madcat

I was just wondering if RDM supports eEye Retina CS SAML (part of Beyond Trust) ? If not, will it be considered to be supported ?

My organisation has implemented this which has rendered all my RDP and SSH sessions inoperative

Hi Richard, no problem. I updated the command and now it shows the correct number of sessions

Still no go

Seems to run first time without connecting to cloud, but if I rerun it, it attempts to connect (opens EDGE browser tab, successfully connects, closes tab)

However even though it reports 0 and tries connecting to cloud, it does seem to complete successfully, which is better than what it was doing previously

also

RDM v 2022.3.35.0 64-bit

using Powershell 7 setting

FYI, the code is:

$old_pw = Read-Host -Prompt 'Input your OLD password'
$new_pw = Read-Host -Prompt 'Input your NEW password'
$sessions = Get-RDMSession
$session.count
foreach ($session in $sessions)
{
    $oldpwd = Get-RDMSessionPassword -Session $session -AsPlainText

    if ($oldpwd -eq $old_pw)
	{
        $newpwd = Convertto-SecureString $new_pw -AsPlainText -Force
        Set-RDMSessionPassword -Session $session -Password $newpwd
        Set-RDMSession $session -Refresh
    }
}

Hi Richard,

as requested

a) it returns 0

b) see below

I ran it again today to get you the details and in teh first run, it didn't try to connect to the cloud (the ZZZZZZZZZ password was most likely not found). As a result, it completed successfully without the above issue. I then ran it again with 2 test accounts that had EEEEE as the password and the issue occurred again

Hi Devolutions team,

I'm trying to use the above PS script to update my password but when it runs, it seems to have troubles connecting to Devolutions Cloud

It opens a browser and asks to enter my Devolutions Cloud credentials (which I do). It accepts them and says the tab can be closed, however when it goes back to the PowerShell screen it just stays on "Connecting to Devolutions Cloud":

Is there a way to stop it trying to connect to Cloud ?

Hi Richard,

The data source is a "local data source" (a *.db file on my filesystem)

The PowerShell version was set to "Default".

When I changed it to PowerShell 7 (as advised), it ran cleanly without any errors !

Thank so much for the solution !

Hi Erica,

FYI "twpvekb01v" (the second last one in the list) is an embedded RDP file

It does update the correct entry's password from "old" to "new", just that it produces these errors, so no big deal (I can ignore them)

Screenshot of the properties of "twppekb02v" (the last one from the output above):

Hi Erica,

seems to be a mix of SSHConfigured and RDPConfigured. Mote I have > 1000 entries so I had to remove the PAUSE and I stopped it after this chunk of messages

SCRIPT:

$old_pw = Read-Host -Prompt 'Input your OLD password'
$new_pw = Read-Host -Prompt 'Input your NEW password'
$sessions = Get-RDMSession
foreach ($session in $sessions)
{
    Write-Host $session.Name
    Write-Host $session.ConnectionType
    $oldpwd = Get-RDMSessionPassword -Session $session -AsPlainText
    PAUSE

    if ($oldpwd -eq $old_pw)
	{
        $newpwd = Convertto-SecureString $new_pw -AsPlainText -Force
        Set-RDMSessionPassword -Session $session -Password $newpwd
        Set-RDMSession $session -Refresh
    }
}

OUTPUT:

.
.

Group
test_template.rdp
RDPConfigured
Get-RDMSessionPassword : Object reference not set to an instance of an object.
At line:5 char:15
+     $oldpwd = Get-RDMSessionPassword -Session $session -AsPlainText
+               ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Get-RDMSessionPassword], NullReferenceException
    + FullyQualifiedErrorId : System.NullReferenceException,RemoteDesktopManager.PowerShellModule.GetRDMSessionPasswordCommand

.
.
.
* BT RDP Sessions
Group
AMS
Group
sshbastion1.kmg.ams.local (SSH Bastion)
SSHShell
Get-RDMSessionPassword : Object reference not set to an instance of an object.
At line:5 char:15
+     $oldpwd = Get-RDMSessionPassword -Session $session -AsPlainText
+               ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Get-RDMSessionPassword], NullReferenceException
    + FullyQualifiedErrorId : System.NullReferenceException,RemoteDesktopManager.PowerShellModule.GetRDMSessionPasswordCommand

Apps
Group
BI
Group
twibidb01vth
RDPConfigured
Get-RDMSessionPassword : Object reference not set to an instance of an object.
At line:5 char:15
+     $oldpwd = Get-RDMSessionPassword -Session $session -AsPlainText
+               ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Get-RDMSessionPassword], NullReferenceException
    + FullyQualifiedErrorId : System.NullReferenceException,RemoteDesktopManager.PowerShellModule.GetRDMSessionPasswordCommand

Citrix
Group
TWPCTXSVR050VTH
RDPConfigured
Get-RDMSessionPassword : Object reference not set to an instance of an object.
At line:5 char:15
+     $oldpwd = Get-RDMSessionPassword -Session $session -AsPlainText
+               ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Get-RDMSessionPassword], NullReferenceException
    + FullyQualifiedErrorId : System.NullReferenceException,RemoteDesktopManager.PowerShellModule.GetRDMSessionPasswordCommand

TWTCTXSVR010VTH
RDPConfigured
Get-RDMSessionPassword : Object reference not set to an instance of an object.
At line:5 char:15
+     $oldpwd = Get-RDMSessionPassword -Session $session -AsPlainText
+               ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Get-RDMSessionPassword], NullReferenceException
    + FullyQualifiedErrorId : System.NullReferenceException,RemoteDesktopManager.PowerShellModule.GetRDMSessionPasswordCommand

CMS
Group
twpcmsapp02vcl
RDPConfigured
Get-RDMSessionPassword : Object reference not set to an instance of an object.
At line:5 char:15
+     $oldpwd = Get-RDMSessionPassword -Session $session -AsPlainText
+               ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Get-RDMSessionPassword], NullReferenceException
    + FullyQualifiedErrorId : System.NullReferenceException,RemoteDesktopManager.PowerShellModule.GetRDMSessionPasswordCommand

DCM
Group
twpdcm6vto
RDPConfigured
Get-RDMSessionPassword : Object reference not set to an instance of an object.
At line:5 char:15
+     $oldpwd = Get-RDMSessionPassword -Session $session -AsPlainText
+               ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Get-RDMSessionPassword], NullReferenceException
    + FullyQualifiedErrorId : System.NullReferenceException,RemoteDesktopManager.PowerShellModule.GetRDMSessionPasswordCommand

EKB
Group
twppekb02v
RDPConfigured
Get-RDMSessionPassword : Object reference not set to an instance of an object.
At line:5 char:15
+     $oldpwd = Get-RDMSessionPassword -Session $session -AsPlainText
+               ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Get-RDMSessionPassword], NullReferenceException
    + FullyQualifiedErrorId : System.NullReferenceException,RemoteDesktopManager.PowerShellModule.GetRDMSessionPasswordCommand

twpvekb01v
RDPConfigured
Get-RDMSessionPassword : Object reference not set to an instance of an object.
At line:5 char:15
+     $oldpwd = Get-RDMSessionPassword -Session $session -AsPlainText
+               ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Get-RDMSessionPassword], NullReferenceException
    + FullyQualifiedErrorId : System.NullReferenceException,RemoteDesktopManager.PowerShellModule.GetRDMSessionPasswordCommand

Thank you Hubert !

Updated, but the error still occurs. However it still correctly updates the required entry

Resize PowerShell buffer and window size
Exception setting "BufferSize": "Cannot set the buffer size because the size specified is too large or too small.
Parameter name: value                                                                                                                                                                                              Actual value was 192,4000."                                                                                                                                                                                        At line:3 char:1                                                                                                                                                                                                   + $Host.UI.RawUI.BufferSize = new-object System.Management.Automation.H ...                                                                                                                                        + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [], SetValueInvocationException
    + FullyQualifiedErrorId : ExceptionWhenSetting

Loading RDM CmdLet (Module)
PS C:\Program Files\Devolutions\Remote Desktop Manager>
PS C:\Program Files\Devolutions\Remote Desktop Manager> Get-InstalledModule

Version    Name                                Repository           Description
-------    ----                                ----------           -----------
2022.3.1.2 RemoteDesktopManager                PSGallery            Devolutions Remote Desktop Manager (RDM) PowerShell Module


PS C:\Program Files\Devolutions\Remote Desktop Manager> $old_pw = Read-Host -Prompt 'Input your OLD password'
Input your OLD password: AAAAAA
PS C:\Program Files\Devolutions\Remote Desktop Manager> $new_pw = Read-Host -Prompt 'Input your NEW password'
Input your NEW password: BBBBBB
PS C:\Program Files\Devolutions\Remote Desktop Manager> $sessions = Get-RDMSession
PS C:\Program Files\Devolutions\Remote Desktop Manager> foreach ($session in $sessions)
>> {
>>     $oldpwd = Get-RDMSessionPassword -Session $session -AsPlainText
>>     if ($oldpwd -eq $old_pw)
>> {
>>         $newpwd = Convertto-SecureString $new_pw -AsPlainText -Force
>>         Set-RDMSessionPassword -Session $session -Password $newpwd
>>         Set-RDMSession $session -Refresh
>>     }
>> }
Get-RDMSessionPassword : Object reference not set to an instance of an object.
At line:3 char:15
+     $oldpwd = Get-RDMSessionPassword -Session $session -AsPlainText
+               ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Get-RDMSessionPassword], NullReferenceException
    + FullyQualifiedErrorId : System.NullReferenceException,RemoteDesktopManager.PowerShellModule.GetRDMSessionPasswordCommand

Hi Erica

I actually get pages and pages of this same error, so not sure what entry or entry type it is (I have a mix of RDP and SSH)

RDM = 2022.3.29.0 64-bit

PS module = (can't see full version number)

PS C:\Program Files\Devolutions\Remote Desktop Manager> Get-InstalledModule

Version    Name                                Repository           Description
-------    ----                                ----------           -----------
2021.2.... RemoteDesktopManager                PSGallery            Devolutions Remote Desktop Manager (RDM) PowerShell Module

Thank you very much Erica ! This has helped greatly.

