thoj

Hi Erica

Okay i didn't know this. Do you still need an RDM license to use the RDM cmdlets?

Regards

Thomas

Hi Thomas,

Thank you for your feedback.

In fact, using the RDM cmdlets doesn't require RDM to be installed on the machine or have an RDM license assigned to users. It only creates the required files like RDM will, but it does not use its interface. Then, you can connect to the DVLS data source, as shown in method 1 in this article.

https://docs.devolutions.net/kb/devolutions-powershell/devolutions-server/powershell-connectivity/#method-1-using-remote-desktop-manager-cmdlets

Let us know if that could be a viable solution.

Best regards,

Hi Erica

Thanks for letting me know. We unfortunately can't use RDM to do this, so we will have to find another way.

Regards

Thomas

Hello,

So yes, we can use the Yubikey with PowerShell if we use the RDM cmdlets (verb-RDMxxx cmdlets). This authentication process goes through the web authentication page.

But it's not supported with the DVLS cmdlets (verb-DSxxx cmdlets).

Best regards,

Hi Erica

Today we require TOTP on every AD account used in DVLS and we are looking to support YubiKey for DVLS admins.

We have a policy that says we have to export/print password tagged as emergency quarterly and place them in a secure vault that a couple of employees has access to.

For this we have created a PowerShell script to export the passwords as a html that we are able to print easily but that isn't possible with accounts that are MFA enabled and therefore my question if the modules support MFA.

I have looked at Application Keys but the permission structure makes it hard to manage and it also requires access to view passwords for all account and therefore a script with this key in it will not be allowed by our security team.

Regards

Thomas

Is it possible to use YubiKey or TOTP with the Devolution Server PowerShell module?

Hi

Thanks for the answers and i understand why you would restrict the amount of data transferred. But if you have to find all the entries you wish to get info about and then run a command against each entry again to the the extended dataset, wouldn't that be more data transferred than if you returned it all in the first place?

I didn't know about Search-DSEntry but i can use it and then for each entry run Get-DSEntry -EntryId to the the extended data where i can find the hostname i need.

What would be the right way to change the hostname of the entry?

I'm trying to get all SshShell sessions using the DS powershell commands and found that Get-DSEntry gives different output depending on how i use the command.

Can you please explain why the command doesn't give the same output?

If i first have to run "Get-DSEntry -VaultId $Vault.Id -All" to get all entries and then again run "Get-DSEntry -EntryId <ID>" or "Get-DSEntry -VaultId $Vault.Id -FilterBy Name -FilterValue <NAME>" for each object that has connectionType 77 (or SshShell, which only the command with filtervalue shows) then i have to make a lot of unnecessary call to the API to get the information that in my opinion should come with getting all entries (except the secret data of cause).

Module version: 2023.2.0.6

(Get-DSEntry -VaultId $Vault.Id -All).Data | Where-Object {$_.Id -ieq 'c57e1505-e79e-4974-9b1f-f3eab6947333'}

connectionType          : 77
displayMode             : 1
displayMonitor          : 4
group                   : Test\TestFolder
id                      : c57e1505-e79e-4974-9b1f-f3eab6947333
name                    : TestSSH
permissions             : @{canView=True}
repositoryId            : 7e14f5e8-8747-482c-b2aa-91104866aafa
supportSessionRecording : True

(Get-DSEntry -VaultId $Vault.Id -FilterBy Name -FilterValue 'TestSSH').Data

CachedSecurityGroups   : 
SplittedGroupMain      : {Test, Test\TestFolder}
AttachmentCount        : 0
AttachmentPrivateCount : 0
ConnectionType         : SSHShell
ConnexionTypeIcon      : 
ConnexionTypeString    : 
Data                   : <?xml version="1.0"?>.....
DataAtRestDecrypted    : False
DeserializedConnection : 
Group                  : Test\TestFolder
GroupMain              : Test\TestFolder
Groups                 : {Test\TestFolder}
HandbookCount          : 0
ID                     : c57e1505-e79e-4974-9b1f-f3eab6947333
IntelligentCacheAction : AddUpdate
InventoryReportCount   : 0
IsPrivate              : False
MetaData               : Devolutions.RemoteDesktopManager.Business.Entities.ConnectionMetaDataEntity
MetaDataString         : <?xml version="1.0" encoding="utf-8"?>.....
Name                   : TestSSH
ParentID               : 
RepositoryID           : 7e14f5e8-8747-482c-b2aa-91104866aafa
SecurityGroup          : 00000000-0000-0000-0000-000000000000
TodoOpenCount          : 0
Version                : 

(Get-DSEntry -EntryId c57e1505-e79e-4974-9b1f-f3eab6947333).Data

resolvedCheckOutMode                     : 5
resolvedCheckOutCommentMode              : 1
resolvedAllowOffline                     : 1
resolvedSynchronizeDocumentToOfflineMode : 2
resolvedTemporaryAccessMode              : 3
resolvedCredentialConnectionId           : c57e1505-e79e-4974-9b1f-f3eab6947333
connectionType                           : 77
createdBy                                : account
createdDate                              : 2023-09-13 20:03:38
data                                     : ....
displayMode                              : 1
displayMonitor                           : 4
group                                    : Test\TestFolder
id                                       : c57e1505-e79e-4974-9b1f-f3eab6947333
modifiedBy                               : account
modifiedDate                             : 2023-09-13 20:05:56
name                                     : TestSSH
permissions                              : @{canView=True}
repositoryId                             : 7e14f5e8-8747-482c-b2aa-91104866aafa
resolvedTimeBasedUsageSettings           : @{timeBasedUsageDays=2}
sessionRecordingSettings                 : @{fileNameMode=3; mode=4; sessionRecordingTarget=1; cid=c57e1505-e79e-4974-9b1f-f3eab6947333}
supportSessionRecording                  : True
resolvedEventsLogsOptions                : @{openLogsOptions=; closeLogsOptions=; credentialsViewedLogsOptions=}
accessRequestResolvedAuthorizerSetting   : 2

Hi Richard

If you look at my above example i'm not using the '.body' part (even though it's there). Our script used to work without the second .data but its now requires it.

I also just wanted to know if that is now required our if it could be a bug?

Hi Richard

Thanks for letting me know.

Regards

Thomas

Hi Alexandre

Using the command Get-DSEntryPasswordHistory from Devolutions.PowerShell version 2023.1.0.8 with Devolution Server version 2023.1.6.0 only gives the latest password and not anything from the history.

Also for some reason when using the Get-DSEntrySensitiveData it now requires to go down two .data in depth to get the same data as before. I'm not sure when that changed but it was working in the last version we used which was a 2022.x.x something - is that now required? See below eksempel.

$DvlsEntrySensitiveData = Get-DSEntrySensitiveData -EntryId $DvlsEntry.ID

$DvlsEntrySensitiveData.Data.data.credentials.username

Regards

Thomas

Hi Min

Thanks for the info. This works.

How is it possible to fill ind our domain\username in the same HTML input?

We have a lot of website that requires us to login using our domain\username in the same input field.

I was unable to find any documentation (or limited information) on this and it's the same about the "Custom Controls" and "Custom Script" login function.

Is it possible to export the password history for entries using the Devolution.Server PS module, just like you can do with other sensitive data?

Hello Eric

Thanks for the information.

At the moment i have made som workarounds where i use New-DSEntryBase instead.

Best regards

Thomas

I'm trying to use New-DSRDPEntry and New-DSSSHShellEntry to create new RDP and SSH Shell sessions using PowerShell 7.2.1. The PowerShell module is the newest one from PSGallery, 2021.6.3.

If i manually load the class "Field" from the module files the command still fails but with another error.

The commands fail with the following error: