October 2014
Copyright © 2014 Concentrated Technology, LLC
commissioned by
Dameware adopts a similar approach to Goverlan, using Active Directory and network discovery, both solutions identify unmanaged computers on your network and provide the ability to query basic information from them by means of Windows Management Instrumentation (WMI). You also have the ability to push the solution’s client agent to unmanaged computers, making them managed computers. The client agent gives the solution more coverage and reach into the remote computer, enabling a broader range of management tasks and reporting. Data is queried from systems in real-time, and changes are also applied in real-time, although both solutions allow for scheduled application of batch changes. Manageability with Dameware is available only when managed systems are turned on and awake, and both solutions support various techniques to control the power state.
Like Goverlan, Dameware’s software agent is small so will not impact the performance of the end-user’s device. Similar to Goverlan, Dameware is a desktop application, so does not require a server-based infrastructure and can be deployed for piloting without impacting the production network. However, unlike many solutions in this category Dameware does not offer centralization of certain events for reporting and auditing purposes, such as use of the solution’s remote control facilities.
Remote control is a core functional area for solutions in this category. Dameware supports the built-in Remote Desktop Protocol (RDP), VNC and Telnet/SSH for cross-platform control, and also provides its own proprietary remote control protocol. Proprietary protocols may offer better network utilization or lower CPU utilization, file transfer and chat capabilities, additional user experience or security options, and so on.
Goverlan Remote Admin Suite v8 | DameWare Remote Support v11 | |
---|---|---|
Find users and computers in AD DS by using wildcards and attribute names | Yes; streamlined UI | Yes; standard UI |
Discover computers by logged on username | Yes; fastConnect | No |
Connect to remote computers via smartcard login | Yes | Yes |
Chat with users | Yes | Yes |
Transfer files | Yes | Yes |
Proprietary remote control protocol | Yes | Yes |
VNC support | Yes | Yes |
Telnet/SSH support | Yes | Yes |
Remote Desktop Protocol support | Yes | Yes |
Remote Assistance support | Yes | No |
Create dashboards showing multiple remote computers’ screens | Yes | No |
Remote shadowing of user sessions | Yes | No |
Various end-user approval modes | Yes | Yes |
Remote control notification and auditing options | Yes | Yes |
Lock out local user option | Yes | Yes |
Blank screen from local user option | Yes | No |
Capture screen shots | Yes | Yes |
Capture video of remote control session | Yes | No |
Central auditing of remote control activity | Yes; free Goverlan Central Server component required | No |
Options to reduce network utilization / improve performance | Extensive: Color reduction, numerous visual options | Basic |
Clipboard integration via remote control | Yes | No |
Clipboard-based file transfer from remote computer | Yes | No |
"Observe only" remote option | Yes | Yes |
Integrated Task Manager during remote control | Yes | No |
Integrated performance display options along with remote control/monitoring | Yes | No |
Multiple administrators can enter a shared remote control session | Yes | Yes |
Dameware also offers various end-user approval modes that, depending upon their configuration, can require remote viewers to obtain end-user permission before viewing or controlling the session, or can be set to allow administrators full remote control with no user awareness or acknowledgement.
There are two distinct approaches to remote control: In-band control and out-of-band control. Dameware provides In-band control and supports Intel vPro-based remote control, which is the most popular Out-of-band control software.
It is important to note that there are significant and often subtle differences between Remote Administration solutions. For example, when managing printers, environment variables, and other user-specific settings, the Goverlan solution is multi-user aware. When managing a shared computer, for example, Goverlan can “see” individual user profiles and permit you to modify them individually or all at once. This can be a significant advantage; other solutions may accomplish this by modifying the profile when the user logs on, rather than in real-time.
Another example: when searching for objects in AD DS, the Goverlan solution provides a simplified UI that enables an administrator to directly search for attribute names. Typing “department=sales,” for example, retrieves all users in the sales department. Dameware supports AD DS searching through the standard OS dialog, which provides full functionality but is somewhat more complicated to use.
