Devolutions PowerShell

Ctrl + k

Devolutions PowerShell

Devolutions PowerShell

Announcement

Stay updated with the latest announcements for Devolutions PowerShell

Feature Request

Submit and discuss feature requests for Devolutions PowerShell

Support

Support forum for Devolutions PowerShell

Introduction of our GitHub repository for samples and scripts

Support (Français)

Forum de support dédié aux demandes en français

Support (Deutsch)

Supportforum für deutschsprachige Benutzer

Bug Report

Report and track bugs for Devolutions PowerShell

Beta

Bugs, comments or suggestions; anything related to Devolutions PowerShell Beta

Recent Posts

Christian Robert

Published 2 hours ago

Devolutions Gateway Publish Revocation List via Powershell

Hello tonyfredriksson , A ticket has been opened to enable publishing a gateway's revocation list from PowerShell. We'll keep you updated as progress is made on the task. Best regards, Christian

Feature Request

tonyfredriksson

Published 4 hours ago

Devolutions Gateway Publish Revocation List via Powershell

When setting up new Devolutions Gateways, you need to "Publish Revocation List" in the DVLS web GUI before you can start using the new gateway. It would be great to be able to do this via Powershell, so you can setup and configure everything Devolutions Gateway wise automatically.

Feature Request

Christian Robert

Published 5 days ago

Get-RDMOauthToken not working since version 2026.1.0

Hello tonyfredriksson , We were able to reproduce the issue. A ticket has been opened to look into the problem. We'll keep you updated as progress is made. Best regards, Christian

tonyfredriksson

Published 5 days ago

Get-RDMOauthToken not working since version 2026.1.0

Hi. Get-RDMOauthToken stopped working since version 2026.1.0 at least, but i tried with the latest 2026.1.2 as well. PS C:\Users\to-fre> Get-Command -Module Devolutions.Powershell | where {$_.Name -match "Get-RDMOAuthToken"} CommandType Name Version Source ----------- ---- ------- ------ Cmdlet Get-RDMOAuthToken 2026.1.2 Devolutions.PowerShell PS C:\Users\to-fre> New-DSSession -BaseURI $DSServerUri -UseOAuth PS C:\Users\to-fre> Get-RDMOAuthToken Get-RDMOAuthToken: The type initializer for 'System.Text.Json.JsonSerializer' threw an exception. PS C:\Users\to-fre> Import-Module -Name Devolutions.PowerShell -requiredVersion 2025.3.4 PS C:\Users\to-fre> Get-Command -Module Devolutions.Powershell | where {$_.Name -match "Get-RDMOAuthToken"} CommandType Name Version Source ----------- ---- ------- ------ Cmdlet Get-RDMOAuthToken 2025.3.4 Devolutions.PowerShell PS C:\Users\to-fre> New-DSSession -BaseURI $DSServerUri -UseOAuth PS C:\Users\to-fre> Get-RDMOAuthToken AccessToken ----------- e........... Br, Tony

Published 5 days ago

Version 2026.1.2 (March 6, 2026)

Fixes Fixed an issue preventing connections to advanced data sources

Published 6 days ago

Version 2026.1.1 (March 5, 2026)

Fixes Fixed an issue where the -DeobfuscateSensitives parameter of Export-HubEntriesForExport had no effect when exporting entries to CSV, causing passwords to remain encrypted

Christian Robert

Published 8 days ago

Missing powershell features for DVGW and PAM management.

Hello tonyfredriksson , Version 2026.1 of the Devolutions.PowerShell module introduces the ability to configure gateway permissions and KDC-proxy settings. Regarding gateway permissions: Added New-DSGatewaySecurity to create GatewaySecurity objects, on which a gateway's permissions can be set Gateway cmdlets (the New/Update cmdlets for Gateway, VirtualGateway, and GatewayFarm) now accept these security settings under the 'Security' parameter Regarding KDC-proxy settings: Added New-DSGatewayKDCProxySettings to create KDC proxy configuration objects Added Convert-DSGatewayKDCProxySettings to extract KDC proxy settings from a gateway New-DSGateway and Update-DSGateway now accept KDC proxy settings with the KdcProxySettings parameter Best regards, Christian

Feature Request

Christian Robert

Published 8 days ago

PowerShell Tags

Hello mattlytle , Version 2026.1 of the Devolutions.PowerShell module introduces the Get-RDMEntryTags and Set-RDMEntryTags cmdlets, enabling users to fetch and manipulate an entry's tags as an array. Best regards, Christian

Feature Request

Christian Robert

Published 8 days ago

Login attempts via powershell

Hello ricunhaneves , Version 2026.1 of the Devolutions.PowerShell module introduces the Get-DSLoginAttempt cmdlet, which enables users to fetch login attempts from DVLS. Best regards, Christian

Feature Request

Published 8 days ago

Version 2026.1.0 (March 3, 2026)

