Forum

Posts by Erica Poirier (epoirier)

Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342


Hello,

This feature has been added internally and the new feature will be available in the next DPS version 2019.2.x.
A DPS beta version 2019.2.x should be available in the upcoming weeks. Incidentally, we cannot provide an exact timeline for its delivery.

Best regards,



Érica Poirier

signaturesignature

3 hrs Move Logins Between Vaults
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342

Hello,

A DPS beta version 2019.2.x should be available in the upcoming weeks. Incidentally, we cannot provide an exact timeline for its delivery.
And this beta version will contain the Copy Username functionality.

Best regards,



Érica Poirier

signaturesignature

3 hrs Password Server: Copy UserName?
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342

Hello,

We have been able to reproduce your issue and a ticket has been submitted to our engineering department. For your information, the internal ticket number is DPS-3679. Once an update or a fix will be available, I will update this forum topic.

Best regards,



Érica Poirier

signaturesignature

3 hrs When sending a secure message to more than 1 users , neither user can retrieve the credential
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342

Hello,

As the RDM PowerShell module doesn't exist as a stand alone module and that it depends on the whole RDM DLLs librairy, I'm quite sure that it will not be possible to run the RDM PowerShell module within such Azure automation runbook environment as RDM needs to be installed on a machine or a VM.

We are very sorry about that.

Best regards,



Érica Poirier

signaturesignature

4 hrs Error on Import Powershell Module on Azure
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342

Hello,

This is not possible at user or role level. For this reason, I will transfer this topic in the DPS Feature Request section.

Best regards,



Érica Poirier

signaturesignature

7 hrs Type-Availability by User or Group
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342

Bonjour,

Effectivement nous avons reçu cette demande par d'autres clients. Pour le moment, plusieurs élément de ce processus existent dans DPS mais l'ensemble de la fonctionnalité n'est pas complète.

Il est possible via la fonctionnalité Privileged Access Management (PAM) de DPS de pouvoir générer un mot de passe temporaire valide pour un temps prédéterminé. Par contre, il n'y a pas de processus automatisé permettant de l'envoyer à l'utilisateur via courriel de façon sécurisé. Dans DPS, la fonctionnalité Secure Message existe mais l'utilisateur externe doit avoir un accès à votre instance DPS pour pouvoir accèder aux messages sécurisés reçus.

Notre équipe d'ingénieur est au fait de cette demande et celle-ci fait partie des projets de développements.

Cordialement,



Érica Poirier

signaturesignature

1 day Communication sécurisée vers des prestataires
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342

Hello,

We are unable to reproduce this issue. In order to help you troubleshooting this issue, here are some questions about your RDM configuration.

1- What RDM version are you using?

2- What data source type are you connected to? If it's Devolutions Password Server, what version are you using?

3- Does the data source you want to connect to is the only data source configured in your RDM?

Best regards,



Érica Poirier

signaturesignature

1 day Remote Powershell cmdlet execution
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342

Hello,

I will mention your feature request to our engineering department.

About the Active Directory integrity authentication, as a direct database connection can now be risky, we recommend to implement the Custom login. Here is a blog article about the subject. Let us know if you want to get more information about Custom login with SQL Server data source.

SQL Server with Integrated Security – That's So 2015...

Best regards,




Érica Poirier

signaturesignature

5 days Clone of user account with all permissions, roles etc.
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342

Hello,

What data source type are you connected to?

With Devolutions Password Server (DPS) data source, as it's offering a full Active Directory integration, there is no need to assign roles to user accounts. It even offers an automatic user account creation feature that create the account on their first login to the data source. Let us know if you want to try Devolutions Password Server. You may also contact our sales department at sales@devolutions.net to obtain trial license keys.

For the user templates, in Administration - System Settings - General - User Template, there are few options available when you want to create an account.

image

Best regards,



Érica Poirier

signaturesignature

5 days Clone of user account with all permissions, roles etc.
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342

Hello,

Thank you for your feedback and glad that it's working as expected.

