Support

We are experiencing an issue with the Backup Manager and SQL database backups. Our infrastructure is configured as follows: - 1 server running Devolutions Server (DVLS) - 1 server running Microsoft SQL Server - SQL Server service account: Network Service - No Active Directory environment The following backup paths are configured in the Backup Manager: [image] The U: drive is a local drive on the Devolutions Server (DVLS) server and at the same time is mapped as a network drive on the Microsoft SQL Server. I have also tested the Backup Manager using a UNC path instead of the mapped drive, as well as a local drive directly on the Microsoft SQL Server itself. The result is the same in all cases and the backup fails with the same error message. The following error message is displayed: [image]

Hi everyone, I’m running a Devolutions Server with Docker behind a reverse proxy, which works well overall and was straightforward to set up thanks to the excellent documentation. When I try to upload custom images via RDM, it works; however, when I try to upload them persistently, this isn’t possible either via RDM or through the Devolutions Server’s web interface, and the error message “The type initializer for 'Windows.Win32.PInvokeGdiPlus' threw an exception.” is displayed. I also checked the stack's logs using `docker compose logs` in the stack directory—but unfortunately, there weren't any further details there. Unfortunately, I haven't found any other variables or workarounds (such as a bind mount for images to mount the images). I would really appreciate any suggestions for a solution.

I am a new analyst in an organization that uses RDM. I've been trying to audit the credentials stored in RDM for password duplicates. To that end, I have tried using the built-in reports, and I find that none of them are giving me the information I need. The Credential entry references report seems not to account for credentials stored in other entry types. The duplicate entry list does not specify which criteria is used to determine the duplication. It does not seem to detect duplicate strings in any field, but rather compare full entries. The entry list does not display credential columns, so that's also impossible to use. Did I miss any feature or function that would enable me to conduct my audit of credentials in my organization?

Hi, I hope someone can help me. I am in need to delete a user out of devolutions server, however I am unable to delete them. The user icon has a crown on it. I believe that this means that it is a workspace owner. How can I identify the workspace and re-assign the workspace owner. Thanks

Hi! We configured database retention to delete logs older than 1 year, but the logs still stay in the database. It has been like this through multiple DVLS updates with no change. We are currently on 2026.1.24.0. For some tables, we have entries from 2019. I have not clicked "Clean up now" yet, because I want to verify it works automatically. [image] I checked some of the "_Archive" tables, and none of them contain any entries. Scheduler service is installed and running. Automatic backups work. How to troubleshoot further? Thank you! Best regards, Daniel

Is there a way to automatically disconnect sessions on the DVLS after a certain period of time? I want to control this centrally at the server, not when accessing it via the RDP manager. I've seen that this question has been asked in the forum a few times, but it's never been addressed publicly! Instead, it's always been discussed in an internal ticket. Kind Regards

Hello, I have troubles switching to a non-administrator account in a report script. The usage is simple, I connect with it to collect and list all entries of specific vaults. I dont want, however, this service account to access the passwords/secrets of the credentials entries. Only certain properties. Obviously administrator can, but whenever I change to a USER, even if I allow everything to it, script cannot make a connection. Is it possible to use low level access account for automated export purposes? Thanks!

Hello, After updating to DVLS 2025.3.7, RDP entries using domain user PAM credentials would no longer work because the correct domain attribute was not being passed to target host. It appeared that the currently logged in user's domain was being passed instead. Rolled back to 2025.2.x all the respective RDP entries started working again. Using RDM 2025.3.16 Wondering if this (or a similar) issue been reported elsewhere? Please let me know if you would like any additional info. Thanks Joe

