User Manual - Devolutions
Contents
1. Primary monitor Display Security Credentials Session configuration security group 2 4 2 User Management Description With the Devolutions Server data source you can create users and grant them permissions You must be administrator of the database to create users and assign rights The user administration is available from the menu Users Add User or from the Devolutions Server Console when executed locally on the server Dashboard Devolutions Console x A A RO Y Users E Security Groups amp Roles I B S RDMS_MSP 2 2 21 0 10 1 20 Edit the data source users Adding a User If you wish you can create a user linked to a domain or a built in user Domain users are created automatically the first time they log on They don t have any rights except what is public 2015 Devolutions inc Contents 15 LI amp User management C Administrator Information Confiqure User dialog Linking a Security Group to a User You can manage the rights and groups in the Permissions tab user with administrator rights has access to all of the configured sessions from all groups O 2015 Devolutions inc 16 Devolutions Server LI g User management General Roles Privieges Permissions Settings C Add C Edit C Delete Edit Delete ie Fe i i User Permissions Linking a Role to a User2. 2015 Devolutions inc 30 Devolutions Server Deploy Devolutions Server Wizard Local or IP or Server name David C Integrated security Help Password 000000 Test Server Database Windjammer pe C Use SQL Server encrypted connection C Trust server certificate Create Database Test Database Caching mode Intelligent Update Database Failover Create a database Database Settings Server User Integrated security Password Test Server Database Create Database Test Database Update Database Use SQL Server encrypted connection Trust Server certificate Caching mode Email Schema to Support View database version Description Name of the server Username to access the database If activated it will disabled the password field because the operating system will provide a cached copy automatically Password used to access the database Test the connection with the server to validate if the proper information has been provided Name of the database to access Create a new database on your server Test the connection with the database to validate if the proper information has been provided Update the database on the server Will use the SQL encrypted connection Will always trust the specify server certificate used for the authentication Disabled No client caching
3. Client Certificate Mapping Authentication Server Roles Performance Web Server Role IIS v Security Confirmation v Digest Authentication IIS Client Certificate Mapping Authentication IP and Domain Restrictions URL Authorization Y Application Development FTP Server FTP Service FTP Extensibility lanagement Tools IIS Management Console IIS 6 Management Compatibility IIS Management Scripts and Tools Management Service Install Cancel Web Server services Install ASP Net O 2015 Devolutions inc Contents 25 We recommend using the web platform installer to install the NET framework NET 4 5 is an in place upgrade of the framework and it is complex to determine which version is install Make sure that ASP Net 4 5 is installed on your Windows server Register ASP NET in IIS This is easiest with the Web Platform Installer In IIS Manager when you select the server node you will see a Get New Web Platform Components Use this to install the Web Platform Installer E deg So File View Help Restart oo Gy Start Page Y Go G Show All Refresh A Remove Connection 4 Add Website Compression Default View Sites Document Change NET Framework Version gt 4 pag O Get New Web Platform Ren
4. Regular Time Interval True Request Limit Exceeded True Specific Time True Virtual Memory Limit Exceec True Private Memory Limit KB 0 Regular Time Interval minutes 1740 Request Limit 0 Generate Recycle Event Log Entry logEventOnRecycle Generates an event log entry for each occurrence the specified recycling events Advanced settings for an Application Pool 5 22 Server Diagnostic Description The server diagnostic validate if all the necessary IIS features are enable to run Devolutions Server properly Settings Remote Desktop Manager Enterprise Windows Edition must be started with elevated privileges when the console needs to be used The server diagnostic is available from the Tools gt Devolutions Server Console menu Dashboard El Devolutions Server Console x ld XO U 4 Users Fasenrity Groups Roles mtt Name Web Application Name Version Expiration Website Runtime Version Path DVLS2500 DVLS2500 2 5 0 0 Na expiration Default Web Site v4 0 C inetpub wwwroot DVLS2500 DVLS252 DVLS252 ATA No expiration Default Web Site v4 0 C netpub wwwroot DVL5252 Devolutions Server Console 2015 Devolutions inc Contents 53 This diagnostic will verify if all the ISS features are on and installed properly Remote Desktop Manager X cs IIS Features Diagnostic Feature CEA HTTP Logging Windows Authentication Static Content Default Document Directory Browsing ASP NE
5. Username Please Login Password Web client View Modify Sessions windiammeridavid Download Support Contact er uu Home Sessions i Sessions 2 Description Attachments Log Bad room Bad room Clients Microsoft Remote Desktop Host consultant BENED ou Security group View Modify sessions View Modify Users 2015 Devolutions inc Contents 19 Download Support Contact Home Users Username Full Name Is Administrator Is Enabled f admin Y A david Y Y Be WINDJAMMER david m Y Edit User WINDJAMMER john v Delete User fa Devolutions View Modify users View Modify Security Groups E gt rr Download Support Contact Home Security Groups Name Description administrators operators users Edit Security Group Delete Security Group Sessions 2 Users gt Security Groups 2 Roles amp My Account ER A Devolutions View Modify security groups 2015 Devolutions inc 20 Devolutions Server View Modify Account windjammern david Logout Bevplutions Download Support Contact Home My Account User name windjammer david Email david amp windjammer com Bevplutions First name David Edit Account Last name Goliath Change Avatar Compa Windjammer Change Password Address 125 Main street Springfield Country United States State Phone 555 555 1212 Sessi
6. twitter devolutions net You YouTube http youtube devolutions net Tube B Blog http blog devolutions net Q M Google http plus devolutions net a Spicework http spice devolutions net Em Forum http forum devolutions net O 2015 Devolutions inc
