MeshCentral - Improved Access Control, Batch Operations, User Consent, macOS

This week again, MeshCentral has continued to rapidly evolve in many ways. Bryan Roe has published many new releases of the MeshAgent with improved security, network stability and macOS support. In addition, the MeshCentral server got a few big upgrades with the addition of batch operations on users and user groups, advanced user consent settings and improved and more flexible access control system. Let’s look at all this in detail:
  • Assigning individual devices to user groups. Before this week, one could create a user group and assign device group rights to the user group. You could also, as per a previous blog, assign users to an individual device. Now, the access control system was improved again and MeshCentral allows you to assign individual device permissions to a user group. This makes assigning permissions very flexible as you can now have many user groups and assign permissions as needed, for a device or a device group. Because permissions are cumulative, there is plenty of flexibility in the access control system that should make most administrators quite happy.
  • User and user groups batch operations. Just like performing batch operations on devices, administrators can now select many users or user groups and perform batch operations on many selected items at once. For example, you can select many accounts and lock them all at once. This makes management of users and user groups a lot faster and easier.
  • Advanced user consent settings. User consent settings are important to allow the remote user to know that someone is remotely managing a computer, it includes prompting the remote user for access, a remote privacy bar at the top of the screen and connection notification. In this latest version of MeshCentral, administrators can now configure these settings per user, per device or per device group. This allows for maximum flexibility of user consent policies.
  • Improved macOS support. Bryan released a new MeshAgent with many fixes and improvements. One of the notable improvements is that the macOS agent can now capture the remote login screen. Because of security measures in the OS, moving the mouse and entering keys at the login screen is not possible. Still, this is a nice improvement for the agent. Other improvements include support for very large displays on macOS and “Jumbo” commands to speed up remote desktop operations.
  • Improved security with latest OpenSSL 1.1.1f. The MeshAgent makes heavy use of cryptography to authenticate and secure connections it makes with MeshCentral (TLS/WebSocket) and other browsers (DTLS/WebRTC). The latest batch of MeshAgents released on all platforms now runs on the very latest supported OpenSSL 1.1.1f. As it was the case before, the MeshAgent connects to MeshCentral using the latest TLS 1.3.
Once again, many thanks to the GitHub community for their amazing help. Thank you to Bryan Roe for the new MeshAgent’s for all platforms. If you see any problems and need support on something, please create a new issue on GitHub or help other users.

Enjoy,
Ylian
Twitter: https://twitter.com/meshcentral
Reddit: https://www.reddit.com/r/MeshCentral/
GitHub: https://github.com/Ylianst/MeshCentral/issues
MeshCentral2: http://www.meshcommander.com/meshcentral2



Popular posts from this blog

Starting work at Microsoft

Image
Hi everyone. It’s been a while since the last blog post and I wanted up update everyone on what is going on. As many of you know already from a discussion on GitHub , Bryan and I have been laid-off from Intel in early November 2022. This was quite a surprise as MeshCentral, MeshCommander, MeshCMD and other tools where widely used. This said, Intel has been having poor financials and Bryan and I where part of a very large first wave of downsizing by the company that involved many people that I know and worked with for a long time. I had been working for Intel for over 25 years having started in September 1998. Over the years I worked on IPsec key negotiation, Universal Plug & Play, DLNA and Intel® AMT. I loved working on all these projects and especially loved working with the open-source community on Mesh projects. Obviously, this was not my decision and Bryan and I had look for what comes next. One option was to continue working on MeshCentral as part of another company or with
Read more

MeshCentral - Windows ARM64, NodeJS v11, NPM Packages

Image
Hi all. It's been a while since I last posted and now that I am settling a bit more in my work at Microsoft, I have a bit of time to occasionally look after MeshCentral again. It's about time, there where a bunch of things that needed to get fixed. Before that, I want to say that I am doing great. I am working on Microsoft Forms which is one of the offerings of Microsoft 365. For kicks, I started a YouTube channel on Microsoft Forms here during a Microsoft hacking week. I tried to up my game since the videos I last published for MeshCentral. Also, I wanted to share pictures below. I was at a Tesla Supercharger last weekend and, by luck, got to see a Tesla Cybertruck in person. It's very big. Obviously, this is a release candidate driven by a Tesla employee. I saw it after attempting to see the solar eclipse over Oregon, but sadly, too many clouds and saw nothing. In any case, back to MeshCentral. In the last few months a few things have happened with the new releases. Wind
Read more

MeshCentral - New Windows Agents - Installation Dialog, Customization and Server Lock

Image
Lots is going on with MeshCentral, just yesterday Bryan Roe released a new MeshAgent for Windows with many improvements. An improved installation dialog box, logo customization and, to continue MeshCentral’s leadership in security, a new agent code signing locking feature that will surely be used by many to improve trust and security of their MeshCentral installation. In addition to this, we have many more server improvements to cover. In detail: MeshAgent with improved installation dialog box . The new MeshAgent for Windows is much improved with months of changes and bug fixes. The most noticeable feature is by far the new installation dialog with the new logo and connection details button. The new installer is a lot friendlier and easier on end-users. MeshAgent with improved customizations . In addition to all the existing agent customizations available in prior versions, the MeshAgent has new server settings for the installation text and logo. You can now set your own 200x200 PNG c
Read more