-
Notifications
You must be signed in to change notification settings - Fork 22
Quick Start Guide
Joshua Roskos edited this page Nov 13, 2017
·
2 revisions
Step 1 - Configure the Scripts
When you open the scripts you will find some user variables that will need to be defined as specified below:
- grantTempAdmin.py - Lines 72-79
- removeTempAdmin.py - Lines 70-77
- EA-MakeMeAdmin_ComplianceCheck.py - Lines 5-6
Step 2 - Upload the EA
- Display Name: MakeMeAdmin - Compliance Status
- Data Type: String
- Inventory Display: {Your Choice}
- Input Type: Script
- Script: {Paste Contents of EA-MakeMeAdmin_ComplianceCheck.py}
Step 3 - Configure the Smart Group
Create a Smart Group named "MakeMeAdmin - Violations" and ensure "Send email notification on membership change" is enabled.
| And/Or | Criteria | Operator | Value |
|---|---|---|---|
| MakeMeAdmin - Compliance Status | Like | Remediated | |
| Or | MakeMeAdmin - Compliance Status | Like | Violation |
Step 4 - Create your policies
- Policy: MakeMeAdmin
- Payload - General
- Display Name: MakeMeAdmin
- Enabled: Checked
- Category: {Your Choice}
- Trigger(s): None
- Execution Frequency: Once every day (recommended)
- Payload - Scripts
- Scripts: grantTempAdmin.py
- Scope
- Configure to your requirements
- Self Service
- Configure to your requirements
- User Interaction
- Complete Message: You have been granted admin rights for the next 30 minutes.
- Payload - General
- Policy: MakeMeAdmin - Remove Admin Rights
- Payload - General
- Display Name: MakeMeAdmin - Remove Admin Rights
- Enabled: Checked
- Category: {Your Choice}
- Trigger(s): Custom w/ Event adminremove
- Execution Frequency: Ongoing
- Payload - Scripts
- Scripts: removeTempAdmin.py
- Scope
- Targets: All Computers
- User Interaction
- Complete Message: Time up! Your admin rights have been revoked.
- Payload - General