diff --git a/docs/ninjaone/automations/check-rdp-access.md b/docs/ninjaone/automations/check-rdp-access.md new file mode 100644 index 000000000..97438704d --- /dev/null +++ b/docs/ninjaone/automations/check-rdp-access.md @@ -0,0 +1,41 @@ +--- +id: '72c4d38f-e25b-4ebf-b282-55f234a18327' +slug: /72c4d38f-e25b-4ebf-b282-55f234a18327 +title: 'RDP Access Check' +title_meta: 'RDP Access Check' +keywords: ['rdp', 'remote-desktop', 'security', 'disable'] +description: 'Identifies Windows machines where RDP is enabled or not completely disabled.' +tags: ['windows', 'security'] +draft: false +unlisted: false +last_update: + date: 2026-07-20 +--- + +## Summary + +Identifies Windows machines where RDP is enabled or not completely disabled. + +## Sample Run + +`Play Button` > `Run Automation` > `Script` +![SampleRun1](../../../static/img/docs/72c4d38f-e25b-4ebf-b282-55f234a18327/RDP-access-check.webp) + +## Dependencies + +- [Solution - RDP Access Check](/docs/98bae338-07b5-482a-81e1-1b19582122c8) +- [Custom Field - cPVAL Check RDP Access Status](/docs/0cdc9db3-26ba-40e3-ae2a-cbc75d5c92a1) + +## Automation Setup/Import + +[Automation Configuration](https://github.com/ProVal-Tech/ninjarmm/blob/main/scripts/rdp-access-check.ps1) + +## Output + +- Activity Details + +## Changelog + +### 2026-07-20 + +- Initial version of the document. diff --git a/docs/ninjaone/automations/disable-rdp-access.md b/docs/ninjaone/automations/disable-rdp-access.md new file mode 100644 index 000000000..f62fe324f --- /dev/null +++ b/docs/ninjaone/automations/disable-rdp-access.md @@ -0,0 +1,36 @@ +--- +id: '5886493a-40ca-402a-8c78-aefd05f4b813' +slug: /5886493a-40ca-402a-8c78-aefd05f4b813 +title: 'Disable RDP Access' +title_meta: 'Disable RDP Access' +keywords: ['rdp', 'remote-desktop', 'security', 'disable'] +description: 'Disabled the RDP access Completely on the machine.' +tags: ['windows', 'security'] +draft: false +unlisted: false +last_update: + date: 2026-07-20 +--- + +## Summary + +The script disables the RDP access on windows machines. + +## Sample Run + +`Play Button` > `Run Automation` > `Script` +![SampleRun1](../../../static/img/docs/5886493a-40ca-402a-8c78-aefd05f4b813/disable-rdp-access.webp) + +## Automation Setup/Import + +[Automation Configuration](https://github.com/ProVal-Tech/ninjarmm/blob/main/scripts/disable-rdp-access.ps1) + +## Output + +- Activity Details + +## Changelog + +### 2026-07-20 + +- Initial version of the document. diff --git a/docs/ninjaone/compound-conditions/rdp-access-check-servers.md b/docs/ninjaone/compound-conditions/rdp-access-check-servers.md new file mode 100644 index 000000000..f0ee8bb84 --- /dev/null +++ b/docs/ninjaone/compound-conditions/rdp-access-check-servers.md @@ -0,0 +1,39 @@ +--- +id: '36261bfe-2318-45de-bc24-ffd62a2422a4' +slug: /36261bfe-2318-45de-bc24-ffd62a2422a4 +title: 'RDP Access Check - servers' +title_meta: 'RDP Access Check - servers' +keywords: ['rdp', 'remote-desktop', 'security', 'disable'] +description: 'This compound condition executes the RDP Access Check script to identify whether RDP access is enabled. If RDP is enabled, a ticket is created.' +tags: ['windows', 'security'] +draft: false +unlisted: false +last_update: + date: 2026-07-20 +--- + +## Summary + +This compound condition is used to execute the script only when it needs to verify whether Remote Desktop Protocol (RDP) is enabled or disabled on the windows Servers. + +## Details + +**Name:** `RDP Access Check - Servers` +**Description:** `This compound condition executes the RDP Access Check script to identify whether RDP access is enabled. If RDP is enabled, a ticket is created.