7. Devolutions Server Console x H E amp Users AN Security Groups f Roles E S BG Name Web Application Name Version Expiration Website Runtime Version Path DVLS2500 DVLS2500 2 5 0 0 No expiration Default Web Site v4 0 C netpub wwwroot DVLS2500 DVL5252 DVLS252 2 5 2 0 No expiration Default Web Site v4 0 C inetpub wwwroot DVLS252 Devolutions Server Console Actions New Modify Delete Refresh Upgrade Manage Users Manage Groups Manage Roles View web client View Logs 2015 Devolutions inc 11 Contents 2 2 2 3 e Explore Content of web site directory Register the Devolutions Server as a Data Source e Server Diagnostic Authentication Description Devolutions Server supports multiple authentication models Authenticate with Devolutions Server user The ASP NET membership framework is used to authenticate the user with its hashed password in the database Authenticate with domain user The server hosting the instance must be joined to a domain in order to achieve domain authentication at this time The domain is used to authenticate the user The domain authentication is the most secure flexible and easiest to manage No need to sync users between the domain and Devolutions Server On first use of the Devolutions Server data source the user will be created and be given access rights according to their role in the organization as defined on the domain Make sure you grant appropria
8. Roles are assigned when the user is authenticated from the Domain 243 Role Management Description Role management is only available when the Domain authentication is enabled This allows the server to link an Active Directory AD group to a role in Devolutions Server All the role settings are applied to the users that are member of the AD group Dashboard B Devolutions Console x MRS Y Users M Security Groups S Roles I cm RDMS_MSP 2 2 21 0 10 1 2022 Edit the data source roles Roles can be edited from the Devolutions Server Console locally on the server or from a remote data 2015 Devolutions inc Contents 17 source by using the menu Roles User and Security Management Users Security Groups Roles d Add Role SEN Name 4 Description Role editor dialog 2 5 Web Client Description Because of documented vulnerabilities of web browsers particularly their extensions we do not perform any password decryption in a web browser The web interface is feature limited purposefully and you must use the client to perform any modification to entries Home page Open a browser to the URL that you have chosen for your Devolutions Server instance If you have followed the default settings for a first installation it should normally be available at http localhost dus O 2015 Devolutions inc 18 Devolutions Server Bevplutions
9. 2015 Devolutions inc Contents 31 Simple Simple caching is the legacy caching mode Performance may suffer when connected to data sources containing may sessions Intelligent Intelligent cache has the ability to handle many more sessions without experiencing performance degradation Failover partner Enter the initial principal server and database in the connection string and the failover partner server Email Schema to Support Helper to send your database schema to the Devolutions Support team View database version Will show you what is your database version 8 You must choose the authentication options For the initial setup we recommend to always enable Authenticate with Devolutions Server custom user You will guarantee connectivity for the first steps and you can later disable it Use inherited AD group Auto create domain users in database C Authenticate with local machine user Authenticate with database user hes ner Lo Lors De volutions Server settings Authenticate mode Description Devolutions Server custom user The Devolutions Server is used to authenticate the user You must create the initial user through the console Authenticate with domain user The domain is used to authenticate the user Authenticate with local machine The application allows a local user to be authenticated on the user server O 2015 Devolutions inc 32 Devolutions Server Authenticate with database The database is us
10. MTP Configuration page 12 Once all the steps are done you can click on Install When the installation is completed a window will open to confirm that the deployment of the server has been performed O 2015 Devolutions inc Contents 35 Ej Deploy Devolutions Server Wizard Progress Starting deployment Downloading content from the Internet Done Unzipping content Done Creating IIS AppPool Done Creating IIS application Done Configuring the connection string Done Configuring the web config Done Configuring the email settings Done Configuring the session state Done Starting State Service Done Deployment completed KI KN N ess TN 13 You can test the server installation by opening the URL e g http localhost Devolutions Server 14 Configure users and security groups and add at least one administrator user account You must create an administrator account if you ve enabled the Devolutions Server Authentication model In other cases the account name must match with the chosen authentication model If you are unsure of the result also enable Devolutions Server authentication create an administrator account and grant the Administration privilege to the account After the successful authentication with the other model the Devolutions Server user account will have been created and you will be able to see how to format your account names You can then disable the Devolutio
11. T 3 5 ASP NET 4 6 ISAPI Extensions ISAPI Filters Basic Authentication Static Content Compression 46666666664 Qro Server Diagnostic 2015 Devolutions inc FAQ Frequently Part 56 Devolutions Server FAQ Frequently Asked Questions What is Devolutions Server Devolutions Server is similar to Devolutions Cloud except that it is designed for a private hosting internally or over the Internet Why buy Devolutions Server Ideal for businesses that would prefer to store their data in house want to deploy their own SSL certificate or firewall or who need Active Directory integration with role management What are the key benefits of Devolutions Server Devolutions Server is installed on your hardware in your environment or with your ISP to give you total control of everything including Active Directory integration Role management Hardware Operating System Firewall Application Delivery Load Balancing Fault tolerant environment for the web server layer Database including clustering failover capabilities Backups SSL certificates Devolutions Server also offers an improved security model as database access is limited to the server and no direct connection is established This secure architecture is a significant improvement over standard client server architecture SQL Server data source Can I get a trial of Devolutions Server Yes Request a trial Does Devo
