MeshCentral - Access rights, Remote exec, Recordings, MyServer, User Consent

There is so much to announce this week, I must send the announcement right away before it gets too big. One of the important features of MeshCentral that is often overlooked is its fine grain access control. You can delegate to a user an exact set of permissions to an exact set of devices. To do this, there is a complex system to determine what rights a user has on each device. This week, we added two more access control rights to make granting user permissions even more precise. This is just one of many new features. In detail:

  • New “Remote Command” and “Reset/Off” access rights. Previously, you could ask the mesh agent to remotely execute a command or power off a computer if the user had the “Remote Control” permission. These operations are now their own access right that must be given to a user separately. This is the result of a request made by a GitHub community member and allows a user to be given, for example, the right to remotely run commands without remote desktop access.
  • Improvements to remote command execution. This week the remote command execution dialog box was improved so that you can specify if a command must be run as the mesh agent, or run as the currently logged in user on the primary console if a user is logged in. This is super useful since you can now launch an application on your user’s desktop remotely. For example, run “notrepad.exe” as the logged in users and notepad will launch on the user’s desktop.
  • Selective session recording. At the request of a member of the GitHub community, MeshCentral now has a new option to selectively record user desktop and terminal sessions for only select device groups if needed. When enabled, only sessions from selected device groups will be recorded and saved on the server’s disk for later playback. This is perfect if your using a server for mixed use and only need recording for some devices.
  • MyServer tab customization. Administrators can now customize the “MyServer” tab for each domain. This is useful if you want to remove server-wide administration options from certainly sub-domains but still allow some sub-domain users to be full administrators. As you see in the picture below, you can turn off most of the active features found in the “MyServer” tab from the config.json file.
  • User consent policy control in user groups. This is a more advanced usage. When remotely connecting to a device using remote desktop, terminal or files there may be user consent flags set that will prompt the remote user for permissions. These consent flags where controlled per device, per device group, per user or server wide. Now, these flags can also be set per user group. For example, this allows all users in a user group to be required to ask for remote user consent before connecting a remote desktop session.
  • MeshCentral testing table. This is not a new feature, but below is a picture of a MeshCentral device testing table with all sorts of devices featuring different processors and operating systems running the Mesh Agent and connecting back to the MeshCentral development server. This is a really good way to see if everything works well and some of these devices are used for automated agent builds.

Many thanks to the GitHub community for their continued feedback and contributions. As usual, feedback appreciated. If you see any problems and need support on something, please create a new issue on GitHub or help other users.

Enjoy,
Ylian
Twitter: https://twitter.com/meshcentral
Reddit: https://www.reddit.com/r/MeshCentral/
GitHub: https://github.com/Ylianst/MeshCentral/issues
MeshCentral2: http://www.meshcommander.com/meshcentral2






Popular posts from this blog

MeshCentral - Windows ARM64, NodeJS v11, NPM Packages

Image
Hi all. It's been a while since I last posted and now that I am settling a bit more in my work at Microsoft, I have a bit of time to occasionally look after MeshCentral again. It's about time, there where a bunch of things that needed to get fixed. Before that, I want to say that I am doing great. I am working on Microsoft Forms which is one of the offerings of Microsoft 365. For kicks, I started a YouTube channel on Microsoft Forms here during a Microsoft hacking week. I tried to up my game since the videos I last published for MeshCentral. Also, I wanted to share pictures below. I was at a Tesla Supercharger last weekend and, by luck, got to see a Tesla Cybertruck in person. It's very big. Obviously, this is a release candidate driven by a Tesla employee. I saw it after attempting to see the solar eclipse over Oregon, but sadly, too many clouds and saw nothing. In any case, back to MeshCentral. In the last few months a few things have happened with the new releases. Wind...
Read more

Starting work at Microsoft

Image
Hi everyone. It’s been a while since the last blog post and I wanted up update everyone on what is going on. As many of you know already from a discussion on GitHub , Bryan and I have been laid-off from Intel in early November 2022. This was quite a surprise as MeshCentral, MeshCommander, MeshCMD and other tools where widely used. This said, Intel has been having poor financials and Bryan and I where part of a very large first wave of downsizing by the company that involved many people that I know and worked with for a long time. I had been working for Intel for over 25 years having started in September 1998. Over the years I worked on IPsec key negotiation, Universal Plug & Play, DLNA and Intel® AMT. I loved working on all these projects and especially loved working with the open-source community on Mesh projects. Obviously, this was not my decision and Bryan and I had look for what comes next. One option was to continue working on MeshCentral as part of another company or with...
Read more

MeshCentral - New Windows Agents - Installation Dialog, Customization and Server Lock

Image
Lots is going on with MeshCentral, just yesterday Bryan Roe released a new MeshAgent for Windows with many improvements. An improved installation dialog box, logo customization and, to continue MeshCentral’s leadership in security, a new agent code signing locking feature that will surely be used by many to improve trust and security of their MeshCentral installation. In addition to this, we have many more server improvements to cover. In detail: MeshAgent with improved installation dialog box . The new MeshAgent for Windows is much improved with months of changes and bug fixes. The most noticeable feature is by far the new installation dialog with the new logo and connection details button. The new installer is a lot friendlier and easier on end-users. MeshAgent with improved customizations . In addition to all the existing agent customizations available in prior versions, the MeshAgent has new server settings for the installation text and logo. You can now set your own 200x200 PNG c...
Read more