Miramar

Are there new Information from development?

Regards Bernd

Are there new Information from development?

Regards Bernd

Hello Jeff,

we are using devolutionsserver as backend data source.

Best Regards, Bernd.

Hello!

our RDM Client / Server Installation is behind a firewall protected network without any cloud access to google or something else.

We just checked the actual stable client / server (12.5.4) for google authenticator for 2fa: There have changed a lot since 12.0.4, which is in production on our site.

There are only a few quirks, which could be changed by you and then the google authenticator works perfectly in such an locked down environment. And this are :

- Display the QR Code not via Webapi, use an local library for generating the QR Code if an administrator is generating the google authentication

- Display the QR Code not via Webapi, use an local library for generating the QR Code if a user is generating the google authentication, here we got a Web Error (Webexception Remote Name cannot be resolved for www.google.com).

Attached is a screenshot from the german administrator view, where you can see the missing qr code.

We configured 2fa as administrator with an self generated qr code and entered the first secret, which has been accepted. After this 2fa works fine. After entering a wrong secret we got the errors message, wrong secret, which is be fine, after entering a valid secret we are authenticated.

So the only thing to change is the genration of qr codes.

Regards Bernd.

Hello David,

not simplify, configurable for admins with gpo or via configuration.

Regards, Bernd

Hi,

it would be cool if it is possible to deny access to the tool bar via Policy:

- Add-on Manager

- Extension Manager

- Macro/Script/Tool Manager

- Translation Manager

- Powershell RDM Cmdlet

- Devolutions Server Console

- Devolutions Proxy Console

- Chocalatey Console

- RDM Agent

- Open New Remote Desktop

- Local RDP/RemoteApp Manager

we are working on Windows Terminal Console and wantesd to present our Users an most hardened Remote Desktop Manager.

Regards, Bernd

Yes, of course ...

Regards, Bernd

Hi,

is it possible to hide these option as hardening option?

Regards, Bernd.

Hi,

we just saw that in the logs and in the already connected dialogs, that the german date time format is a little bit strange.

The english (us) version is : 12/15/2016 03:31:21 PM

The german (de) version is 12.15.2016 3:22:37

The correct german format would be 16.12.2016 15:22:37, or respectiv the date/time format from the os. The

Regards, Bernd.

Version 10.7.6.0 64 Bit

That error is coming from your PowerCLI version. Could you please install the PowerCLI version 5.8 and retest it please.

When are you planning to Support higher Versions of powercli as version 5.8?

Regards, Bernd

Is there a timeline available?

Regards, Bernd.

So if I´ll create a new user with 2FA, then he will (if switched on) get a List of 10 (or 20 time codes), which he can use if 2FA does not work correctly. If the List is empty, he´ll get or can request by his admin a new List of Codes.

That sound´s good for me.

How the User get the one time Password?

Hi,

is it possible to use 2 Versions of two factor authentication. One primary and a secondary if primary is not avaliable?

Regards, Bernd

Yeah, that would be great.

Regards, Bernd.

Hi,

is it possible to disable the Option "Override hard drives" in the User Specific Settings from a DataSource? This opens the possibiltiy to Exchange Data (security hole) between two Systems, and I don´t want to disable the complete "User Specific Settings".

Or does the "override hard drives" option not work, if you disable the Option in the RDP Settings from the Server?

Regards, Bernd

Yeah, this works. With what Version will the original bug be removed?

Regards, Bernd

Hey,

the Workarround does not work, because that is my types/avaliability list.

Regards, Bernd

Hey,

I just want to add a subsconnection "Native SCP" to a ssh shell connection. (look at screenshot).

It does not add a Native SCP Connection, It adds a RDP Session where I can´t not edit anything useful on general page ...

what´s wrong? I just updated to the actual version 11.5.3.0

Regards, Bernd

Hi,

we are trying to implement:

• RDM 11.1

• Devolution Server 3.1

• Yubico as 2FA

• Linotp as 2FA rollout Plattform

We want to use Linotp as Plattform for the yubico keys and NOT the Yubico Cloud. Is it possible to add another Webservice instead the yubico cloud for the authentication, or is it hardcoded in the Code?

If we use Devolution Server, will the 2FA Authentication done by the Server or by the Client?

I don´t know if this question is RDM oder DVLS related, so I choose the RDM Forum, please move the question if this should be DVLS related...

Regards, Bernd

Hello Maurice,

we disscussed that Topic in the Team and we think it would be the best to configure the 2FA on the credential site.

Not all Credentials are worth to be protected by 2FA, so I think the best way would be to do this on each Credential Entry. So we could choose wich Credentials should be protected be 2FA and which not.

The protection of the application and the data source are to globally, because we have several colleages which do not use 2FA, because the only have 5-10 non critically Entrys in the Data Source. Same Situation for the application Start ....

Regards, Bernd.

Hello Together,

to make this more clear:

I wish you would implement a checkbox on the credential Dialogs with the name “authorize access to credential with 2FA”, which means someone must have a 2FA available (ex. yubikey) while viewing/using/changing a credential in the Datasource.

I think this would improve the security of special accounts because you need something in your hand while accessing/using a credential.

In my personal opinion this should also available in the private vault.

Regards, Bernd.

Hi,

is it planned to implement a 2 factor (in fact yubikey) authorisation while connecting to a session with a shared credential? So the access to a credential is every time authorized by the second factor.

Regards Bernd.

Good question, I´m als interested in this Feature

Hi,

we just want to connect to one server with several ways (realvnc/rdp). There are a couple of people who must use vnc and are not allowed to use rdp. The RDP Guys could also use VNC, that´s not restricted.

My Opinion was to implement:

ServerName (Host Entry?)

----- ServerName VNC with SecurityGroup VNC -only

----- ServerName RDP with SecurityGroup RDP -only

or is it better to

ServerName RDP with SecurityGroup VNC -only

ServerName VNC with SecurityGroup RDP -only

but then I have to implement the host metadata two times ...

Is there another (better) way for doing this?

Regards, Bernd