If you have recently changed domain users for PSMConnect or altered security policies, you may need to re-run the PSM hardening and AppLocker configuration scripts using the appropriate parameters:
Use "Add or Remove Programs" to uninstall any PowerBroker or BeyondTrust applications. psminitsessionexe
In a standard CyberArk environment, when a user initiates a connection, the PSM server logs in using a specific account—typically PSMConnect or PSMAdminConnect [8]. Instead of presenting a full Windows desktop, the server is configured to immediately launch PSMInitSession.exe [5, 13]. This process serves several critical purposes: If you have recently changed domain users for
Ensure the PSMConnect user has Read/Execute permissions on the Components folder. 3. Check GPO Settings This process serves several critical purposes: Ensure the
The session isolates and shields the underlying administrative credentials from the user's end device.
It works alongside CyberArk Shadow Users to prevent data leaking between simultaneous connections on the same host. Typical File Paths and Configurations
The PSMAgentsService.exe acts as the session initiator and manager for the PSM environment. Its primary duties include: