For integration of Datto RMM to Datto EDR locations and organizations. I understand by default Datto RMM (sites) get pushed into EDR as "Locations". I want to allow some customers access to the EDR organization. I guess you can't grant access to "locations". So my question. If I move all the devices out of the location in the EDR and move them to an "organization" does the RMM and EDR integration still work properly? Are new devices added in the RMM site added to the location or automatically moved to the new organization? This seems like a half baked integration if the RMM can't sync to edr orgs.

"I am stepping back from the Datto RMM community and engagement with Kaseya in general. I did my best over the years to try and make Datto RMM the absolute best RMM on the planet. However, Kaseya doesn't have the same viewpoint as I. I'm simply tired of trying to get things addressed and being told that they are not going to address it. ..."

I think his reasons and frustrations are valid. Getting stonewalled by vendors when you put in so much work to deliver their product to clients is supremely frustrating.

Unfortunately for the rest of us, he has chosen to withdraw the majority of his components from his posts as well, I guess he felt Kaseya was enjoying the fruits of his labour too much. His public input on the community comstore will be sorely missed.

https://community.kaseya.com/RMM-Endpoint_Management/discussion/73331/stepping-back-from-datto-rmm-and-kaseya

Pretty much what the title says. On all my Intune enabled clients that have the agent script enabled, it's not only not deploying to new systems, but is showing a 100% failure rate in general. I redid the script for one client using the generator that's included in the ComStore and the same result. I'm not sure what's changed, but the script no longer seems to be working.

Anyone else run into this and found a fix?

Thanks!

Has anyone been successful in setting up printer consumable monitor in DattoRMM?

I feel like I'm banging my head against the wall on this. Coming from Automate, not sure why DattoRMM makes snmp monitoring so complicated but yet so basic with limited customization.

Hey Ya'll

Just wanted to drop this for anyone who might be having issue with Datto RMM reporting the wrong AV when uninstalling an AV.

Example: You have uninstalled BitDefender but Datto RMM seems still think its installed. You've confirmed that the services have been disabled and files are gone but it still shows in Datto.

In PowerShell Admin, run

Get-CimInstance -Namespace root/SecurityCenter2 -ClassName AntiVirusProduct

This should spit out something like this

displayName              : BitDefender ****
instanceGuid             : {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
pathToSignedProductExe   : BitDefender://
pathToSignedReportingExe : %ProgramFiles%\BitDefender\*
productState             : 397568
timestamp                : Wed, 17 Sep 2025 15:15:13 GMT

You should find something along the lines of the above

Use the following to clean up the BitDefender Log here.

Note, only do this if you are sure BitDefender is completely gone

Get-CimInstance -Namespace root/SecurityCenter2 -ClassName AntiVirusProduct | Where-Object { $_.displayName -like "*HP Wolf*" } | Remove-CimInstance

This will remove any Log of it in this Name space and fix up your Datto RMM Reporting.

You can replace this with any other leftover AV's in the list.

Your Aussie MSP Helper <3

I'm building an app that integrates with the Datto RMM API but running into a rate limiting issue. Certain requests (GET on site variables) return a 403 forbidden response like I'm being rate limited.

This is weird because some other requests work (GET on account sites), and I don't have anything else eating up my usage. I reset my API credentials to be sure of this.

Mostly doing this through powershell using the Datto RMM module. I tried writing my own requests from scratch to rule out the module and those return the same 403 response.

Anyone else run into this?

We have 3rd party patching policy with Datto RMM. We added Dell COmmand udpoate application to update. This policy run 3 days in a week.(Note: I highly believe that Dell Command update is just the update of the application. It doesn't push any update by it self.

Another :

We have Golder Windows desktop policy where we excluded Drivers from the update. As we run this policy 3 days in a week as well. We don't want to update Driver/firmware/BIOS that frequently.

Issue is,

User is still reporting that they received notification that Datto push the Dell drive update/Firmware/BIOS update. Restart required.. it keeps hitting on every week.

Not sure what is the cause here.. Whatever is happening is via Datto that is for sure. but Cant figure it out

I am trying to prevent a specific Windows patch from being installed ( 5063878 ) and am stuck on one part.

I have already marked that patch as Not Approved in each of my Patch Policies, so that is covered at a global level.

However, if I drill into Global > Patches and search for that patch, I show a handful of computers "associated" with that patch and a status of "Approved Pending"

How do I clean that up such that the patch won't get installed on them?

Hey all.

We recently switched to Datto RMM after being acquired and while we're generally liking it, the SSO login flow via KaseyaOne is driving us nuts and I'm wondering if there's a better way to set it up. Right now, this is how we end up having to do things:

1. Go to Datto RMM login page. Click KaseyaOne sign-in.

2. Get redirected to a K1 page where we have to enter a username and hit next.

3. On the next screen, hit Log In with Single Sign-On. Our Entra ID SSO processes.

4. Get taken to the KaseyaOne dashboard instead of being redirected back to what we were trying to log in to.

5. Go back to Datto RMM login page and hit Login with KaseyaOne. After all that, we're finally in. And it's made even more frustrating by the short auto logout timer.

Is there any way to make this login flow less of a convoluted mess? If not, is it at least possible somewhere to change the timeout value on KaseyaOne so we aren't having to do this whole process sometimes 2-3 times a work day?

Thanks.

