Accounts
Every account can see every agent. The Console only reads, so there is one kind of account.
Loading...
+ Add user
Require two-factor sign-in
Anyone who has not set up two-factor sign-in is asked to when they next sign in, and can use nothing else until they have. An admin can reset a person's two-factor from the table above, and they are then asked to set it up again.
Set password for
Change your password
Your two-factor sign-in …
A 6-digit code from an authenticator app (Microsoft Authenticator, Google Authenticator, Authy or any TOTP app) on top of your password. Recommended: the Console can hold an account that reads every machine.
In your authenticator app, add an account and enter this key:
Save these recovery codes now. Each one signs you in once if you lose your authenticator app. They are shown only this once.
To turn two-factor off, confirm with your password and a current code (or a recovery code):
Where to look ?
The sweep lists the Windows computers in Active Directory, then reads the small status file each RSJ Agent keeps. It only reads; it changes nothing on any machine.
Saving never starts a sweep. With automatic sweeps off, one runs only when you press Sweep now. Fewer machines at a time is gentler on the network and on security tools, and takes longer.
The account to read with
It must be allowed to read each machine’s C$ share — usually a local administrator on the machines. Use a dedicated account, not a personal login. Leave it empty to read as the account the Console runs as. The password is stored encrypted and is never shown again.
Test account signs in to Active Directory once. Only if that works does it try the machine you name, so a wrong password is one failed sign-in, not one per machine.
RSJ Agent Console updates
Current version: …
Update channel
Where the update check looks. Release tracks the public builds; Pre-release takes new builds from the private repository using a GitHub token you provide. Both channels can download, verify and install an update themselves. Every download is checked against the checksum published with its release before anything runs.
Stored encrypted and never shown again. Use a fine-grained token with read-only access to the rsjagent-console-dev repository and an expiry. Leave it empty to keep the saved one.
When on, the Console checks on this cadence and — once installed as a Windows service — downloads, verifies and installs a newer build itself, restarting the service. Off by default.
Log settings
The detail changes at once: switch to DEBUG to catch a problem in full, then back to INFO. How long logs are kept applies from the next restart.
Live log
The Console's own log: start-up, each sweep, updates. The place to look when a sweep does not find what you expect.
Theme
Saved to your account, so it follows you to any computer you sign in on.
RSJ Agent Console
A free, read-only list of every RSJ Agent on your site, the modules on each, and who each one talks to. It changes nothing on any machine.
Version — · port —