12. User Manual Devolutions 7 Server A self hosted repository for Remote Desktop Manager v3 0 Contents 3 Table of Contents Part I Getting Started 6 1 What is Devolutions SErver x svrrsesersrssesersrsansersennrnvssnsnseesavnvsvesnrsvsvennsvnsesnvsvesesnvenssnsnesernsevnsnsnrsesnesessennrsenne 6 2 Features 7 3 Security Checkligt nee 7 4 System Requirements rara 8 Part Il Management 10 Devolutions Server Console 10 Authentication TTL LLLI TEST 11 Automatic User Account CreatjOn sensnnsnnnnnnnnnnnnnnnnnnnennennennennennennennvnnnennnnnnnnnnnnnnnnnnnnnnnnnnnnnnennennennennennennenner 11 EDT Security Group Management User Management Role Management Web Be ZT Part Ill Installation 22 Installing DevolutionS Serve 222 unnan nnn 22 Web role Install pre 2012R2 cc 23 Web role Install 2012R2 24 Database Instance Configure 04 1 341 385 1 1 4 4 4 Configure Devolutions Server to use integrated security Configure SSL How To Activate Your Renewal Subscription Raga EE EEE EE EL EEE LE LEE EE L EL EEE EL EL EEE EEE EL ELLE EEE T EL TELE EEE EEE EL ELEC dadas T 45 Support Resources 48 Technical Support MS 48 Troubleshooting PRET TN a ada LT OI LL DEEE NADO NN 48 liS Logging EEE ON ME en 48 Server DIaghostle vu cn nt A de 52 Part VI FAQ Frequently Asked Qu
13. ager Enterprise Windows Edition must be started with elevated privileges when the console needs to be used Click on Tools gt Devolutions Server Console menu and edit your Devolutions Server instance 2015 Devolutions inc 46 Devolutions Server El Devolutions Server Console x MAKTE ues Bey Groups Ris E Web Application Name Version DVLS2500 DVLS2500 2 5 0 0 DVLS252 DVLS252 2 5 2 0 Edit Replace the existing license key by the new one that you have received by email in the General Registration section Remote Desktop Manager EN Server Settings MM F General Authentication Name mm ___J em 00 Registration General 2015 Devolutions inc Support Resources Part 48 5 2 5 2 1 Devolutions Server Support Resources Technical Support Contact Us Holders of a valid license obtain our Extended Support plan for Devolutions Server Please email any questions or suggestions to support devolutions net We also offer Premium support for an additional price You are also encouraged to find information and ask questions in our forums at http forum devolutions net They contain years of relevant information and have the benefit or being enriched for the whole community when we post an answer Troubleshooting IIS Logging Description Here is the description of desired settings when we troubleshoot a performance connectivity issue related t
14. ame Handler Components Error Pages Mappings e Help Stop View Application Pools LE Switch to Content View b Templates E j Logging MIME Types Fag 2 E Features View Content View IIS Manager with Command to install WPI When you launch the WPI highlight the Products category and browse for Asp net registration Add it then press Install Allow for configuration personalization by web Applications New to this release configuration is locked down at the root of the web site Since Devolutions Server requires specific directives we need to allow for web applications to adapt the configuration at their level This is easiest when using the APPCMD executable Open an elevated command prompt Run As Administrator Set the working folder to windir system32 inetsrv and run the following two commands appcmd exe unlock config section system webServer handlers appomd exe unlock config section system webServer modules 2015 Devolutions inc 26 3 1 3 3 1 4 Devolutions Server Database Instance Description Install SQL Server Express or Standard Download SQL Server 2014 Express from Microsoft s site If full integration with Active Directory is required you can decide to only activate Windows Authentication Please refer to the MSDN online help for full details Under Windows authentication you will have to set the Applicati
15. ance by personalizing the name and description Enter a serial registration key alternatively you can Request a trial 2015 Devolutions inc 28 Devolutions Server Devolutions Server By Devolutions inc Registration Serial on gt Friday July 1 2016 Unlimited users Devolutions Server Installation Wizard 6 Select a zip file or use the automatic download Choose a destination folder and an IIS virtual directory name The process to run Web sites has been granted the proper permissions under c inetpub wwwroot we recommend you create a new folder under it and create the Devolutions Server instance under that folder 2015 Devolutions inc Contents 29 IIS settings Website Default Web Site NET Framework version v4 0 C Force https This option requires that you install an SSL certificate in IIS Please see IIS documentation on the steps to follow C Encrypt web config file web application name DVLS llation folder C inetpub wwwroot dvis Source Destination 7 Enter the Server and Database settings and create the database You can reuse an existing database from a desktop applications and just upgrade it it s 100 compatible If you wish to use integrated security to connect to the database please consult Configure Devolutions Server to use integrated security
16. ave a security group assigned to them Depending on the authentication mode used the user name may be prefixed by the domain name and the exact naming convention is controlled by the domain For instance fora WINDJAMMER domain that is registered as windjammer loc we have no way of knowing beforehand what form will be reported by the AD services It is recommended to always enable both Devolutions Server authentication initially and create an Administrator account for the initial phase of implementation Security Description The Security section of the Devolutions Server Console allows you to manage your instance These management features are exactly the same as the one offered under the Administration tab of the various Desktop Clients when they are connected to that instance as a Data source Since the latter is the one you will spend most of your time using whenever a new instance is created we recommend creating an administrative user then register the instance as a data source in your Desktop Client of choice This will bring you in a more familiar territory and will help you get around more quickly If you are indeed using full AD integration whereas the assignment of permissions comes mostly from AD Group membership then the roles are the mechanism that make this work The sections below are to cover the basic management features if you cannot use a desktop client e Security Group Management User Management Role Manageme
