+1
Under Review

Backstage Mode Option to Turn Off the Feature

CSFi 3 weeks ago • updated 1 week ago 2

The Backstage Mode feature that allows hosts to have complete Windows Terminal and PowerShell access to a remote machine doesn't have an option to turn it off except for using the option of unchecking SwitchLogonSession in Security Roles which also affect other features that are needed.

When you have the option to require Consent where the user has to allow access, if you use the Backstage Mode is doesn't require consent even thought the option is set on.

This is a big security issue for financial institutions that have secure servers and don't want people doing anything to their servers that they are not aware of. With the Backstage Mode option it's wide open.

Available in Version:

I have not personally tried this. I was going thru the new features and saw this option so I started chatting (Ticket 11475408). I told him that our banks have to give us consent to access their servers and did this option require consent and I was told No.

If it does require consent does it show the user the screen that is being used for the Powershell and CMD window?

As far as the other issue of not seeing the consent screen if the user used RDP to access their server the normal consent screen isn't seen. The person on our side has to select the Logon Session for RDP not Console.

But still the Backstage option should be able to be turned off because financial institutions do not like it if they can't control who has access to their server.