Documenting with PowerShell: Remote Access Methods

At our MSP we have a plethora of methods to connect to a specific device, for a server we might have iDrac configured, for a VM we’ll have our RMM and remote control tooling, and it gets annoying from time to time to make sure all of these are documented. We do feel documenting these remote access methods are key – If an engineer that knows nothing about the environment needs to connect for the first time we want the info to be present.

So I’ve decided to automatically document all remote access methods we can find on a server; even if those methods aren’t in use at our MSP. We run a analysis on the currently installed software and if it is installed, we try to document the remote access configuration for that specific device. Currently the script supports the following Remote Access Methods;

  • Screenconnect / Control
  • TakeControl
  • Teamviewer
  • Remote Desktop
  • Dell iDRAC
  • Hyper-v

So you’ll notice some of these methods are really not to be used anymore if you want a secure environment, such as Teamviewer, and Remote Desktop, we’ll make sure to document them in any case so we can make sure someone removes these methods asap. You could also use the script to alert on them. The script also picks up if the machine is a Hyper-V VM and what host it’s running on just so you can find that easily in the remote access overview.

As always, we have two versions; one HTML version and one IT-Glue version.

Recent Articles

Automating with PowerShell: making stolen tokens useless with Global Secure Access

Last week I watched Merill Fernando talk to Alex Pavlovsky and Marilee Tuscak from the Entra team about something I’d kinda put under the “needs a GSA licence” branch and i’d check it out later, turns out that like most people, I half-assed the documentation and it turns out it doesn’t. There’s two features that come with any P1 license; Compliant network check and Source IP Restoration. So BP, P1, or even frontline worker licenses already have this.

CIPP ❤️ #IntuneForMSPs

We’re Joining #IntuneForMSPs 🎉

Being invited by Microsoft to join a global initiative is a big moment for us, and we want to be clear about why it matters. #IntuneForMSPs is Microsoft’s program to help MSPs deliver Microsoft 365, Intune, and Copilot services at scale, and CIPP is now part of it, bringing the largest MSP community in the channel directly to Microsoft.

The return of CyberDrain CTF

CyberDrain CTF returns! (and so do I!)

It’s been since september that I actually picked up a digital pen equivalent and wrote anything down. This was due to me being busy with life but also my side projects like CIPP. I’m trying to get back into the game of scripting and blogging about these scripts. There’s still so much to automate and so little time, right? ;)