How to notify user of Admin password disclosure

Applies To

Local Security Solution 6.1

Question

How can we automatically notify the user that a managed password (typically the Administrator account) has been accessed by an administrator when using Local Security Solution?

Answer

Import the attached XML file into Tasks > Security Management > Local Security > Windows > Notification Policies. (Note: the Notification Policies folder may not exist by default). Configure any additional e-mail addresses in the "Email Primary User" Automated Action.

Note: This policy assumes that the userID of the Primary User of a computer can be appended to "@company.com" to generate a valid e-mail address; if this is not the case, then additional logic needs to be applied in the Query to compute a valid e-mail address for the user.