How to Onboard Computers into Securden EPM?

Securden Endpoint Privilege Manager lets you manage privileges on domain and non-domain joined computers through a privilege management agent. A computer is considered onboarded into Securden EPM if the agent is deployed on the endpoint.

Note

A device license is counted only when the Securden agent is deployed on an active endpoint. Additionally, if the agent is in idle mode, then the license is not counted. Refer to the agent modes section of the administrator guide for more details.

There are two main ways to onboard a computer into Securden EPM.

1) Import from Azure AD / Active Directory.

2) Directly deploy the Securden Agent on the Endpoints.

The first method is reserved for domain joined computers only. For non-domain computers regardless of the operating system, the preferred method is to deploy the agent directly on the endpoints.

How to Import Computers and Computer Groups from Active Directory into Securden?

Once the Active Directory domain is integrated with Securden, you can pick and choose the computers and computer groups that you want to onboard into Securden. Navigate to Computers >> Computers >> Add >> Discover from AD to start this process. Importing computers from Active Directory domain can be completed in two steps.

First, connectivity between Securden EPM and your AD domain must be established.

You need to select an Active Directory domain from the drop-down menu. You also have the option to connect to a new AD domain here. You can refer to this section for help in connecting to a new domain.

Once the details are specified, you can proceed to the next step by clicking on Next.

You can import individual computers, computer groups, and entire OUs from the Active Directory. You can also import a combination of groups, OUs, and individual computers in a single discovery operation.

For example, if you want to fetch computers from an OU and a Group,

• In the OU tab, browse the OU tree or search and select the name of the OU, click Discover.

• Go to the Groups tab, select/browse the name of the group, and click Discover.

• Verify your discovery details and finally click Import.

Securden will fetch all computers that are part of the OU and group specified.

Note

If you want to import groups and OUs exclusively, you can do so by navigating to Computers >> Computer Groups >> Add >> Import from AD. However, the result of importing groups and OUs from Computers >> Add >> Discover from AD will be identical.

Advanced Settings

In the advanced settings, you can choose whether to ignore subgroups while importing computer groups. If you choose to ignore subgroups, Securden will still import computers in the subgroup since all computers are a part of the parent group. However, the imported computers will not follow the subgroup structure in Securden.

How to Onboard Computers and Computer Groups from Azure AD?

Similar to discovering from Active Directory, the process of importing computers and computer groups from Azure AD is a two-step process.

Navigate to Computers >> Add >> Discover from Azure.

The first step is providing the credentials required to connect to your Azure AD domain.

Azure AD domains that are added to Securden EPM will be available in the drop-down. If you want to connect to a different domain, you can do so by clicking on Add New Domain from the drop-down menu.

Note

If you are adding a new Azure AD domain, we recommend you doing so from Admin >> Integrations >> Cloud Services. By doing so, you can configure other cloud services that are supported through Azure domain integration while configuring device discovery.

Once the domain connectivity field have been filled with appropriate information, you can proceed to the next step of selecting the required computers and computer groups.

You have the option to search and discover individual endpoints and computer groups. You can also import a combination of groups and individual computers at once.

For example, if you want to select a computer and a computer group for importing,

• In the Groups tab, provide the search term and click Discover.

• You can select the required group from the search result.

• You can also browse the groups in Azure AD and select the required groups.

• Navigate to the Computers tab. Specify the search term and click Discover.

Once the required objects are selected, you need to verify the objects selected for discovery.

Advanced Settings

Before proceeding with the discovery process, you can check out the advanced options.

• You can choose whether to import subgroups of the selected groups or ignore them and import the parent group alone. By default, all the subgroups will be imported along with the parent group.

• You can choose the agent mode for the computers being imported in this step.

Once the objects are verified and preferences selected, you can proceed to discover the selected objects by clicking Import.

How to Deploy Agent on Domain Computers?

Once domain computers are onboarded into Securden, you can remotely install the Securden Agent on the domain computer from the Computers section.

In this section, click on the required endpoint and click on Install Agent to remotely install the agent on the computer. Optionally, you can manually install the 32-bit version or the 64-bit version of the Securden Agent.

How to Onboard Non-domain Computers into Securden?

To onboard non-domain computers into Securden, directly deploying the Securden Agent on the endpoint is sufficient. Once deployed, the Securden Agent will communicate with the central server if connectivity between the server and the endpoint is possible.

Once the Agent communicates with the server, the computer will automatically be onboarded into Securden.

You can download the setup file from the Computers >> Windows/Linux/MacAgent interface and deploy the agent through many ways.

• Install the agent manually on each endpoint

• Use a patch management or a device management tool like Intune

• Perform an image installation of the Agent

• Make use of group policy objects or SCCM

Once the agent is installed on the endpoints, ensure that the Securden Server Connectivity Details are configured appropriately in the agent.

Frequently Asked Questions

How to import Mac and Linux endpoints into Securden EPM?

To onboard endpoints running Mac and Linux endpoints, you can directly deploy the respective Securden Agents on the endpoints. Once the Agent is installed, you need to specify the server details for the agent to communicate with the server and onboard the endpoint.