twistfox

yes, the copy username to clipboard does copy the old username.

Gotcha, I avoid that because I run this through several different VM's depending on which VPN client I use. With that said, checking those settings, and they are unchecked as well.

I'm not sure I understand what you are asking?

Intresting... I didn't know about that, however, that list is showing blank when I go there.

I use it embedded, and in a VM that I reboot daily. This machine has been rebooted quite a few times, and this has been bugging me since early version 10. I just got around to opening a post on it yesterday.

One further update, both external and embedded do have the same behavior with the wrong credential.

edited by twistfox on 1/8/2015

Posted, here is a direct link to the snipping.

http://s8.postimg.org/rzovbv4gl/User_Overide.png

RDP is the connection type.

I've got one domain credential specified in the credential repository (and it is working that way for other folks), and when I go to the User Specific Settings page, the checkmark is no longer on override credentials. However, it still connects with the credential that I used before. Just to be specific BOTH the one specified on the entry itself, and the one used for the user override exist in the credential repository. it's just not apparently clearing even with the checkmark uncleared.

Any logs or anything I can show this behavior on?

If I set a user specific setting on a RDM session, and I later want to remove, I cannot seem to clear.

For example, I set one entry to use a different credential, then what is defined in the entry itself. Now no matter how many times I clear the over ride on User specific, it still uses the one that I set before. Rather then what is now defined in the entry.

I can't seem to clear the user override at all in 10.1.3.0, so curious how I remove that, and go back to what the entry specifies?

sure, it's actually in the first post, but here is the part that I got working just for reference as well. Please note though, this does NOT reflect that name change that appears to happen in the beta/new version. This is for version 9.2.10

[HKEY_CLASSES_ROOT\rdm]

@="URL:rdm Protocol"

"URL Protocol"=""

[HKEY_CLASSES_ROOT\rdm\DefaultIcon]

@="C:\Program Files (x86)\Devolutions\Remote Desktop Manager\\RemoteDesktopManager.exe"

[HKEY_CLASSES_ROOT\rdm\shell]

[HKEY_CLASSES_ROOT\rdm\shell\open]

[HKEY_CLASSES_ROOT\rdm\shell\open\command]

@="C:\Program Files (x86)\Devolutions\Remote Desktop Manager\RemoteDesktopManager.exe \"%1\""

The beta deleted the rdm key entirely, and replaced it with a RDM Files. Tested it, and it failed. I took a look at the registry creation, but it's missing the URL definition key, and the URL protocol handler key, although the command key appears to have the correct string in it now.

[HKEY_CLASSES_ROOT\RDM Files]

@="Remote Desktop Manager Files"

[HKEY_CLASSES_ROOT\RDM Files\DefaultIcon]

@="C:\Program Files\Devolutions\Remote Desktop Manager\RemoteDesktopManager.exe"

[HKEY_CLASSES_ROOT\RDM Files\Shell]

[HKEY_CLASSES_ROOT\RDM Files\Shell\Open]

[HKEY_CLASSES_ROOT\RDM Files\Shell\Open\Command]

@="C:\Program Files\Devolutions\Remote Desktop Manager\RemoteDesktopManager.exe %1"

ok, ran into this problem trying to get RDM working with the URL's it will generate. I don't know precisely when this bug got introduced, but on upgrading to the latest version of 9.2.10 I still had some bad entries in the registry. Now, we originally installed way back in version 8 I think and have been upgrading since (might even have been 7), and i'm assuming the upgrade logic doesn't check the actual windows registry entries to see if they are all there. I haven't used this feature prior to today.

The basic problem is there are a few things missing in the windows registry in order to get it working as a URL protocol Handler.

1. HKey classes root\rdm key needs to have the reg string value of "URL Protocol" added

2. The hkey_classes_root\rdm\shell\open has a extra slash right before the remotedekstopmanager.exe entry that needs to be removed.

For example, here is the registry output in question for something that does NOT work.

HKEY_CLASSES_ROOT\rdm]

@="URL:rdm Protocol"

[HKEY_CLASSES_ROOT\rdm\DefaultIcon]

@="C:\Program Files (x86)\Devolutions\Remote Desktop Manager\\RemoteDesktopManager.exe"

[HKEY_CLASSES_ROOT\rdm\shell]

[HKEY_CLASSES_ROOT\rdm\shell\open]

[HKEY_CLASSES_ROOT\rdm\shell\open\command]

@="C:\Program Files (x86)\Devolutions\Remote Desktop Manager\\RemoteDesktopManager.exe \"%1\""

Here is the registry output of something that I cleaned up and got working.