17. d between the client and server This is made worse by using Custom images and sizable notes being stored within the sessions The solution is to balance sessions between multiple data sources thereby making each data source easier to handle 1 3 Security Checklist Description To reach the highest possible level of security you should adhere to the following guidelines 2015 Devolutions inc 8 Devolutions Server These recommendations are valid ONLY if you will make the Devolutions Server instance on your Intranet EXCLUSIVELY You must involve a person with knowledge of internet security to safely host any application on the Internet You need to protect the site from Denial Of Service attacks using an appliance or a security module that is external to Devolutions Server General Use Windows Authentication exclusively SQL Server Enable only the Windows Authentication Mode Create a domain account to be the owner of the database an another that will be used by the web server to connect to the database Communicate ONLY through an encrypted connection this will require a certificate to be installed Web Server Configure the application pool to use domain credentials This account will need to be added to SQL Server as a login Serve content only through SSL https See Configure SSL 1 4 System Requirements Minimum Requirements Microsoft Net Framework 4 5 1 e For operating systems please refer to the requi
18. eate an SSL Binding 1 Select the web site in the tree view 2015 Devolutions inc Contents 43 S4 DEVOLUTIONSI8 DEVOLUTI i Application Pools 4 8 Sites Go Default Web Site gt aspnet client gt RDMS Select web site 2 Click Bindings in the Actions pane This brings up the bindings editor that lets you create edit and delete bindings for your Web site Click Add to add your new SSL binding to the site Remove Browse Add binding 3 Select https in the Type drop down list Select the self signed certificate you created in the previous section from the SSL Certificate drop down list and then click OK add site ticino 315 Type IP address Port https y fal Unassigned v 443 Host name m SSL certificate la uuu Certificate v Not selected Test Certificate Define https binding 4 Now you have a new SSL binding on your site O 2015 Devolutions inc 44 Devolutions Server The new binding Configure SSL Settings in IIS 1 Select a Devolutions Server application in the tree view S4 DEVOLUTIONSI8 DEVOLUT il Application Pools 4 ei Sites 4 Default Web Site b L aspnet client Select application 2 Click on SSL Settings 8 Fs o T CGI Compression Default Directory Document Browsing m L EZ 2 B Handler HTTP HTTP Logging Mappings Redirect spen i C 4 pe FA Output Request DRL Rewrite Caching F
19. ed to authenticate the user user 9 Make sure the Internet Information Services IIS is installed as it is a pre requisite for the installation of Devolutions Server El Deploy Devolutions Server Wizard Website Default Web Site NET Framework version v4 0 C Force https This option requires that you install an SSL certificate in IIS Please see IIS documentation on the steps to follow C Encrypt web config file web application name pus IIS Settings 10 Ensure the ASP NET State service is started or set to automatically start The State Service is required to maintain web session information between each call If you press on Start ASP NET State Service and the response is Service is not installed this means that ASP NET has not been installed 2015 Devolutions inc Contents 33 EN Deploy Devolutions Server Wizard Mode State Server Auto start Start Service State Connection String Start ASP NET State Service Stop ASP NET State Service ASP Net State Service configuration 11 Configure the email settings You can choose to disable this feature completely by using the check box 2015 Devolutions inc 34 Devolutions Server EN Deploy Devolutions Server Wizard General Email enabled Smtp configuration Send email as Email administrator Test Email S
20. er Console 5 8 GO Quick lt Host gt sklea si gt a ADMINISTRATION REFACTORING TOOLS WINDOW HELP 44 a pet A oem amp Certificate Generator Add on Extensions Macro Script Tool Translation PowerShell Devolutions Chocolatey Password Manager Manager Manager Manager RDM CmdLet Server Console Console Generator E Port Generator Managers Consoles Generators All operations done through the console are done with the credentials used to launch Devolutions Server If you must use other credentials then you must launch another window session The RunAs command does not offer the option of starting a process with elevated privileges 4 Deploy a new server instance 2 i c a Quick lt Host a s Devolutio HOME ACTIONS EDIT ADMINISTRATION REFACTORING TOOLS WINDOW HELP 44 4 OD HB GATEN amp Certificate Generator Add on Extensions Macro Script Tool Translation PowerShell Devolutions Chocolatey Password Password RDM Agent Manager Manager Manager Manager RDM CmdLet Server Console Console Generator L n Port Generator Analyzer Managers Consoles Generators E navigation ax Dashboard 3 Devolutions Server Console x Zune la ORS E Users FA Security Groups Roles ES S amp sucre i xj ojo F Windjammer TI Web Application Name Version Expiration We Security Deploy a new Devolutions Server Sessions 0000000000 Devolutions Server Console 5 Configure the inst
21. estions 56 Part VII Follow Us 60 2015 Devolutions inc 4 Devolutions Server 2015 Devolutions inc Getting Started Part 6 Devolutions Server 1 Getting Started 1 1 What is Devolutions Server Description Devolutions Server is a self hosted repository for storing and sharing remote connections credentials and sensitive information Used in combination with a compatible Client application it extends the Client capabilities to create an AJ Enterprise wide high end data store IL 1 Being a repository you absolutely must use one of our clients in order to use it These are 1 Remote Desktop Manager a Remote Desktop Manager Enterprise Windows Edition b Remote Desktop Manager Enterprise Mac Edition c Remote Desktop Manager Android Edition 2 Password Vault Manager a Password Vault Manager Enterprise Windows Edition b Password Vault Manager Enterprise Mac Edition Highlights e High end security server for your company e Share your sessions credentials sensitive data with multiple users while adhering to permissions that you assign Implemented as a Web application so it can be deployed to the Web or only to your Intranet if you prefer e Support Windows authentication and Active Directory integration Client and server side caching 10096 compatible with the SQL Server data source Usage scenarios There are two specific reasons to use Devolutions Server within an organi
