Index

Introduction to Local Security Solution (LSS)

• Local Security Solution Lifecycle

Install Local Security Solution

• Local Security Solution (LSS) data feeds

Local Security Solution (LSS) policies and tasks

• COM inventory
• Disable local guest accounts
• Local user inventory
• Randomize administrator password
• Shared folder inventory
• Update provisioned resource client items
• User logon inventory policy
• Windows service inventory policy
• Create a local security policy
• Provisioning policies
• Local Security Solution (LSS) tasks
  • Set restrictive service security client task
  • Set standard service security client task
  • Default update primary user for collection server task

User and group discovery

• Review domain users in administrator group
• Review local users in administrator group
• Configure local user inventory policy
• Review local user summary

User Password Management

• Password randomization
  • Randomize passwords
  • Randomize currently disclosed passwords
• Static password provisioning
  • Create Provisioned Account With a Static Password
  • Apply provisioned account
• Disclose managed passwords
  • Disclose password for randomized user account
  • Disclose static password for a provisioned user account
  • Disclose randomized passwords via the Help Desk console
• Password disclosure reports
• Advanced password management features
  • View managed password history
  • Configure password disclosure settings
  • Limit user access to passwords

Group membership enforcement

• Create provisioned group for administrators
• Create provisioned user for group membership
• Add a new provisioned user to the administrators provisioned group
• Apply provisioned group

Windows services management

• Configure services inventory
• Service hardening
• Review user-based services

Apply group policy via Thycotic

• Apply ActiveX group policy settings via Thycotic

Primary user tracking

Troubleshooting

• Can I use the Local Security Solution (LSS) on a domain?

Index

Previous Versions