Breaking Changes Database upgrade required Removed support for Dropbox and Google Drive data sources. New-RDMDataSource no longer allows creating these types New Features Added Convert-DSGatewayKDCProxySettings to extract KDC proxy settings from a gateway Added Enable-RDMTelemetry and Disable-RDMTelemetry cmdlets to control anonymous usage statistics collection in the PowerShell module Added Get-DPSDatabaseVersion to retrieve the Devolutions Server database version Added Get-DSLoginAttempt to retrieve login attempts Added Get-RDMEntryPrivateKeyCertificateData cmdlet to retrieve embedded SSH certificate data as SecureString or plain text Added Get-RDMEntryTags to retrieve an entry's tags Added New-DSGatewayKDCProxySettings to create KDC proxy configuration objects Added New-DSGatewaySecurity to create GatewaySecurity objects Added Set-RDMEntryPrivateKeyCertificateData cmdlet to set embedded SSH certificate data and automatically configure the certificate type to Data Added Set-RDMEntryTags to modify an entry's tags Added Start-DSTrial cmdlet to activate a Devolutions Server trial license Improvements Added -AsHandbook parameter to Get-RDMEntryDocumentation to return legacy PSHandbook format for backward compatibility Added -Filter parameter to Get-RDMEntryDocumentation to search both title and content for backward compatibility Added -NoEnumerate switch parameter to Invoke-RDMLoadFromInventorySession to optionally return results as a collection instead of individual objects Added -PassphraseMaximumLength parameter to set a maximum length limit (0-100 characters) for generated passphrases in New-RDMRandomPassword Added support for appending special characters to passphrase words in New-RDMRandomPassword to better meet password complexity requirements Added support for using a raw database connection string in DPS cmdlets Added warning when a user without a license connects to a SQL Server data source Aliased redundant Session cmdlets to their equivalent Entry cmdlets (e.g., Get-RDMSession is now an alias of Get-RDMEntry) Improved error messages when creating entry types that are not supported in certain vaults Improved RDMEntryDocumentation cmdlets to provide clear error messages for unsupported data sources Renamed -PassphraseLength parameter to -WordCount for clarity (the old parameter name still works as an alias) in New-RDMRandomPassword Reworked telemetry collection in the PowerShell module to track anonymous usage statistics (cmdlet names, module version, data source type, and platform information) Updated gateway cmdlets (New/Update for Gateway, VirtualGateway, and GatewayFarm) to accept the Security parameter Updated New-DSGateway and Update-DSGateway to accept KDC proxy settings with the KdcProxySettings parameter Fixes Fixed a null reference exception when using Set-RDMEntryDocumentation on a SQLite data source Fixed an issue where multiple cmdlets incorrectly allowed the root entry to be provided Fixed an issue where the Get-RDMEntry cmdlet would incorrectly return entries when the required license was not available Fixed Get-DSEntry forcing users to provide a VaultID when -SearchAllVaults is specified Fixed Get-RDMEntryPassword verifying unnecessary permissions Fixed Invoke-RDMLoadFromInventorySession to process all sessions in an array instead of stopping after the first error Fixed multiple cmdlets returning a "not found" error when provided with the root entry Fixed New-RDMEntry with the Set parameter to not return a newly created entry if the save operation fails Fixed PowerShell cmdlet validation to check entry subtypes against vault content type restrictions when creating new entries

Published 12 days ago

NEW-DSPamAccount allow to create JIT Account

Hello, Yes, this is planned. The work is scheduled to begin after our next major release, and we expect it to be included in the following minor version. We appreciate your patience and apologize for the delay. We’ll keep you informed as we get closer to delivery. Best regards, Maxime

Feature Request

Published 13 days ago

NEW-DSPamAccount allow to create JIT Account

Hi jol, Thank you for your feedback! We understand the need to automate the creation of JIT accounts using New-DSPamAccount , especially when managing a large number of users across multiple customers. This is a valuable suggestion, and we will definitely consider adding support for creating JIT accounts directly through the PowerShell module. That said, this is not something we’ll be able to implement in the short term. However, we’ve added it to our roadmap and will keep you updated on our progress as things evolve. If you have any additional details or use cases you’d like to share, feel free to let us know — it helps us shape the feature more effectively. Best regards, Maxime Maxime Bernier Hi do you have some plans for this?

Feature Request

Published 15 days ago

Get-DSPamAccount: Add parameter to retrieve detailed information for all PAM accounts in a single

Hello, Thank you for the request. We'll evaluate whether this is something we can implement. I've opened an internal ticket, and we will provide updates as soon as we have more information. Regards, Maxime

Feature Request

tonyfredriksson

Published 15 days ago

Get-DSPamAccount: Add parameter to retrieve detailed information for all PAM accounts in a single

Current Behavior: Get-DSPamAccount (without parameters) returns only limited information for all PAM accounts Get-DSPamAccount -AccountID [ID] returns detailed information for a specific account To get detailed information for all accounts, we must: Call Get-DSPamAccount to retrieve all account IDs Iterate through each ID and call Get-DSPamAccount -AccountID [ID] individually Issue: Our automation scripts run frequently (several times per hour) and need detailed information for all PAM accounts. The current workflow requires N+1 requests to DVLS (one initial request + one per account), which: Creates unnecessary load on the DVLS server, sometimes even crashing it Increases script execution time Is inefficient for a common use case Proposed Solution: Add a parameter (e.g., -Detailed or -IncludeDetails ) to Get-DSPamAccount that retrieves detailed information for all accounts in a single call. Example Usage: Get-DSPamAccount -Detailed Benefits: Reduces server load by consolidating multiple requests into one Improves script performance Provides a more efficient API for common automation scenarios Alternative Considerations: Batch parameter: Get-DSPamAccount -AccountID @(id1, id2, id3) to retrieve multiple accounts at once

