reports
is it possible to create custom reports in the software
or view all the entries updated/modified by a given user
i can find information when viewing the individual connection but i have 5000+ entries and i wish to see what changes have been made by a specific user, or better .. all changes grouped by user.
regards
Basic setup
I have just setup the RDM server following the tutorial information,
the rdms connects to the management console on the same server and i can create users (AD) but i cannot connect to the data base (it tests ok) but on connection i get a baseservice.samx error and a comment about invalid session provider.
unfortunately the message doesnt fit in the RDM error window so is hard to read.
i also cannot to the server via http on a remote workstation:
Cannot open database "RDMSDB" requested by the login. The login failed.
Login failed for user 'NT AUTHORITY\NETWORK SERVICE'.
any pointers greatly appreciated
Ad groups and roles as security on connections
Question, can a group of users be prevented from accessing/using a connected based on group or role?
1) I have a group of users that I wish to prevent from accessing all connections except a select group of connection folders, can this be done by assigning users to a AD group or role, or group in RDMS?
2) I wish to force the ad group, role or rdms group above to use a specific saved password (password vault) whilst having all other users use a different password vault saved password.
is either of these functions possible in anyway.
scenario:
internal staff have full access to all connections, but I wish to secure a group of contractors to a specific set of connection folder-groups and force the hidden saved passwords to be different one from the internal staff.
Securing access to saved passwords
Greetings,
currently i have enterprise site licence.
Is it possible to secure a specific AD user account from using the saved passwords (deny from use) to ensure the account uses its own credentials when connecting to servers
(this is for 1500+ servers in the database.)
can this be done with the server version, through domain group membership?
Version 9 database upgrade
Support,
I have am still wanting a reply to know if pre version 9 clients can connect to the v9 database if I upgrade it.
this is rather important as a hundred people are being prompted to do the upgrade, but I don't know if I have to get everyone to do the client install simultaneously after the db is upgraded.
I would appreciate a response asap.
current versions are 8.4.x
Going from RDM 8.4.6 to RDM 9.0
When going from 8.4.6 to 9, I see the database needs updating, but can existing clients still connect to the database once upgraded?
I have about 100 people using it, so can they continue to use the database (once upgraded) and then work through installing v9? or does everyone have to be running v9 to use the upgraded database?
thanks
SQl access and AD user access
sorry to be a pain, but then why have user administration in RDM , what am I not understanding in the configuration.
the users connect either as a specific sql account (created by the administration user menu) or as integrated. and the database connector is either sql, or integrated.
I assumed as it was all set to "integrated" than an unauthenticated user would be restricted from the database.
if any user can connect, but the defined user permissions provide authority to functions (eg offline) does that mean the default access to the db is effectively as if the undefined user had all the items unchecked in the user definition, eg unable to view, go offline, edit, delete etc, as this would be acceptable as their access is logged.
SQl access and AD user access
so, any user can connect to the sql database? regardless of their addition/non-addition via user administration in RDM
note, I have configured the db connector with integrated security
but users are also defined in the database with integrated security.
What is the correct way to configure access to the SQL database?
Should I be using a specific user account for db connection datasource, and then use integrated security within the db?
SQl access and AD user access
Greetings,
I have a RDM enterprise site license and have it configured to connect to a server 2012 & sql 2012 instance which is working fine.
The issue is that users can connect to the database without being defined as a user in the RDM administration and I don't know why.
Users can connect and use the database but cannot work offline until I add their domain username as integrated and give them that right.
What I would like to ensure is that users cannot connect to the database unless this has been done first.
regards
SQL DB - User setup - intergrated authentication
let me explain, I have had to provide group rights to the sql for the db, not specifically adding users to smss . what I am looking for is the CORRECTsetup of sql
SQL DB - User setup - intergrated authentication
after changing the db security I no longer need to create sql accounts while using integrated but I have been unable to find any instructions showing the correct process for setup of rdm with sql indicating this requirement. I had to give domain users explicit select and connect access to the db to allow it to work.
