support11

Hey James

Yes, Although the message is slightly different. In MSTSC with save credentials, the message is "The server's authentication policy does not allow connection requests using saved credentials. Please enter new credentials"

Thanks

Darren

Hi Team,

Not sure if this should be a new request, but seeing this thread is a similar problem and has just been added to, I'll work here.

We've needed to implement some CIS recommended policies, and one of them is the

Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Security >

Always prompt for password upon connection policy

Since implimenting this RDM is unable to automatically login using credential vault entries.

I have looked at the "After Open" macro event, but while I've tried a few entries, I'm not sure I've got the right variable name. Something does get typed in, but it is not accepted as the correct password.

Is there a recommended method to autopopulate password on servers with this policy? If it is the Macro, was password variable should I use?

Thanks

Darren

Hi David

That’s pretty much it.

I agree it would be best if this was a separate permission, as you may have users that you do not want to give this right to.

Not sure if it needs to be a separate button, I’m guessing if you don’t have rights normally to view the password the button to view password could be the same, only with the revised functionality, but I guess that is a design/programming decision.

Maybe it needs to have some pop up asking for reason too, similar to the “prompt for comment on open”?

Thanks

Darren

Hi Team

I asking to see if a feature could be added so that our team members could unlock or checkout a password.

We currently have most passwords in RDM, protected so the staff are unable to view them. This is working really well, but there are time when the staff need to know the password. Maybe to give it to a third party, sometimes we need to connect to a hyper-v/vmware console so we need to type in the password.

So the situation I’d like to see if it is possible.

1/ Users normally can’t see passwords.

2/ If they need access, they can force a reveal the password. Then they can see and use the password. This audited so the security team can review the case and reset the password once the job is complete.

I guess this is kinda a “in emergency break glass” situation. So it is clear when and who the passwords was given out.

I hope this makes sense

Thanks

Darren