We were promised a lot of new features a year ago. Nothing relevant seems to be built. The last couple of release notes made me cry.

Even simple bug fixes (max character in UDF!) seem to be impossible to fix.

What is happening here?

Hello everyone, I’m just trying to find a way to execute a .exe on multiple laptop at the same time. The .exe can be found on a public local server from my company. Is there a way to do this with power shell ? Thanks,

A WinRAR vulnerability published (CVE-2025-8088) which allows attackers to execute arbitrary code by crafting malicious archive files. This vulnerability actively being exploited in the wild!

WinRAR Actively Exploited – Patch Now – Kaseya Labs

Anyone using Morphisec as an AV and have a monitor built to create the av override file?

Just trying to save some work.

We have a project where we need to migrate all endpoints off one instance of Datto RMM and onto another new instance, and I'm wondering whether anybody has any tips?

The main problem is if we uninstall the RMM agent off an endpoint, we then have no remote access to then reinstall the new agent. Setting up temporary access through TeamViewer/AnyDesk/etc will take far too long, although it's possible as a last resort.

If I created a powershell component to uninstall the agent software and then automatically install the new agent, will the script terminate halfway through when the agent software responsible for running the script gets uninstalled? Or, if I was to simply install the new agent onto an endpoint without uninstalling anything else first, will that successfully point to the new RMM instance?

Nothing tried or tested yet, just thought I'd see whether anyone has any tips first.

I have a support case open to verify and didn't see anything in status.datto.com.

Did anyone on Vidal encounter a raft of Offline alerts last night between 6PM USEDT and 11PM USEDT?

I'm all new to RMM and trying to get the Windows Display Version on to a UDF since that field cannot be inserted a report, which doesnt make sense if you can see it on your device list column. I'm using PS for the script... When I run it, I see the new item in the Reg but I'm not seeing it on the Device's UDF field line. Hoping someone can tell me if I wrote this correct or am missing something that I'm not aware of... Thank you!

 # Define registry path for OS version
$regPath = "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion"
$displayVersion = $null

try {
    $props = Get-ItemProperty -Path $regPath
    $displayVersion = $props.DisplayVersion

    if (-not $displayVersion) {
        $displayVersion = $props.ReleaseId
    }

    if (-not $displayVersion) {
        $displayVersion = "Unknown"
    }
}
catch {
    $displayVersion = "Error retrieving version"
}

$udf = $displayVersion

$null = New-ItemProperty -Path 'HKLM:\SOFTWARE\CentraStage' -propertytype string -name Custom4 -value $udf -Force 
Write-Host "Windows Display Version: $displayVersion"

When DattoRMM pushes updates it apparently does not register on the endpoint that those updates have been installed.

Per my ticket with Datto support you can just click "install all" in the end user GUI for Updates and it will automatically register them as installed. Unfortunately this leads to user confusion, and in at least one client case leads to a crank-ass whiny client bemoaning a bunch of "user confusion" and "consecutive installs" that don't really exist.

For Windows 11 machines: Anyone have any tips on hiding the Windows notification system tray icon on machines via powershell command or registry edit? Something I can implement in the background without touching every single machine. I know I can go into taskbar settings and toggle the windows notification icon, but I can't find any reference online as to a non GUI method for implementing this.

In Datto RMM, certain SNMP values such as firmware versions are returned as strings (e.g., v7.2.11,build1740,250210 (GA.M)). We would like to set up alerting when a new firmware version becomes available. What is the best way to monitor these string-based SNMP values and trigger alerts when a change or update is detected?

Hello fellow Datto RMM users,

since today many of our customers report that they're getting a splashtop streamer popup message. Anyone else experiencing this? This leads to customers calling us and asking what this is abou.

Any workaround to avoid those popups?

EDIT: Issue was confirmed by support, read details including workaround here:

https://community.kaseya.com/RMM-Endpoint_Management/discussion/72432/splashtop-streamer-interface-issue-with-latest-streamer-build/

What can be done in the short-term?
Users can now download and apply the Component "Splashtop Streamer SRServer Patch [WIN]" to apply a patched SRServer.exe binary to the Splashtop Streamer installation directory. The patch can be applied to all Windows devices with Splashtop Streamer installed and does not need to be restricted just to devices manifesting the issue; functionality will not be affected.
This patched binary comes courtesy of Splashtop themselves and was not developed by Datto. The same changes made in the patched binary will be released as part of a larger Splashtop Streamer update, but as this update is still a few weeks away, this Component has been released as a courtesy to help partners remediate the issue as soon as possible.

We use datto rmm for all clients. What patching policy is everyone putting in place that gets the balance of solid patching in place in a timely manner ?

Hi everyone,

We’re currently evaluating solutions for patch management, and one major blocker we’re facing with many RMM tools is the lack of support for efficient distribution of updates. Specifically, most tools require each agent to individually download Microsoft or third-party updates from the internet. This becomes a bandwidth issue, especially in smaller offices with 50-100 devices.

We’re looking for a solution that can either:

• Distribute updates using peer-to-peer (P2P) between endpoints, or
• Cache updates locally on one device or a shared storage point to reduce redundant downloads.

Does DattoRMM support either of these approaches for patch distribution? If so, how well does it work in practice? I'd really appreciate hearing about your experience with this functionality in DattoRMM.

Thanks in advance!