Your comments

i agree - would love to be able to retrieve files from locations.

ok - i thought that was the original statement. but wouldnt the consent option work the same basically?you cannot connect to the financial system without someone allowing the access. kind of like turning the service off and back on.

the system can already do that. you just change the OTP setting in security accordingly:

OTP (email, goog, yubi, linotp, duo):


so email:

     goog:

     yubi:

     linotp:

or  duo:

ok - so you are looking for individual groups or systems to have 2 factor along with the 2 factor to login to connectwisecontrol?

wouldnt uncheck HOSTSESSIONWITHOUTCONSENT solve this issue as you would not be able to connect without a user clicking to allow access.

you create a Bits server that your locations can see. Either on the VPN, or possibly on the ScreenConnect / Connectwise Server. you then add a share folder on the Bits Server and put folders in that share. you can then run either powershell or bits commands through commands tab of SC. examples: 192.168.3.66 would be changed for your server IP 

Sending Files:

cmd.exe /c "bitsadmin /transfer myjob /download /priority high http://192.168.3.66/updates/update.txt c:\gc\updates\application\update.sql


powershell -command "(new-object System.Net.WebClient).DownloadFile('http://192.168.3.66/updates/dbfmanager/dbfman125.exe.txt','C:\install\dbfmanager\dbfman125.exe')


Pulling Files:

cmd.exe /c "bitsadmin /transfer myjob /upload /priority high http://192.168.3.66/updates/GCINI/%COMPUTERNAME%.ini

c:\gc\gc_backoffice.ini


we have been using a bits server and running commands in the command tab to pull and send the files. works well especially when pulling or pushing files from multiple systems at once.

I also requested for a way for the user to unlock their account by answering some questions previously.