Michael Huggins

Thank you for the replies here.

Our IT admin accounts are secondary domain accounts for IT. These accounts are in process of being migrated to PAM. So, the answer to your question is they are using 'RDP with Domain PAM accounts'.

As far as checkout policy, there is a policy to change password on check-in of PAM account (after use) and, since we have a small group of users who don't use RDM daily in their work, we also setup a daily a mandatory scheduled rotation at 4am for all PAM accounts.

Let me know if you have any more questions.

Thanks again,

Michael

We are using Devolutions Server currently. (I will be looking at Devolutions Cloud in the future.) We already have started down the road of PAM with a handful of users using it to rotate PW on personal IT admin accounts. We found that if someone was logged on with said IT admin account, and password rotated (on schedule overnight) they would be locked out of their account the next day. A solution mentioned was enabling an app timeout to logoff all active connections so, when password changed, it would not lock the account as it wasn't in use. However, in moving forward with PAM, we are getting pushback on an idle timeout, and some would prefer the option of the app close (and connections logged off / closed) to sometime before the scheduled password change overnight as opposed to idle timeout.

Currently, in the RDM config (and GPO) there is a setting for Application close on an idle timeout entry.

I would like to request the ability to add the option of Application close at a specific time. We would like to have any open sessions of RDM close overnight before a scheduled password rotation, so accounts won't be locked out.

Thanks,

Michael Huggins

I'd like to request the ability to manage my credentials for the following items in the DVLS Web version as can be done in current Remote Desktop Manager. I understand these accounts are available in Web version entries but, currently, you have to logon to RDM or Launcher to be able to "edit" those credentials

My personal credentials

My privileged account

My personal SSH key (not currently used by our group, but also in RDM location so I request to add it)

Currently (latest Stable release), the PAM vaults order alphabetically.

Is there a way to add the ability to set a default or favorite PAM vault or otherwise give an ability to change the order of the vaults?

I'd like to see either a custom MSI generator or some other command line option when installing "Devolutions Launcher" that I can point the installation to the correct data source.

We already use the custom MSI for RDM, but as we are testing a few users with Launcher, I'd like to have the same or similar seamless installation process.

Thanks,

Michael