` +**Recommended Agent Policies:** `Windows Servers Policy` + +## Dependencies + +- [Automation - RDP Access Check](/docs/4d9087cb-0cf3-4ade-863f-3a14c9b73d5e) +- [Solution - RDP Access Check](/docs/98bae338-07b5-482a-81e1-1b19582122c8) +- [Custom Field - cPVAL Exclude RDP Access Check](/docs/98bae338-07b5-482a-81e1-1b19582122c8) + +## Condition Creation + +[Condition Configuration](https://github.com/ProVal-Tech/ninjarmm/blob/main/conditions/rdp-access-check-servers.toml) + +## Changelog + +### 2026-07-20 + +- Initial version of the document. \ No newline at end of file diff --git a/docs/ninjaone/compound-conditions/rdp-access-check-workstations.md b/docs/ninjaone/compound-conditions/rdp-access-check-workstations.md new file mode 100644 index 000000000..660d166cf --- /dev/null +++ b/docs/ninjaone/compound-conditions/rdp-access-check-workstations.md @@ -0,0 +1,39 @@ +--- +id: 'f7b08fe4-9eb4-4716-a9ea-84bedfa2f838' +slug: /f7b08fe4-9eb4-4716-a9ea-84bedfa2f838 +title: 'RDP Access Check - Workstations' +title_meta: 'RDP Access Check - Workstations' +keywords: ['rdp', 'remote-desktop', 'security', 'disable'] +description: 'This compound condition executes the RDP Access Check script to identify whether RDP access is enabled. If RDP is enabled, a ticket is created.' +tags: ['windows', 'security'] +draft: false +unlisted: false +last_update: + date: 2026-07-20 +--- + +## Summary + +This compound condition is used to execute the script only when it needs to verify whether Remote Desktop Protocol (RDP) is enabled or disabled on the windows workstations. + +## Details + +**Name:** `RDP Access Check - Workstations` +**Description:** `This compound condition executes the RDP Access Check script to identify whether RDP access is enabled. If RDP is enabled, a ticket is created.` +**Recommended Agent Policies:** `Windows Workstation Policy` + +## Dependencies + +- [Automation - RDP Access Check](/docs/4d9087cb-0cf3-4ade-863f-3a14c9b73d5e) +- [Solution - RDP Access Check](/docs/98bae338-07b5-482a-81e1-1b19582122c8) +- [Custom Field - cPVAL Exclude RDP Access Check](/docs/98bae338-07b5-482a-81e1-1b19582122c8) + +## Condition Creation + +[Condition Configuration](https://github.com/ProVal-Tech/ninjarmm/blob/main/conditions/rdp-access-check-workstations.toml) + +## Changelog + +### 2026-07-20 + +- Initial version of the document. \ No newline at end of file diff --git a/docs/ninjaone/custom-fields/cpval-check-rdp-access-status.md b/docs/ninjaone/custom-fields/cpval-check-rdp-access-status.md new file mode 100644 index 000000000..8f807c2ed --- /dev/null +++ b/docs/ninjaone/custom-fields/cpval-check-rdp-access-status.md @@ -0,0 +1,43 @@ +--- +id: '0cdc9db3-26ba-40e3-ae2a-cbc75d5c92a1' +slug: /0cdc9db3-26ba-40e3-ae2a-cbc75d5c92a1 +title: 'cPVAL Check RDP Access Status' +title_meta: 'cPVAL Check RDP Access Status' +keywords: ['rdp', 'remote-desktop', 'security', 'disable'] +description: 'This custom field is used to display the current status of Remote Desktop Protocol (RDP) access on the device.' +tags: ['windows', 'security', 'custom-fields'] +draft: false +unlisted: false +last_update: + date: 2026-07-20 +--- + +## Summary + +This custom field is used to display the current status of Remote Desktop Protocol (RDP) access on the device. + +## Details + +| Label | Field Name | Definition Scope | Type | Required | Default Value | Technician Permission | Automation Permission | API Permission | Description | Tool Tip | Footer Text | Custom Field Tab Name | +| ----- | ---- | ---------------- | ---- | -------- | ------------- | --------------------- | --------------------- | -------------- | ----------- | -------- | ----------- | ----------- | +| cPVAL Check RDP Access Status | cpvalCheckRdpAccessStatus | `Device`, `Location`, `Organization` | Text | false | -- | Editable | `Read/Write` | `Read/Write` | This custom field is used to display the current status of Remote Desktop Protocol (RDP) access on the device. | Displays whether RDP access is enabled or disabled on the device. | Used by the RDP Access Check solution to track the current RDP access status. | RDP Check | + +## Dependencies + +- [Automation - RDP Access Check](/docs/4d9087cb-0cf3-4ade-863f-3a14c9b73d5e) +- [Solution - RDP Access Check](/docs/98bae338-07b5-482a-81e1-1b19582122c8) +- [cPVAL RDP Access Status](/docs/36261bfe-2318-45de-bc24-ffd62a2422a4) + +## Custom Field Creation + +- [Custom