Note : I was curious why after running the script, if I looked at a modified entry it was still showing the old password, but after I hit F5 to refresh, it was then correctly showing the new, updated password

Also, while running your code (with added user input),

$old_pw = Read-Host -Prompt 'Input your OLD password'
$new_pw = Read-Host -Prompt 'Input your NEW password'
$sessions = Get-RDMSession
foreach ($session in $sessions)
{
    $oldpwd = Get-RDMSessionPassword -Session $session -AsPlainText
    if ($oldpwd -eq $old_pw)
	{
        $newpwd = Convertto-SecureString $new_pw -AsPlainText -Force
        Set-RDMSessionPassword -Session $session -Password $newpwd
        Set-RDMSession $session -Refresh
    }
}

I did see these errors:

Get-RDMSessionPassword : Object reference not set to an instance of an object.
At C:\Program Files\Devolutions\Remote Desktop Manager\RDM_Update_Specific_Password.ps1:6 char:15
+     $oldpwd = Get-RDMSessionPassword -Session $session -AsPlainText
+               ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Get-RDMSessionPassword], NullReferenceException
    + FullyQualifiedErrorId : System.NullReferenceException,RemoteDesktopManager.PowerShellModule.GetRDMSessionPasswordCommand

Would these be for entries with no passwords ?

Could "Password" be added as an option to the advanced find so then you can batch edit those found entries ?

thank you !

Hi all,

further to this post

https://forum.devolutions.net/topics/31383/possible-to-search-and-replace-passwords-through-all-sessions

I am in a similar situation where I have many applications with different passwords expiring at different times, and as PowerShell is not my strong suite, I was wondering if you could help me script something to search for password "AAAAAA" and replace it with "BBBBBB" ? (the links in the article don't work or don't seem to lead anywhere)

PS could "Password" be added as an option to the advanced find so then you can batch edit those found entries ?

Thanks in advance !

I don't know much about the setup of BT as this was set up by another team but the credentials that are used in the session pass the necessary string to BT to initiate a connection - the same/similar string that is passed to BT when you clicking the launch session button

The username string contains all the details BT required:

username: <domain>\<your_LAN_userid>+<BT_Directory>\<BT_Account>+<servername>

and that is passed to the BT server, as that is the host that is defined in the session

Host: your Beyond trust server FQN

port: your Beyond trust server port

you can also download the RDP file from BT and have a look at the connection details inside

Took a bit of tweaking but this is what you need. Note these are settings based on our environment. Hopefully yours will be the same or very similar, but they may differ and you may need to experiment

Note: we also have 2FA setup so opening an RDP or SSH session will trigger BT to issue an Authenticator app prompt

RDP:

name: whatever

folder: whatever

display: embedded (tabbed)

host: custom

credentials: custom

GENERAL tab

Host: your Beyond trust server FQN

port: your Beyond trust server port

RDP type: normal

username: <domain>\<your_LAN_userid>+<BT_Directory>\<BT_Account>+<servername>

domain: <blank>

password: your LAN password

username example:

my.domain\joesmith+my.domain\joesmith-BT+myserver

ADVANCED tab

Prompt for credentials on client - ticked

All other tabs and settings are default values

SSH (PuTTY):

name: whatever

folder: whatever

display: embedded (tabbed)

host: custom

credentials: custom

GENERAL tab

Session: Default settings (or your own Putty saved settings)

Protocol: SSH

Host: <domain>\<your_LAN_userid>@<domain>\<unix_userid>@<unix_server>@<your Beyond trust server>

port: your Beyond trust server port

*username: your_LAN_userid

*password: your_LAN_password

*Note this assumes your Unix servers are AD integrated

username example

my.domain\joesmith@my.domain\jsmith@unixserver@myBTserver

ADVANCED tab

Application: PuTTY

All other tabs and settings are default values

My organization uses BEYONDINSIGHT 7.2.1.124 and I have been able to successfully setup tabbed RDP and SSH sessions.. Let me know if you need any help with these and I can share my session settings

Thanks for that Richard ! I'll try that

I was just wondering if it's possible to update part of a hostname ?

We use a host string to connect to our SSH servers via BeyondTrust and it's in the format of:

<domain>\<userid>@<domain>\<unix userid>@<unix host>@<BT Server>

I just need to bulk update the <BT Server> to a new server

Is this possible with Batch edit ?

If a powershell command is required, could you please supply one, as I'm not too familiar with powershell commands in RDM

I am using the latest Enterprise version

Thanks in advance

No problems, thank you Jeff

Hi all,

Is it possible to open Teamviewer windows within RDM as embedded tabs rather than launching a Teamviewer external window?

Under the connection properties > general > display, the only option I get is External

Correct, but only for the embedded rdp sessions. Normal ("configured") exports all data

No, my LAN ID and BT ID are passed in as part of the string that makes up the value in the username field

For an embedded session the string is part of the RDP text