Best regards,



Érica Poirier

signaturesignature

6 days Copy from one Vault to another
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342

Hello,

It seems that within RDM PowerShell, we cannot resolve inline field variables on-demand.

image

Even on the Dashboard, RDM doesn't resolve the inline field variable.

image

Let me check with the engineering team if we can do something about it.

Best regards,



Érica Poirier

signaturesignature

7 days Powershell Resolve Inline Field Variables
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342

Hello,

The Permissions are not available on Private Vault entries as the user has full privileges on its Private Vault. So you have to set the View Permission on the shared entries.

Best regards,



Érica Poirier

signaturesignature

7 days After RDM update i can't copy/view username and passwords
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342

Hello,

Because the Export-RDMSession cannot modify the GUIDs of the entries, when importing the session, the Import-RDMSession will move the entries in the destination vault. You can use instead the Copy-RDMSession cmdlet for that operation.

$sessions = Get-RDMSession
$newcopy = Copy-RDMSession -PSConnection $sessions
$vault = Get-RDMRepository -Name MyDestinationVault
Set-RDMCurrentRepository $vault
Set-RDMSession $newcopy
Update-RDMUI

Best regards,



Érica Poirier

signaturesignature

7 days Copy from one Vault to another
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342

Hello,

To let users to view or copy passwords, the View Permission must be set on the Credential entry. If you want that this option can be available too on any entry that are bind to a credential, you need to also correctly set the View Permission on this entry.

Could you please send us an example of the situation where users can see one password but not those that are shared with them? If you mean that they can only use and view their own personal passwords, they can save their credentials entries in their Private Vault and use User Specific Settings to override the entry default credential settings. On the parent folder, you can set the View Permission to Never so none of the standard users can view or copy the password of any credential entries in that folder.

Best regards,



Érica Poirier

signaturesignature

7 days After RDM update i can't copy/view username and passwords
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342

Hello Markus,

Do you mean the Email settings in Administration - Password Server Settings - Email?

Do you have any relevant error messages in the DPS logs when you try to change the Email settings and when you try to download the error report? Be sure to enable the Log Debug Information option in Administration - Password Server Settings - Logging to raise the debug level.

Best regards,



Érica Poirier

signaturesignature

7 days DPS 2019.1.20.0 Password Server Settings -> email
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342

Hello,

@acetico,

This is a normal behavior as you have to configure the View Password permission to let non-administrator accounts being able to view and copy passwords. It is possible to set it at the root or folder level depending on which part of your data you want to allow users to view or copy passwords.

Please see this online help page for more information about the View Password permission.
https://helpserver.devolutions.net/securitysystem_permissions.htm

Best regards,



Érica Poirier

signaturesignature

8 days After RDM update i can't copy/view username and passwords
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342

Hello,

Could you please verify that all involved machines are on the exact same time (DPS machine, user computer)?

Then please ask the user to clear his browser cache before logging back on the DPS web interface. Let me know if that help!

Best regards,



Érica Poirier

signaturesignature

9 days Token Expired using SSO - Office 365
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342

Hello,

Can you create a user account with the sa account?

You can indeed open a ticket at ticket@devolutions.net and we will send you our online reservation system to book a session to investigate your issue. Normally, using the Fix SQL Login button should help to resolve this problem.

Best regards,



Érica Poirier

signaturesignature

9 days Problem with Powershell New-RDMUser
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342

Hello,

Thank you for the information.

A better option will be to convert the Security Groups into the new Role Based Access Control security system. We can assist you for this conversion and give you some guidance on the RBAC security system. Please send us an email, with a reference to this topic, at ticket@devolutions.net to book a session.

Best regards,



Érica Poirier

signaturesignature

9 days Security Groups vs Vaults
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342

Hello,

Sorry that I didn't ask you the question correctly about administrative privileges. Could you please connect with an account that has higher database privileges and use the Fix SQL Login on your own admin account to grant the right permissions to be able to create other accounts? The following screen capture shows that I am connected with a SysAdmin account.

