> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/server/web-interface/administration/configuration/system-settings.md).

# System settings

The ***System settings*** allow the administrators to control many global aspects of the Devolutions Server workspace and manage settings such as ***Password policy***, ***Type availability***, ***Vault permissions***, and more.

### General

![](https://cdnweb.devolutions.net/docs/DVLS0012_2025_3.png)

<table data-header-hidden><thead><tr><th width="262"></th><th></th></tr></thead><tbody><tr><td><strong>SETTINGS</strong></td><td><strong>Description</strong></td></tr><tr><td><strong>Allow user-specific settings</strong></td><td>Allow user-specific settings to override the properties of an entry. Several settings can be overridden, such as the credentials or custom fields.</td></tr><tr><td><strong>Allow entry states (locked, running, checked out)</strong></td><td>Allow entries to have states assigned to them to reflect their current usage.</td></tr><tr><td><strong>Automatic check in after</strong></td><td>Allow to automatically check in an entry after the defined time.</td></tr><tr><td><strong>Add entry mode</strong></td><td><p>Select if users are prompted to choose a template when creating a new entry. Select between:</p><ul><li><em><strong>Default (Template list including blank)</strong></em></li><li><em><strong>Template list including blank</strong></em></li><li><em><strong>Template list only</strong></em></li><li><em><strong>No template selection</strong></em></li></ul></td></tr><tr><td><strong>Allow users to see user emails</strong></td><td>User email addresses are visible to other users.</td></tr><tr><td><strong>Allow portable license</strong></td><td>Allow Remote Desktop Manager users to use their Remote Desktop Manager licenses across workspaces.</td></tr><tr><td><strong>Force data/time format</strong></td><td><p>Apply a single, predefined data/time format. Select one of the following options:</p><ul><li>Default</li><li>US</li><li>Custom</li></ul></td></tr><tr><td><strong>Allow log comments editing</strong></td><td>Enable the log comment editing for all users. Select the minimum length for the comment.</td></tr><tr><td><strong>Maximum file size (MB)</strong></td><td>Limit the file size to prevent overloading the workspace.</td></tr><tr><td><strong>Allow favorites</strong></td><td>Allow to flag entries as favorites.</td></tr><tr><td><strong>Allow user vault</strong></td><td>Allow users to use <a href="https://docs.devolutions.net/server/web-interface/user-vault/">user vaults</a>.</td></tr><tr><td><strong>Allow "Linked (Vault)" credentials in user vault</strong></td><td>Allow users to link vault credentials to their personal user vault.</td></tr><tr><td><strong>Disable user vault export</strong></td><td>Prevent users from exporting their user vault data.</td></tr><tr><td><strong>Log user vault activities</strong></td><td>Include the logs of the <a href="https://docs.devolutions.net/server/web-interface/user-vault/">user vault</a>for all users of the workspace.</td></tr><tr><td><strong>Allow Macros/Scripts/Tools usage from user vault</strong></td><td>Use Macros, Scripts, and Tools associated with entries in the <a href="https://docs.devolutions.net/server/web-interface/user-vault/">user vault</a>.</td></tr><tr><td><strong>Allow system vault in user vault</strong></td><td>This setting allows users to access entries from the System vault within their <a href="https://docs.devolutions.net/server/web-interface/user-vault/">user vault</a>.</td></tr><tr><td><strong>Create vault with restricted access by default</strong></td><td>Create vaults with a restricted access by default. Checking this option sets all the permissions of the root folder to <em><strong>Never</strong></em> as opposed to <em><strong>Inherited</strong></em> if the option is left unchecked.</td></tr><tr><td><strong>Risky events</strong></td><td>Configure risky events notifications.</td></tr><tr><td><strong>Time Zone</strong></td><td>Select the time zone you are currently in.</td></tr><tr><td><strong>Days</strong></td><td><p>Select which days the session is available for. Select between:</p><ul><li><em><strong>Any day</strong></em>: the session can be used any day of the week or weekend.</li><li><em><strong>Weekdays</strong></em>: the session can be used only in the weekdays.</li><li><em><strong>Weekends</strong></em>: the session can be used only the weekends.</li><li><em><strong>Custom</strong></em>: manually select each day the session is available for.</li></ul></td></tr><tr><td><strong>Time of day</strong></td><td><p>Select the hours which the session is limited to. Select between:</p><ul><li><em><strong>Any time</strong></em>: the session can be used at any hour.</li><li><em><strong>Inherited</strong></em>: the session inherits the time of day setting from its parent (e.g., the vault or folder).</li><li><em><strong>Custom</strong></em>: manually select the time frame the session is available for.</li></ul></td></tr></tbody></table>

