add an option to disable the possibility of adding a password in the Password field on users and having a GPO do the same.

Resolved

add an option to disable the possibility of adding a password in the Password field on users and having a GPO do the same.

0 vote

avatar

Hi,

"I am trying to enforce a Group Policy Object (GPO) policy to disable the capability of saving credentials in Devolutions RDM through Microsoft Active Directory. Does Devolutions RDM include GPO templates that support this functionality?"


Thank you

All Comments (17)

avatar

Hello,

Here's an example of which field should be removed with the GPO.



Best regards,

Maxim Robert

FRFORUM.png

avatar

Hello,

Currently there are a few options in the system settings to disallow saving credentials. You can find them in Administration > System Settings > Password Policy:


Could you try these out and see if it works for you?

Regards,

Hubert Mireault

bd5abed9-b92c-4564-98e2-1771ce335546.png

avatar
Hello,

Currently there are a few options in the system settings to disallow saving credentials. You can find them in Administration > System Settings > Password Policy:
bd5abed9-b92c-4564-98e2-1771ce335546

Could you try these out and see if it works for you?

Regards,


please see below I do not have those options
I am looking at enforcing this policy across multiple RDP client

d752c5a4-b0a7-4bb0-8c20-c16f33740cd3.png

avatar

Thank you for the additional information. I will open a ticket so we can add GPOs that act the same as those settings.

Regards,

Hubert Mireault

avatar

Thanks, When should I get an update on this?

avatar

We will post back here when we have an update on this. I can't give you an estimate at the moment, as we have a lot of other feature requests to get to.

Regards,

Hubert Mireault

avatar
We will post back here when we have an update on this. I can't give you an estimate at the moment, as we have a lot of other feature requests to get to.

Regards,


Ok Thanks

avatar

Hello,

We've added 3 GPO which will have the same effect (and override) the aforementioned system settings. Their respective name are:

DisablePasswordSavingInVaults
DisablePasswordSavingInTools
DisablePasswordSavingInUserSpecificSettings

You can expect these with the upcoming 2025.1.11 version.

Regards,

Jafran Majeau

avatar
Hello,

We've added 3 GPO which will have the same effect (and override) the aforementioned system settings. Their respective name are:

DisablePasswordSavingInVaults
DisablePasswordSavingInTools
DisablePasswordSavingInUserSpecificSettings

You can expect these with the upcoming 2025.1.11 version.

Regards,


Thank you, Any idea when the next version release will be?

avatar

Hello,

A beta is planned to release in 1 or 2 weeks, and the full release at the end of February/beginning of March.

Regards,

Hubert Mireault

avatar

Hello, having tested the new feature, I see that password are still been stored in clear text in the password history, any possibilities to have this feature disabled or have the password encrypted?Thanks

14de5d24-8907-4402-9f87-89c8b0685feb.png

avatar

Hello,

The password history is not stored in cleartext but you can reveal it through this window, yes. You can also encrypt the information in your database by password-protecting it, as I believe you're on SQLite.
If you'd like for us to add a GPO to disable the password history feature, we could add that as well.

Regards,

Hubert Mireault

avatar
Hello,

The password history is not stored in cleartext but you can reveal it through this window, yes. You can also encrypt the information in your database by password-protecting it, as I believe you're on SQLite.
If you'd like for us to add a GPO to disable the password history feature, we could add that as well.

Regards,


Please I would like for you to add a GPO to disable the password history feature. Thank you

avatar

I've opened a ticket to add this GPO, we will post back here once it's available.

Regards,

Hubert Mireault

avatar

Hello,

We've added a new GPO named DisablePasswordHistory. This will become available with the upcoming 2025.1.35 version.

Regards,

Jafran Majeau

avatar
Hello,

We've added a new GPO named DisablePasswordHistory. This will become available with the upcoming 2025.1.35 version.

Regards,


awesome,Any idea when this version will be released ?

avatar

Hello,

Thank you for being this patient!

If possible, could you update your RDM to the latest version (2025.1.38.0)? This version should resolve your issue.

Since this version should resolve the problem, I will mark this thread as resolved.

Elevate your learning - Join the Devolutions Academy! Have a nice day!

Best regards,

Maxim Robert