Environment: - Devolutions Server container, devolutions/devolutions-server:release-2026.2 (client build 2026.2.15.0) - Primary node: Azure App Service for Linux Containers, Azure SQL Database backend, fronted by Azure Front Door (custom domain) - Planned second node: on-premises, same network as our Active Directory, connecting to the same Azure SQL database over a planned site-to-site VPN Goal: We need PAM features that depend on reachability to our on-prem Active Directory. Since the Azure-hosted node can't reach on-prem AD directly, our plan is to run a second DVLS Server instance on-prem pointed at the same Azure SQL database as the Azure node so the on-prem node handles AD-dependent PAM operations while the Azure node continues serving cloud/remote users, both against one shared vault. Questions: 1. Is running two DVLS Server instances concurrently (not active/passive failover — both actively serving traffic to different user populations) against the same database an officially supported topology? If not supported today, is there a recommended alternative for giving a cloud-hosted DVLS instance access to an on-prem AD for PAM without a second live node? 2. If concurrent nodes are supported: does each node require the identical encryption.config/DVLS_ENCRYPTION_CONFIG_B64 to correctly decrypt shared vault data, or is there a different mechanism for multi-node encryption key distribution? 3. We used Set-DPSAccessUri with -AdditionalAccessURIs to register a second valid external hostname against one database (needed to fix an OAuth/AccessUri mismatch behind Azure Front Door). Is this the correct/intended mechanism for a node serving multiple hostnames, or is it meant only for a single node with multiple front-end domains, not genuinely separate server instances? 4. Are there known constraints around session affinity, caching, or concurrent-write conflicts when two nodes serve live traffic against one database simultaneously? 5. Is there a licensing consideration for running multiple concurrent instances against a single license/database?

Hi Devolutions-Forum, is it possible to change the PAM settings without assigning a license to the administrator account? It is a bit inkonvenient to assign the license to the admin account for just setting up/ changing the PAM settings. Or is it by design? Best wishes,

Hello, We are using Remote Desktop Manager v 2025.2.14.0. I am working with some automations that leverage the API, and it appears as though the PATCH method does not work, despite receiving a HTTP 200 response back from the server. Specifically, I am trying to change some attributes on an existing entry in our vault. I am sending a PATCH to this endpoint: https://our-remote-desktop-manager.com/dps/api/v1/vault/{{vaultId}}/entry/{{entryId}} And, I'm sending the following raw payload with the PATCH request: {"name":"Test Device Name", "description" : "Test Description via API call"} I receive an HTTP 200 back from RDM.. but when I go and check the vault, nothing has changed. If I look at the History section of the device entry in the RDM web interface, I do see the change event in the history. Do you have any idea what the issue could be?

DVLS 2026.2.12.0 I've only recently starting to use DVLS directly for informal change logs. I've noticed that when viewing an entry, the panel does not fill completely. The red rectangle is not used. [image]

Hello Devolutions Team, I've observed a strange behaviour while using the password management with password-policies. Our setup: - Devolutions Server in the currently recent version: 2025.3.10.0 - RDM Remote Desktop Manager in the currently recent version: 2025.3.35.0 In the system configuration in the section password management, I've configured five password policies and definied one of them as default policy (enforce default policy is NOT activated). [image] In the Web-UI I have configured for the global vault itself the password management as "inherited". Here the configured default policy (FGPP-User) is correctly shown. [image] For a dedicated folder, I have overriden the default with the concrete "FGPP-Technical". But here the problem arose: when I create a new password entry and prepare a new password value using the password generator, the globally configured default policy "FGPP-User" is selected. The password mode "advanced" and the values for length etc. is properly filled, but the selectbox shows the wrong default policy instead of the defined overriden "FGPP-Technical". [image] So far for the WebUI. In the Remote Desktop Manager desktop application (Windows), I'm encountering a different behaviour: Also here the behaviour is wrong, but different. When creating a new password entry in the dedicated folder (with the oerriden default policy with the concrete "FGPP-Technical"), the correct policy is pre-selected, but the values are completely wrong. In the folder properties in password managenent for the dedicated folder (with the oerriden default policy with the concrete "FGPP-Technical"), the correct policy is pre-selected, but the values are completely wrong. [image] As you can see, the symbol characters is active with a minimum of two, which is not the configured setting for the FGPP-Technical. And when creating a new password using the generator, the selectbox shows "Entry's configured password policy", basically stating the for this entry an unnamed overriden policy is defined, but as previously stated I just selected the different pre-defined FGPP-Technical. Additionally the mode is defined as "Default", but should be "Advanced", the symbols definition is wrong and the exclude/include lists are missing/wrong. Nevertheless, the password length, description and expiration setting is correct according the defined "FGPP-Technical" definition. [image] Am I misinterpreting the intended behaviour or is this a bug ? Kind regards Alex

Are Host entries intended to act as permission inheritance parents for subentries (SSH, RDP, Website, etc.), or do subentries inherit permissions only from folders/vaults? In our testing, a subentry displays permissions as "Inherited" from its Host, but a user who has View/Connect permissions granted only on the Host still cannot see or access the subentry. Is this expected behavior or a bug?