### Application access

![](https://cdnweb.devolutions.net/docs/DVLS4224_2025_3.png)

<table data-header-hidden><thead><tr><th width="344"></th><th></th></tr></thead><tbody><tr><td><strong>SETTINGS</strong></td><td><strong>Description</strong></td></tr><tr><td><strong>Enable application access in user groups</strong></td><td>Enable the application access parameters in <a href="https://docs.devolutions.net/server/web-interface/administration/security-management/user-groups/">user groups</a> properties.</td></tr><tr><td><strong>Precedence</strong></td><td>Set to <em><strong>Allow</strong></em> or <em><strong>Denied</strong></em>.</td></tr></tbody></table>

### System message

In ***System message***, administrators can set a message that to be displayed every time a user connects to the Devolutions Server workspace no matter which method is used (web interface, Remote Desktop Manager).

![](https://cdnweb.devolutions.net/docs/DVLS4225_2025_3.png)

### Secure message

![](https://cdnweb.devolutions.net/docs/DVLS4226_2025_3.png)

<table><thead><tr><th width="211">SETTINGS</th><th>Description</th></tr></thead><tbody><tr><td><strong>Permission</strong></td><td>Determine whether secure messages can contain attachments or not.</td></tr><tr><td><strong>Default expiration time</strong></td><td>Set a default expiration time. This can be set independently when sending messages.</td></tr></tbody></table>

### Password management

![](https://cdnweb.devolutions.net/docs/DVLS4227_2025_3.png)

<table data-header-hidden><thead><tr><th width="301"></th><th></th></tr></thead><tbody><tr><td><strong>SETTINGS</strong></td><td><strong>Description</strong></td></tr><tr><td><strong>Password history</strong></td><td>Indicate the maximum saved password to keep in history.</td></tr><tr><td><strong>Password strength calculator</strong></td><td>Select the tool to use to analyze the password strength.</td></tr><tr><td><strong>Disable password saving (shared)</strong></td><td>Prevent users from saving passwords in entries.</td></tr><tr><td><strong>Disable password saving (user-specific settings)</strong></td><td>Prevent users from saving passwords in the User-specific settings.</td></tr><tr><td><strong>Allow reveal credentials (if enabled in the entry)</strong></td><td>Shows the credentials if the box "Allow show credentials (everybody)" is check inside the entry.</td></tr><tr><td><strong>Disable password saving (tools)</strong></td><td>Prevent users from saving passwords in the Tools tab of a session.</td></tr><tr><td><strong>Allow password variables for all entries</strong></td><td>Renders the $PASSWORD$ variable usable for this workspace.</td></tr><tr><td><strong>Allow password variable in macros</strong></td><td>Renders the $MACRO_PASSWORD$ variable usable for this workspace.</td></tr><tr><td><strong>Default policy</strong></td><td>Default password policy used by the system. Password policies can be created in <a href="https://docs.devolutions.net/server/web-interface/administration/templates/password-templates/">Password policy</a>.</td></tr><tr><td><strong>Force default password policy</strong></td><td>Force the usage of the default policy.</td></tr><tr><td><strong>Forbidden password check</strong></td><td>A verification of the password against the forbidden password list is done if enabled.</td></tr><tr><td><strong>Password policy check</strong></td><td><ul><li>None: No policy will be used when creating a password.</li><li>Required: When a user creates a password, they will get a warning that the password does not respect the policy. The user cannot save the password.</li><li>Warning: When a user creates a password, they will get a warning that the password does not respect the policy. The user can save the password.</li></ul></td></tr><tr><td><strong>Compromised (pwned) check</strong></td><td>Verify if the used passwords have already been exposed to data breaches.</td></tr></tbody></table>

### Forbidden password

***Forbidden passwords*** allow to create a list of blacklisted passwords to forbid usage in the application. Once set in this list, the password cannot be used anymore in the Devolutions Server workspace.

