pdp idc

Shows and configures the automatic update of Identity Collector's LDAP Groups.

For more information, see Identity Awareness Clients Administration Guide > chapter "Identity Collector" > section "Identity Collector - Automatic LDAP Group Update"

The available <options> are:

• Perform "update all" to get the current LDAP group status:

  pdp idc groups_update on

• Disable the feature (default):

  pdp idc groups_update off

• Show the current status of the feature:

  pdp idc groups_update status

Shows and configures the suspected Service Accounts.

For more information, see the Identity Awareness Clients Administration Guide.

The available <options> are:

• Show service account statistics -the current mode, known Service Accounts, and excluded accounts:

  pdp idc service_accounts show

• Configure the number of simultaneous logins (default is 100), after which all usernames are detected as Service Accounts:

  pdp idc service_accounts set_threshold <2-1000>

• Enable (this is the default) or disable the Prevent Mode (Auto-Exclude Mode):

  pdp idc service_accounts set_auto_prevention {enable | disable}

  Notes: If you disable the Prevent Mode, then Identity Collector works in the Detect Mode. When you change the work mode from Detect to Prevent, all sessions that are marked as a Service Account In Microsoft® Active Directory, a user account created explicitly to provide a security context for services running on Microsoft® Windows® Server. are revoked.

• Mark specific usernames as a Service Account (if prevention is enabled, the sessions for these users are revoked):

  pdp idc service_accounts mark <username>

• Configure specific usernames not to be detected as Service Accounts (continue to enforce identity):

  pdp idc service_accounts add_exception <username_1> <username_2> ... <username_N>

• Configure specific usernames to be detected as Service Accounts, if users log in the specified number of times:

  pdp idc service_accounts delete_exception <username_1> <username_2> ... <username_N>

• Remove specific usernames from the list of Service Accounts:

  pdp idc service_accounts unmark_service_accounts

  Note - You must put at least one space between account names. Do not put punctuation between account names.

• Remove all usernames from the list of Service Accounts:

  pdp idc service_accounts unmark_service_accounts_all