Skip to content

Quick Start Guide

Joshua Roskos edited this page Nov 13, 2017 · 2 revisions

Step 1 - Configure the Scripts

When you open the scripts you will find some user variables that will need to be defined as specified below:

  • grantTempAdmin.py - Lines 72-79
  • removeTempAdmin.py - Lines 70-77
  • EA-MakeMeAdmin_ComplianceCheck.py - Lines 5-6

Step 2 - Upload the EA

  • Display Name: MakeMeAdmin - Compliance Status
  • Data Type: String
  • Inventory Display: {Your Choice}
  • Input Type: Script
  • Script: {Paste Contents of EA-MakeMeAdmin_ComplianceCheck.py}

Step 3 - Configure the Smart Group

Create a Smart Group named "MakeMeAdmin - Violations" and ensure "Send email notification on membership change" is enabled.

And/Or Criteria Operator Value
MakeMeAdmin - Compliance Status Like Remediated
Or MakeMeAdmin - Compliance Status Like Violation

Step 4 - Create your policies

  • Policy: MakeMeAdmin
    • Payload - General
      • Display Name: MakeMeAdmin
      • Enabled: Checked
      • Category: {Your Choice}
      • Trigger(s): None
      • Execution Frequency: Once every day (recommended)
    • Payload - Scripts
      • Scripts: grantTempAdmin.py
    • Scope
      • Configure to your requirements
    • Self Service
      • Configure to your requirements
    • User Interaction
      • Complete Message: You have been granted admin rights for the next 30 minutes.
  • Policy: MakeMeAdmin - Remove Admin Rights
    • Payload - General
      • Display Name: MakeMeAdmin - Remove Admin Rights
      • Enabled: Checked
      • Category: {Your Choice}
      • Trigger(s): Custom w/ Event adminremove
      • Execution Frequency: Ongoing
    • Payload - Scripts
      • Scripts: removeTempAdmin.py
    • Scope
      • Targets: All Computers
    • User Interaction
      • Complete Message: Time up! Your admin rights have been revoked.

Clone this wiki locally