![](https://cdnweb.devolutions.net/docs/DVLS4228_2025_3.png)

<table data-header-hidden><thead><tr><th width="120"></th><th></th></tr></thead><tbody><tr><td><strong>Option</strong></td><td><strong>Description</strong></td></tr><tr><td><strong>Case sensitive</strong></td><td>Make the verification mode case sensitive.</td></tr><tr><td><strong>Verification mode</strong></td><td>Select the verification mode between:<br>Contains: the password will be forbidden if it contains a word in the blacklist.<br>Exact match: the password will be forbidden if it matches a word in the blacklist.</td></tr><tr><td><strong>Import</strong></td><td>Import a list from your computer (*.pwd or .txt).</td></tr><tr><td><strong>Export</strong></td><td>Export your forbidden password list. By default the list will be exported in a password file format (.pwd).</td></tr></tbody></table>

### Type availability

This section allows administrators to control the availability of entries for the workspace. Each section contains different entry types you can choose to be available.

![](https://cdnweb.devolutions.net/docs/DVLS4229_2025_3.png)

### Logs

The ***Logs*** section allows administrators to define the behavior of logs when certain conditions are met, such as when they are opened, closed, or when credentials are viewed. This is also where administrators can determine if and when it is appropriate to automatically mark logs as closed.

![](https://cdnweb.devolutions.net/docs/DVLS4230_2025_3.png)

### Users

![](https://cdnweb.devolutions.net/docs/DVLS4249_2026_1.png)

<table><thead><tr><th width="233">SETTINGS</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td><strong>Enable auto-deletion of users marked as "deleted"</strong></td><td>Automatically delete the users marked as deleted, meaning that their user vaults are definitely deleted after the delay defined in the <em><strong>Delete after</strong></em> field.</td></tr><tr><td><strong>RDM offline mode</strong></td><td>Determine how users can interact with the workspace when using Remote Desktop Manager's <a href="https://docs.devolutions.net/rdm/workspaces/offline-mode/">offline mode</a>.</td></tr><tr><td><strong>Devolutions Password Manager offline mode</strong></td><td>Determine how users can interact with the workspace when using Devolutions Password Manager's <a href="https://docs.devolutions.net/password-manager/application/settings/offline-mode/">offline mode</a>.</td></tr><tr><td><strong>User type</strong></td><td>Set the default <a href="https://docs.devolutions.net/server/web-interface/user-groups-based-security/#select-the-appropriate-user-type">user type</a> for the workspace.</td></tr><tr><td><strong>Language</strong></td><td>Set a language for the workspace.</td></tr><tr><td><strong>Allow user vault</strong></td><td>Enable or disable the use of user vault in the workspace.</td></tr></tbody></table>

### Notification

![](https://cdnweb.devolutions.net/docs/DVLS4232_2025_3.png)

| SETTINGS                        | DESCRIPTION                                                 |
| ------------------------------- | ----------------------------------------------------------- |
| **User subscriptions**          | Enable or disable user subscriptions.                       |
| **Available actions**           | Determine which actions can be the object of notifications. |
| **Notify for expiring entries** | Set a time for notification of expiring entries.            |

### Recording server

![](https://cdnweb.devolutions.net/docs/DVLS4233_2025_3.png)

