Backstage Mode Option to Turn Off the Feature

Avatar
  • updated
  • Completed

The Backstage Mode feature that allows hosts to have complete Windows Terminal and PowerShell access to a remote machine doesn't have an option to turn it off except for using the option of unchecking SwitchLogonSession in Security Roles which also affect other features that are needed.

When you have the option to require Consent where the user has to allow access, if you use the Backstage Mode is doesn't require consent even thought the option is set on.

This is a big security issue for financial institutions that have secure servers and don't want people doing anything to their servers that they are not aware of. With the Backstage Mode option it's wide open.

Duplicates 1
Restrict Access to Backstage

Currently anyone with access to ScreenConnect has access to BackStage or the ability to run commands as an administrator. With this access any one connected to the ScreenConnect Access page and create a user account and login to any connected computer. This is primarily a concern in the event of a security breach. It would be nice to limit access to those areas.

Avatar
0
LeoP

Is there any updates to this, we found that Backstage allows access to AD/GPO which is unsecure for us, we use Backstage on customer machines, so turning this off isnt possible.

Avatar
0
Rishikesh Gajul
Quote from LeoP

Is there any updates to this, we found that Backstage allows access to AD/GPO which is unsecure for us, we use Backstage on customer machines, so turning this off isnt possible.

Hi Leo,


Latest 21.14 release includes the newly added permission for Backstage. So that makes Switchlogonsession and Backstage two separate permissions. Please make sure you are on 21.14 to have this permission.

Hope that helps !!

Avatar
0
Sean White Team Member
  • Completed
 Commenting is disabled

Top contributors

Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar