Best posts made by theopenem_admin

Thanks. 1.5.7 is behind schedule it's shaping up to be much larger than anticipated and facing some challenges. It's probably still a couple months away. Mainly just going through the forum and implementing suggestions.

It's been awhile since an update has been released. I want to assure everyone that the project is still very much alive. The next release of Theopenem will be 1.6.0. This version will provide an updated UI, created with .NET 9 using Blazor and the MudBlazor component library. I plan on releasing a short video of the new UI soon. I have also created a product board so you can see the features I'm currently working on and their status. This board also provides you with the ability to submit ideas and vote on existing ideas. I will be shutting down the Feature requests section of the forum and replacing it with this. If you have any ideas for the 1.6.0 version get them submitted now. Here is the link for the board. I'll get this added to the main site and docs as well.

https://portal.productboard.com/theopenem/1-theopenem/tabs/2-planned

This is a massive update and I'm trying to have this done by the end of August.

You can run the following sql query to reset the toemsadmin user password back to the original value of toemsadmin

UPDATE `theopenem`.`toems_users` SET `toems_user_pwd`='ynR74SyWh73NxqzWQNpwsWzHJPOdmWJd1BgxuOxVd+4=', `toems_user_salt`='8Q+LD8za/YzoK7OuAlU8orXTpeu/YpCyNl0yNxEKinQzzfwjI4njKt4FANt74ZxR2D2G7N1QxsNpreLNfd3Dpg==' WHERE  `toems_user_id`=1;

Yes, then in admin settings -> imaging client, enable upload / deploy direct to smb

That won't work. The second video of the getting started series talks about how to install the client.

https://www.youtube.com/user/coverthisone/videos

What version of Windows did you install Theopenem on?

A few options:

Rebuild the image - Make sure you delete the program files\toec folder if it exists, otherwise install Toec, then run the --prepareImage, leaving Toec installed on the image.

Keep existing image - Delete program files\toec before installing again.

Keep existing image - Install Toec, then run --prepareImage and restart service

The installation id is the only thing that matters. If 2 pc's have the same id, it's going to show the behavior you are describing. Are you certain that it's not already on the image? It's nearly impossible for 2 machines to have the same installation id. Here is the code for how it is generated.

UpdateDbSetting(Guid.NewGuid().ToString(), "installation_id");

It is basically randomly creating a guid upon installation. The guid is not based on anything on the computer such as hardware or sids.

I'm also not sure whats going on with your script. Is that how you are installing on the client or what you are trying to do to fix it?

Understood. It was done this way because I didn't want a scroll bar on the main nav menu. So if the main nav menu can't fit on your screen then it switches to mobile.

The security bug has been fixed and now Microsoft is signing the shim loader again. I'm waiting for the newest shim version of 15.5 to be released before I try to get it signed. I'm hoping to have this done as soon as possible but it's a pain.

c:\program files\toec\toec.exe

It's fine to put it on the image but you must prepare it for image, or like you said the installation id will be the same on each machine.

From the docs:

Toec.exe --prepareImage

If you want to install Toec before capturing an image of the computer. You must run this prior to the last shutdown of the computer. Failure to run this will cause each client's installation id to be the same, preventing Toec from working properly.

You should be able to run that command on the machines that have already imaged in order to fix them also.

Have you installed the certificates on the server? Can you verify the time and date on both the server and client are the same?

If you start the task from the web you should be able to cancel it after is seems frozen to get the log.

Your approach is correct. Only open up port 8888 to allow the endpoints to communicate, keeping the ui and api locked down to just the internal network.

That's basically it. Install Toec and it's registered. Have you watched the videos?

This was fixed in 1.3.2, no need to rename file. I would double check that you completed each section in https://docs.theopenem.com/getting-started/configure/

Theopenem 1.5.7 has been released to address this. It removes the run as code noted above. It does break running WinGet as an impersonated user which I'll try to address in the next release. I think it's a fair trade off for now as Toec was basically unusable with the latest Defender updates, you couldn't even download the agent from your browser without it being detected.

I can look into getting the client signed in a future release, I tried this once before and was never able to get anywhere with Microsoft, mostly just silence.

That is not the intended result. It should order them based off the group endpoint priority. If you select a computer and view the effective policy, it should list the policies in the order they will run. Changing the priority should change the order they appear in the effective policy. Is that happening?