Automate the migration of PSMConnect and PSMAdminConnect accounts from local to domain users in PAM Self-Hosted environments (not supported on Privilege Cloud). This tool streamlines the manual procedure by automating Active Directory user creation, GPO logon rights assignment, PSM machine hardening and AppLocker configuration, and PVWA/Vault account onboarding.
Key configuration options:
- Single or multi-PSM deployment: Convert one or multiple PSM servers in a single run via config.yaml.
- Dedicated or shared accounts: Create a dedicated pair of domain users per PSM server (recommended) or share a single pair of domain users across all listed PSMs.
- Automatic or custom user names: Automatically generate account names based on the PSM hostname (C_<Hostname> and AC_<Hostname>) or specify custom domain user names (up to 20 characters).
- Optional CPM management: Associate a CPM with the PSM safe for automatic password rotation, or leave CPM unconfigured to use generated static passwords.
- Interactive or CLI execution: Run interactively with guided prompts or pass parameters via command-line flags for automation.
