Btexecext.phoenix.exe Work Jun 2026

: It is a "Discovery Scan" agent. Its primary job is to enumerate local admin group members so they can be onboarded into BeyondTrust Password Safe for secure management.

: It gathers information about assets (like hardware, software, and configuration) to help IT teams identify vulnerabilities. Common Issue : Security administrators often notice it generating false positive logon events in Windows event logs BeyondTrust BeeKeepers Community btexecext.phoenix.exe

Updating LastLogonTimeStamp across many accounts can trigger incremental Active Directory replication traffic. : It is a "Discovery Scan" agent

This results in security tools flagging numerous, rapid logons from the agent account, which can cause alarm despite being legitimate, automated administrative activity. Is btexecext.phoenix.exe Safe? rapid logons from the agent account