Topic starter
21/08/2026 4:47 pm
TL;DR: Sysadmins still juggle SSH, RDP, VPNs and other remote tools while storing dozens or hundreds of credentials in insecure places such as spreadsheets and script files, according to Devolutions. The governance gap is not just usability: it is centralised control over sessions, credentials, roles and logging across a fragmented remote access estate.
Editorial analysis by NHI Mgmt Group, based on content published by Devolutions: “White papers”.
Key questions
Q: How should teams govern remote access credentials across SSH, RDP and VPN tools?
A: They should treat remote access credentials as governed assets, not user conveniences.
Q: What breaks when remote desktop credentials are stored in spreadsheets and scripts?
A: Revocation, audit and access review all become incomplete.
Q: What are the best practices for shared remote administration sessions?
A: Use permissions to control who can see, reuse or modify a session, and keep the session data in an encrypted central store.
Practitioner guidance
- Implement a central remote access vault Consolidate passwords, session settings and other sensitive values into one governed store instead of keeping them in spreadsheets or script files.
- Apply role-based access control to sessions Define specific roles and groups for remote sessions so users can open, share and edit only the connections tied to their duties.
- Turn on session logging and change tracking Record who opened, closed or modified each session so shared administration has an audit trail that supports review and separation of duties.
Bottom line: Remote desktop environments fail when access tools, session data and credentials are managed as separate islands rather than one governed identity surface.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
21/08/2026 5:06 pm
Remote desktop management is an identity governance problem, not just a productivity problem. The article shows that sysadmins accumulate sessions, credentials and permissions across many access tools, then compensate with informal storage and sharing. That is a governance pattern, because the same user often holds many remote pathways with different privilege levels and no single place to enforce policy. The practitioner conclusion is that remote access should be treated as governed identity infrastructure, not a convenience layer.
A question worth separating out:
Q: How do organisations know whether remote session governance is actually working?
A: Look for whether sessions, roles and credentials are managed in one place and whether every open, close or change event is logged. If users still depend on ad hoc sharing or duplicated stores, the governance model is not operating at the point of use.
👉 Read our full editorial: Remote desktop management needs vaulting, RBAC and session control