Feature Request

Christian Robert

Published a month ago

Question Create and Update Entry via Powershell

Hello, Version 2025.3.4 of the PowerShell module adds Set-DSEntryProperty, enabling users to modify an entry object’s properties more easily. The GitHub examples related to these operations will be updated shortly. Best regards, Christian

Christian Robert

Published a month ago

Missing powershell features for DVGW and PAM management.

Hello tonyfredriksson , Regarding your request, the following features are now available in version 2025.3.4 of our PowerShell module: Added New-DSGatewayFarm to create new gateway farms Added Update-DSGatewayFarm to update gateway farms Added Gateway parameter to New-DSPamProvider and Update-DSPamProvider, enabling users to set a PAM provider’s gateway Added DomainController parameter to New-DSPamProvider and Update-DSPamProvider, enabling users to set a PAM provider’s domain controller Added Application parameter to New-DSPamVault to set a PAM vault’s permitted application identities Regarding your 'Password Template' request specifically, users can now set a PAM provider's account lifecycle policy, including its password policy. Added Get-DSAccountLifecyclePolicy to retrieve account lifecycle policies Added AccountLifecyclePolicy parameter to New-DSPamProvider and Update-DSPamProvider to set a PAM provider’s account lifecycle policy Added New-DSAccountLifecyclePolicyInfo to create a new account lifecycle policy object in the user-friendly PSAccountLifecyclePolicyInfo format Added ConvertTo-DSAccountLifecyclePolicyInfo to convert a provider’s lifecycle policy to the user-friendly PSAccountLifecyclePolicyInfo format Added Get-DSPasswordPolicy to retrieve password policies The ability to configure gateway permissions and KDC-proxy settings will be introduced in our next major release, version 2026.1.0. As for changing what the 'Default' permissions setting on a gateway maps to, this cannot currently be modified via PowerShell, as it is not configurable within Devolutions Server itself. Best regards, Christian

Feature Request

Published a month ago

Can you add the powershell feature to update the Tags in system settings -> Common -> Tags

Hello, As of Devolutions.PowerShell module version 2025.3.4, it is now possible to manage system settings tags. The Get-RDMSystemSettingsTags and Set-RDMSystemSettingsTags cmdlets allow you to retrieve and modify these tags. If you need anything else, please let us know. Best regards, Maxime

Feature Request

Published a month ago

Version 2025.3.4 (February 2, 2026)

New Features Added cmdlets (Get-RDMSystemSettingsTags, Set-RDMSystemSettingsTags) for managing system tags at the data source level Added ConvertTo-DSAccountLifecyclePolicyInfo to convert a provider's lifecycle policy to the user-friendly PSAccountLifecyclePolicyInfo format Added Get-DSAccountLifecyclePolicy to retrieve account lifecycle policies Added Get-DSPasswordPolicy to retrieve password policies Added New-DSAccountLifecyclePolicyInfo to create a new account lifecycle policy object in the user-friendly PSAccountLifecyclePolicyInfo format Added New-DSGatewayFarm to create new gateway farms Added Set-DSEntryProperty cmdlet to modify an entry object's properties (including nested properties) Added Update-DSGatewayFarm to update gateway farms Improvements Added AccountLifecyclePolicy parameter to New-DSPamProvider and Update-DSPamProvider to set a PAM provider's account lifecycle policy Added Application parameter to New-DSPamVault to set a PAM vault's permitted application identities Added Description and WaitTime parameters to New-RDMPlaylistShared Added DomainController parameter to New-DSPamProvider and Update-DSPamProvider, enabling users to set a PAM provider's domain controller Added Gateway parameter to New-DSPamProvider and Update-DSPamProvider, enabling users to set a PAM provider's gateway Added Name, Description, and WaitTime parameters to Set-RDMPlaylistLocal and Set-RDMPlaylistShared Fixes Added validation to ensure WaitTime parameter cannot be set below 200 milliseconds to align with Devolutions Remote Desktop Manager application limits Inverted position of Connections and Description parameters in NewRDMPlaylistLocal

Christian Robert

Published a month ago

Automatically Convert a website (legacy) or be able to do i for all faults

Hello patrick2 , A ticket has been opened to enable converting legacy website entries in PowerShell. We'll keep you updated as progress is made. Best regards, Christian

Feature Request

Published a month ago

Automatically Convert a website (legacy) or be able to do i for all faults

Hello, atm it is not possible to search this over all vaults. We would have to check over 400 faults by hand... Kind Regards Patrick

Feature Request

External resources

Devolutions Documentation

Technical SupportEmail : service@devolutions.netPhone : + 1 844 463.0419