Your comments

@ Terry, Brian was referring to the older licensing model. I would contact the sales team, as we have more flexible licensing now that would probably fit your needs better.

@ Mike I was reviewing your request and notice you mentioned having session groups for individuals to control their machines. Ideally, one global 'My Machines' group could help cut down on the number of session groups in your view.


Your 'My Machines' session filter would look like this:

CustomProperty2 = $USERNAME

The USERNAME refers to the login(Display Name) used by your host. It's the same thing that appears on the user badge on the host page.


Hope this helps. Your request is still under review, but we're doing a manage session groups interface update in Q1 that will need to be done, before we can consider any changes to grouping.

@Christoph - The Host Pass feature is the fix for your issue. The host pass should be generated for the machine being serviced and passed to your external user. The Host (external user) when connected to a session with a Guest(internal user) without Admin permissions would need to send a CAD at the beginning of the session to elevate: https://help.screenconnect.com/Controlling_Windows_UAC_dialogs. Any UAC prompt that appears before this happens would have to be cleared by the Guest or the Host would have to wait for UAC to timeout (120s, i think). Your suggested method technically skirts our licensing model, so it is doubtful that we'd give host privileges to guests in a reverse screenshare.

@ Aaron, it seems like your use case would be better solved by creating a My machines group for your Vendor like in this post: http://forum.screenconnect.com/yaf_postst3230_How-to-configure-as--GoToMyPc--for-employees.aspx . Instead of notes, I would recommend using a Custom Session Filter: https://help.screenconnect.com/index.php?title=Add_custom_fields. Then you would be able to dynamically assign machines based on a custom filter. The advantage would be the my machines role could be used for all vendors, but would display different machines based on the Host Name.


The original issue is more referring to the ability to reference subgroups in role based security and seems to be a duplicate of this issue: http://product.screenconnect.com/topics/571-roles-able-to-use-subgroup-to-give-permissions/ .


@ Jackson does the above issue describe your problem? If so, I'll merge the requests.

This option will be included in the 6.1 release.

We're working in 6.1 or 6.2 on the ability to provide a url by email to get the access client.