Hi there! Is there a way to change the default server url on the app? Mine always show the local ip of the server and the port. I have to ask my customers to change it to my public IP.

hello ! Great work, I'm having trouble installing on Windows 8.1 clients, can you give me a tip?

Much appreciated!

My pleasure!

Glad it helped!

This is an awesome tool!

That's exactly what I do. I use them all for various situations and reasons.

It's really an awesome tool!

I hope you get it figured out. I think the powershell script will run if you start powershell as an admin, at least that's been my experience.

Thanks for watching!

Thank you so much!

Yep, makes it a really great tool for desktop support calls.

You are welcome!

@@AwesomeOpenSource how do I enable unattended access to PC. Not seeing options anywhere

When you login to your site as an admin, go to the Downloads page ( you have to be logged in ), then you can download the unattended version (installed version).

Thanks. But encountering a new problem. We want to set unattended access for our remote server which is running with windows server 2016 edition but remotely not seems to be installing in it. Anyways to do it

Thank you so much!

My pleasure.

I've had other requests for FreeRadius. I'll look into it and see what I can figure out.

It's an awesome tool!

Not to worry my friend, I destroyed that instance after the recording was done, and have a new one setup for my own use. I appreciate it though. I kind of wasted my time blacking it out.

That's what I like about the manual code so I can copy and paste it into KeepassXC. Makes it easy to share it on several devices for the same account.

Not at all. Please do. And if things change where I’m out of date. Let me know so I can do an update.

My pleasure.

Not to worry, it was just for a test site, but I appreciate you letting me know anyway.

I think there's one for x-forward-real-ip or something to that effect that might do the trick, but not 100% sure. You might askt he immybot/remotely team either on Reddit at the Remotely subreddit, or on their issues board.

I don't think it can. It has a method for switching between screens instead.

I understand your concerns, but I also see it from the developer's point of view. The signing of that application isn't (to me the barrier to being safe and secure). This just says the dev compiled it in a certain way that uses the hash of the application as a key.... Essentially saying it hasn't been modified based on the hash they provide. Anyone can use any application for malicious reasons. Even signed applications go out with all kinds of crazy vulnerabilities allowing malicious software to be injected anyway. Open source is all about collaborative modification. But also, some of the customization of the client was done at compile time for Remotely, so now you have an application where the person running it is expected to compile the agent, so no signing from the main author. It's just such a mixed bag of crud on all fronts. If Microsoft was actually checking the app for malicious stuff, it would be one thing, but that's not what the signing means, and even if it was, there is always the opportunity for a malicious person to use that signed version in the same scammy, horrible way that they could use the non-signed version. Could they make a signed version, sure. Will it help by not training people to ignore security messages...probably. Will it stop bad people from doing bad things with great software...no. I do, 100^ appreciate your thoughts, and concerns, so please, go to their github, and request that they sign the application builds. Totally valid request.

@@AwesomeOpenSource I completely appreciate the point of open source. If we're being honest >90% of all windows users running open source software are running a precompiled executable from the dev team. The entire point of signing your code is so that a malicious actor CAN NOT inject code after the fact. Injected code would alter the hash, and thus windows would not run the code. WDAC associates the code with a real world vendor, creates associations within defender and provides additional controls to sysmins. From Microsoft themselves "What is code signing and why is it important? Code signing provides some important benefits to application security features like Windows Defender Application Control (WDAC). First, it allows the system to cryptographically verify that a file hasn't been tampered with since it was signed and before any code is allowed to run. Second, it associates the file with a real-world identity, such as a company or an individual developer. This identity can make your WDAC policy trust decisions easier and allows for real-world consequences when code signing is abused or used maliciously. Although Windows doesn't require software developers to digitally sign their code, most major independent software vendors (ISV) do use code signing for much of their code. And metadata that a developer includes in a file's resource header (.RSRC), such as OriginalFileName or ProductName, can be combined with the file's signing certificate to limit the scope of trust decisions. For example, instead of allowing everything signed by Microsoft, you can choose to allow only files signed by Microsoft where ProductName is "Microsoft Teams". Then use other rules to authorize any other files that need to run. Wherever possible, you should require all app binaries and scripts are code signed as part of your app acceptance criteria. And, you should ensure that internal line-of-business (LOB) app developers have access to code signing certificates controlled by your organization." Signing is not a foolproof security measure and I'm not trying to suggest that it is. But it would be wrong to suggest it provides no security at all. More importantly however this is about *USER BEHAVIOUR* where you want staff following basic cyber security measures such as not ignoring security prompts and an IT team member suggesting you should to be a red flag as a protection against social engineering attacks. Remember >80% of all system intrusions come as a result of social engineering attacks. They are what we need to protect against the most, and that's a matter of behaviour/policy adherence.