When deleting entries, those can be restored. How about vaults? Is there any way to restore those? KR G.

When the Duo prompt is presented the SMS button does nothing. The application has SMS an an allowed method. Phone call and push are working. The behavior is not tied to a single user, computer, or browser. Any ideas? Thanks, GM

Hi I created a new Entra ID PAM vault with password rotation for accounts in Entra ID. Connection test and password rotation works as expected. In RDM I have an existing "Default" vault, where we configured all connections to our systems. I'm struggling using the newly created Entra ID PAM vault as linked vault in existing system connections, e.g RDP to a Windows Server or portal website of Entra ID. In "Default" vault I created already a Devolutions Server cross vault entry. In this Entry I can see my Entra ID PAM vault. If I try to use this credential to link it to a session, I cannot see/choose any Entra ID credentials from Entra ID PAM vault. Can you help me please? Br Walter

hi, we are using Entra Id groups and are adding them to our Devolutions Server as "User group". I noticed that when the Entra Id group name changed this is not reflected in the Devolutions Server unless the group is deleted and added (with the new name) again. Is there some way to update/synch the group name? KR G.

Hello, I am writing to request your assistance regarding an issue we encountered while upgrading our Devolutions Server (hosted via Docker with an MS SQL database). I recently attempted to upgrade our DVLS container directly from version 2025.3 to 2026.2.11. After starting the new container, we encountered the following database error: Invalid column name 'AccountExpirationDate' Additionally, as a result of this issue, all users were unexpectedly removed from their respective groups. It appears that there was a change in the database structure, but the schema migration did not execute properly. Could you please advise on how to proceed? To perform this upgrade correctly, is it necessary to upgrade step-by-step through all the intermediate versions, or should a direct upgrade handle the database migration automatically? Thank you in advance for your support. I look forward to your guidance.

I'm using Devolutions server release 2026.2.7.0 Schedule backup every day fail with message "Backup file not created" The true is that the sql backup file is presente on the selected folder but it is not zipped as expected from the backup task. When I execute the backupo task from the Bakup-manager web page within the server, the backup is done and zipped correctly. Only scheduled backup fails! Where is the problem?

Hello Devolutions community, yesterday i created three new users in DVLS and i discovered that my conditional access rule for enforcing 2FA stopped working. In the past new users got a prompt after the first login to configure 2FA, when the condition access rule got enforced. Currently i am using DVLS-Version 2026.2.9.0 and the mentioned prompt doesn`t show up and the user gets logged in instead. In my case its a domain user, but I also was able to reproduce the issue with an internal DVLS-user. Here are screenshots of the conditional access rule for enforcing 2FA and the 2FA settings on the DVLS. [image] [image] Unfortunally i cant remember the last time that mentioned prompt on first log was working, because i didn`t had to create new users for the past 6 months. As a workaround i manually enabled 2FA on each account. Please take a look at it let me know if this is a bug or a configuration error on my site. If you need further information let me know. Thanks in advance and best regards, Markus

Hi Devolutions-Forum, while rolling out DVLS/ DPM/ DRM I came across this GUI inconsistency in the edit/ new entry window DPM: [image] DVLS: [image] RDM: [image] In RDM it is okay but in DVLS and DPM it is a bit confusing. Best wishes

Hi everyone, I think I've found a bug or an error. Or maybe I just didn't notice the changes. The day before yesterday, we updated the Devolutions servers from 2026.1.15 to 2026.2.7.0. Today I noticed that the permission sets I defined are missing. They aren’t displayed in the WebUI and can’t be selected in RDM. But I know they’re being applied because I have a clone of “Contributor (Default)” where I simply removed the “Delete” permission. All permissions are still as they should be, and “Delete” is still prohibited everywhere. This issue occurs in versions 2026.2.7.0 and 2026.2.9.0. 2025.1.15.0 [image] 2026.2.9.0 [image] Thanks und best regards Alex

Hey, when i try to send a password via Devolutions Send within RDM, the password does not appear in the secure message field. It works fine in the Devolutions Server Website and in RDM with a local database but not with the DVLS datasource. RDM Version: 2026.2.11.0 Best Regards, Fabian

I have a vault with some certificate entries. I have added the certificate file and to save the keystore passphrase I used the Smart Card PIN field. Now I cannot get back the PIN, neither using clipboard function nor editing the entry. What am I doing wrong?