Home    SecuLution Dokumentation back next
Welcome
SecuLution technique and terminology
Quick start
Test setup in 30 minutes
Best practice in everyday use
Full setup and deployment in 5 hours
Installation of components
Install Appliance
AdminWizard installation
Agent installation
Syslog server installation
Initial configuration tasks
Configure basic settings
Agent configuration
Configure automated tasks
Manage whitelist
Initial whitelist generation
Import trustworthy software
Learn mode
Check deployment and learning progress
Audit
Add entries to whitelist
Drag'n'drop
Individual lernmode
Import from directory
PermanentLernUser
Log alarms
Cleanup whitelist
Manually delete unused entries
Delete entries using a pattern
Clean up classifications
Managed Whitelist
Managed Whitelist
Actions
Actions
Referring rules to objects
Offline mode
Offline mode
Devices
USB device management
USB device encryption
RCM
Agent deployment (RemoteClientManagement)
ArpWatch
ArpWatch
Logs
Logs
FAQ
setup.ini

PermanentLearnUser

The PermanentLearnUser is one of SecuLution's most powerful features, as it enables administrators to add new hashes to the whitelist by just starting the program using the credentials of a special privileged user account (press and hold shift key, right-click the software and choose "Run as different user").


To set up PLU, create a new global security group in your ActiveDirectory, call it e.g. "SecuLutionLearnUser":



Create one or more new user accounts that will later be used for installation of new software. Add privileges to these accounts that enable them to locally install software, and add these accounts to the new group you just created.

You have now configured new users and groups in your ActiveDirectory. SecuLution does not yet know about these AD objects. Start a new AD Object replication and activate these changes on the SecuLution appliance.

pludefieng

Under "Server Config" > "Learn-mode" you can now define this group as permanent learn-users. Click on "Apply" to confirm this changes.