Merge pull request #803 from silversword411/develop

Scripts and docs

docs/docs/functions/permissions.md

@@ -0,0 +1,18 @@
+# User Roles and Permissions
+
+## Permission Manager
+
+Make sure you've setup at least 1 valid (Super User aka Administrator) role under _Settings > Permission Manager_
+
+1. Login as usual Tactical user
+2. Go to Settings - Permissions Manager
+3. Click New Role
+4. You can all the role anything, I called it Admins
+5. Tick the Super User Box/or relevant permissions required
+6. Click Save then exit Permissions Manager
+7. Go to Settings - Users
+8. Open current logged in user/or any other user and assign role (created above step 6) in the Role drop down box.
+9. Click Save 
+
+Once you've set that up a Super User role and assigned your primary user, you can create other Roles with more limited access.
+

docs/docs/install_considerations.md

@@ -0,0 +1,17 @@
+# Install Considerations
+
+There's pluses and minuses to each install type. Be aware that:
+
+- There is no migration script, once you've installed with one type there is no "conversion". You'll be installing a new server and migrating agents if you decide to go another way.
+
+## Traditional Install
+
+- It's a VM/machine. One storage device to backup if you want to do VM based backups
+- You have a [backup](backup.md) and [restore](restore.md) script
+
+## Docker Install
+
+- Docker is more complicated in concept: has volumes and images
+- If you're running multiple apps it uses less resources in the long run because you only have one OS base files underlying many Containers/Apps
+- Backup/restore is by via Docker methods only
+- Docker has container replication/mirroring options for redundancy/multiple servers

docs/docs/management_cmds.md

@@ -49,6 +49,14 @@ python manage.py remove_orphaned_tasks
 python manage.py get_mesh_exe_url
 ```
 
+## Reset all Auth Tokens for Install agents and web sessions
+
+```bash
+python manage.py shell
+from knox.models import AuthToken
+AuthToken.objects.all().delete()
+```
+
 ## Bulk update agent offline/overdue time
 
 Change offline time on all agents to 5 minutes

docs/docs/troubleshooting.md

@@ -161,3 +161,11 @@ Are you trying to use a proxy to share your single public IP with multiple servi
 4. Click the add link
 5. Download both agents
 6. In Tactical RMM, go **Settings > Global Settings > MeshCentral > Upload Mesh Agents** upload them both into the appropriate places.
+
+## Need to recover your mesh token?
+
+Login to server with SSH and run:
+
+```bash
+node /meshcentral/node_modules/meshcentral --logintokenkey
+```

docs/mkdocs.yml

@@ -3,13 +3,15 @@ nav:
   - Home: index.md
   - Sponsor: sponsor.md
   - Code Signing: code_signing.md
-  - RMM Installation:
+  - RMM Server Installation:
+      - "Install Considerations": install_considerations.md
       - "Traditional Install": install_server.md
       - "Docker Install": install_docker.md
-  - Agent Installation: install_agent.md
-  - Updating:
+  - RMM Server Updating:
       - "Updating the RMM": update_server.md
       - "Updating the RMM (Docker)": update_docker.md
+  - Agents:
+      - "Agent Installation": install_agent.md
       - "Updating Agents": update_agents.md
   - Functionality:
       - "Alerting": functions/alerting.md
@@ -20,6 +22,7 @@ nav:
       - "Django Admin": functions/django_admin.md
       - "Global Keystore": functions/keystore.md
       - "Maintenance Mode": functions/maintenance_mode.md
+      - "Permissions": functions/permissions.md
       - "Remote Background": functions/remote_bg.md
       - "Settings Override": functions/settings_override.md
       - "Scripting": functions/scripting.md
@@ -78,9 +81,14 @@ extra:
     - icon: fontawesome/brands/github
       link: "https://github.com/wh1te909/tacticalrmm"
 markdown_extensions:
+  - pymdownx.superfences
   - pymdownx.inlinehilite
+  - pymdownx.tabbed:
+      alternate_style: true
   - admonition
   - codehilite:
       guess_lang: false
   - toc:
       permalink: true
+features:
+  - content.tabs.link

scripts_wip/Win_Disk_Status_New.ps1

@@ -0,0 +1,40 @@
+<#
+      .SYNOPSIS
+      Used to monitor Disk Health, returns error when having issues
+      .DESCRIPTION
+      Monitors the Event Viewer | System Log | For known Disk related errors. If no parameters are specified, it'll only search the last 1 day of event logs (good for a daily run/alert using Tasks and Automation)
+      .PARAMETER Time
+      Optional: If specified, it will search that number of days in the Event Viewer | System Logs
+      .EXAMPLE
+      -Time 365
+      .NOTES
+      4/2021 v1 Initial release by dinger1986
+      11/2021 v1.1 Fixing missed bad sectors etc by silversword
+  #>
+
+param (
+    [string] $Time = "1"
+)
+
+$ErrorActionPreference = 'silentlycontinue'
+$TimeSpan = (Get-Date) - (New-TimeSpan -Day $Time)
+# ID: 7     
+# ID: 9     
+# ID: 11    
+# ID: 15    
+# ID: 52    
+# ID: 98    
+# ID: 129   "Reset to device, \Device\RaidPort0, was issued."     Provider=storahci
+# ID: 153   Bad Sectors aka "The IO operation at logical block address..."    ProviderName=disk
+if (Get-WinEvent -FilterHashtable @{LogName = 'system'; ID = '7', '9', '11', '15', '52', '98', '129', '153'; Level = 1, 2, 3; ProviderName = '*disk*', '*storsvc*', '*ntfs*'; StartTime = $TimeSpan } -MaxEvents 10 ) {
+    Write-Output "Disk errors detected please investigate"
+    Get-WinEvent -FilterHashtable @{LogName = 'system'; ID = '7', '9', '11', '15', '52', '98', '129', '153'; Level = 1, 2, 3; ProviderName = '*disk*', '*storsvc*', '*ntfs*'; StartTime = $TimeSpan } | Format-List TimeCreated, Id, LevelDisplayName, Message
+    exit 1
+}
+
+else {
+    Write-Output "Disks are Healthy"
+    exit 0
+}
+
+Exit $LASTEXITCODE