The floored you? lol If that twisted your nipple, you better close that Sec+ book and get out there with the real world. He gave you a valid response to something that didn't rise to the level of such concern. This response and yours below are the type bosses shrug off as 'FNG mentality' wanting to save the world. Usually they settle in and start getting real experience and knowledge and these responses subside so that if another response like this appears, everyone knows it's not a Boy Cryin' Wolf scenario.. you may be too young for that reference. Or, infosec folks, or any tech people for that matter, can continue these long winded, won't let up, sky is falling routines, and just lay their own path to the future, which pretty soon is right out in the parking lot. Got to find a balance and learn what the real threats are and realize that the books you've been sleeping on are a long ways away from daily life in tech and what the execs think about it when the $$$$ stop rolling in.

I was testing this just the other ady. I know RustDesk is working on Wayland support, but not sure where it's at so far. Guacamole can do wayland using the build in Wayland-gnome-rdp server with Ubuntu...thus it's really RDP. MeshCentral connects, but doesn't show anything on it's html5 streamer, the web-rdp also didn't work, but I think the wayland-gnome-rdp system is still so new it is very picky about matching screen resolution right now as well.

​@@AwesomeOpenSource Thanks for the reply. Yes, remote access via RDP works pretty well on Gnome Wayland. I guess the problem for KDE is on the KDE side. I hope KDE can make some progress on this, as I much prefer it over Gnome. For now I will continue to use X11 on KDE as x11vnc works very well for me.

If you install it yes, but it will run as a portable app as well.

It would be better to ask the project runners, but yes, the agent will connect over TLS encryption when you setup your SSL certs I believe.

I did the upgrade too, I recall it was hitting a glitch as well but don't remember what it was now. Can you provide the error you are getting? Maybe it will jog my memory.

The command line tool on the remotely interface at the bottom of the screen should 100% allow for that. yes.

I have no special header information set in NGinX Proxy Manager, and remotely works just fine. I don't think you need those things, and in the background NPM sets a lot of that up for you.

I'll be covering Guacamole again very soon. I added it to my spreadsheet from last week.

@@AwesomeOpenSource There is a script that will completely compile and install Guacamole for you. It's fine to try it out but I rather build the server manually so I have more control of the certs and system accounts.

The only place to check would be their github pages for now. I don't think there's much more documentation out there than that. github.com/immense/Remotely

@@AwesomeOpenSource Got it. Thank you for your answer. My biggest problem today is with windows UAC. Whenever I’m giving support using the portable app, if any installation requires elevation, I get locked as soon as the UAC window opens. And I can’t do nothing until the user him self click cancel or type user and password and then I’m back again. It seems to be a problem only when using the portable app. With background installation and unattended access, it doesn’t happen at all. Do you have any clue how to solve this?

When you don't have access to port forward, you have the option of using a VPN like Wireguard where you setup an inexpensive VPS like on Digital Ocean (i have a link in my description that will give you a credit of $50, or $100 for 60 days to try their service). Then setup the VPS with a Wireguard server like NetMaker (I have a video on setting it up). Then use the VPS as the launching point to your services inside your home. So, instead of port forwarding through the router, you reach out from inside the network to the VPS / VPN server, and then the server follows that connection back into your network to make the services available.