2019+10+07+15+02+51

For the Custom accounts, in fact, you will have to configure the Settings section using a SQL account that has enough privileges on the SQL database (see #1). And the custom account credentials need to be saved in the Username and Password fields of the General tab (see #2).

2019+10+07+14+52+19

A method to deploy this configuration is to create a Data Source Configuration file (.RDD) that will already contain the Database login account. The users will only have to import this file and fill in their credentials in the General tab.

Best regards,



Érica Poirier

signaturesignature

9 days Problem with Powershell New-RDMUser
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342

Hello,

Thank you for the screen captures and the explanation of your issue.

It seems that the account connected to the SQL data source doesn't have enough permissions to create user account in the database. Are you connected with an account that has administrator privileges in RDM? If so, could you please try to connect with a sysadmin account to your SQL data source in RDM, then select the account that is running the PowerShell commands and click on the Fix SQL Login button? That should fix the issue.
image

About using an AD Group to let users to connect without creating a SQL account, we do not recommend to use this and we do not support that configuration with RDM. There is a more secure method than this one to create accounts only in the RDM SQL database. It's the Custom Login method. You will find more information about it on the following online help page and blog article.
https://help.remotedesktopmanager.com/datasource_sqlserver.htm#general

https://help.remotedesktopmanager.com/administration_usermanagement.htm#general

https://blog.devolutions.net/2019/06/sql-server-with-integrated-security-thats-so-2015


Let me know if you need more information about the Custom Login feature.

Best regards,



Érica Poirier

signaturesignature

9 days Problem with Powershell New-RDMUser
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342

Hello,

Could you please send me the command line that creates the user account?

If you're using the same command line I have posted in my previous message, could you please try it with RDM version 2019.1.41?

Best regards,



Érica Poirier

signaturesignature

12 days Problem with Powershell New-RDMUser
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342


Hello,

Thank you for your comment about having that option in the same tab for all entry types. We will look into this for sure.

Best regards,



Érica Poirier

signaturesignature

12 days Cmd Line (Ext App) Widget Password issues
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342


Hello,

To allow password to be used with the $PASSWORD$ variable, the option Allow password in variable option in the Advanced tab of the credential entry must be enabled.

image

Best regards,



Érica Poirier

signaturesignature

12 days Cmd Line (Ext App) Widget Password issues
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342

Hi Hans,

Incidentally, we cannot provide a timeline for its delivery. The engineering team is still ironing DPS and working hard to release a version. You can be sure that once an internal beta version will be available for you to test, you are the first customer that I will contact to get that version!

Best regards,



Érica Poirier

signaturesignature

15 days Any ETA on the new release ?
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342

Hello,

The users won't be able to disable the option locally when it is configured in the System Settings. The option will be greyed out.

image

Best regards,



Érica Poirier

signaturesignature

16 days Application password (local)
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342

Hello,

Sure it is possible if you are using an Advanced Data Source.

Please go in Administration - System Settings - Applications and set the Force application security with Windows credentials option.

image

Best regards,



Érica Poirier

signaturesignature

16 days Application password (local)
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342

Hello,

@everyone, configuring the DPS IIS Application Pool to recycle nightly helped the customer to resolve the issue. We are still investigating this issue internally.

Best regards,




Érica Poirier

signaturesignature

18 days Bug: "Unable to Connect to your Data Source"-error when using search over all vaults
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342


Hello,

For now, as the engineering team is currently ironing the next DPS version 2019.2.x, no improvement, new features or bug fixes will be inserted in the current project schedule. We are very sorry about that.


Best regards,



Érica Poirier

signaturesignature

20 days Documentation of the SDK
Erica Poirier
Erica PoirierDevolutions staff
Posts: 1342

Hello,

The Launcher update should be available soon.

I will contact you when a beta version of Launcher and DPS will be available.

Best regards,



Érica Poirier

signaturesignature

20 days Any ETA on the new release ?