Posted on 02-28-2023 05:13 AM
Hey there,
is there a possibility to display an extension attribute either separately at another place or to hide the attribute and make it visible by mouse click? It is about the fact that we have a script in use that implements LAPS - so assigns a local admin password and stores it in an attribute for emergencies. But I don't want this to be visible directly, but that you have to click on it first to make it visible, at least similar to the recovery key. Is that possible?
Thanks in advance,
Michael
Posted on 02-28-2023 05:45 AM
@mickl089 No, you can pick several different locations to display an EA, but not obfuscate it.
Posted on 02-28-2023 07:21 AM
@sdagleyThank you, where exactly do I have the option to display this everywhere? Currently, I only see the EAs in the device information at the bottom.
02-28-2023 07:31 AM - edited 02-28-2023 07:32 AM
Posted on 02-28-2023 08:17 AM
The available locations to display EA results are shown in @jtrant 's post.
Posted on 02-28-2023 07:52 AM
One way to help that we found useful was to randomize the password but add a stardard suffix of characters that would always be the same for all randmized password. (i.e. myrandompasswordXyZ). Only write the randomized password (different for each machine) but leave out the common suffix XyZ. That way the password stored in the database would be incomplete and only those that know the secret suffix could make use of the information. Length and place can obvioulsy be changed. The above was just a simple example.
Posted on 03-02-2023 12:54 AM
Thanks, the idea is really great! Thanks also to the tip to display the EA somewhere else!