Three ways in
web-prod-04
Console web-prod-04
Connected·windows·noVNC
10:42
Monday, 19 October
Press Ctrl+Alt+Delete to unlock.— try Send keys
Nobody needs a way into the management network.
The browser only ever talks to Verlocx — Verlocx opens the far side itself.
Show the route for
AnywhereYour browsernoVNC, a terminal, or the command console
→WebSocket to the relaya session URL and a one-shot VNC password
Your Verlocx serverPortal + backend relaychecks the right, then opens the far side itself
→Proxmox vncwebsocketwith the cluster's credentials, added on the server
Management network · no browser access
Proxmox nodethe VM's screen, keyboard and mouse
Never in the browser
- Proxmox API tokens or passwords
- A route from the browser to the node
Looking at a screen is not running code as SYSTEM.
Console, presets and any script are three separate rights, granted per project.
One step: “Console (noVNC)”.
- step 1
vm.consoleConsole (noVNC)See the screen, type into a shellThey still sign in to the guest like anyone else. - step 2
vm.remote.execRun remote commandsPick from a vetted libraryScript bodies never reach the browser. - step 3
vm.remote.exec.arbitraryRun arbitrary commandsType PowerShell or CMD, run as SYSTEMMarked dangerous in the portal.
Type it yourself. Risky lines wait.
Anything that changes the system asks for an explicit Run — try the portal's own rule.
web-prod-04· PowerShell · SYSTEM via Verlocx agent
PS C:\Windows\system32> Restart-Service W3SVC
This changes the system. Run it?
Matches “Restart-Service” — waits for Run.
Who ran what, where — and what came back.
Every remote command lands in the VM's activity with its exit code and output.
| Time | Actor | Action | Target | Permission | Result |
|---|---|---|---|---|---|
2m ago Oct 19, 10:44:12 AM | Jana Weber | Remote command succeeded: Ad-hoc command | vm:vm-1760871234-k3f2 | vm.remote.exec.arbitrary | allowed |
5m ago Oct 19, 10:41:03 AM | Jana Weber | Remote command succeeded: Disk space | vm:vm-1760871234-k3f2 | vm.remote.exec | allowed |
34m ago Oct 19, 10:12:40 AM | Sam Brandt | Remote command failed (exit 1): Ad-hoc command | vm:vm-1760871234-k3f2 | vm.remote.exec.arbitrary | allowed |
48m ago Oct 19, 09:58:21 AM | Sam Brandt | Remote command succeeded: Pending reboot? | vm:vm-1760871234-k3f2 | vm.remote.exec | allowed |
1h ago Oct 19, 09:31:55 AM | Jana Weber | Remote command succeeded: Refresh group policy | vm:vm-1760871234-k3f2 | vm.remote.exec | allowed |
A filling disk, explained without signing in.
The agent returns the folder tree and the largest files.
Largest files
Scanned 2 h ago · by Jana Weber
Disk used
57.7 GB
of 79.4 GB · 21.7 GB free
Files scanned
214,382
41,907 dirs
Elapsed
18.4s
scan time
Status
Complete
12 unreadable
Scanned 57.3 GB of files (apparent size). This can differ from disk used above — NTFS compression, shadow copies and filesystem metadata aren't counted as files.
12 unreadable
Top-level directories
Space used by each first-level directory
Windows
24.1 GB
inetpub
18.6 GB
Program Files
9.80 GB
Users
3.20 GB
ProgramData
1.40 GB
Directory breakdown
| Directory | Share of parent | Size |
|---|---|---|
42% | 24.1 GB | |
32% | 18.6 GB | |
99% | 18.4 GB | |
(other files & folders) | 205 MB | |
17% | 9.80 GB | |
6% | 3.20 GB | |
| ProgramData | 2% | 1.40 GB |
Largest files
| # | Path | Size |
|---|---|---|
| 1 | C:\inetpub\logs\LogFiles\W3SVC1\u_ex261018.log | 2.10 GB |
| 2 | C:\inetpub\logs\LogFiles\W3SVC1\u_ex261017.log | 2.00 GB |
| 3 | C:\inetpub\logs\LogFiles\W3SVC1\u_ex261016.log | 1.90 GB |
| 4 | C:\Windows\MEMORY.DMP | 1.60 GB |
| 5 | C:\Windows\Installer\4f2a1.msp | 1.20 GB |
Open a console on your own cluster.
Related: governance · self-service