Jump to content


  • Posts

  • Joined

  • Last visited

  • Days Won


support last won the day on April 11

support had the most liked content!


About support

Profile Information

  • Gender
    Not Telling

Recent Profile Visitors

94,570 profile views
  1. Quite often certain components of a server won't work due to having a pending reboot required from Windows patches. This Powershell script below can help you determine if your server is in a pending reboot state. Open Powershell ISE on your Passwordstate webserver and copy and paste the following code and check the results. Kudos to the https://thesysadminchannel.com website for the code: Copy All Code below this line: Function Get-PendingRebootStatus { <# .Synopsis This will check to see if a server or computer has a reboot pending. For updated help and examples refer to -Online version. .NOTES Name: Get-PendingRebootStatus Author: theSysadminChannel Version: 1.0 DateCreated: 2018-Jun-6 .LINK https://thesysadminchannel.com/remotely-check-pending-reboot-status-powershell - .PARAMETER ComputerName By default it will check the local computer. .EXAMPLE Get-PendingRebootStatus -ComputerName PAC-DC01, PAC-WIN1001 Description: Check the computers PAC-DC01 and PAC-WIN1001 if there are any pending reboots. #> [CmdletBinding()] Param ( [Parameter( Mandatory = $false, ValueFromPipeline=$true, ValueFromPipelineByPropertyName=$true, Position=0 )] [string[]] $ComputerName = $env:COMPUTERNAME ) BEGIN {} PROCESS { Foreach ($Computer in $ComputerName) { Try { $PendingReboot = $false $HKLM = [UInt32] "0x80000002" $WMI_Reg = [WMIClass] "\\$Computer\root\default:StdRegProv" if ($WMI_Reg) { if (($WMI_Reg.EnumKey($HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\")).sNames -contains 'RebootPending') {$PendingReboot = $true} if (($WMI_Reg.EnumKey($HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\")).sNames -contains 'RebootRequired') {$PendingReboot = $true} #Checking for SCCM namespace $SCCM_Namespace = Get-WmiObject -Namespace ROOT\CCM\ClientSDK -List -ComputerName $Computer -ErrorAction Ignore if ($SCCM_Namespace) { if (([WmiClass]"\\$Computer\ROOT\CCM\ClientSDK:CCM_ClientUtilities").DetermineIfRebootPending().RebootPending -eq $true) {$PendingReboot = $true} } if ($PendingReboot -eq $true) { [PSCustomObject]@{ ComputerName = $Computer.ToUpper() PendingReboot = $true } } else { [PSCustomObject]@{ ComputerName = $Computer.ToUpper() PendingReboot = $false } } } } catch { Write-Error $_.Exception.Message } finally { #Clearing Variables $WMI_Reg = $null $SCCM_Namespace = $null } } } END {} } Get-PendingRebootStatus -ComputerName $env:ComputerName
  2. Hi Digital Dynamics, Can you let us know what web site is not working for you so we can test? We've just tested the web site https://webauthn.io/ and it's currently working for us. You also mentioned the Passkey is added to your password record, but then mention saving the Passkey fails every time. With the following manual, on Page 34, do you see the Passkey as being saved - https://www.clickstudios.com.au/downloads/version9/Browser_Extension_Manual.pdf? Thanks Click Studios.
  3. Hi Stephen, Thanks very much for your request. Could you provide us a little more detail, on what features in Passwordstate this request would pertain to? JIT for remote access is understandable, but what other functionality would this relate to? Thanks Click Studios
  4. Hello Everyone, Today we have released build 9881. For full details, please refer to our changelog here https://www.clickstudios.com.au/passwordstate-changelog.aspx Regards Click Studios
  5. Hello Valentijn, This message would only be shown if you are successfully authenticated to Passwordstate, unless there is some sort of exception happening which we cannot reproduce. We've responded to your support ticket this morning, showing the screens we see, and we need to figure out why you are not seeing the same screens as us. Please let us know in the support ticket, and we can dig a little deeper to see if we can find the cause. Thanks Click Studios
  6. Okay - thanks. Not sure if the following forum post would help with your Macs and WinAPI - https://forums.clickstudios.com.au/topic/2387-can-winapi-be-used-via-a-linux-shell-script/ Regards Click Studios
  7. Hello, Please see responses below: - how can I only allow the System API key to read passwords from one certain folder? or is it possible? Unfortunately not - do we support multiple system-wide Generic API keys? No we do not have a feature for that sorry - is it possible to only grant the `retrieve passwords` permission to the System API key? - you can change those settings on the properties of each Password List Have you had a look at the Windows Integrated API - can you instead use that in your environment? Regards Click Studios
  8. Hello, APIKeys on folders are not used to retrieve passwords from Password Lists nested beneath the folder. They are only used for managing permissions on the Folders. To retrieve passwords, you can create a APIKey per Password List, or use the System Wide API Key. Or you can use the Windows Integrated API, which does not need API Keys. Regards Click Studios
  9. Hello Everyone, Today we have released build 9873. For full details, please refer to our changelog here https://www.clickstudios.com.au/passwordstate-changelog.aspx Regards Click Studios
  10. Can anyone tell me how to get out of "Impersonating" a user? I can't see a button anywhere to do it, and when I log out completely and log back in, I'm still impersonating.

