The tool is extremely useful

What are the best aspects of this product?

The price is affordable and does almost everything. I set up the software so I can find AD computers and users, it finds some local services and scheduled tasks, runs under service account local and/or domain. Local accounts for all domain computers are on different schedules. Their support team does everything to help you solve the issue you have. The tool is like a jump box, I am able to influence users who want to RDP to a server and they can do that via PMP, the thing is that they have to use the PMP and the PMP will launch the RDP session for them, and the session is well recorded.

What aspects are problematic or could work better?

Some steps and terminology are not so intuitive and can be quite confusing. In my opinion, their permission strategy is flawed and this makes the configuration awkward. Resources must have owners if not then the pass reset can fail, so I make every resource “owned” by same account in order to solve the issue. I think that if other admins start to add resources then it would become messy. I think that the idea about “owner” is bad, because for e.g. if the “owner” leaves the company and someone has to go into the PMP in order to find the resources and re-assign. It would be great if they could make the tool without the “owner”.

What specific problems in your company were solved by this product?

It helps us to solve the problem with pass management. We couldn’t know where the domain-privileged account might be used. The PMP discovers those links and handles them. I use this tool to negate other admins from storing pass in non-approved methods. PMP rotates the pass regularly on a daily basis and the non-approved methods are out of date and the admins that have used those methods are forced to use PMP so they can get the latest pass.

Are you a current user of this product?

Yes