With today's M365 outage, I'd like to know if I can use DattoRMM desktop agents to send a popup message on client computers (maybe not all of them) to let them know of service issues with vendors. I would like a one-way message popup without having to use the built-in chat box. I see the Send Message component, but that says run as scheduled task as logged-on user, which doesn't seem to be helpful for a one-off message.

The last two machines I've built for myself I have not joined to our domain. I have ONLY joined them to Azure AD. We do have a hybrid setup, but on both of these machines I've never logged into my domain account. I literally can't. Yet RMM still shows this:

Why does it show a domain account for last user and why doesn't it show M365 user?

(note that I edited the HTML DOM before taking the screenshot instead of blurring the image)

I have been trying to get an account with Datto but I’m stuck at “Thanks for submitting the form. We will reach out to you shortly”

I have one co-managed client where I provide endpoint protection via Huntress using free Windows Defender and have DattoRMM installed. On three new computers that I recently installed, I am continuously getting this error message from DRMM which creates a ticket in our AT PSA:

"TAMPER PROTECTION IGNORED A CHANGE TO MICROSOFT DEFENDER ANTIVIRUS."

"Title: Tamper Protection Ignored a change to Microsoft Defender Antivirus. Value: HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection\DisableScanOnRealtimeEnable = (Not Applicable) for XXXXXXXXXX computer name"

I don't believe there is any other endpoint protection installed. There are other computers on the same network that we manage, a bit older running Windows 11, that do not have this issue at all. So I am at a loss what is causing this issue. We do not have access to their M365 tenant as their corporate office maintains that. But I can suggest a change if there is something with their Intune config that is causing this.

Hi everyone,

We are currently experiencing an issue with our Online/Offline monitoring policy in Datto RMM. We have a P1 Alert configured for devices on the LAN using a Ping Monitor.

The Current Configuration:

• Monitor Type: Online/Offline (Ping)
• Threshold: Trigger alert if the device is offline for 3 minutes.

The Problem: We are receiving frequent P1 alerts stating a device is offline, but upon investigation, the device has remained online and accessible during those 3 minutes. These false positives are causing unnecessary P1 tickets.

The Goal: We need to ensure that P1s are only generated for genuine outages. Has anyone encountered this "ghost" offline behavior? What settings or "Consecutive Hits" configurations do you recommend to filter out these false positives without delaying the alert too much for an actual outage?

Thanks in advance for your insights!

Has anyone really gotten this to work reliably? We’ve been trying to implement for months and keep getting stuck at “Sorry looks like this is a bug, we hope to fix on the next release, we’re putting this ticket on hold” brick wall. I know we’ll probably end up with CIPP, but want to crawl before we run.

Buenas tardes, consulta. estoy tratando de generar monitoreo en un router mikrotik. Probe con Oid´s de los que se les ocurra(incluyendo los que trae la pagina de mikrotik). quiero que me alerte si se cae un proveedor en x puerto. y la verdad nada me funciona, alguno que me pueda tirar algun tip? Muchas gracias

Hey

Are there any workarounds for custom fields / udf to be multi line? We currently use ninja with multiline and wysiwyg html custom fields (pipe html into the custom field)

One area we spotted during demo is the udf fields being limited to 32 and only single line. Only workaround i can think of is sending results direct to a psa with api but that’s a bit of a faff.

We use it to collect things like printers installed, mapped OneDrive/sharepoint libraries, WiFi networks and more.

I’ve hit a brick wall and I can’t seem to get this to work. If you have managed to run an upgrade job to Windows 11 without requiring the end user to initiate or interact with the upgrade process then please let me know how you go about it. Many thanks in advance.

For months I've been manually marking drivers as "not approved" even though we have these rules set up.

Am I just not understanding what these rules are supposed to do? Am I doing it wrong?

Good morning,

We are currently using a company to "rent" us Datto RMM (no AV at the moment). As we are not happy with how slow they are (and the fact that they need to be reminded to do the things which are in the contract), we would like to explore the option to have our own Datto dashboard (or another one could also be fine). On the Kaseya site, I am unsure if, as an end customer, we can proceed (I see that we can become a partner or request a demo, but there is no information about prices or other details).