I thought I answered you, but if you are using your IP in the start up docker-compose, or the script, then that's what the end user will get. You need to set your URL in there. Also, it should be https, so in the Web interface, there is a setting that needs to be enabled to get the URL in the client to be https by default. It says enable https transport, or something to that effect.

@@AwesomeOpenSource Thank you sir. Didn’t know this solution. Fun fact is that I managed to solve it in another way. I configured my domain in cloudflare and registered on their zero trust panel. I set up a tunnel to my LAN and configured a subdomain to my remotely server. On the server side I marked the box to always use HTTPS. As my customers download the portable client using my url, when they execute the application, it retrieves the id number from my subdomain with HTTPS. Working as a charm. Thank God for that and thank you for your tutorial. 90% because of you Brian, I am running my business almost 100% on open source.

Thanks glad to have you here!

What changes are you talking about? I haven't seen behavior like that, but might be something to post on their Github page (immense/remotely).

@@AwesomeOpenSource When I click on Save button, nothing gets saved when using the domain name only when I use the IP address. Could be a trusted proxy thing.

Could be related to a remote management setting? Or if you're using docker it could be related to host network access.

Should. It would pull the newer image and replace the container.

Curious about this also. Let me know if it works.

​@@AwesomeOpenSource main question now is which one is the best - rustdesk, mesh central, guacamole and remotely....for homelabbers use they are all great tho

​@@AwesomeOpenSource got a weird issue using your nginx, docker-ce etc all-in-one script Got errors, I choose Debian 11 unreachable to the IP/ports ##################################################### ### Preparing for Installation ### ####################################################### 1. Installing System Updates... this may take a while...be patient. If it is being done on a Digial Ocean VPS, you should run updates before running this script. 2. Install Prerequisite Packages... Giving the Docker service time to start... ################################################ ###### Create a Docker Network ######### ################################################ Error response from daemon: network with name my-main-net already exists ########################################## ### Install NGinX Proxy Manager ### ########################################## 1. Pulling a default NGinX Proxy Manager docker-compose.yml file. 2. Running the docker-compose.yml to install and start NGinX Proxy Manager /usr/local/bin/docker-compose: 1: ELF: not found /usr/local/bin/docker-compose: 1: Syntax error: end of file unexpected (expecting ")") 3. You can find NGinX Proxy Manager files at ./docker/nginx-proxy-manager Navigate to your server hostname / IP address on port 81 to setup NGinX Proxy Manager admin account. The default login credentials for NGinX Proxy Manager are: username: admin@example.com password: changeme ######################################## ### Installing Portainer-CE ### ######################################## 1. Preparing to Install Portainer-CE 2. Creating the folder structure for Portainer. 3. You can find Portainer-CE files in ./docker/portainer /usr/local/bin/docker-compose: 1: ELF: not found /usr/local/bin/docker-compose: 1: Syntax error: end of file unexpected (expecting ")") Navigate to your server hostname / IP address on port 9000 and create your admin account for Portainer-CE All docker applications have been added to the docker network my-main-app If you add more docker applications to this server, make sure to add them to the my-main-app network. You can then use them by container name in NGinX Proxy Manager if so desired.

​​@@AwesomeOpenSource not a major issue if I have to rollback I did backups prior with pisafe, thinking this script is not working properly because it is meant for amd64 Debian and not arm64 raspberry pi

I do this more for those potentially running this for a business, or as a person who is just starting into self hosting. You can absolutely run this in docker if you already gave docker running somewhere. I try to give a more complete tutorial for the beginner, and those with more experience can jump to the parts they care about in the timeline.

I do, with NPM. They did move more toward caddy, but it will still work with NPM as I've shown it being setup.

No, unless it doesn't like the self-signed cert, but not sure about that. Maybe just post an issue on the github site for immense/remotely.

