kdegeek

GitHub profile1 plugin in the catalog

Plugins by kdegeek

1 plugins by kdegeek in the catalog, most-starred first.

kdegeekhermes-sysadminWindows and Active Directory RMM for Hermes Agent and Hermes Desktop: users, groups and lockouts, Group Policy, RDP, Windows Server Backup, a desktop fleet and 231 vetted PowerShell scripts, all behind tiered approvals with a preview before every change, protected objects and a local audit log. Disclosure — runs PowerShell on the Hermes machine (local transport on a domain-joined Windows host, optionally as a configured account via runas /netonly) or over WinRM to one configured jump host, and from there talks to your domain controllers and the computers you target (AD, SMB, RPC, WinRM). Reads the account password only through Hermes secret scope. While the dashboard is open a background collector in the gateway refreshes read-only snapshots (setting background_collector turns it off); scheduled monitoring adds a Hermes cron job (and two launcher scripts in the Hermes scripts folder) only when you turn it on, and a cron run cannot create or remove it unless cron.allow_agent_scheduling is true. In permissive mode standard writes run without an approval prompt. Writes a local SQLite audit log with passwords redacted. Never reads .env or any other credential store; the opt-in monitoring cron script gets the password only if the user lists SYSADMIN_WINRM_PASSWORD in terminal.env_passthrough. No telemetry and no other network calls; the raw PowerShell tool is off by default.CommunityDesktop app