A Recast Proxy is a service that runs under a service account. Different Configuration Manager and Active Directory permissions are required depending on which tasks you're using the Recast Proxy for. See Proxy Service Account Permissions.
Proxy Uses
- Elevate permissions using a service account
- Populate web dashboards in Recast Management Server
- Populate scopes (required for fast channel/cloud management gateway and RMS permissions)
- Collect warranty information for Endpoint Insights
- Run actions against devices in a different domain
- Schedule Builder actions and Kiosk Manager deployments
By default, the Recast Management Server automatically authorizes any proxy installed in the same domain as the Recast Management Server. Proxies installed in other domains must be approved manually, unless you've edited the default setting to approve all proxies automatically.
Approve a Proxy Manually
If a proxy is installed separately in another domain, you must approve it manually.
To approve a proxy manually:
1. In your Recast Management Server, select Proxies in the navigation panel.
On the Recast Proxies page, your newly installed proxy should be visible but not Authorized.
2. Click the Edit icon to the right of the proxy.
3. In the Edit Recast Proxy window, enable the Authorized checkbox and click Save.
Un-approve a Proxy
You can manually remove authorization from any Recast Proxy.
To remove proxy authorization:
1. On the Recast Proxies page, click the Edit icon to the right of the proxy.
2. In the Edit Recast Proxy window, disable the Authorized checkbox and click Save.
Approve All Proxies Automatically
You can choose to have your Recast Management Server automatically authorize all proxies regardless of the domain where they're installed.
To approve all proxies automatically:
1. In your Recast Management Server, navigate to Administration > Settings.
2. Under Recast Management Server, click the Edit icon to the right of Recast Proxy Approval.
3. In the Change Setting window, choose Automatically Approve All Agents from the Value drop-down menu.
A Recast Proxy can be used to run Right Click Tools actions under a Service Account. Setting up a proxy to run actions involves authorizing the proxy in the Recast Management Server (if necessary), creating a proxy route, and reordering the routes to ensure that actions are run through the service account proxy.
To view the permissions required for different proxy uses, see Proxy Service Account Permissions.
For installation steps, see Install Recast Proxy Separately.
Authorize the Proxy
By default, the Recast Management Server will automatically authorize proxies installed in the same domain as the Recast Management Server. If a proxy is installed in another domain, you must approve it manually.
To approve the proxy manually:
1. Open the Configure Recast Management Server application or open the Recast Management Server web interface.
2. Click Proxies.
On the Recast Proxies page, your new proxy should be visible with Authorized disabled.
3. Click the Edit icon to authorize the proxy.
Create a Route
A route determines the proxy to which your Recast actions are sent. In order for the Recast Management Server to run actions through the Service Account Proxy, create a route that uses the Service Account.
To create a route for the Recast Proxy:
1. In your Recast Management Server, navigate to Administration > Routes.
2. In the main window, click Create.
3. Set route Type to Service Account.
4. As Recast Proxy, select your service account.
5. Set Role to Administrators.
6. Click Create.
7. On the Routes page, click Save.
Reorder Routes
New routes appear at the bottom of the Routes table.
To make all actions run through the service account proxy, you must move the new route above the Right Click Tools route in the table.
When you're done reordering the proxy route list, click Save to finalize the changes.
A Recast Proxy can be used to manage many tasks, such as:
- Reading from Active Directory to populate scopes
- Allowing access to web dashboards and dashboard trends
- Scheduling Builder actions and Kiosk Manager actions
NOTE: A proxy is also required for collecting warranty information with Endpoint Insights.
Setting up a proxy to manage tasks involves authorizing the proxy in the Recast Management Server (if necessary), creating a Recast Proxy route, and reordering the routes to match your priorities.
For the permissions required for different proxy uses, see Proxy Service Account Permissions.
For proxy installation steps, see Install Recast Proxy Separately.
Authorize a Proxy
By default, the Recast Management Server will automatically authorize proxies installed in the same domain as the Recast Management Server. If a proxy is installed in another domain, you must approve it manually.
To approve the proxy manually:
1. Open the Configure Recast Management Server application or open the Recast Management Server web interface.
2. Click Proxies.
On the Recast Proxies page, your new proxy should be visible with Authorized disabled.
3. Click the Edit icon to authorize the proxy.
Create a Route
A route determines the proxy to which your Recast actions are sent. In order for the Recast Management Server to run actions through a service account, create a Recast Proxy route.
To create a route:
1. In your Recast Management Server, click on Routes in the navigation panel.
2. On the Routes page, click Create.
3. After creating the route, click Save.
Reorder Routes
New routes appear at the bottom of the Routes table. You can move a route up in the order to run actions using this route, or you can configure the routes to only populate the proxy. You can also reorder routes in the Routes table to set their priority as the first route to be successfully matched will be used.
If you only need your proxy to populate scopes, and you don't want to run any actions using that proxy, you can change the order of your routes to reflect this desire.
When you're done reordering the proxy route list, click Save to finalize the changes.