Unattended access to devices which have not been added to a device group

jtorrence3

We have discovered that all users with unattended access enabled in GoToAssist are able to access unattended computers outside of their assigned device group if the device in question has not been added to a device group yet.

From discussions with support, it doesn't appear we can change that behavior (unfortunate, definitely a security gap to us). Has anyone found a solution that works for them in GoToAssist to get around this gap, maybe some way to auto-assign new systems to a specified default device group?

Thanks in advance for any help on this topic!

jtorrence3

Thanks for your reply and suggestions, GlennD.

Is it possible to enforce use of an unattended installer file? It seems to me they could still just install this using the "Set up during an attended support session (single computer)" and not choose a device group unless there is a way to require a device group is chosen during installation.

I'd like to advocate for changes to at least have an option to close this gap. I think the easiest path might be to add an option to define a default group so unattended systems are always grouped. Relying on users to enforce security when it is technically optional is a losing battle.

When I asked support about feature requests, I was directed here. Is this community reviewed to collect such requests or is there another way to submit a request?

Thanks again for your help and apologies for my delayed response - higher priorities have been consuming all my time.