Hello Devolutions Team,
I've observed a strange behaviour while using the password management with password-policies.
Our setup:
- Devolutions Server in the currently recent version: 2025.3.10.0
- RDM Remote Desktop Manager in the currently recent version: 2025.3.35.0
In the system configuration in the section password management, I've configured five password policies and definied one of them as default policy (enforce default policy is NOT activated).

In the Web-UI I have configured for the global vault itself the password management as "inherited". Here the configured default policy (FGPP-User) is correctly shown.

For a dedicated folder, I have overriden the default with the concrete "FGPP-Technical".
But here the problem arose: when I create a new password entry and prepare a new password value using the password generator, the globally configured default policy "FGPP-User" is selected.
The password mode "advanced" and the values for length etc. is properly filled, but the selectbox shows the wrong default policy instead of the defined overriden "FGPP-Technical".

So far for the WebUI.
In the Remote Desktop Manager desktop application (Windows), I'm encountering a different behaviour:
Also here the behaviour is wrong, but different.
When creating a new password entry in the dedicated folder (with the oerriden default policy with the concrete "FGPP-Technical"), the correct policy is pre-selected, but the values are completely wrong.
In the folder properties in password managenent for the dedicated folder (with the oerriden default policy with the concrete "FGPP-Technical"), the correct policy is pre-selected, but the values are completely wrong.

As you can see, the symbol characters is active with a minimum of two, which is not the configured setting for the FGPP-Technical.
And when creating a new password using the generator, the selectbox shows "Entry's configured password policy", basically stating the for this entry an unnamed overriden policy is defined, but as previously stated I just selected the different pre-defined FGPP-Technical.
Additionally the mode is defined as "Default", but should be "Advanced", the symbols definition is wrong and the exclude/include lists are missing/wrong.
Nevertheless, the password length, description and expiration setting is correct according the defined "FGPP-Technical" definition.

Am I misinterpreting the intended behaviour or is this a bug ?
Kind regards
Alex
Recommended Answer
Hello,
Thank you for your patience.
I have some good news from the development team. The issue with the password generator, specifically with the "Exclude the following characters," "Mode," and "Minimum symbol" fields, has been resolved. This fix will be included in the upcoming RDM 2025.3.26 release.
Regarding the issue in the DVLS web interface, a case has been opened on the development side to address it.
I’ll keep you updated on the progress of the DVLS web interface issue.
Best regards,
Jacob Lafrenière
As a follow-up, I just updated the Devolutions server to 2025.3.11.0. The problem remains unchanged here as well.