Dashboard requires administrative privileges

[Martin Stevnhoved]

Hi.

When running Dashboard as an ordinary user, it asks for the password of an administrator.

Are there anyway we can let the dashboard be executed as a normal user, so we don't have to leave an unattended computer been loged in as administrator?

 

Br,

Martin

[Chris]

Hi Martin,

We require administrative access so that we can write to the Program Files directory (to install updates). There is no way for you to run Pulseway Dashboard without administrative rights without breaking some functionality.

Chris

[Martin Stevnhoved]

Ok, thank you Chris.

Please consider changing this behaviour in feature versions.

 

Br,

Martin.

[Dilbert]

Why not move the update function to a seperate windows service? Would make our life much easier.

[Paul]

On 5/27/2016 at 9:06 PM, Dilbert said:

Why not move the update function to a seperate windows service? Would make our life much easier.

We also require administrative privileges for editing the registry settings and updating the remote desktop libraries. We will consider requesting user elevation when administrative rights are required.

[EricW]

This isn't a good way of doing things - we're trying to lock down general user access here so that helpdesk people don't need admin rights on their own PCs.

This is a two year old thread, and there appears to have been no movement or action from Pulseway in that time.

Happy to have people need to login as admin when there is an update, but Pulseway should not be demanding admin access just to run a dashboard - that is a security vulnerability.

 

Thanks

Eric

[Pasan]

This issue is still the same it seems. Can you at least consider having the dashboard on a web interface so we can run it on any account on any platform? There really is no reason we should be made to keep an admin account unlocked for this. We are using a non-domain PC for this but still this is not a good example from a company like Pulseway.

[Chris]

Hi @Pasan,

Yes, it is planned to introduce the Pulseway RD connections from the Pulseway WebApp into the future. In a meantime you may use your mobile device to connect to the required system.

[Kimmo]

Just found out this myself. Such a shame. We use randomly generated admin passwords only so cannot use software without separate insecure static local admin account.

Edited January 2, 2020 by Kimmo

[George]

Any updates on this? Is there an updated version or an alternate way, that does not require admin rights?

It is a security vuln and really stupid to run a simple RDP app as an admin.

If you want to update the app, use a Windows service (You don't need to run Google Chrome/Firefox as admin, yet they are kept up to date automatically.). For comparison, Teamviewer does not require admin rights.

Edited April 9, 2021 by George

[mmm]

Please change that behaviour. We use the pulseway dashboard to show system-status on a tv screen and some admin must enter admin-credentials EVERY MORNING in order to start Pulseway. At least give us a way to ignore auto-updates and let us update on our own instead of requiring admin-privs on an unattended TV.

[Jamie Taylor]

This version is developed and ready. It will be probably be deployed in the next 2 releases.

[mmm]

On 8/24/2021 at 1:47 PM, Jamie Taylor said:

This version is developed and ready. It will be probably be deployed in the next 2 releases.

Where can we find that version? Is there at least a beta-version?

Alternatively, you could provide the dashboard as a website as you did here: example.pulseway.com/app/main/dashboard and example.pulseway.com/app/d/123