Local Users
Open an endpoint from Targets → Endpoints to see its Local users table. It lists the local accounts on the machine and the users AuthNull added.
The Table
| Column | What it shows |
|---|---|
| User | The account name |
| Password | Set, Locked or None |
| Rotation | Off, or how often the password rotates, for example Every 30 days. The admin account shows Not rotated |
| Last rotated | When the password was last changed |
| Expires | For added users: Never, or the date the user is removed |
| Password | Meaning |
|---|---|
| Set | The account has a password |
| Locked | The password is locked; it cannot be used to log in |
| None | The account has no password |
Row Menu
Each row's ⋮ menu offers:
| Action | Effect |
|---|---|
| Password rotation… | Turn rotation on or off, set how often, or rotate now. See Passwords |
| Reveal… | Break-glass: show the current password once. See Passwords |
| Remove user… | Deletes the account from the machine. See Add a User |
| View session recordings | Recordings of sessions as this account |
The Admin Account
The admin account is the sudo account you entered when you added the endpoint. Its Rotation shows Not rotated.
AuthNull never rotates it. The gateway logs in with it to set the machine up, scan accounts and rotate the other passwords. To change its credential yourself, use Update admin credential… from the endpoint's ⋮ menu. See Endpoint Actions.
Keeping the List Current
AuthNull scans the machine's accounts every hour by default. New users created on the machine show up by themselves.
To scan straight away, use Scan accounts from the endpoint's ⋮ menu.
The Endpoint Users Page
Targets → Endpoint Users lists the local accounts on all your endpoints in one place.
| Column | What it shows |
|---|---|
| User | The account name |
| Endpoint | The endpoint it is on |
| Rotation | The rotation setting. Shown to administrators only |
| Activity | Recent use of the account |
Filter with Search user and Endpoint, and change the order with Sort.
Each row's ⋮ menu offers View Session Recordings, Password rotation… and Reveal….
Next Steps
- Add a User: create a new local account on an endpoint.
- Passwords: how rotation and reveal work.