@@AwesomeOpenSource Thanks for your fast response, I am not sure what I have done wrong with the install because the agents when I download them do not have the URL or company ID baked into them. To login to the portal is only available via http and not https. Any thoughts on what could be wrong, I used your super awesome script to install it

no, I think the clients just pull the fqdn from the site...but not sure what may be going on.

As I recall there was no Arm support, but not sure if it's been added. You'd have to check the releases on Github.

@@AwesomeOpenSource apparently there is no ARM support. I just thought asking in case you knew about some beta maybe. Thanks anyway. I really appreciate the effort you put on making these videos.

No, I never tried it on 8.1. There may be some missing library needed, but not sure. I'd post a question on their github to ask.

I'm not a developer, so You'd need to ask over on their github pages for the information.

Not sure, haven't tried it.

Not sure. There used to be a script you could run on a VPS or Server running Ubuntu that would install it locally instead of in Docker, but I think their suggested method is Docker.

I know he's no longer with Intel, but I think he still works on it in his spare time. As do many, many open source project developers.

@@AwesomeOpenSource I guess the question is - can it work if the DNS/domain or hosting go away.

@@boedilllard5952 it can work by IP only I believe.

I think they are both great tools. I like remotely because I can login from any machine with a browser and do what I need, vs. RustDesk, where I need a specific application. So If I"m away, but my wife has her laptop or iPad, I don't have to have my rustdesk appp on her devices. That said, both are amazingly useful, great, Open Source tools.

@@AwesomeOpenSource Thanks for sharing your experience. I see you created another video that compares remotely, rport, rustdesk and Mesh central. Can’t wait to watch that video when I have time.

What issue are you having specifically with the SSL? Are you running in Docker? Are you using a proxy manager, or just straight from the WAN?

Sure. You can just change the left side of the port mapping to 80 instead of 5000 in the docker-compose.yml file.

I was looking into that. I'm not sure what about the docker container could make that work, but I think it's pulling from the url in the browser at the time. Not sure why it's defaulting to http.

@@AwesomeOpenSourcethis is kinda a deal breaker for me. 😔 any alternative to this that is the most similar to click and go? (Like ConnectWise Control?)

Well, you don't have to do it that way. I just do it for ease of learning. The CT can be done the same as on metal. Remotely in Docker is great though. It really makes it easy to reporduce the environment they want you to run things on.

You might want to ask over on the sub-reddit (remotely_app), or their github discussions page.

The resident agent runs on startup.

You can add a group for each client and add the machines for that client to their group.

What do you mean? I run the server on a Ubuntu server, and deploy the client on Ubuntu. You do have to install some dependencies for Ubuntu though. Should be listed on the Github page.

Oh.... I see! I am sorry! I have not seen your video entirely at once. Now I have deloied the server on Ubuntu and it is running fine. Thank you very much!!! However I need to manage with Raspberry PI devices, is it possible with Remotely app?

Sadly, I don't believe they've ever made an Arm client.

Check the docker logs for Remotely. You should be able to see this with the 'docker logs remotely' command. You may have to change the container name to the right one. But that's a place to start. Also, watch your nginx proxy manager logs as you try to go to those pages. Sounds like you possibly haven't filled the FQDN properly in a configuration (maybe an environment variable).

@@AwesomeOpenSource i couldnt find one that worked. but i am actually having issues with all that lead to other machines. Seems the only ones that are working correctly are the ones on the same machine as Nginx proxy manager

Weirdest thing is i tested it today and when i use the remote control option that works fine, as well but as i mentioned the options on the left work when clicked just cant select anything on the right. I aprecaite your thoughts i couldnt find anything weird exactly but if u would allow me i can upload the logs to u if u dont mind if u have time i understand if not @@AwesomeOpenSource

Sorry for the delayed response, but I just really don't know. I'm happy to look over the logs, but cna't guarantee I'll find anything. If you'll go over to discuss.opensourceisawesome.com and share them there with me, I'm MickInTX.

i think i found out at least why people can register on ther eown for some reason this didnt work this is form github even though i registered my server but this didnt go away like they said it would "An organization is automatically created for the account. Organizations are used to group together users, devices, and other data items into a single pool. By default, only one organization can exist on a server. The Register button will disappear. People will no longer be able to create accounts on their own.""" @@AwesomeOpenSource

If you're using Ubuntu with Wayland, you may see just a black screen for now, as sharing the Wayland desktop is a bit more complicated than the old x11 desktop. All of my tests sharing windows screens have gone perfectly so far.