  11. Hello Charlene, Please go to the screen Administration -> Feature Access -> Menu Access. Regards Click Studios
  12. There are a few conditions Passwordstate may want to reach out to the internet, all of which can be disabled if desired: Scenario #1: It can contact our clickstudios.com.au website (, to check an xml file for any new builds available. Configure Location: Administration -> System Settings -> Check for Updates Scenario #2: If you use DUO Authentication to authenticate into Passwordstate, this can reach out to the DUO API which is duosecurity.com Configure Location: Authentication for DUO is found under Administration -> System Settings -> Authentication Options Scenario #3: If you use SAML for authentication, this can reach out to the internet. Examples are using Azure or Google as your SAML provider, and the locations Passwordstate need to reach out to are dependent on which SAML provider you use. Configure Location: Authentication for SAML is found under Administration -> System Settings -> Authentication Options Scenario #4: If you use the HaveIBeenPwned feature in Passwordstate, to check for known bad passwords, Passwordstate can reach out to https://haveibeenpwned.com/ API via the following URL: https://api.pwnedpasswords.com/range/ Configure Location: Administration -> Bad Passwords Scenario #5: If you use Yubico One Time Passwords for authentication, which will need to reach out to yubico.com Configure Location: Authentication for Yubico OTP is found under Administration -> System Settings -> Authentication Options As long as you do not require connection to any of the options above, then you welcome to block access to the internet from your Passwordstate server. Regards, Support
  13. Hello Everyone, Today we have released build 9866. For full details, please refer to our changelog here https://www.clickstudios.com.au/passwordstate-changelog.aspx Regards Click Studios
  14. Issue: one or more users logs into Passwordstate, and they notice a long delay for the initial webpage to render. You many notice this delay of up to 30 seconds or more before all the folder and Password Lists are displayed. Cause: Each folder of Password List you see in the navigation tree requires a small bit of HTML to render. The more Folders and Password Lists requires more HTML, and with thousands of these objects, your browser could be rendering 10 to 20 megabytes of data each time you log in. Fix: For an affected user, get them to go to their Personal Preferences page, and enable Load On Demand. Log out and log back in again, and the performance of their initial load times should increase drastically: Apply Load on Demand to All Users: It's possible to use a User Account Policy to force some, or all users to use Load on Demand. If you have not used the User Account Policy feature before, this blog post explains what they are, and how to set them up: https://blog.clickstudios.com.au/develop-user-account-policies/ In your User Account Policy, setting #A11 is where you enable Load on Demand: Regards, Support
  • Create New...