Field Configuration](https://github.com/ProVal-Tech/ninjarmm/blob/main/custom-fields/cpval-check-rdp-access-status.toml) + +## Sample Screenshot + +![ cPVAL Exclude RDP Access Check ](../../../static/img/docs/0cdc9db3-26ba-40e3-ae2a-cbc75d5c92a1/status-rdp.webp) + +## Changelog + +### 2026-07-20 + +- Initial version of the document diff --git a/docs/ninjaone/custom-fields/cpval-exclude-rdp-access-check.md b/docs/ninjaone/custom-fields/cpval-exclude-rdp-access-check.md new file mode 100644 index 000000000..2b02721e1 --- /dev/null +++ b/docs/ninjaone/custom-fields/cpval-exclude-rdp-access-check.md @@ -0,0 +1,43 @@ +--- +id: '98bae338-07b5-482a-81e1-1b19582122c8' +slug: /98bae338-07b5-482a-81e1-1b19582122c8 +title: 'cPVAL Exclude RDP Access Check' +title_meta: 'cPVAL Exclude RDP Access Check' +keywords: ['rdp', 'remote-desktop', 'security', 'disable'] +description: 'This custom field is used to exclude the device from the Remote Desktop Protocol (RDP) access check. Set this value `Excluded` when the RDP status validation should be skipped for a specific device.' +tags: ['windows', 'security'] +draft: false +unlisted: false +last_update: + date: 2026-07-20 +--- + +## Summary +This custom field is used to exclude the device from the Remote Desktop Protocol (RDP) access check. Set this value `Excluded` when the RDP status validation should be skipped for a specific device or location. + +## Details + +| Label | Field Name | Definition Scope | Type | Required | Default Value | Technician Permission | Automation Permission | API Permission | Description | Tool Tip | Footer Text | Custom Field Tab Name | +| ----- | ---- | ---------------- | ---- | -------- | ------------- | --------------------- | --------------------- | -------------- | ----------- | -------- | ----------- | ----------- | +| cPVAL Exclude RDP Access Check | cpvalExcludeRdpAccessCheck | `Device`, `Location` | Text | false | -- | Editable | `Read/Write` | `Read/Write` | Controls whether the device should be excluded from the RDP access check. Use this field to bypass RDP status validation for selected devices. | This is used to exclude any machine from RDP check Enabled | This is used to exclude any machine from RDP check Enabled | RDP Check | + +## Dependencies + +- [Solution - RDP Access Check](/docs/98bae338-07b5-482a-81e1-1b19582122c8) +- [Compound Conditions - RDP Access Check - servers](/docs/36261bfe-2318-45de-bc24-ffd62a2422a4) +- [Compound Conditions - RDP Access Check - Workstations](/docs/f7b08fe4-9eb4-4716-a9ea-84bedfa2f838) + +## Custom Field Creation + +- [Custom Field Configuration](https://github.com/ProVal-Tech/ninjarmm/blob/main/custom-fields/cpval-exclude-rdp-access-check.toml) + + +## Sample Screenshot + +![ cPVAL Exclude RDP Access Check ](../../../static/img/docs/98bae338-07b5-482a-81e1-1b19582122c8/exclude-rdp.webp) + +## Changelog + +### 2026-07-20 + +- Initial version of the document diff --git a/docs/ninjaone/groups/cpval-rdp-access-status.md b/docs/ninjaone/groups/cpval-rdp-access-status.md new file mode 100644 index 000000000..dffc13f35 --- /dev/null +++ b/docs/ninjaone/groups/cpval-rdp-access-status.md @@ -0,0 +1,57 @@ +--- +id: '2bdec6cc-946c-459f-a9a5-7a9f943f3e78' +slug: /2bdec6cc-946c-459f-a9a5-7a9f943f3e78 +title: 'cPVAL RDP Access Status' +title_meta: 'cPVAL RDP Access Status' +keywords: ['rdp', 'remote-desktop', 'security', 'disable'] +description: 'This group shows the machines on which RDP Access is enabled.' +tags: ['windows', 'security'] +draft: false +unlisted: false +last_update: + date: 2026-07-21 +--- + +## Summary + +This group shows the machines on which RDP Access is enabled. + +## Dependencies + +- [Automation - RDP Access Check](/docs/4d9087cb-0cf3-4ade-863f-3a14c9b73d5e) +- [Solution - RDP Access Check](/docs/98bae338-07b5-482a-81e1-1b19582122c8) +- [Custom Field - cPVAL Check RDP Access Status](/docs/0cdc9db3-26ba-40e3-ae2a-cbc75d5c92a1) + +## Group Creation + +[Group Configuration](https://github.com/ProVal-Tech/ninjarmm/blob/main/groups/cpval-rdp-access-status.toml) + +### Group View + +Please follow the steps below to add the necessary custom fields or additional columns to the view. + +- Create the group and ensure it is saved successfully. +- Open the newly created group for editing. +- Navigate to the Table Settings option. +- Update the table layout to include the required custom fields or additional columns. +- Save the changes to apply the updated group view. + +### URL TO THE GUIDE + +- [How-to Guide URL](/docs/71f3f71d-d6d1-4563-8476-92bbe9df55fa) + +Add the below custom fields or additional columns under the Group View: + +1. `cPVAL Check RDP Access Status` + +### Group Screenshot + +This is how the group should looks like after adding the custom fields: + +![Group](../../../static/img/docs/2bdec6cc-946c-459f-a9a5-7a9f943f3e78/group.webp) + +## Changelog + +### 2026-07-21 + +- Initial version of the document \ No newline at end of file diff --git a/docs/solutions/rdp-access-check-ninjarmm.md b/docs/solutions/rdp-access-check-ninjarmm.md new file mode 100644 index 000000000..d1f629775 --- /dev/null +++ b/docs/solutions/rdp-access-check-ninjarmm.md @@ -0,0 +1,114 @@ +--- +id: '0df164ca-4ce5-4576-bb9e-68e33b679a88' +slug: /0df164ca-4ce5-4576-bb9e-68e33b679a88 +title: 'RDP Access Check' +title_meta: 'RDP Access Check' +keywords: ['rdp', 'remote-desktop', 'security', 'disable'] +description: 'This solution is used to verify whether Remote Desktop Protocol (RDP) access is enabled on the system.' +tags: ['windows', 'security'] +draft: false +unlisted: false +last_update: + date: 2026-07-23 +--- + +## Purpose + +This solution checks the current Remote Desktop Protocol (RDP) configuration and determines whether RDP access is enabled or disabled on the device. + +## Associated Content + +### Custom Field + +| Content | Type | Function | +| ------- | ---- | -------- | +| [cPVAL Exclude RDP Access Check](/docs/98bae338-07b5-482a-81e1-1b19582122c8) | `Text` | This custom field is used to exclude the device and locations from the Remote Desktop Protocol (RDP) access check. | +| [cPVAL Check RDP Access Status](/docs/0cdc9db3-26ba-40e3-ae2a-cbc75d5c92a1) | `Text` | This custom field is used to display the current status of Remote Desktop Protocol (RDP) access on the device.| + +### Automation + +| Content | Function | +| ------- | -------- | +| [RDP Access Check](/docs/72c4d38f-e25b-4ebf-b282-55f234a18327) | Identifies Windows machines where RDP is enabled or not completely disabled. | +| [Disable RDP Access](/docs/5886493a-40ca-402a-8c78-aefd05f4b813) | Disables the RDP access completely on the machine. | + +### Compound Conditions + +| Content | Function | +| ------- | -------- | +| [RDP Access Check - Servers](/docs/36261bfe-2318-45de-bc24-ffd62a2422a4) | Triggers the [RDP Access Check](/docs/72c4d38f-e25b-4ebf-b282-55f234a18327) automation on Windows servers where the RDP access check is enabled. | +| [RDP Access Check - Workstations](/docs/f7b08fe4-9eb4-4716-a9ea-84bedfa2f838) | Triggers the [RDP Access Check](/docs/72c4d38f-e25b-4ebf-b282-55f234a18327) automation on Windows workstations where the RDP Access Check is enabled. | + +### Group + +| Content | Function | +| ------- | -------- | +| [cPVAL RDP Access Status](/docs/36261bfe-2318-45de-bc24-ffd62a2422a4) | This group shows the machines on which RDP Access is enabled. | + +## Implementation + +### Step 1 + +Create the following custom fields: + +- [cPVAL Exclude RDP Access Check](/docs/98bae338-07b5-482a-81e1-1b19582122c8) + +### Step 2 + +Create the following Automations: + +- [RDP Access Check](/docs/72c4d38f-e25b-4ebf-b282-55f234a18327) +- [Disable RDP Access](/docs/5886493a-40ca-402a-8c78-aefd05f4b813) + +### Step 3 + +Create the following Compound Conditions: + +- [RDP Access Check - servers](/docs/36261bfe-2318-45de-bc24-ffd62a2422a4) +- [RDP Access Check - Workstations](/docs/f7b08fe4-9eb4-4716-a9ea-84bedfa2f838) + +### Step 4 + +Create the below group: + +- [cPVAL RDP Access Status](/docs/36261bfe-2318-45de-bc24-ffd62a2422a4) + +## FAQ + +`Q1` What does the RDP Access Check solution do? + +`Ans:` The RDP Access Check solution verifies the current Remote Desktop Protocol (RDP) configuration on Windows devices and identifies whether RDP access is enabled or not completely disabled. + +`Q2` Why is RDP access being checked? + +`Ans:` RDP is commonly used for remote administration; however, if it is enabled unnecessarily, it can increase the device's security exposure. This solution helps identify devices where RDP access may require review or remediation. + +`Q3` What happens when RDP access is detected as enabled? + +`Ans:` When the solution identifies that RDP access is enabled, the device can be reviewed and the [Disable RDP Access](/docs/5886493a-40ca-402a-8c78-aefd05f4b813) automation can be used to disable RDP access if required. + +`Q4` How can I exclude a device from the RDP Access Check? + +`Ans:` To exclude a device from the check, set the [cPVAL Exclude RDP Access Check](/docs/98bae338-07b5-482a-81e1-1b19582122c8) custom field value to `Excluded`. The device will then be skipped during the RDP validation process. + +`Q5` Does this solution disable RDP automatically? + +`Ans:` No. The RDP Access Check only identifies the current RDP status. The [Disable RDP Access](/docs/5886493a-40ca-402a-8c78-aefd05f4b813) automation is used separately to disable RDP access. + +`Q6` Does this solution apply to both servers and workstations? + +`Ans:` Yes. The solution supports both Windows servers and workstations through separate compound conditions to perform the RDP access validation. + +`Q7` What happens if the RDP Access Check is disabled? + +`Ans:` Devices where the RDP Access Check is disabled are excluded from the automation workflow and will not be evaluated for RDP status. + +`Q8` Is a reboot required after disabling RDP access? + +`Ans:` A reboot is generally not required when disabling RDP access. However, depending on the system state or additional configuration changes, a reboot may be recommended to ensure all settings are applied correctly. + +## Changelog + +### 2026-07-23 + +- Initial version of the document \ No newline at end of file diff --git a/static/img/docs/0cdc9db3-26ba-40e3-ae2a-cbc75d5c92a1/status-rdp.webp b/static/img/docs/0cdc9db3-26ba-40e3-ae2a-cbc75d5c92a1/status-rdp.webp new file mode 100644 index 000000000..266efc284 Binary files /dev/null and b/static/img/docs/0cdc9db3-26ba-40e3-ae2a-cbc75d5c92a1/status-rdp.webp differ diff --git a/static/img/docs/2bdec6cc-946c-459f-a9a5-7a9f943f3e78/group.webp b/static/img/docs/2bdec6cc-946c-459f-a9a5-7a9f943f3e78/group.webp new file mode 100644 index 000000000..fbf6982f9 Binary files /dev/null and b/static/img/docs/2bdec6cc-946c-459f-a9a5-7a9f943f3e78/group.webp differ diff --git a/static/img/docs/5886493a-40ca-402a-8c78-aefd05f4b813/disable-rdp-access.webp b/static/img/docs/5886493a-40ca-402a-8c78-aefd05f4b813/disable-rdp-access.webp new file mode 100644 index 000000000..e01b8bab2 Binary files /dev/null and b/static/img/docs/5886493a-40ca-402a-8c78-aefd05f4b813/disable-rdp-access.webp differ diff --git a/static/img/docs/72c4d38f-e25b-4ebf-b282-55f234a18327/RDP-access-check.webp b/static/img/docs/72c4d38f-e25b-4ebf-b282-55f234a18327/RDP-access-check.webp new file mode 100644 index 000000000..5797e1071 Binary files /dev/null and b/static/img/docs/72c4d38f-e25b-4ebf-b282-55f234a18327/RDP-access-check.webp differ diff --git a/static/img/docs/98bae338-07b5-482a-81e1-1b19582122c8/exclude-rdp.webp b/static/img/docs/98bae338-07b5-482a-81e1-1b19582122c8/exclude-rdp.webp new file mode 100644 index 000000000..266efc284 Binary files /dev/null and b/static/img/docs/98bae338-07b5-482a-81e1-1b19582122c8/exclude-rdp.webp differ diff --git a/static/img/docs/98bae338-07b5-482a-81e1-1b19582122c8/rdp-cf.webp b/static/img/docs/98bae338-07b5-482a-81e1-1b19582122c8/rdp-cf.webp new file mode 100644 index 000000000..b53914119 Binary files /dev/null and b/static/img/docs/98bae338-07b5-482a-81e1-1b19582122c8/rdp-cf.webp differ