It should be noted that Goverlan provides a unique feature named fastConnect that is especially useful to support technicians. This feature allows the support professional to find and target a computer by searching for the username of the currently logged on user. As an example, when a user contacts support, they rarely know their computer name, forcing the support technician to spend several minutes helping the user discover and report the computer name for a remote connection. With fastConnect, the technician can query for the username and see the corresponding computer, allowing for an immediate connection without further involving the user.
Goverlan Remote Admin Suite v8 | DameWare Remote Support v11 | |
---|---|---|
Smartcard login support | Yes | Yes |
AD DS management: User, group, computer, and OU object management. | Yes | Yes |
Find users and computers in AD DS by using wildcards and attribute names | Yes; streamlined UI | Yes; standard UI |
Discover computers by logged on username | Yes; fastConnect | No |
Exchange Server mailbox management | No | Partial, mailbox management* |
Rename computers | Yes | Yes |
Manage computer domain membership | Yes | Yes |
Manage local users and groups | Yes | Yes |
Intel vPro AMT integration for out-of-band management | Yes | Yes |
Control system power status (lock, logoff, reboot; manage power settings) | Yes | Yes |
Wake-on-LAN (WOL) support | Yes | Yes |
Send pop-up messages to logged-on users | Yes | Yes |
Live chat with users | Yes | Yes |
Remote command prompt | Yes | Yes |
Remote Task Manager | Yes | No |
Built-in convenience access to Ping, TraceRt, etc. | No; can be added as custom controls | Yes |
Discover systems by IP scan | Yes | No (can use Network Browser) |
Dameware product, unlike others in this category, appears to have minimal Exchange Server administrative support (mainly mailbox management and attributes, which come from AD DS), but has a number of restrictive system requirements to use it.
The following table summarizes the key functional areas for remote administration. These areas can be administered “behind the scenes,” meaning they do not require remote control of the remote computer. Users will not be aware that the following activities are taking place.
Goverlan Remote Admin Suite v8 | DameWare Remote Support v11 | |
---|---|---|
File system | Yes | Yes |
Event Logs | Yes | Yes |
Local users/groups | Yes | Yes |
Open files/resources | Yes | Yes |
Printers | Yes | Yes |
Processes | Yes | Yes |
Basic system information | Yes | Yes |
RAS Settings | No | Yes |
Registry | Yes | Yes |
Task Scheduler | Yes | Yes |
Services | Yes | Yes |
File Shares | Yes | Yes |
View installed software | Yes | Yes |
Remotely Repair/Install/Uninstall software | Yes | Yes, additional product |
View installed hotfixes | Yes | Yes |
Configure network | Yes | No |
View environment variables | Yes | Yes |
Change environment variables | Yes | No |
View performance data | Yes | Yes |
Manage devices (Device Manager) | Yes | No |
Manage Windows Update settings | Yes | No |
Track logged-in users | Yes | No |
Remotely Add/Remove System Components | Yes | No |
Manage Startup items | Yes | No |
Manage mapped drives | Yes | No |
Manage auto-logon | Yes | No |
Force remote GPO update | Yes | No |
Transfer files | Yes | Yes |
Auto-force specified processes to a specified priority level | No | No |
Manage Windows Firewall settings | Yes | No |
Some solution offer a broad range of built-in configuration tweaks and settings Dameware does not pre-define configuration for things like Microsoft Office, Microsoft Outlook, Security Policies, Time Synchronization, Folder Redirection etc. Many organizations will already be using, or will prefer to use, the native Group Policy objects (GPO) feature of AD DS to manage these and other registry-based settings for more granular targeting and application of settings. Goverlan, through its Scope Actions feature, could also provide a similar level of granularity.
Goverlan Remote Admin Suite v8 | DameWare Remote Support v11 | |
---|---|---|
Query data from offline machines | Yes | No |
Create sets of users or computers to target for data queries or actions | Yes | Yes |
Target actions to AD DS objects in bulk | Yes | Computers only |
Target actions to users in bulk | Yes | No |
Target actions to computers in bulk | Yes | Yes |
Dynamic query-like criteria for targeting | Yes | No |
GUI builder for action sequences | Yes | No |
Shareable action sequences | Yes | No |
Re-run batches against failed computers | Yes | No |
Dameware’s batch processing capabilities are limited. You can, in a batch, deploy the solution’s client agent, install services, deploy registry files, manage power state (restart, shutdown, etc.), send pop-up messages, and a handful of other selected tasks by selection of computers.
