Managing Computer Accounts

The Computers page (accessible from the Computers menu) displays all computers on which an Imprivata agent is installed. The information is updated during user authentications.

The Search for Computers utility on the Computers page allows you to run a variety of searches. You can search for, sort, and list computers by:

  • Hostname

  • Last logged-in user

  • Computer policy

  • IP address

  • MAC address

  • Imprivata agent type

  • Imprivata agent version

  • Site to which a computer belongs

  • Site to which a computer has failed over

The Search utility uses two elements:

  • Search Type — The type of search to use.

  • Search Criterion — The criterion used to search the users list. Only users that meet the criterion are shown.

Both multi-character (*) and single-character (?) wildcards are supported in some searches. If you do not enter a wildcard character at the beginning or end of the search string, then a multi-character wildcard is assumed at both the beginning and the end.

Each Search Type in the Search for Computers drop-down list displays a context-sensitive Search Criterion field or drop-down box.

For example, if you select IP Address, then you can enter any character in the criterion field. If you select Agent Type, then the criterion field is a drop-down box with the choices Imprivata single-user agent, shared kiosk workstation agent, and Citrix agent.

After you perform a search, a Clear button is displayed next to the Search button. Click Clear to clear the search criteria and return to the computer list.

You can change the policy assigned to one or many computers. Select the computer(s) for which you want to change the assigned computer policy, then click Change Policy. The Change Policy dialog box opens. You can assign a policy based on automatic computer policy assignment rules, or select a policy to apply.

NOTE: Not all Administrators have access to all computer policies, so policies are limited by the scope of the Administrator’s role. See Managing Administrator Roles.

You can delete the records of computers that have not contacted an Imprivata appliance for a certain period of time.

To automatically remove the records of inactive computers, select Automatically remove computers that have not contacted an appliance for more than and then enter the number of days after which the computer is considered inactive. This can be especially useful if you have many virtual desktops created as users need them, resulting in numbers of unused virtual computers.

To delete computer accounts manually, select the computer accounts to delete and then click the Delete button.

NOTE: Uninstalling the Imprivata agent does not remove the computer record from the list.

NOTE: Imprivata gets the host name from the computer properties. If a user changes the computer host name, then after the computer connects to the Imprivata server, the new host name is listed in addition to the old name, even though it is the same computer.

Super Administrators can assign multiple policies to many computers at the same time by importing a file that contains the usernames or hostnames and their desired policies. Users, computers, and policies must already exist in your enterprise. The list can assign different policies to different computers.

NOTE: This procedure can only be performed by Super Administrators.

To assign multiple computer policies at the same time:

  1. Create a CSV file listing all the policies to be assigned and hostnames to which they will be assigned. The list must be in the format
    • Version,1.0
    • Policy,UserorPolicy,Hostname
    • <VALUE>,username@domain or <VALUE>,hostname where VALUE is the exact name of the policy
  3. On the Computers page, click Bulk Actions. The Bulk actions window opens.
  4. Click Assign computer policies.
  5. Browse to and upload the CSV file, then click Next. A preview is displayed, listing any errors.

  6. NOTE: Policy names, usernames, and host names that do not match Imprivata database records are not processed but do not cause the operation to fail.

  7. Resolve any issues as needed, then click Go. The operation proceeds and the Users or Computers list is regenerated.

To view or edit a computer record, click the computer name on the Computers page. The computer record opens.

When you edit a computer record, you can:

  • Edit the computer name. Only change the computer name in the computer record if the actual computer hostname has changed. Otherwise the original hostname will reappear the next time the computer contacts the Imprivata appliance, but it will get the Default Computer Policy. The renamed computer becomes a ghost.

  • NOTE: You can rename the computer record, but the next time a user authenticates from that computer the original information is refreshed, and the renamed version remains in the list.

  • View the MAC address, the IP address, and the operating system.

  • View the Imprivata agent type and version.

  • See who was the last user to log into an Imprivata application from this computer, and when the login occurred.

  • Identify if the installed Imprivata agent is out of date, or if the optional Fingerprint Identification licensed feature is suspended on this computer.

  • Assign a different computer policy from the Apply Computer Policy drop-down list. Computer policies are detailed in Creating and Managing Computer Policies. To apply a policy to multiple computers simultaneously, see To apply a computer policy to many computers simultaneously:.

  • Identify the site and appliance providing Imprivata service for this computer.

  • See the history of Imprivata agent versions installed on this computer.

  • Computers with Imprivata Citrix agents include an Allow Anonymous Citrix Session? option. If you use anonymous Citrix sessions, select this on each computer that has an Imprivata Citrix agent.

  • Generate a report of computer activity from the link in the upper right corner of the page. This brings you to the Reports page of the Imprivata Admin Console. See Using Reporting Tools.