Migrate target accounts to new Active Directory domain controller

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

A large number of target accounts were configured in the past with a soon to be decommissioned domain controller, IP ending in .31. A new domain controller device (.28) has been created in PAM already, and the LDAP configuration for user and device group import was changed to use the new domain controller. But the target accounts still are associated with the old domain controller, and they will be broken once that domain controller is decommissioned. We don't want to reconfigure them manually one by one.

Resolution

If your environment allows access to the PAM servers using SSH Remote Debugging Services, open a case with PAM Support to have the team assist you with moving the target accounts to the new domain controller device in PAM.