22. iltering SSL settings v 404 Error Pages pe MIME Type 3 Configure SSL settings if you want your site to require SSL or to interact in a specific way with client certificates Click the site node in the tree view to go back to the site s home page Double click the SSL Settings feature in the middle pane Select Require SSL and click Apply 2015 Devolutions inc Contents 45 td SSL Settings This page lets you modify the SSL settings for the content of a Web site or application IV Require SSL T Require 128 bit SSL Client certificates Ignore C Accept C Require SSL settings Modify the Devolutions Server configuration 1 Start any text editor notepad using right click Run as Administrator 2 Open the file web config found in the Devolutions Server install directory 3 locate this line in the file add key ForceHttps value false gt 4 Modify value from false to true 5 Save the file Configure SSL Settings in RDM Client 1 Select File Data Sources 2 Edit the Devolutions Server data source 3 Change the server url to start by https 4 4 How To Activate Your Renewal Subscription Description The Devolutions Server subscription is a yearly subscription Every year you need to renew your Devolutions Server subscription to continue using it With the renewal a new license key is provided and need to be enter in your server configuration Settings Remote Desktop Man
23. isites test the IIS install by browsing to http resolve beforehand Database server pre requisites Please refer to Database Instance Create Devolutions Server Instance O 2015 Devolutions inc Contents 23 Please refer to Create Devolutions Server instance 3 1 1 Web role Install pre 2012R2 Description These are the first version instructions that are applicable to server running Windows 2008 up to 2012 R1 We recommend using the web platform installer to install the NET framework NET 4 5 is an in place upgrade of the framework and it is complex to determine which version is install Web Server Pre requisites Make sure Internet Information Services is installed with all the ASP NET requirements FT Windows Features Turn Windows features on or off To turn a feature on select its check box To turn a feature off clear its check box A filled box means that only part of the feature is turned on vx Internet Explorer 9 Internet Information Services 9 OR MA AS Y i ASP NET 7 ISAPI Extensions ISAPI Filters Server Side Includes Y ML Common HTTP Features Health and Diagnostics amp V Performance Features a BL Security Vide Basic Authentication Client Certificate Mapping Authentication di IS Client Certificate Mapping Authentication di IP Security Jy Request Filtering TL URL Authorization Y Windows Authentication 7 In
24. lutions Server include a client license of Remote Desktop Manager Devolutions Server has a few editions Each comes with a number of client licenses for Remote Desktop Manager Enterprise separate purchase is not required This comes with the maintenance plan for as long as the Devolutions Server subscription is kept current I ve already purchased a Remote Desktop Manager client license Can I receive a credit Yes please let us know prior to purchasing and we will credit you the full amount of your purchase price towards a subscription of Devolutions Server The amount may be prorated depending on the date of initial purchase at Devolutions discretion Is Devolutions Server subscription based Yes Devolutions Server is subscription based You can subscribe for one 1 year or three 3 years at a time Giving you unlimited client connectivity for that period of time O 2015 Devolutions inc 57 Contents What if I no longer want need a Devolutions Server Is my data still accessible Yes once your Devolutions Server subscription is expired you can keep on using all your clients since you have a Global license However the Devolutions Server data source will no longer be accessible therefore you will need to connect directly to the DB via a SQL Server data source Keep in mind that you will no longer be getting client updates via a maintenance plan unless you purchase such plan I don t like your subscription based model Do I ha
25. ns Server amp OM Qo K Sites Default Web Site File View Help Internet Information Services IIS Manager Logging E Use this feature to configure how IIS logs requests on the Web server i Application Pools 4 8 Sites One log file per gt Default Web Site Site E LogFile Format W3C v Select Fields Directory 1 mme logs LogFiles gat rs v pe Log Event Destination Select the destination where IIS will write log events 8 Log file only ETW event only O Both log file and ETW event Log File Rollover Select the method that IIS uses to create a new log file 8 Schedule Daily v O Maximum file size in bytes amp Apply amp Cancel Disable View Log Files O Hep lt F Features View JE Content View Configuration localhost applicationHost config location path Default Web Site gt Logging panel 3 We recommend that the following fields be selected 2015 Devolutions inc Contents 51 Standard Fields CES Time time Client IP Address c ip User Name cs username C Service Name s sitename Server Name s computername Server IP Address s ip Server Port s port Method cs method URI Stem cs uri stem URI Query cs uri query Protocol Status sc status Protocol Substatus sc subs
