Kickstart Your Splashtop Enterprise Team

Splashtop Enterprise is designed for high performance remote access and remote support while meeting your organization's advanced management and security needs. It is easy to set up and offers the ultimate flexibility and scalability for businesses and enterprises of all sizes.

Use this guide below to get started and explore the remote access, endpoint management, service desk support and security capabilities.

 

For IT Admins - Getting Set Up and Team Management

Set up Single Sign-On

Single Sign-On

Set up SSO integration to allow users to authenticate through Splashtop using their centralized credentials. If you choose not to set up SSO, go to the Inviting Users section below.

  1. Apply for a new SSO method for your IDP in the Splashtop web console. Detailed instructions on certain IDP services, such as Azure AD, OKTA, ADFS, JumpCloud, OneLogin, can be found here:
    Single Sign-On (SSO)
  2. Our validation team will reach out to you with instructions to verify your domain access and activate your SSO method.
  3. (Recommended) Set up SCIM provisioning (For AzureAD, Okta, and JumpCloud) to automatically provision and sync users and groups from your IDP console.
  4. (Recommended) Import SSO users by CSV file if you are unable to use SCIM provisioning, to automatically onboard users into specified user groups. This also skips the invitation email process.

View this article to read the limitations with SSO.

 

Inviting Users and Assigning Roles
Invite users by going to Management > Users > Invite Users.
Assign team roles, license type, user groups, and SSO authentication methods during the invitation process or later.

ent-invite_en-us.PNG

If SSO is not enabled, users will set up their own Splashtop account password upon invitation.

 

User Roles

Owner: The Owner is the highest level of authority and can perform any functions in Splashtop, including (but not limited to) inviting users, changing roles, viewing anyone’s connection history, managing computers, changing access permissions and changing team settings. The team Owner is the only user who has access to the team subscription/payment info.

Super Admin: The Super Admin is an elevated role above Admin, who can have the same permissions as the Owner above, including accessing the Team Settings tab and changing users’ roles. They cannot access subscription/payment info.

Admin: The Admin role has the same permissions as the Owner above, except they cannot access subscription/payment info, the Team Settings tab, and cannot change users’ roles.

Group Admin: Group admin is a limited Admin role that gives a user admin privilege over specific user and/or computer groups. This allows them to add/remove users & computers only for the groups that are authorized.

Member: Members are general users who have been added to the team to allow remote access. They only have access to computers that they are granted permission for, and can check their own status, account info, team info, and logs. They can remove themselves (“quit”) from a team in the Account Summary tab.

License Type

Remote Support (Technician) :

Remote Support license is mainly for attended access, endpoint management and unattended access usage. It is licensed per concurrent technician which allows for 10 named licenses and 300 managed endpoints.

Remote Access (End-User) :

Remote Access license is for unattended access. It is licensed per user which allows for 1 named license and 10 endpoints.

Check out this article for more details and instructions.

Grouping

With Splashtop, you can group your users and computers for easier management and access permission control. By default, each user or computer can only belong to one group. See this article for instructions on how to enable users to belong to multiple groups. Users can have access to multiple computer groups.

Get started by going to Management > Grouping.

grouping_en-us.PNG

You can create 3 types of groups: 

  • User-only group
  • Computer-only group
  • User & Computer group 

A user-only group can only consist of users. Grouping users is useful for setting access permissions for multiple users at a time. It is also useful for automatically applying access permissions to a new user. 

A computer-only group can only consist of computers. Grouping computers helps to organize a large computer list for easier navigation. It can also make assigning access permissions easier – you can grant a user access to an entire group of computers. 

A user & computer group is a shortcut for group-based access control. It can consist of both users and computers. By default, all users in this group can access all computers in this group. 

Set this group as a connection pool will enable the Connection Pool feature for the computer group. Users can click the “Connect” button to connect to any available computer in the group. This is useful for scenarios such as RDP pools, computer labs, and more where it doesn’t matter which computer the user connects to.

Check out this article for more details and instructions.

 

Deploying Computers

Install Splashtop Streamer on your endpoints to make them remotely accessible.

  1. Go to my.splashtop.com / my.splashtop.eu > Management > Deployment to create a deployment package.

    When creating the deployment package, you have the option of specifying default settings, including computer naming rule, security settings, sound re-direction, and more. Alternatively, you can use the default package created by Splashtop.
  2. Once the package is created, click Deploy to view the installation options.
    Deploy_en-us.png
  3. (Option 1) Share the link to allow a user to download and install the streamer for you.
    (Option 2) Choose a platform and download the installer file directly.
    deploy option.PNG

    Multiple installer options are offered for Windows, Mac, Android, and Linux.

Need to change a streamer setting or enforce settings after deployment? Check out Preference Policies.

Access Permissions & Scheduling

Access Permissions

Access permissions determine which computers a user will have access to.
Go to Management > Users, click on the gear icon to the right of a user or user group, and choose Access Permission to configure permissions for a single user or a group of users.

access-gear_en-us.PNG

By default, when a user is invited:

  • Admins have access to All Computers
  • Members have access to No Computers if they are not invited into a group
  • Members have access based on the group’s permission when assigned or invited to a group 

set_access_permission_en-us.png

To give a user or user group access to multiple computers or computer groups, select Only specific computers and computer groups.

