Creating a non-privileged account

To create the secret:

1. Go to Secrets > Secrets.
2. In the Secrets List, select Create.

   The Create New Secret in: dialog appears.

3. Select the folder where you intend to add the secret.
4. Select Create.

   The New Secret window opens.

5. Enter a name for the secret.
6. From the Target dropdown, select the target that you created in Creating a target with server information as Windows.
7. In Fields:
   1. Enter the user name.
   2. Enter the password.
   3. Reenter the password to confirm.
8. Go to the Secret Setting tab.
9. Enable Session Recording.
10. Ensure that Proxy Mode is enabled.
11. Enable Windows Application Filter and from the dropdown select the Windows application filter created in Creating a Windows application filter profile.
12. Click Submit.

    

    

The above secret can be created in the CLI using the following commands CLI:

 config secret database
  edit 5
   set name "Demo - Non - Priv - Account"
   set target "Demo - Windows Server"
   set target-privilege-account enable
   set folder 1
   set template "Windows Domain Account"
   set recording enable		
   set proxy enable
   set winappfilter enable
   set winappfilter-profile "Block Paint"
   set rdp-service-status up
   set ldaps-service-status up
   set samba-service-status up 
   config credentials-history
  end
  config field
   edit 1
    set name "Username"
    set value "demo-non-priv-acc"
   next
   edit  2 
    set name "Password"
    set value "ENC jdiQCYRCdK9Hcxb1oyHpwaWGgltZZjI2N3ZFQA=="
   next
  end
 next
end