26. ns Server authentication model Please see Automatic User Account Creation Dashboard B Devolutions Console x HUH X CO Y Users R Security Groups S Roles HS lo Expiratic RDMS_MSP 2 2 21 0 Configure users and security groups 2015 Devolutions inc 36 Devolutions Server User and Security M User and Security Management e g User management General Roles Privileges Permissions Settings ID Login Description Email General DB9C3FDE F668 43BB B0A7 574332788273 C Administrator Configure User management form 15 Configure the data source on all the client machines 3 2 Upgrading Devolutions Server Upgrade 1 Open the Devolutions Server Console 2 Select the instance that you wish to upgrade 3 Click the Upgrade button 2015 Devolutions inc Contents 37 4 Select upgrade source You can either use the latest General Availability release that is available online automatically or specify the path to a zip file that you have downloaded yourself Use this for beta releases or for earlier versions EN Complete the steps to deploy a new server Upgrade source 8 Download from the web latest version Upgrade from zip file Prom IL ner CI Upgrade source 5 Press Next 6 Review the summary and press Upgrade if you are satisfied O 2015 Devol
27. nt Security Group Management Description Security Groups are used to assign a security scheme to folders or sessions There is no direct relationship between Active Directory and Security Groups By default every session is created without a security group and is visible to all connected users You can grant permissions against a group to a user account or to a role Steps 1 Create the security groups 2 Assign the security group to the session 3 Create the required users O 2015 Devolutions inc Contents 13 4 Link the security group to a user Notes All sessions without security groups are considered public Creating Security Groups Security groups are created from the menu Security Groups Dashboard Devolutions Console x UH XO Y users Security Groups Roles I rm S Web Application Name Version MSP 2 2 21 0 10 1 2022 Edit the data source security groups Enter a name and a description for the security group The name must be unique Wi Security Management General L Security group dialog Assigning a Security Group to a Session Security groups can be assigned to sessions using the session s property window Each session can 2015 Devolutions inc 14 Devolutions Server only have one security group assigned Name Exchange Image G9 yon x Group folder Clients Downhill pro vil 9 or
28. o the client application IIS Web Site Logging 1 Open IIS Manager and go in the Logging settings O 2015 Devolutions inc Contents 49 lt Ready Internet Information Services IIS Manager e Default Web Site Home a Explore Filter f Go GyShowAll Group by Area E Edit Permissions ASP NET Edit Site gt a 12 Bindings 3 A 8 e Da e Basic Settings NET NET NET Error NET NET Profile NET Roles View Applications Authorizat Compilation Pages Globalization c 3 M View Virtual Directories 9 G A RE Manage Website NET Trust NET Users Application Connection Machine Key Pages and Restart Levels Settings Strings Controls D Start Re g 2 2 B Stop x E Browse Website Providers Session State SMTP E mail 9 Browse 80 http IIS Advanced Settings a Configure E 2 Y o E 2 Limits Authentic Compression Default Directory Error Pages Handler e Document Browsing Mappings Deploy e ER e Install Application From pe e e Gallery a Export Application HTTP ISAPI Filters Logging MIME Types Modules Output cati Respon Caching a Import Application v e Install Application From Z Gallery e Help Request SSL Settings Filtering Management Configurat Web Editor Platfor I Content View Gi IIS Manager 2 Click on Select Fields 2015 Devolutions inc 50 Devolutio
29. odel Event L P e Identity NetworkService A Idle Time out minutes 20 Idle Time out Action Terminate v Name name The application pool name is the unique identifier for the application poola Configure SSL Import Certificate or Create Self Signed Certificate 1 Select the server node in the tree view and double click the Server Certificates feature in the list view O 2015 Devolutions inc 42 Devolutions Server amp Internet Information Services IS Manager 43 DEVOLUTIONSI8 dy DEVOLUTIONS18 Home Filter BQGo Gi Show All Group by E Request Tra Settings Mappings Redirect e E B HTTP ISAPI and ISAPIFilters Logging MIME Types Respon CGI Restri N er di y Modules Output Request Caching Filtering Worker Server certificates 2 Click Import Certificate in the Actions pane Or Click Create Self Signed Certificate in the Actions pane Vs Internet Information Services IS Manager jus xp GO rome ME Gy Server Certificates Cro DEVOL DEVOLUTI Use this feature to request and manage certificates that the Web server can Create Certificate Request Application Pools use with Web sites configured for SSL Complete Certificate Request Name s Issued To Issued Create Domain Certificate Create Self Signed Certificate 2 U e Help Online Help Follow the wizard Cr
30. on Pool identity to an account from the domain We recommend creating a dedicated account for that purpose Please refer to Configure Devolutions Server to use integrated security for instructions that you will have to perform AFTER creating the Devolutions Server instance Devolutions Server has no requirements that would dictate what communication protocol is used as well as many of the options offered to you by SQL Server As long as the client workstation can connect to the SQL Server instance Devolutions Server will work Please refer to the Microsoft Documentation in order to allow connectivity to the instance Create Devolutions Server instance Description The Devolutions Server product can host multiple instances that will each reside in their own Web Application within IIS The following steps are carried out using the Remote Desktop Manager Enterprise Windows Edition Procedure 1 Install Remote Desktop Manager Enterprise Windows Edition on the web server It is available from the Download page 2 Execute Remote Desktop Manager Enterprise Windows Edition with elevated privileges run as administrator to do so right click on the application and select Run as administrator Open file location TortoiseSVN Run as administrator moo Troubleshoot compatibility Pin to Start Open on Mac Show in Finder 2015 Devolutions inc Contents 27 3 Open the console by using Tools gt Devolutions Serv
31. ons KS Devolutions 22 View Modify account O 2015 Devolutions inc Installation 22 Devolutions Server 3 Installation 3 4 Installing Devolutions Server Topology Devolutions Server is in fact a Web application This allows for exposing its services on the Internet or simply on your Intranet The recommended topology is to use two servers a Database server and a Web server Obviously for small installations a single server can be used but resources will be shared between the two roles thereby lowering performance Remote Desktop Manager Enterprise Windows Edition must be installed on the web server in order to manage the Devolutions Server web application Please ensure before starting the installation that you have NET 4 5 1 installed on your machine It s highly recommended to enable SSL Encryption to protect communication with the instance of SQL Server Please follow directions on http support microsoft com kb 316898 For full active directory integration whereas the application pool uses a domain identity both servers need to be joined to the domain 9 How to install the server Web Server pre requisites Please refer to the appropriate topic depending on the operating system of the web server Web role Install pre 2012R2 Web role Install 2012R2 localhost if you do not see the IIS welcome screen go no further you have issues to O After you ve installed the pre requ
