The Key to Withstanding Cyberattacks

The Privileged Account Minefield

If it’s that serious of a problem, why not dedicate a few IT resources and lock down those accounts? Simple enough, right? In theory, yes. But as a real-world IT security initiative? Not so much.

Consider this. A single computer can have privileged accounts in local and domain accounts, in services and scheduled tasks, and in applications like COM+ and DCOM, IIS websites and databases. Now, factor in the myriad of servers, workstations, and devices on a large network. You’ll quickly realize how difficult it is to manually document each privileged account and its interdependencies. And then frequently change each account’s password.

And not only that. Updating just one password for a privileged account can create service disruptions and system lockouts if processes and services that are dependent on that credential are not concurrently updated.

That’s because service account passwords can be almost impossible to discover and change manually. To accomplish this task, you need service account management. First, you must identify everywhere the service account is in use (discovery). Then you must change the password everywhere it’s referenced (propagation).

The situation becomes even more complex when you factor in turnover in IT staff, new hardware assets, and corporate mergers.

You’re left to navigate a minefield of privileged account vulnerabilities.

Privileged Account Discovery in Depth

The only way to secure your privileged credentials is to automatically:

• make each privileged account password unique and cryptographically complex,
• change privileged credentials after use — to prevent attacks such as pass-the-hash, and
• update the passwords frequently — even as often as every couple hours.

Then, to prevent IT disruptions when changing privileged passwords, you must propagate password updates to all referenced locations. To do this successfully, you need real-time knowledge of where privileged accounts are in use. Only with automated privileged identity management technology can you keep up with these changes, at scale, and on a continuous basis.

How Secure Are Your Privileged Accounts?

Are your privileged accounts vulnerable to attack? Download the free Bomgar Discovery Tool to get a report about unsecured service accounts, Active Directory domain accounts, and local administrator accounts on your network.