[HKEY_CLASSES_ROOT\rdm]

@="URL:rdm Protocol"

"URL Protocol"=""

[HKEY_CLASSES_ROOT\rdm\DefaultIcon]

@="C:\Program Files (x86)\Devolutions\Remote Desktop Manager\\RemoteDesktopManager.exe"

[HKEY_CLASSES_ROOT\rdm\shell]

[HKEY_CLASSES_ROOT\rdm\shell\open]

[HKEY_CLASSES_ROOT\rdm\shell\open\command]

@="C:\Program Files (x86)\Devolutions\Remote Desktop Manager\RemoteDesktopManager.exe \"%1\""

Once those two things are resolved we can now pass URL strings in IE, and get it working (Chrome is still locking us out, but that's a chrome specific issue from what I can tell).

While I can adjust this on our current installs, if the upgrade switches it back to not working, or just having to remember to do it on all new installs is a bit of work. Can we get the installer to make sure these entries are correct in the future?

Any thoughts on this one? is it possibly a feature that will be added?

using version 9.2.6.0, and i'm trying to templatize a group of entries containing both credentials and sessions. What I want to have happen is be able to add a whole grouping from template, and have it linked to the associated credential for the session. Currently, it will create both the session entry, and the credential entry, but as soon as you open the session after it is created, it will have a error message pop up " Unable to find the credential entry, this setting will be lost!".

Please note that with the template, it does actually create the credential in the credentials repository, and it does create the session, it just seems to lose the link.

At a guess, when the template process is executed, it generates new UID's for the objects, and it's not going back through the sessions and adding in the new credential entry UID to the session.

We would like to use templates a lot more then we are, but ran into a limitation that makes it more difficult then I think might be the intention.

For our process flow, we get a new customer, and we go and add about 100 sessions to that customer. We have a lot of different webpages, devices and servers that we setup for each customer. What we can currently do is create all the sessions and leave the credentials to default. Then we have to go through each setup with inherited and parent entries, and specify the credential repository entries.

Now, we tried to create a template with both the sessions, and a sample credentials setup with it, but while it makes the folders, it doesn't actual set the sessions to use the NEW credentials deployed from the template. It won't go with the new folder that the template credentials are put in. The templates for both the credentials, and the sessions are created, it just doesn't change the sessions to reference the NEWLY created credentials.

Ideally when we create a template including sessions, and credentials that are referenced by the sessions, it should set the sessions to the newly created credentials.

Upgraded to version 9, went to add in some new sessions, and now when i'm on a sub connection and hit the "view variable list" there is no longer a tab for the parent items.

We can still type in the parent calls (such as $PARENT_HOST$ ) and it works fine, it's just no longer displayed.

So, we've been using RDM for a while, with a SQL database. Our setup we need to be able to use offline cached mode since there are quite a few cases were we end up somewhere physically that we can't reach back to SQL. The question came up about how we can handle offline caching, and someone who leaves the company. If they leave, they have access to the offline cache for 20 days (we can't always get a laptop back for remote employee's right away). The perfect answer to address this is through the 2 factor authentication, provided I can require it to connect to the data source.

In my ideal world, if you want to connect and pull the connection and credentials down from SQL you need to have 2 factor turned on. If you turn it off, you shouldn't be able to use the cached DB unless you turn it back on.

This gives us the ability to control access, and handle that situtation through a remote wipe of the authenticator device (think like a iPhone or Android) with the security that we want.

I've seen no way to mandate that this is checked when connecting to the datasource, so that's a feature i'd love to see. I can set it up that way before it goes to someone, but they have access to the options to turn it off, it's not so useful to us.

Any chance to get this added in? If it's already existing and i've missed it, please let me know. It's a great setup to have.

7.6 does fix it. Thank you.

I replaced some of the below URL links with XXXXXXXXX, but otherwise, you should be good.

<head>

<meta http-equiv="Content-Language">

<meta http-equiv="Content-Type" content="text/html">

<meta name="robots" content="none">

<title>XXXXXXXXXX</title>

<script src="XXXXXXXXXXX/ds.js"></script>

<script>

WriteCSS();

</script>

<noscript>

<link rel="stylesheet" href="XXXXXXXXXXXXX/ds.css">

</noscript>

<script>

<!--

if (window.top != self) {

top.location = location;

}

if(window.name == "newpincancel" || window.name == "nexttokencancel") {

window.close();

}

//--></script>

<script src="XXXXXXXXXX/lastauthserverused.js"></script>

<script>function deletepreauth() {

document.cookie = "DSPREAUTH="+ escape("")+ ";path=/XXXXXXXXXXXXX/;expires=14-Nov-1997";

}

</script>

</head>

<body onload="FinishLoad(1)" bgcolor="#FFFFFF" color="#000000" link="#3366CC" vlink="#CC6699" alink="#3366CC" leftmargin="0" topmargin="0" rightmargin="0" marginwidth="0" marginheight="0">