Is this correct?
SQL DB - User setup - intergrated authentication
sorry but I cannot find much information on "correct configuration" of the sql/rdm,
currently I have a sql server with a database created by rdm, and use integrated security.
do I need to tick "create sql user" when I add users to rdm via administraton.
SQL DB - User setup - intergrated authentication
when creating users in rdm enterprise, sql, there is an option to create sql user, is this required to gain access to the db? what does this provide if integrated security is used?
sql db speed
Currently with 500+ folders, and 2000 ish rdp connections, the db is quite slow to edit. I am going to move sql to a better server but would like to know if there is anything to improve response, eg does encryption slow the use of sql based db.
SQL DB - User setup - intergrated authentication
Is it possible to setup domain groups access and permissions to the RDM database or do all domain accounts have to be added individually?
Currently I am testing with several accounts and can see how security groups allow / deny access to individual groups and connections but for general access to the database it appears that all users have to be setup and assigned rights individually? or is there a way?
potentially I need to have 60+ users attached so management on an individual basis is a bit of a pain!
Import sessions - folders and sub folders
I succeeded, by using a cmd to dump all the recersive rdp files to a text file:
FOR /F "tokens=*" %%G IN ('dir *.rdp /s /b') DO (
echo ##%%G >> temp.txt
type "%%G" >> temp.txt
)
a quick reformat with word, import into a spreadsheet and use some formulas to extract the domain, user, host etc and save as csv
end result, that in less than an hour I have imported 1935 new entries to my sql database! and im a very happy man, all complete with groupings and folder structure!
Search options, improving filtering
solution found in the powershell:
Foreach ( $list in Get-RDM-Session)
{ $group1 = get-rdm-property -id $list.id -Property "Group"; Set-RDM-Property -ID $list.ID -Path "MetaInformation" -Property "Company" -value $group1 }
this sets all items company to the same name as the folder they are in.
Search options, improving filtering
can the powershell tool be used to update information in the db, such as copy folder name into company field or similar?
Search options, improving filtering
I have over 1000 rdp connections in 300+ folders and wish to be able to search for a session (filter using the search function)
is there an efficient way to assign a searchable field or information to a folder (for inheritance) or to rdp sessions?
The only way I can see at present is to batch edit all existing folders and assign "company name" on the information tab.
is there anyway to inherit information or achieve the result required as connections are named after the servers and not company so do not currently show in a search for that company.
an inheritable company field or company information would allow a search to show all connections for a folder (company) or site without having to edit all current and new connections.
any work around you can think of at present?
Import sessions - folders and sub folders
importing rdp sessions, saved in to a folder structure.
eg
company1,
session1
session2
Company2
Session1
Session2
searching for rdp sessions
I have now over 1000 rdp sessions in several hundred folders, for multiple clients.
I know I can search for information but as sessions are server names searching by folder (eg banana) does not reveal rdp sessions (bserver1, 2,3) I realise that I can add company information, notes and keywords to each connection setting but are any of these searchable fields inherited from the folder level.
With individual folders containing upto 20 sessions I have to edit a field (company, keyword or notes) and add detail to match the folder name , to allow a search for "banana" to provide "bserver1" etc
Is there any alternative to manually editing 1000, sessions (I also realise I can batch edit each folder but this is still hundreds of edits and must be maintained.
ILO (or website) linkage to session information
option to Link server home page and remote management to existing connection information,
this would allow provision of logon details and notes etc to the connection rather than having just "ILO" as a web address on the remote connection.
currently I store ILO, webpages etc all separately to allow user/pwd to be captured and passed to the logons pages automatically.
Import sessions - folders and sub folders
Is it possible to import sessions in folders? in one go, I have 455 folders for individual sites, with 1-50 server rdp sessions in each and would dearly like to import them all in one go.
I have started importing what I need folder by folder but is there an easier way?
ie, 1 folder, with 455 sub folders, no folders below this level.
I need to retain the folder groupings.
any thoughts?