RMMZit 0.12.0 — terminal on Windows, registry editor and scheduled tasks, monitors for event logs and processes, and deployment with Group Policy and Intune.
New
- Terminal on Windows: the device's Terminal opens Windows PowerShell as SYSTEM in the browser (Windows 10 1809 / Server 2019 and later, on a pseudo console). Leaving the page ends the shell and every program it started. Linux keeps its root shell.
- Registry editor (Registry tab, Windows): browse keys of HKLM, HKU, HKCR and HKCC, add, change and delete values (REG_SZ, REG_EXPAND_SZ, REG_DWORD, REG_QWORD, REG_MULTI_SZ) and keys. Roots and the system's own branches are protected; every change is audited with the value it replaced.
- Scheduled tasks (Scheduled tasks tab, Windows): the Task Scheduler's tasks with state, last run and result, next run, account and command; run, end, enable, disable and delete them (audited). Windows' own tasks are hidden unless you include them.
- Monitors (new policy part): event rules for the Windows event logs (log, event IDs, source, level, at least N events within M minutes) and processes that must run (Windows and Linux). The devices are asked every 5 minutes; alerts open and close by themselves, and the device page shows each rule's last result. Events are counted with the Windows Event Log API.
- Deployment to many computers: the site page shows, filled in with a new enrollment code, a Group Policy computer startup script (with the path of the MSI on your share) and the settings for a Microsoft Intune Win32 app (install and uninstall commands, detection rule).
Updating
Settings → RMMZit updates installs 0.12.0 from GitHub; agents update themselves (Settings → Agent updates). The terminal on Windows, the registry editor, scheduled tasks and monitors need agents 0.12.0.
