Studio allowlist – Control server access and force Windows authentication

Applies to:

  • Revu 21
  • Revu 20

Administrators can deploy a registry key to Revu client systems to control Studio server access. If your organization needs to disable Studio access, you can create an empty allowlist. If your organization uses Studio Enterprise, you can create an allowlist of allowed servers, such as your internal server URLs, while restricting access to external servers like studio.bluebeam.com.

Create an allowlist through a registry key

  1. Open the Windows Registry Editor.
  2. Navigate to 
    Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Bluebeam Software
  3. Right-click the Bluebeam Software folder and select New > Key.
  4. Name the key Revu.
  5. Right-click the Revu folder and select New > Key.
  6. Name the key Studio.
  7. Right-click the Studio folder, select New > String Value.
  8. Enter AllowedServers as the value.
  9. Right-click AllowedServers, select Modify, and enter your server URL as the value data.
    Leave the value blank if you need to disable access to Studio. Users will not be able to create or delete servers in Revu.
    • Do not include https:// in the server name.
    • Separate multiple server URLs with a comma and no spaces. For example, serverURL.com,studio.bluebeam.com.

Features

  • All Fields in the ‘Manage Server’ dialog in Revu will be disabled.
  • Resetting preferences for Revu preserves the allowlist.
  • Accessing a Studio link for servers generates an error.

Force Windows Authentication mode

Owners of private Studio Enterprise servers also have the option of forcing users to log in to your Studio Enterprise servers with Windows Authentication instead of entering a username and password in the software. Once configured, users will not be able to override these settings in Revu.

  1. Open Registry Editor.
  2. Navigate to 
    Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Bluebeam Software
  3. Right-click the Studio folder and select New > DWORD (32-bit) Value.
  4. Enter WindowsAuthenticationOnly as the value.
    This value is case sensitive.
  5. Right-click WindowsAuthenticationOnly, select Modify, and set the Value to 1.

Features

  • All fields of the Login dialog are disabled. Windows Authentication is enabled and cannot be disabled.
  • All fields in Edit server dialog are disabled. Windows Authentication is enabled and cannot be disabled.
  • Generates error for servers that do not support Windows Authentication.
    Studio functionality will be disabled in Revu unless the Bluebeam Studio URL (studio.bluebeam.com) or your internal Studio Server URL has been entered as described above.

Export this Studio registry key and deploy it to client systems. Set permissions accordingly to prevent users from making changes to the registry key.

Setup

Studio

Revu 21

Revu 20

Installation

 

If your organization is using Studio Enterprise or needs to restrict access to Studio, learn how you can create an allowlist of allowed servers while restricting access to external servers.

Related Articles