32. r with version 235 Upgrading database for data source Devolutions Server with version 236 Upgrading database for data source Devolutions Server with version 237 Upgrading database for data source Devolutions Server with version 238 Done Restoring the configuration Done Restoring the custom folders Done Upgrade completed ores Le Lee Upgrade completed successfully 2015 Devolutions inc How To 40 Devolutions Server 4 How To 4 1 Configure Client Data Source Create Devolutions Server data source 1 Select File Data Sources 2 New Data Source 3 Select the Devolutions Server data source 4 Specify settings If you specify USERDOMAIN USERNAME in the user text area the value of the corresponding environment variables will be used Username David C Always ask username Password C Always ask password Two factor Test Connection ID C175517E 339C 4FF8 8348 5B7FA1ACC2ED Data source settings Notes If the server is configured to only allow SSL ensure you specify the protocol by using https in the Server field 2015 Devolutions inc Contents 41 4 2 Configure Devolutions Server to use integrated security Description In order for integrated security to be used to connect to the database you must set a domain account as the Application pool identity Step
33. rements for the Net Framework as it is the driving force behind the requirements of our applications e 500 MB hard drive space 64 bit Support Devolutions Server is compatible with all 64 bit versions of Windows Dependencies Microsoft SQL Server 2008 2012 2014 even the Express editions e Internet Information Services IIS 7 0 or better e Remote Desktop Manager Enterprise Windows Edition installed on the server 2015 Devolutions inc Management Part 10 Devolutions Server Management Devolutions Server Console Description Because Devolutions Server is in fact a web application the management interface is provided by Remote Desktop Manager Enterprise Windows Edition A single license of that product will be provided if your existing licenses do not already include that product The management interface is called the Devolutions Server Console Console 1 Because the Devolutions Server Console in fact manages the IIS metabase Remote Desktop Manager Enterprise Windows Edition must be started with elevated privileges when the console needs to be used Elevated privileges are granted when you use Run as Administrator to launch the application You can modify the shortcut to always start it in this fashion if you prefer 2 Select Tools Devolutions Server Console REFACTORING TOOLS WINDC y mai 0 Shell Devolutions Chocolatey 2mdLet Server Console Console Consoles Menu Dashboard El
34. s To make these instructions simpler we will name the domain account DBRunner please adapt to your requirements e Create the DBRunner account in the domain Processor Affinity Mask 64 bit c 4294967295 e Grant access to the SQL Server instance to DBRunner e Grant access to the database to DBRunner e In IS Manager expand the Application pool section and locate the application pool used by your Devolutions Server site Normally it has the same name e In the advanced settings edit the Identity setting to set the DBRunner account amp Internet Information Services IIS Manager a iQ V DEVO28 Application Pools a th File View Help Connections Advanced Settings gt a A dz Applic EY a Add Application Pool 4 63 V DEVO28 v devo2 ia nuncios uid I pit Set Application Pool Defaults TED getan Poe ham er wod _ cati ication Pool Tasks 4 ial Sites different application Enable 32 Bit Applications False Application Q Default Web Managed Pipeline Mode Integrated 4 Fiter So a Stop Fan Queue Length 1000 Recycle gt NET v2 0 Start Mode OnDemand Edit Application Pool E NET v2 0 Classic al Cal E Basic Settings E Classic NET Ap Luni gene 0 i Recycling DB DefaultAppPool Limit va _ arene Limit Interval minutes Processor Affinity Enabled False EINE Processor Affinity Mask 4294967295 X Remove View Applications 4 3 4 Process Model e Help Generate Process M
35. tatus Win32 Status sc win32 status Bytes Sent sc bytes Bytes Received cs bytes Time Taken time taken Protocol Version cs version C Host cs host User Agent cs User Agent Cookie cs Cookie Referer cs Referer Field selection dialog Application pool recycle The application pool that is in fact running the instance can be restarted for a multitude of reasons It may be useful to know when those recycles occur as well as the reasons Go in the Application pools section of the IIS manager then open the Advanced settings for your application pool Enable all of the Recycle events it will create a log entry in the Windows Event Log 2015 Devolutions inc 52 Devolutions Server amp Internet Information Services IIS Manager Do o Application Pools File View Help Connections e Advanced Settings Gp Applicati 4 92 Failure Interval minutes 5 A L This page lets you view gt i Application Pools associated with worker EE 3 4 8 Sites different applications Shutdown Executable gt Default Web Site Shutdown Executable Parameter Filter _ 278 li Name Disable Overlapped Recycle False a NET v4 5 Disable Recycling for Configurat False NET v4 5 Classic Generate Recycle Event Log Entr a DefaultAppPool Application Pool Configurat True Isapi Reported Unhealthy True RDMSWind Manual Recycle True Private Memory Limit Excee True
