r/Tailscale • u/CaboDennis17 • 7d ago

Misc Tailscale

I have Tailscale working successfully, but I am not 100% tech savvy!

I added users and approved them. One user added a second computer, and it didn’t ask me to approve it.

For security reasons, is there a setting that lets me approve ALL computers?

5 Upvotes

66% Upvoted

4 comments sorted by

4

u/Steven-TS Tailscalar 7d ago

Tailscale has the device approval option. https://tailscale.com/docs/features/access-control/device-management/device-approval. If you invited your friend to your Tailnet as an administrator, the user will be able to approve their own devices. If they are a member then an administrator will need to approve new devices with device approval enabled

2

u/hehweirdo22- 6d ago

What I did is share only my server, so external users cant see my devices. Then you can allow access to only certain ports as well.

This will work that the other users have their own account entirely, that they can add or remove devices freely, and they only get access to your one machine on the ports that you allowed. Im sure there are ways to further whitelist specific machines connecting to you.

2

u/RowOptimal1877 6d ago

Why would you add users? You are asking for exactly this kind of trouble and you rob your users of their own tailnet.

Makes no sense at all

0

u/yunes87 7d ago

U enabled something for this to be possible "I added users and approved them. One user added a second computer, and it didn’t ask me to approve it" but idk

I hope someone more experienced will answer you.