Remote Control and Shadow

You can use Edge DX to remotely control or shadow a device.

Permissions

• To start a Remote Control session, you need the permission Allow Remote Control.
• To start a Remote Shadow session, you need the permission Allow Remote Shadow
• To start a Remote Control or Remote Shadow session without requiring consent from the end user of the device, you need the permission Allow Remote Control and Remote Shadow without End User Consent.
• To transfer files during a Remote Control session, you need the permission Allow File Transfer.
• To open an elevated cmd prompt during a Remote Control session, you need the permission Allow Elevated Command Shell.

Set which devices a user can Remote Control or Shadow

You might not want to allow a helpdesk employee to Remote Control or Shadow devices that they are not responsible for managing. You can give a user permission to Remote Control only devices belonging to a specific device group. For example, you can give a user permission to perform Remote Control, and limit the permission to devices in the Finance device group. Learn more about device groups.

Prerequisites

• For macOS devices, the device user might need to configure device settings to allow Remote Control. Learn how to allow Remote Control on macOS devices..
• For Linux devices, the x11vnc package must be installed and running on the device. Remote control is supported only when using the Xorg display manager.

Start a Remote Control session

To start a Remote Control session on a device:

1. Open the Actions menu for a device and select Assist > Remote Control.
   

2. Select the user session to Remote Control.
   

   • For Windows devices, select an active user session or Console. If you select Console, you can access the device as a user of your choice, or as a new user (for a multi-session Windows OS), even if nobody is currently signed in to the device.
   • For Linux devices, select an active user session. You can use remote control on Linux devices only if a user is currently signed in to the device.
   • For macOS devices, select an active user session or Login Screen. If you select Login Screen, you can sign in as any valid user on the macOS device. Note that remote control performance is generally better if you select an active user session than if you select Login Screen.

3. Select whether you want ask for user consent before starting the Remote Control session.
   
   If you select Ask for user consent, then the Remote Control session begins only if the end user agrees to the following prompt:
   

4. Click Start Remote Control. If you have selected to Ask for user consent, then the Remote Control session starts only if the user agrees to the request.
   

While the Remote Control session is active, an icon appears on the end user's device:

If the end user clicks on the icon, they can see who initiated the Remote Control session and they have the option to end the session. Note that end can end the Remote Control session even if the session was initiated without asking for their consent.

Start a Remote Shadow session

To start a Remote Shadow session on a device:

1. Open the Actions menu for a device and select Assist > Remote Shadow.
   

2. Select the user session to Remote Shadow.

3. Select whether you want ask for user consent before starting the Remote Shadow session. If you select Ask for user consent, then the Remote Shadow session begins only if the end user agrees to the prompt on their screen.

4. Click Start Remote Shadow. The Remote Control either starts or sends the consent request to the end user of the device, depending on whether you selected Ask for user consent.

While the Remote Shadow session is active, an icon appears on the end user's device to let them know that they are being shadowed. The end user has the option to end the Remote Shadow session.

File transfer

During a Remote Control session, you can transfer files up to 100MB between your device and the end user's device.

To retrieve a file from a device:

1. During a Remote Control session, click Retrieve Files.
2. Navigate to and select the files you want to retrieve.
3. Click Retrieve. A progress bar appears at the top of the Remote Control session to show the progress of the file transfer.

The retrieved files are saved to your local Downloads folder.

To send files to a device:

1. During a Remote Control session, click Send Files and select whether you want to send Files or entire Folders.
2. Navigate to and select the file or folder you want to send.
3. Click Upload or Open. A progress bar appears at the top of the Remote Control session to show the progress of the file transfer.

The sent files are saved to the device in the \Downloads\EdgeDX folder.

Open an elevated command prompt

During a Remote Control session, click Elevated Cmd to open an Elevated Command Prompt, which gives you admin privileges. The Elevated Command Prompt automatically closes at the end of the remote control session so that the device user does not have admin access.

Note that this option is available only when you are controlling a Windows device.

Multi-monitor support

During a Remote Control or Shadow session, you can select which display to control If the remote device has multiple monitors (displays). Select All Displays to view and control all displays at the same time.

Copy and paste between devices

During a Remote Control session, enable the Clipboard to copy and paste between your local device and the remote device.

Take a screenshot

During a Remote Control or Shadow session, click Screenshot to take a sceenshot of the remote display. The screenshot saves to your local Downloads folder.

Zoom in

During a Remote Control or Shadow session, click Zoom to zoom in on the remote display.

After you zoom in, you can select which part of the screen to view by clicking on the screen area map at the top right corner.

Auditing

The Edge DX System Events log stores the following details related to Remote Control or Shadow:

• When the session started and ended.
• Who initiated the session.
• Whether the session was initiated with or without asking for user consent.
• What device was controlled/shadowed.
• What files were transfered.
• When an Elevated Command Prompt was opened.

Known issues

• If you reboot a macOS device and the device is at the FileVault unlock screen, Remote Control can't be initated. This is because the Agent isn't running but Edge DX has not yet registered that the device isn't connected to your environment.