36. te permissions to your domain roles in Devolutions Server Authenticate with local machine user The application allows a local user on the Devolutions Server host to be authenticated into the instance even through the web interface Authenticate with database user The application allows SQL Server user accounts to authenticate on the Devolutions Server instance Automatic User Account Creation Description When using authentication models other then Active Directory obviously a user account needs to be created beforehand in order to grant access to the system When you are using Active Directory authentication two choices are offered to you 1 You can choose to create the user account manually just as with the other authentication models or 2 Enable Automatic Account Creation and let Devolutions Server create user accounts as soon as they are authenticated by the domain you ve linked the instance to O 2015 Devolutions inc 12 2 4 2 4 1 Devolutions Server After the account is created rights and permissions are assigned either manually to the user account or through membership in AD groups for which you have created a role mapping User accounts created by the server have no rights other then logging on the system They will be able to see and edit the objects that have no security defined You must ensure that all sessions are protected typically this is achieved by ensuring that all root level folders h
37. ternet Information Services Hostable Web Core 2015 Devolutions inc 24 Devolutions Server Windows features 3 1 2 Web role Install 2012R2 Description These instructions apply to Windows 2012 R2 Configuration of the Web server in that release is a significant departure from previous versions These steps are mostly manual at this time They were performed on a Windows 2012 R2 image that had been installed from the DVD image and had the Windows Updates applied Install the Web Server Role Using the Roles and Features wizard add the Web Server Role Add missing Role services In the Security branch enable the following authentication services Basic Digest and Windows DESTINATION SERVER Select role services RDMS3 windjammerJoc Before You Begin Select the role services to install for Web Server IIS Installation Type Role services Description Server Selection Tracing Windows authentication is a low cost authentication solution for internal Web sites This authentication scheme allows Features v Static Content Compression administrators in a Windows domain to take Dynamic Content Compression advantage of the domain infrastructure for authenticating users Do not use Windows authentication if users who must be S Request Filtering authenticated access your Web site from v Basic Authentication behind firewalls and proxy servers Centralized SSL Certificate Support
38. utions inc 38 Devolutions Server BL Complete the steps to deploy a new server Settings Upgrading database for data source Devolutions Server with version 217 Upgrading database for data source Devolutions Server with version 218 Upgrading database for data source Devolutions Server with version 219 Upgrading database for data source Devolutions Server with version 220 Upgrading database for data source Devolutions Server with version 221 Upgrading database for data source Devolutions Server with version 222 Upgrading database for data source Devolutions Server with version 223 Upgrading database for data source Devolutions Server with version 224 Upgrading database for data source Devolutions Server with version 225 Upgrading database for data source Devolutions Server with version 226 Upgrading database for data source Devolutions Server with version 227 Upgrading database for data source Devolutions Server with version 228 Upgrading database for data source Devolutions Server with version 229 Upgrading database for data source Devolutions Server with version 230 Upgrading database for data source Devolutions Server with version 231 Upgrading database for data source Devolutions Server with version 232 Upgrading database for data source Devolutions Server with version 233 Upgrading database for data source Devolutions Server with version 234 Upgrading database for data source Devolutions Serve
39. ve any other options Contact us we may be able to help Can I upgrade from a SQL Server data source to Devolutions Server Yes the underlying SQL server database structure for the SQL Server data source is a subset of the Devolutions Server database structure When installing configuring the Devolutions Server simply specify the existing database and choose upgrade Note Before executing any database modification it is always a good idea to make sure you have a proper backup of the database Can I downgrade from a Devolutions Server down to SQL Server data source Yes since the database for Devolutions Server is a superset of the SQL Server data source Simply connect to the database using the SQL Server data source and all will work as it did before Keep in mind that not all Devolutions Server features will be accessible when using the SQL Server data source O 2015 Devolutions inc Follow Us Part 60 Devolutions Server Follow Us Overview Get the hottest information about our products tips and tricks case studies and new release announcements This is not a marketing newsletter We focus on the issues that matter to you whether you re looking for up to the minute software tutorials additional outside resources or a peek at how others are using our products Links f Facebook http facebook devolutions net in LinkedIn http linkedin devolutions net NI RSS feeds http rss devolutions net N 3 Twitter http
40. zation 1 A middle layer is required in order to isolate the client applications from the database This may be required in order to be compliant with a security norm at the corporate or legal level HIPAA PCI etc 2 The assignment of rights and permissions must come from membership in one or many AD Groups This allows management exclusively by assigning users in AD groups after the linkage between the instance and the AD structure is put in place Installation Please consult Installing Devolutions Server to get your system up and running 2015 Devolutions inc 7 Contents 1 2 Features Overview Features Descriptions Maximum session count Unlimited Note 1 Database connection Behind server Caching e Server caching e Client side caching Multi user support Windows authentication Active Directory xx X XX Group integration Active Directory Security management Built in Database user support Security groups Role management Per session security access view add edit delete Custom database encryption with passphrase Per user settings credentials Per machine settings credentials e XX X X x Connection logs x XxX XX Document attachments Word Excel PDF Visio Notes Note 1 Although we do not limit the number of sessions that you will store in your instance there comes a point where the performance is severely impacted by the sheer volume of data that must be exchange
Download Pdf Manuals
Related Search