<table><thead><tr><th width="333">SETTINGS</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td><strong>Enable Devolutions Gateway recording</strong></td><td>Activate Devolutions Gateway recording for the</td></tr><tr><td><strong>Recording framerate</strong></td><td>Set a framerate for the recording.</td></tr><tr><td><strong>SSH recording type</strong></td><td><p>Choose an SSH recording type between:</p><ul><li><em><strong>WebM</strong></em></li><li><em><strong>TRP</strong></em></li><li><em><strong>Asciicast</strong></em></li></ul></td></tr><tr><td><strong>Enable Devolutions Gateway recording automatic cleanup</strong></td><td>Allow Devolutions Server to delete Devolutions Gateway recordings after a set time.</td></tr></tbody></table>

### Version management

![](https://cdnweb.devolutions.net/docs/DVLS4234_2025_3.png)

<table data-header-hidden><thead><tr><th width="306"></th><th></th></tr></thead><tbody><tr><td><strong>SETTINGS</strong></td><td><strong>DESCRIPTION</strong></td></tr><tr><td><strong>Minimal version</strong></td><td>Forces users of the workspace to use a minimal version of Remote Desktop Manager. Enter the entire version number (20XX.X.0.0) to force a specific version. Use this to disable connecting to the workspace with an older version.</td></tr><tr><td><strong>Minimal version custom message</strong></td><td>Enter a custom message for the minimal version notification.</td></tr><tr><td><strong>Maximal version</strong></td><td>Forces users of the workspace to use a maximal version. Enter the entire version number (20XX.X.0.0) to force a specific version. Use this to disable connecting to the workspace with a newer version.</td></tr><tr><td><strong>Maximal version custom message</strong></td><td>Enter a custom message for the maximal version notification.</td></tr><tr><td><strong>Recommended version</strong></td><td>Recommended version will be displayed to the user via the updater as the recommended version to be downloaded and installed.</td></tr><tr><td><strong>Disable checks for updates</strong></td><td>Disable the auto update notification message. Use this to manually update the application and prevent from getting notified when new versions are available.</td></tr><tr><td><strong>Show custom minimal/maximal version message for administrators</strong></td><td>Show the custom minimal/maximal version message to administrators.</td></tr><tr><td><strong>Download URL</strong></td><td>Use in conjunction with the minimal or maximal version, once a minimal or maximal version requirement is not met the system will prompt the user that the version is no longer valid and it will open the link (path/URL) to download the newer or older version.</td></tr></tbody></table>

### RDM and companion tools

![](https://cdnweb.devolutions.net/docs/DVLS4235_2025_3.png)

#### General

<table data-header-hidden><thead><tr><th width="214"></th><th></th></tr></thead><tbody><tr><td><strong>SETTING</strong></td><td><strong>DESCRIPTION</strong></td></tr><tr><td><strong>Cache/offline expiration</strong></td><td>Number of days before the offline cache expires. You must go online prior to the end of that period to re-validate the data. It is not recommended to set the Expiration to 0, as this will disable the expiration of the offline cache.</td></tr></tbody></table>

#### RDM

<table data-header-hidden><thead><tr><th width="258"></th><th></th></tr></thead><tbody><tr><td><strong>SETTING</strong></td><td><strong>DESCRIPTION</strong></td></tr><tr><td><strong>Disconnect workspace</strong></td><td><p>Set application to lock:</p><ul><li><em><strong>On minimize</strong></em>: Lock the application when minimized in the taskbar.</li><li><em><strong>On Windows lock</strong></em>: Lock the application on Windows lock.</li><li><em><strong>On go offline</strong></em>: Lock application when switched to offline mode.</li><li><em><strong>On idle</strong></em>: Lock the application when not in use after a set number of minutes.</li><li><em><strong>On standby</strong></em>: Lock the application when in standby mode.</li><li><em><strong>On close</strong></em>: Lock application when closed.</li></ul></td></tr><tr><td><strong>Maximum document size for offline synchronization (MB)</strong></td><td>Maximum size of each document saved in the database that will be available for synchronization in offline mode.</td></tr></tbody></table>