Yep wayland, i Will tryptophane switch to X11 xorg. Ty for fast reply

No problem.

Depending on where you are running it, you may see the relayed connection. Make sure on your reverse proxy you allow WebRTC connections. That can help.

@@AwesomeOpenSource there is always something new :D Got green light , peer to peer connection :-)

You can disable Registration in the configuration with docker-compose, or in the User Interface I believe. You need to go to admin settings to re-enable it.

After you register, as long as you only have the 1 organization, it will be disabled.

Thank you for your response and information. Your videos are excellent and I appreciate the knowledge I have gained from watching them. I have a question, do you have any plans to upload a video on best practices for securing Docker or any self-hosted applications? Thank you again@@AwesomeOpenSource

Do you mean push it out using a script to client machines?

Yes, but I believe it only works on Ubuntu, and there's some stuff you have to install before hand listed on the README of the project.

Not sure why you would see that. maybe Windows S or something?

Edumeet is on my list.

Same way, just use the Public IP of your DO server in the A-record.

@@AwesomeOpenSource Do you still need the proxy server running? Also what specs would you recommend for the DO server?

At the time there was no raspberry Pi (Arm) build for the client. I haven't looked in a bit to see if there's any work going on with that though. It's always worth a request on their github though.

Agreed, but I can understand their reluctance as well. Maybe a way to generate revenue, subscription for the signed version?

Paying hundreds of dollars a year to get your software signed is rediculous. I would understand the reluctance 100%

I have seen similar situations. I got it to run, but it crashed pretty quick. Not sure why it's happening. I saw a github issue for it, so you might also add to that to make sure it gets attention. Here's the link to that issue github.com/immense/Remotely/issues/576

None of these are intended for giving proctored exams. I'm sure there is some software geared more toward that.

Thanks for letting me know. FOr whatever reason my address has been upgraded / changed to patreon.com/awesomeopensource which is nice, but would have been nice if they had told me the old one wouldn't work anymore.

There used to be an installer script that would install everything as a service on a Ubuntu server, but not sure they support that method anymore.

This was a test system. It was removed and rebuilt immediately after the video was concluded. I do appreciate the warning though.

You bet! Glad you enjoyed it.

Seems like I read something about that being fixed, but not sure when.

I don't know that you can specify it to be disabled, but if you only set the one organization it will remove the register button. You can always ask for this feature on Github.

@@AwesomeOpenSource ahhh ok, thank You very much

What do you mean by "Privacy"?

@@AwesomeOpenSource Thank you for your reply. Privacy - Black screen on remote PC. This feature available in Anydesk, Teamviewer paid version etc...

Did you install it fresh? It has an option to disable registration, so that may have been set if you are creating a second account.

If you mean what a user can do on a machine, don't think that's an option. You can change the user's machine / device access permisions on the 'Organizations' page, in the 'Users' section, click the 'Edit' button on the user's row under Group / Device, and you can select / de-select which devices a user can access.

Mate this my version BETA how change BETA version?@@AwesomeOpenSource​

How setup v2022.08.02.0428 version? docker run -d --name remotely --restart unless-stopped -p 5000:5000 -v /var/www/remotely:/remotely-data immybot/remotely: ???

Registration on your own server?

The docker install should work fine. I did it just a week or so back. No issues.

It was a test only system, destroyed and rebuilt many times at this point, but thank you for letting me know.