| AD Sync with Args | Trigger Domain Controller replication rather than waiting for the next scheduled AD sync. This will run on the ActionService directly and not use WinRM to connect to any servers. The action uses the service account associated with the domain to run the sync. | Destinations — Enter a comma-separated list of domain controllers to replicate to. Domain — Enter the domain controller source. Continue on Error — If an error occurs, continue to the next step rather than halting the action. Action Name — (Optional) Edit the name of the action. |
| Add ADUC Permissions | Add Active Directory Users and Computers rights to the login account. You can add rights such as Reset, Change, and Unexpire the password. The "Update Password Not Required Bit" lets you set the userAccountControl (UAC) toggle so accounts don't require passwords. | AD Object Type — Select which type of object to manage in the Organizational Unit: User or Computer. AD Organizational Unit — Enter a pre-existing Organizational Unit the login account have delegated permissions for. AD Rights to be Added — Select which right to delegate to the login account for managing the specified Organizational Unit. Continue on Error — If an error occurs, continue to the next step rather than halting the action. Action Name — (Optional) Edit the name of the action. Paired Action's Name — (Optional) Edit the name of the paired action. |
| Add Microsoft Entra ID Role | Add login account to an Microsoft Entra ID role | Microsoft Entra ID Role (Allows Custom Entries) — Enter which Microsoft Entra ID Directory Role is added to the login account, or select from the Role options in the dropdown. Continue on Error — If an error occurs, continue to the next step rather than halting the action. Action Name — (Optional) Edit the name of the action. Paired Action's Name — (Optional) Edit the name of the paired action. |
| Add Sudoers Rule | Create a new rule file in sudoers.d directory to grant user additional permissions | Run As — Enter which accounts the logged-in user can run commands as. Commands — Enter the commands the user can run as a comma-separated list, or, enter ALL for all commands on the target resource. ensure to use absolute paths in the command list. For example: /usr/bin/yum, /usr/bin/docker, /usr/bin/rpm. Prompt for Password — If enabled, the logged-in user must enter their password to run elevated commands. Continue on Error — If an error occurs, continue to the next step rather than halting the action. Action Name — (Optional) Edit the name of the action. Paired Action's Name — (Optional) Edit the name of the paired action. |
| Add to Microsoft Entra ID Group | Add login account to a Microsoft Entra ID Security Group | Microsoft Entra ID Security Group (Allows Custom Entries) — Enter which Microsoft Entra ID Security Group is added to the login account. Continue on Error — If an error occurs, continue to the next step rather than halting the action. Action Name — (Optional) Edit the name of the action. Paired Action's Name — (Optional) Edit the name of the paired action. |
| Add User to Domain Group | Add login account to a domain group | Domain — Enter an Active Directory domain. Group (Allows Custom Entries) — Enter a pre-existing Group the login account is added to in the specified Domain. Continue on Error — If an error occurs, continue to the next step rather than halting the action. Action Name — (Optional) Edit the name of the action. Paired Action's Name — (Optional) Edit the name of the paired action. |
| Add User to Local Group | Add login account to a local group | Group (Allows Custom Entries) — Enter a pre-existing Group the login account is added to in the specified Domain. Continue on Error — If an error occurs, continue to the next step rather than halting the action. Action Name — (Optional) Edit the name of the action. Paired Action's Name — (Optional) Edit the name of the paired action. |
| Add User to Groups and Roles (User Selected) | Admins set this up to allow the user to select from a list of groups or roles that the login account can be promoted into. A connection to a resource is optional. This allows NPS to control privilege, but have work done outside of an NPS session. | Admin creates list of groups/roles. Continue on Error — If an error occurs, continue to the next step rather than halting the action. Action Name — (Optional) Edit the name of the action. Paired Action's Name — (Optional) Edit the name of the paired action. |
| Add Requester to Database Server | Add login account to the database server | Continue on Error — If an error occurs, continue to the next step rather than halting the action. Action Name — (Optional) Edit the name of the action. Paired Action's Name — (Optional) Edit the name of the paired action. |
| Add User to Database Role | Add login account the Database Role. | Database – (Optional) If you specify a database, the role applies to the specific database. If you leave the database field blank, the role applies to the database instance. Role – Privilege Secure adds the user to this role. Continue on Error — If an error occurs, continue to the next step rather than halting the action. Action Name — (Optional) Edit the name of the action. Paired Action's Name — (Optional) Edit the name of the paired action. |
| Create Windows File Share | Creates a temporary, encrypted SMB share on the activity's target Windows resource. This action creates a hidden lock file at the root of the share's map path. This is used by the console to identify a folder as being created/owned by the console. Users shouldn't attempt to modify or delete this lock file. | Windows File Share Name — The name of the File Share that is created on the activity's target Windows resource. Windows File Share Map Path — A folder is created in this location (local path) as a map for the session's Windows File Share. Continue on Error — If an error occurs, continue to the next step rather than halting the action. Action Name — (Optional) Edit the name of the action. Paired Action's Name — (Optional) Edit the name of the paired action. |
| Enable RDP on Host | Allows the user to enable RDP on the Host during the pre-session. This action comes paired with the Disable RDP on Host post-session action type. | Continue on Error — If an error occurs, continue to the next step rather than halting the action. Action Name — (Optional) Edit the name of the action. Paired Action's Name — (Optional) Edit the name of the paired action. |
| Monitor File for Changes | Monitors the specified file for modifications. If no changes are detected, an Info event is logged to the action log. If changes are detected (or the file goes missing after the pre-session hash), a Warning is logged to the action and event logs. | File to Monitor — Enter the full local path to the file to be monitored. Fail Pre-Session on Missing File — Fail session provisioning if the file to monitor can't be found. Fail Post-Session on Mismatch — Fail session during Activity post-session if monitored file checksum doesn't match. Continue on Error — If an error occurs, continue to the next step rather than halting the action. Action Name — (Optional) Edit the name of the action. Paired Action's Name — (Optional) Edit the name of the paired action. |
| Purge Kerberos Tickets for Host | Purge all Kerberos tickets from the resource | Continue on Error — If an error occurs, continue to the next step rather than halting the action. Action Name — (Optional) Edit the name of the action. |
| Purge Kerberos Tickets for User | Purge Kerberos Tickets for the login account | Continue on Error — If an error occurs, continue to the next step rather than halting the action. Action Name — (Optional) Edit the name of the action. |
| Run AD Replication for User | Runs AD replication for the target user within the AD site of the target resource | Continue on Error — If an error occurs, continue to the next step rather than halting the action. Action Name — (Optional) Edit the name of the action. |
| Run Custom PowerShell Script | Execute custom PowerShell script during Activity | Definition — Enter a custom Powershell script here. Continue on Error — If an error occurs, continue to the next step rather than halting the action. Action Name — (Optional) Edit the name of the action. |
| Run Replication | Run replication (via repadmin /syncall) on closest domain controller to the target resource | Continue on Error — If an error occurs, continue to the next step rather than halting the action. Action Name — (Optional) Edit the name of the action. |
| Scan Host for Local Groups | Scan local groups on the resource | Continue on Error — If an error occurs, continue to the next step rather than halting the action. Action Name — (Optional) Edit the name of the action. |
| Set Cisco User Privilege | Set Cisco user Privilege level for account access (1-15) 1 = lowest rights 15 = highest rights | Privilege — User Privilege level for account access (1-15) 1 = lowest rights 15 = highest rights. Continue on Error — If an error occurs, continue to the next step rather than halting the action. Action Name — (Optional) Edit the name of the action. |