Meshcentral: Send invitation presenting an individual desktop

[frankmcc]

Is it, or would it be possible to send an invitation via email to present an individual desktop without a login? Or with an automatic login using a guest account?

[Ylianst]

Just released that feature with MeshCentral v0.6.3. Feedback appreciated.

[asasin114]

@Ylianst, this is AMAZING! Such a handy feature! Just tested and it works beautifully!

[frankmcc]

Dude, you rock!

On Fri, Aug 7, 2020, 7:53 PM Ylian Saint-Hilaire [e-mail]
wrote:

Just released that feature with MeshCentral v0.6.3. Feedback appreciated.

[image: image]
https://user-images.githubusercontent.com/1319013/89696826-6f46e080-d8ce-11ea-88bd-9d5524de9482.png

[image: image]
https://user-images.githubusercontent.com/1319013/89696831-740b9480-d8ce-11ea-87c0-112ab621e546.png

—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
https://github.com/Ylianst/MeshCentral/issues/1688#issuecomment-670788519,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AGJ33K2EJQDHLJYTEXSGXZTR7SHYBANCNFSM4PXUJV2A
.

[johnnyq]

SUPER!!! Thanks this will be very handy indeed

[PetieM]

This seems like a potentially awesome feature but I'm running into an issue I suspect others might see as well - it respects the userAllowedIP setting which limits its usefulness for those who have locked down access to the server. Could this be exempted from that restriction or can an option be added to the config to optionally allow guest access outside of the allowed IPs?

[Ylianst]

I just fixed it does that shared remote desktop links can be loaded from any IP address. This will be in MeshCentral v0.6.5.

[southeasterntech]

Ylian this is pretty amazing... testing it this AM, and it seems the remote user doesn't have keyboard, but can use the "type" button. Mouse works, they can see the screen fine as well. (FYI, Using Caddy reverse proxy)

[Ylianst]

Your right, keyboard does not work. Fixing that now.

[Ylianst]

MeshCentral v0.6.5 is out. has the desktop sharing keyboard fix and guest page should be loadable from any IP address. Let me know if that works.

[PetieM]

Confirmed guest access and keyboard are working even when access to the main interface is restricted. A couple of notes though:

• There does not seem to be a way to revoke guest access once they have the link. Having an option to do this would be useful.
• The prompt/notify feature for guest connections does not seem to be working. I'm not sure if it's because the computer I tested with is set to not require notification or consent but I'd think the guest invite would override that preference.

Those two issues combined are a potential security problem (albeit a minor one since the links do expire and need to be sent by a logged in user anyway) unless I'm misunderstanding something here.

[southeasterntech]

Confirmed Keyboard fixed. Great work, great stuff!

Found a couple of new problems on 0.6.5 though
-Windows 2008R2 (yes I know it's EOL)

1. Share Desktop, Prompt for Consent on.
2. MC User does NOT connect to desktop yet
3. Remote user connects to desktop first and is prompted with "Waiting for user to grant access" response.
4. MC User connects 2nd
5. MC User is also denied and presented with "Waiting for user to grant access" response
6. Neither user can do anything
   

-Linux (Ubuntu Desktop 16.04? maybe)

1. Share desktop, Prompt for Consent on.
2. Remote user walks right in, no notification, no prompts for consent, has full control, no disconnect user bar.
3. Gray bar at top does show two connected.

[Ylianst]

The user consent issue seems to be unrelated to this specific request. Even without using the sharing link, would this still happen?

[PetieM]

@Ylianst Is that directed at me or @southeasterntech? I was talking specifically about the consent options in the gust invite link creation dialogue not working as expected.

[treicadani]

@Ylianst this feature rocks! But can you add an option in the share menu limit the access to view screen only without controls?
This would be most useful for presentations or software demo which we do very often.

[PetieM]

Following up on my previous security concerns, the prompt and privacy bar features now seem to work (as long as there is not an existing user connected via MeshCentral already - if there is, the prompt and privacy bar does not show up) but if prompt for consent was disabled when the link was created, there is no way to revoke access before the time limit expires. I'd like to propose showing a list of active sharing links on the device's general tab that can be revoked by an admin if needed to address this issue.

[frankmcc]

Can the share timeout be configured in the config.json? 1 hour is the current max and we sometimes need up to 8 hours.