By contrast, the Goverlan solution has extensive batch processing capabilities. You can define scopes, which are groups of computers, users, or AD DS groups. Scopes can consist of static lists, AD DS sites or containers, IP address ranges, and so on. An extensive set of actions, broadly categorized as “reporting,” “setting,” and “executing” are built-in, and custom actions can be created. Actions can be further scoped by specifying limiting criteria – only machines with a certain amount of RAM, for example. Reporting is available for the entire WMI repository – a wide range of data, much of which is pre-indexed and explained within the solution. Settings can include AD DS properties, local accounts, and a range of WMI objects. Execution can include nearly anything the solution is capable of doing on a per-computer basis, including network settings, printers, processes, software, for a total of several dozen discrete actions.
Because most IT environments consist of more than one administrator or technician, shared features can become important. Although Dameware has a central server for licensing, we were not able to discover any means of sharing configuration data between users of this solution. The Goverlan solution supports sharing computer lists, console layouts, remote control connection sets, software installer packages, batch action sequences, and batch action target lists.
Goverlan Remote Admin Suite v8 | DameWare Remote Support v11 | |
---|---|---|
Query information via WMI | Yes | No |
Generate custom WMI reporting scripts from a GUI | Yes: produces VBScript | No |
GUI builder for GPO WMI filters | Yes | No |
WMI-based Asset Management Reports | Yes | No |
WMI-based IT Compliance Reports | Yes | No |
AD DS reporting | Yes | No |
Goverlan includes WMIX, an integrated utility (also available standalone) that provides a GUI atop the WMI repository. This utility enables administrators to browse WMI (often the only way to discover what the repository contains), and provides custom in-product documentation for core WMI classes and properties. Using the utility’s built-in reports, report wizard, or report templates, administrators can generate a wide variety of real-time inventory reports. Dameware does not offer equivalent functionality.
It should be noted that the real-time discovery, exploration and future storage of custom WMI information has proven essential in many situations. Most products leave the IT support staff to accumulate their own tools outside of the product to accomplish these tasks. The Goverlan WMIX utility provides this integrated support and goes beyond most other available toolsets.
Dameware addresses the same problem space within an organization as Goverlan, although Goverlan offers broader functionality and deeper management reach. Goverlan’s approach to batch administration – action scopes, a GUI-based task sequencer, and so on – offer extended opportunities for use, and take the product almost to the point of being a full-fledged systems management tool. The additional attention to management details, such as the fastConnect feature providing easy-to-discover computer targets from usernames, demonstrates an understanding of the support professionals role and challenges. Greater platform administration of Mac and Linux is a must for growing organizations with cross-platform requirements.
Copyright ©2014 Concentrated Technology, LLC
Goverlan, Inc. has been providing cost-effective, real-time remote administration software solutions since 1998. Goverlan solutions are entirely implemented and managed from within clients¹ infrastructures, thereby fostering security, integrity and control. Designed with the high standard requirements of corporate IT, Goverlan is chosen by IT support technicians worldwide for their ease-of-use, global reach, and expandable feature set to get to the root of problems quickly, dynamically and efficiently. Goverlan¹s initial design began in 1997, geared for a large and fast-paced helpdesk of a Wall Street securities trading firm based in New York City with offices worldwide. To learn more, visit Goverlan.com.
Concentrated Tech is a boutique technology analysis and education firm. Founded in 2005 by industry experts Don Jones and Greg Shields, the company focuses on helping technology and business come closer together by offering strategic consulting, timely education, and expert analysis.
Concentrated Tech analysis papers are independently researched, written, and published. While papers may be commissioned by a specific company or organization, that company or organization is given no editorial control over the content of the paper. The commissioning company or organization has the option of publicly publishing the completed paper, or reserving it for internal use only.