#### Devolutions Password Manager browser extension

<table><thead><tr><th width="272">SETTINGS</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td><strong>Enforce biometric lock or master password</strong></td><td>Force the use of <a href="https://docs.devolutions.net/password-manager/application/settings/biometric-lock-setting/">biometric lock</a> or master password when connecting to the workspace in Devolutions Password Manager.</td></tr><tr><td><strong>Force background lock</strong></td><td>Activating this feature provides an additional layer of security by preventing unauthorized access to the Devolutions Server workspace in Devolutions Password Manager if a user switches to another task or window.</td></tr><tr><td><strong>Force auto-lock after a delay of</strong></td><td>When activated, the Devolutions Server workspace in Devolutions Password Manager will lock itself after a specified delay (e.g., 30 seconds) of inactivity.</td></tr></tbody></table>

#### Security

<table data-header-hidden><thead><tr><th width="205"></th><th></th></tr></thead><tbody><tr><td>SETTING</td><td>DESCRIPTION</td></tr><tr><td><strong>Disconnect workspace</strong></td><td><p>Determine the disconnecting behavior of the Devolutions Server workspace. Choose between:</p><ul><li><em><strong>On idle</strong></em>: set an idleness time limit after which the workspace automatically disconnects.</li><li><em><strong>On close</strong></em>: automatically disconnects when the app is closed.</li></ul></td></tr></tbody></table>

### Ticketing service

![](https://cdnweb.devolutions.net/docs/DVLS4236_2025_3.png)

<table><thead><tr><th width="218">SETTINGS</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td><strong>Ticketing type</strong></td><td>The ticketing system you wish to integrate with Remote Desktop Manager.</td></tr><tr><td><strong>Ticketing server URI</strong></td><td>The URL to reach your instance of Jira, e.g., <code>https://yourorganization.atlassian.net/</code>.</td></tr><tr><td><strong>Username</strong></td><td>The username of the account used to create the <em><strong>API token</strong></em>.</td></tr><tr><td><strong>API token</strong></td><td>The <em><strong>API token</strong></em> <a href="https://support.atlassian.com/atlassian-account/docs/manage-api-tokens-for-your-atlassian-account/">created beforehand</a>. If this is not already done.</td></tr><tr><td><strong>Default filter</strong></td><td>This field is required; you must have at least one filter set as a <em><strong>Favorite</strong></em> in Jira. If you do not have a favorite filter already, head over to Jira, choose one, and then hit the <em><strong>Refresh</strong></em> button located in the field itself.<br>Alternatively, you can head over to <em><strong>File</strong></em> – <em><strong>My account settings</strong></em>, click on <em><strong>Jira</strong></em> under <em><strong>Ticketing service</strong></em>, and enable <em><strong>Assigned to me</strong></em>. This lets you filter tickets based on whether they are assigned to you or not.</td></tr><tr><td><strong>Ticketing enforcement</strong></td><td>Your preference between enforcing this ticketing service or not.</td></tr></tbody></table>

### Vault management

![](https://cdnweb.devolutions.net/docs/DVLS4237_2025_3.png)

#### Default vault visibility

<table data-header-hidden><thead><tr><th width="270"></th><th></th></tr></thead><tbody><tr><td><strong>SETTINGS</strong></td><td><strong>DESCRIPTION</strong></td></tr><tr><td><strong>Public - Allow access requests</strong></td><td>Users can request access to the vault.<br></td></tr><tr><td><strong>Private - Invitation only</strong></td><td>This setting makes the vault accessible only to users who are invited.</td></tr></tbody></table>

#### Default permissions

<table data-header-hidden><thead><tr><th width="138"></th><th></th></tr></thead><tbody><tr><td><strong>SETTINGS</strong></td><td><strong>DESCRIPTION</strong></td></tr><tr><td><strong>Permission</strong></td><td>Set all the default permissions in the different tabs to <em><strong>Default</strong></em>, <em><strong>Custom</strong></em>, or <em><strong>Disallowed</strong></em>.</td></tr><tr><td><strong>Grant access</strong></td><td>Get access to the <em><strong>Batch grant access</strong></em> feature when selecting <em><strong>Custom</strong></em> in the <em><strong>Permission</strong></em> drop-down list. It allows you to set permissions and permission sets to multiple users, user groups, and/or application users at once.</td></tr></tbody></table>