<table border="0" width="100%" cellspacing="0" cellpadding="3">

<tr>

<td bgcolor="#000000"><img border="0" src="XXXXXXXXX" alt="Logo"></td>

<td bgcolor="#000000" align="right"> </td>

</tr>

</table>

<table cellpadding="0" cellspacing="0" border="0" width="100%">

<tr>

<td bgcolor="#000000" colspan="2"><img border="0" src="XXXXXXXXXX/space.gif" width="1" height="1"></td>

</tr>

</table>

<blockquote><form name="frmLogin" action="login.cgi" method="POST" autocomplete="off" onsubmit="return Login(1)">

<input type="hidden" name="tz_offset">

<table border="0" cellpadding="2" cellspacing="0">

<tr>

<td nowrap colspan="3"><b>Welcome to</b></td>

</tr>

<tr>

<td nowrap colspan="3"><span class="cssLarge"><b>XXXXXXXXXXX</b></span></td></tr>

<tr>

<td colspan="3"> </td>

</tr>

<tr>

<td valign="top">

<table border="0" cellspacing="0" cellpadding="2"> <tr>

<td>Username</td>

<td> </td>

<td><input type="text" name="username" size="20"></td>

</tr> <tr>

<td>Network Password</td>

<td> </td>

<td><input type="password" name="password" size="20"></td>

</tr> <tr>

<td>Token</td>

<td> </td>

<td><input type="password" name="password#2" size="20"></td>

</tr> <tr> <input type="hidden" name="realm" value="AD-And-RSA"> </tr> <tr>

<td colspan="3"> </td>

</tr>

<tr>

<td> </td>

<td> </td>

<td><input type="submit" value="Log On" name="btnSubmit"> </td>

</tr> </table>

</td>

<td valign="top">      </td>

<td valign="top"><table border="0" cellspacing="0" cellpadding="2">

<tr><td></tr></td></table></td>

</tr>

</table> </form>

</blockquote>

<table border="0" cellspacing="0" cellpadding="0" width="100%">

<tr>

<td background="XXXXXXXXXX/footerbg.gif">

<table cellpadding="0" cellspacing="0" border="0" width="100%">

<tr>

<td><img src="XXXXXXXXXX/space.gif" width="10" height="10"></td>

<td><img src="XXXXXXXXXX/space.gif" width="1" height="2"></td>

<td><img src="XXXXXXXXXX/space.gif" width="10" height="10"></td>

</tr>

<tr valign="top">

<td><img src="XXXXXXXXXX/space.gif" width="10" height="1"></td>

<td nowrap ><br><br><br><br>

<td align="right"><img src="XXXXXXXXXX/space.gif" width="10" height="10"></td>

</tr>

</table>

</td>

</tr>

<tr>

<td colspan="2"><img border="0" src="XXXXXXXXXX/space.gif" height="6" width="1" alt=""></td>

</tr>

</table>

</body>

</html>

If I manually enter in the element ID's, it still doesn't work on 7.5. when I fall back a version, it works fine.

once we upgraded from RDM 7 to 7.5, the dashboard is missing a few of the connection options we use fairly regularly. While we can still access them by right clicking and choosing the entry, is there any way the below two items can be added back to the dashboard?

1. Open Session (Bypass Console/Admin Mode)

2. Open Session Console/Admin Mode (Prompt for Credentials)

We have a version 7.0 that with a specific VPN entry will successfully parse the form ID's for a web vpn connection. We are passing three entries.

1. User Name ID maps to username

2. Domain ID maps to password

3. Password ID maps to password#2

Once we upgrade to RDM 7.5, it will only fill out the password and password#2, it skips password. If we do a auto inspect, both the domain ID, and password ID comes back as password (the html element that it is skipping). If we uninstall rdm 7.5 and go back to 7, it works just fine. Looks like there is some change in 7.5 that's not allowing it to parse the entries the same.

so I currently do have a seperate VPN session that I use for the RDP sessions. However, the VPN session itsefl, when I right click, it does not allow me to specify User Specific Settings, so I can put in my own VPN information. I've already got the RDP sessions (as seperate entires) succesuflly using the credenitals assigned just me ot through the User Session Settings, but I can't seem to do the same thing to a VPN entry.

I don't have a web host to load a image on, but if you send me a email, I will certainly email a picture of it. Might make more sense there.

I can change the user specific settings for types other then VPN, but I can't seem to put User Specific settings overrides on VPN settings? am I just doing something wrong? We have some customers who want to give every engineer their own user account instead of a generic one, and I'd like to avoid making a bunch of VPN profiles for each different account.