using Security Pen Testing or signing in through SAML with the necessary attributes passed by an IDP. After experimentation, removing the "Sign-in to VDI with LDAP" option was found to work. Others who have issues can add their ControlUp email accounts in the VDI console to access this section through SSO.
Read the entire article here...
Read the entire article here...