#### My account settings

<table data-header-hidden><thead><tr><th width="195"></th><th></th></tr></thead><tbody><tr><td><strong>SETTING</strong></td><td><strong>DESCRIPTION</strong></td></tr><tr><td><strong>Forced save location</strong></td><td>Choose to force or not <em><strong>My account settings</strong></em> to be saved in the database or locally.</td></tr></tbody></table>

#### Permission sets

<table data-header-hidden><thead><tr><th width="120"></th><th></th></tr></thead><tbody><tr><td><strong>SETTING</strong></td><td><strong>DESCRIPTION</strong></td></tr><tr><td><strong>Add "+"</strong></td><td>Create a custom list of permissions that can be applied to the permissions of an entry/folder/vault through the <em><strong>Batch grant access</strong></em> feature. Some permission sets already exist by default.</td></tr></tbody></table>

#### Security settings

<table data-header-hidden><thead><tr><th width="326"></th><th></th></tr></thead><tbody><tr><td><strong>Option</strong></td><td><strong>Description</strong></td></tr><tr><td><strong>Allow Devolutions Password Manager browser extension autofill</strong></td><td>Enable or disable Devolutions Password Manager browser extension autofill in Devolutions Server.</td></tr></tbody></table>

### PAM Vault management

![](https://cdnweb.devolutions.net/docs/DVLS4238_2025_3.png)

#### Default vault visibility

<table><thead><tr><th width="278">SETTING</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td><strong>Public – Allow access requests</strong></td><td>PAM vaults are visible to all by default, and access to them can be freely requested.</td></tr><tr><td><strong>Private – Invitation only</strong></td><td>PAM vaults are hidden by default, users can only be granted access by administrators.</td></tr></tbody></table>

#### Default vault permissions

<table><thead><tr><th width="143">SETTINGS</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td><strong>Permission</strong></td><td>Set all the default permissions in the different tabs to <em><strong>Default</strong></em>, <em><strong>Custom</strong></em>, or <em><strong>Disallowed</strong></em>.</td></tr><tr><td><strong>Grant access</strong></td><td>Get access to the <em><strong>Batch grant access</strong></em> feature when selecting <em><strong>Custom</strong></em> in the <em><strong>Permission</strong></em> drop-down list. It allows you to set permissions and permission sets to multiple users, user groups, and/or application users at once.</td></tr></tbody></table>

#### Permission sets

<table data-header-hidden><thead><tr><th width="106"></th><th></th></tr></thead><tbody><tr><td><strong>SETTING</strong></td><td><strong>DESCRIPTION</strong></td></tr><tr><td><strong>Add "+"</strong></td><td>Create a custom list of permissions that can be applied to the permissions of an entry/folder/vault through the <em><strong>Batch grant access</strong></em> feature. Some permission sets already exist by default.</td></tr></tbody></table>

### Application-specific

![](https://cdnweb.devolutions.net/docs/DVLS4239_2025_3.png)

<table><thead><tr><th width="390">SETTING</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td><strong>Enable synchronization by non-administrators</strong></td><td>Enable users that are not administrators to activate the synchronization feature.</td></tr></tbody></table>

### Advanced

![](https://cdnweb.devolutions.net/docs/DVLS4240_2025_3.png)

<table data-header-hidden><thead><tr><th width="177"></th><th></th></tr></thead><tbody><tr><td><strong>Option</strong></td><td><strong>Description</strong></td></tr><tr><td><strong>Disable stack trace</strong></td><td>Disable the stack trace of Devolutions Server in Remote Desktop Manager's error logs.</td></tr></tbody></table>

#### See also

* [Devolutions Academy – Configuration and security](https://academy.devolutions.net/student/path/2942210/activity/4493535)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.devolutions.net/server/web-interface/administration/configuration/system-settings.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.