rheijmans

I have multiple items i want to recover but when i click on "Restore entry" with the item selected in "Deleted entries" a processing bar is filling.

After that i don't see anything and i can't export it separately. I run RDM in Windows as "administrator"

It doesn't matter whether I deleted the item or someone else on the team did.

The security provider does not change in between.

What is wrong?

Hello,

I apologize for the delay in my response.

I have created a PowerShell script that might address your needs. The script will visually differentiate folders based on their permissions:

• Folders with inherited permissions will appear in green.

• Folders with custom-configured permissions will appear in red.

Feel free to review and modify the script to suit your specific requirements.

Please note the following prerequisites:

• PowerShell 7 must be installed on your machine.

• The script must be executed from a PowerShell entry within RDM.

#check if the RDM PS module is installed

if(-not (Get-Module Devolutions.PowerShell -ListAvailable)){

    Install-Module Devolutions.PowerShell -Scope CurrentUser

  }

#Change colour for each session with inherited configured

$sessions = Get-RDMSession | where {$_.ConnectionType -eq "Group"}

foreach ($session in $sessions){

If ($session.Security.RoleOverride -eq "Default" -and $session.Security.ViewOverride -eq "Default"){

  Write-host "Green" + $session.Name

  $session.ImageName = "[Green]"

  Set-RDMSession $session -Refresh

}

else{

  Write-host "Red" + $session.Name

  $session.ImageName = "[Red]"

  Set-RDMSession $session -Refresh

}

}

Update-RDMUI

Let me know if you need further clarification or assistance.

Best regards,

Hi Jacob,

Thanks for your response

I will test the script and see if it works.

In the meantime, users have provided some customer folders with an image (logo of end customer). So then I should already apply the coloration one level deeper.

I will come back to it when adjustments are made.

Best Regards,

Hello,

You have the ability to use a Password list in My personal credential and My Privileged Account but it could indeed slow down the process, since each time you will be prompted to select you credential.

In that case I would suggest using the Search by name (User Vault) as the credential on the entry.

The only thing is that users will have to follow the same naming convention for their credentials inside their user vault.

Or I would highly suggest taking a look at our PAM module. Using the PAM module we could store the engineer's privileged credentials from multiple organization and manage them with password rotation. The PAM module would allow the user to check out the desired credentials before opening a session and they would be able to configure the My Privileged Account setting in RDM to retrieve the PAM account from the Devolutions Server.

For more information on the PAM module, you can refer to these pages:

• https://docs.devolutions.net/pam/overview/what-is-pam/

• https://www.youtube.com/watch?v=drRLA7U8YsQ

Best regards,

Hi William,

The use of "Search by name" seemed to me to come closest, although the naming convention is a problem.

Especially because we have a large group of users.

From your response I understand that there will be no functionality for the time being to be able to use a tree structure from a central shared vault.

Thanks for looking for a solution and your message.

Best regards,

Hello,

Thank you for reaching out!

My name is William and I'm here to assist you in any way I can.

If all engineers are using RDM, I would suggest using My personal credential and My Privileged Account setting in RDM. You can find these settings under File > My account settings:

These settings are local to the RDM installation and can be configured just like a normal credential entry.

Afterward you can change the shared vault to use My personal credential and My Privileged Account. If the entries must be linked to specific accounts in the shared vault, engineer can also right-click on the entry and select Open with parameters where they will find the open with My personal credential and My Privileged Account.

Feel free to reach out if you have any questions or need further clarification.

Best regards,

Hi William,

Thank you for your help.

I’m indeed familiar with this solution, and it would work well within an organization.

Our engineers have personal accounts with various external organizations.

This can easily add up to as many as 100 personal credentials per engineer (with or without OTP).

In such cases, this solution would not be feasible.

Kind regards,

Rob

Hi Everyone,

Is there a way to automatically assign a specific color to a folder within Devolutions Server (via RDM) if at least one permission is not set to "Inherited"?

The goal is to visually identify folders where permissions deviate from the inherited settings, making it easier to spot inconsistencies.

Thank you in advance for your help!

Rob

Hi support members,

Setup

• Devolution Server

  • Workspace

  • Remote Desktop Manager

Our shared vault contains the following tree structure

• [Relation A] - [General Shared Credentials]

• [Relation A] - [Site] - [General Shared Credentials]

• [Relation A] - [Site] - [Production Line A]

• [Relation A] - [Site] - [Production Line A] - [...]

• [Relation A] - [Site] - [Production Line B]

• [Relation A] - [Site] - [Production Line B] - [...]

• .....

• [Relation B] - [General Shared Credentials]

• [Relation B] - [Site] - [General Shared Credentials]

• [Relation B] - [Site] - [Production Line A]

• [Relation B] - [Site] - [Production Line A] - [...]

• [Relation B] - [Site] - [Production Line B]

• [Relation B] - [Site] - [Production Line B] - [...]

• ........

.............

In addition to the shared credentials in the shared vault, each user has their own personal credentials (specific to these relations). These relationships are linked via "User Specific Settings," and this setup works well.

However, it is now common practice for engineers to duplicate this shared tree structure into their personal vaults. This approach is both labor-intensive and error-prone.

Question

Is there a way to partially or fully inherit the tree structure from the shared vault?

What would be another suitable setup that avoids placing personal credentials directly within the shared vault items? This is important because if an item is removed, the personal credentials would also be lost.

Thank you in advance for your help!

Rob

Hello, Samuel,

Tanks in advanced!

Best regards,

Rob

I notice that you can enter the parameters (host or IP) on different lines in this input field.

This works, Thanks!

Hi Samuel,

That is indeed what I am aiming for.

But I don't see where I can enter the various Hosts.

In your screenshot I see "alternate.host1" and host2.

Where did you create this?

Regards, Rob

Hi all,

I regularly want to connect to, for example, RDP or VNC.

One moment this is based on hostname and the other moment by IP address.

This has to do with the way I connect.

With an RDP device I can only specify a "host" (IP or hostname and not both).

Now you can also choose Linked (Vault) and these refer to "Host device".

This "Host device" can again be linked (click on ... right) to a "computer list".

Where can I create this "computer list"?

Is there an easier way?

Regards, Rob