 

Scheduled Access

While Access Permissions allow users to access endpoints at any time unattended, Schedules Access can be configured to allow access on a time-slot basis. 

schedule_en-us.PNG

Note:

  • Scheduled Access is granted in addition to existing user/group access permissions that are set under Management > Users – they do NOT override existing user/group access permissions.
  • For users who only need scheduled remote access, set their access permission under Management > Users to “No Computers”.  

Check out this article for more details and instructions.

 

User and Role-based Granular Controls
With Granular Controls, you can enable or disable certain features for specific users, groups, and roles.

ent_granular_en-us.PNG

Granular Controls are currently available for:
Remote Control Watermark Protection
File Transfer Remote Command (Remote Support License)
Remote Print Attended Access (Remote Support License)
Copy & Paste Remote Command (Remote Support License)
Watermark Protection System Tools (Remote Support License)
Enforce 2FA Event Logs (Remote Support License)
Request Permission to Connect  

Additional granular controls are also available for Endpoint Management Add-On features.

Check out this article for more details and instructions.

 

For Remote Workers

To start a remote desktop connection, download the Splashtop Business App and log in to view your computer list.

computer_list_en-us.PNG

Users can connect from any Windows, Mac, IOS, Android or Chromebook device.
Here are guides below on how to use in-session menus and toolbars:

High Performance Settings

4:4:4 Color

Experience the fullest color depth and highest image quality. Using this setting will deliver the most accurate colors, contrasts and image details to ensure video, photo and visual integrity.

YUV444_1_en-us.png

High-Fidelity Audio

Tune up to an Ultra High audio quality setting during a remote session to ensure that the high audio resolution required for sound editing, AV sync and post-production is not compromised and can be enjoyed as it should.

audioquality_en-us.png

Ultra-High FPS

Splashtop remote connections support up to 60 FPS with the Ultra High option.

fps_en-us.png

Ultra-Low Latency

Take advantage of your GPU on local and remote devices to leverage H265 and hardware acceleration for optimal performance during remote sessions. Additionally, choose profiles to optimize connection based on your environment's bandwidth and hardware resources.

profiles_en-us.png2022-07-21_11-36-40.png

Check out this article for more details and instructions.
Productivity Features
Productivity features during sessions enable remote workers to operate as if they were physically in front of the remote computer.

 

  • Multi-Monitor:
    • Connect to remote computers with multiple displays, allowing you to seamlessly switch between viewing screens or dedicate each display to individual monitors for an enhanced multi-monitor experience.

monitoricon_en-us.png
multi-monitor2_en-us.png

  • File Transfer:
    • Copy files between local and remote computers without having to use 3rd party file sharing tools. Also supports drag-and-drop and copy-paste file transfer.

03-manager_en-us.png

  • Remote Print:
    • Print a file on the remote computer to your local printer.

Snag_30b1a9b7_en-us.png

  • USB Device Redirection:
    • Use a USB device such as a Wacom tablet, 3D mouse or smartcard reader on your local computer as if it's plugged in directly at that remote computer. 

dr3_en-us.png

  • Microphone Passthrough:
    • Redirect your local device's microphone input over a remote session to join VOIP, meeting calls and use dictation software on the remote computer.

mic_input1_en-us.png

  • Concurrent Access:
    • Two users can connect to the same computer to collaborate and share access.
Security and Privacy Features

streamer_security_en-us.png

  • Blank Screen: Blank out the remote computer's screen for privacy.
  • Lock Keyboard & Mouse: Prevent interference from the remote computer's keyboard and mouse.
  • Lock Screen after Disconnect: Lock your OS user account upon disconnection.
true

 

For IT Support

 

Advanced Features

IP Whitelisting
Configure a whitelist of IP addresses that will be allowed to log into the Splashtop web console or Business App to prevent unauthorized access and increase security.

 

ipwhitelist-pcp_en-us.PNG

iperror_pcp_en-us.pngiperror_src_en-us.png

Check out this article for more details and instructions.
SIEM Integration
Admins can export their Splashtop team's history and session logs to their preferred SIEM (Security Information and Event Management) software for further analysis. 

 

image-20220410-123620_en-us.png

Currently, only Push mode is supported. In-depth guides are available for Splunk and Sumo Logic, but the tool can also be used with other SIEMs or custom servers if provided with the required parameters.

Check out this article for more details and instructions.
Centralized Session Recording
By default, session recordings are saved locally on the "connect-from" computer. However, admins may prefer their users' sessions to be saved centrally in one location for security and auditing purposes.

Centralized Session Recording enforces recording on all remote sessions, saves the recording files on Splashtop's cloud servers, and can be played back or downloaded via the web console for training and auditing for up to 90 days.

 

CentralizedRecording3_en-us.png

Check out this article for more details and instructions.
Open APIs

RESTful APIs are available to all Splashtop Enterprise teams to empower users to automate tasks and build integrations. API requests can be made through API tokens or via OAuth 2.

pcp-api-config_en-us.PNG

Check out this article for more details on APIs.

See Additional Enterprise Features for information on additional Add-Ons including Endpoint Management, Splashtop Connector, and Splashtop AR.

0 out of 0 found this helpful