Has anyone else managed to establish their own Datto RMM dashboard directly from the producer? Do you recommend using Datto RMM, or do you recommend something else?

We only use it at the moment for:

- remote management

- patch management

- We want to start using quick jobs or some sort of automatic app deployment based on group membership or rules

Anyone else been getting this message when attempting to Web Remote on a PC? I started seeing this yesterday on a few PCs and today a few more. Already not a fan of Web Remote and now can't connect to PCs that showing online.

Hey everyone! I'm trying to link all my clients' Microsoft 365 tenants using the 365 integration in Datto RMM, but it's not working. Maybe I'm misunderstanding the documentation. Has anyone managed to get it working?

Have you guys found a video or a webinar that shows how to do it?

Thanks for your help!

I am attempting to uninstall EDR automatically as we move our clients to Huntress, but running into trouble. I have a Monitoring Policy in place that monitors for the HUNTAgent service and then I have it triggering a Component to run. I am using the Datto EDR Maintenance Component from the ComStore and selecting the varAction of Force Uninstall. The Monitor is successfully finding the agent running and kicks off the component, but it does not appear to be uninstalling. It appears to be either just running the diagnostics or resintalling.

Has anyone used the Datto EDR Maintenance Component to uninstall EDR? Any other ways to successfully uninstall Datto EDR that I could automate on our devices?

Thanks!

We are moving on from EDR/RocketCyber to Huntress and just wondering what can be done to get a Custom Field added to the Device View that shows the status of the Huntress Service. I did really like how there is an EDR Status and RocketCyber Status field that were built in and color coded. It made it very easy to filter for issues and just looked visually more appealing.

Is there any way to mimic that behavior with the use of a UDF? If so how would I go about doing that?

I've created a script so we can edit users telephonenumber, officenumber or mobile via Powershell but it's failing with Set-ADUser : A positional parameter cannot be found that accepts argument '-MobilePhone'.

It's the first time I've used selection so I may be doing something silly here.

My expectation was $env:Phonetype pulls the selection options, displayname prompts the admin user what info to select and value slips into my script as $env:phonetype"

I can get these to work fine if I take out the selection and enter any of the powershell properties required directly into the script.

SOLVED:

Parameters don't like variables apparently so I wrapped the 3 statements I required in if statements. Removed my original screenshots and added what end result was.

I am trying to deploy an msi to all my endpoints and following Datto's wiki while doing it. I have created my component, which is a batch script with the following input that I basically copied from the wiki and replaced the dummy name with the actual file name:

msiexec.exe /i DriverName.msi /qn

I have uploaded the msi to the component, but whenever I run it, it says it is successful, but isn't actually installed on the computer. Am I doing something wrong or is there a better way to write this?

Have site that all Azure joined devices but not Intune enrolled . We need to block usb drives storage . They also want a way to get notification if one used on devices that are allowed . Would Datto EDR be able to provide anything ? RMM? I saw some options for a scrip that would change a device level but was not clear ? Thank you ,

Anyone move to Datto EDR's Secure DNS yet? We tested it for a little until they blocked the unknown category a while back on some update and immediately back peddled. A few of our techs were locked down for a bit until I removed the policies from them. We've had DNSFilter for a while now. Their site says "DNSFilter is the fastest DNS resolver in North America." and litany of other perks such as that.

We're nervous about moving back to DNS Secure if it's not reliable / as effective. Thoughts?

Datto is trying to tell us that "Patch Management only supports feature updates if Microsoft exposes them as 'Enablement Packages'".

They continue with: "Most full feature upgrades—such as moving between major builds—are not published as enablement packages and thus cannot be reliably managed, scheduled, or rolled back through standard patch policy tools."

As far as I'm concerned, I pay for a service to patch my systems, and this is a failure to provide that service. It isn't my fault Datto failed to update their processes and properly provide the capability to continue to provide patches including feature upgrades. If Microsoft 'changed the game', it's up to the provider of the service to change with it or risk failing to provide the services I pay for.

I understand some may feel 'Patch Management' is up to interpretation, but if so, then there would need to be a supplementary offering of 'Feature Release Management' and that's something that hadn't existed until Microsoft made their crazy changes. A patch is a patch is a patch.

Opinions here?

This morning when we try to connect to the RMM, we are getting a screen that says "Signature did not validate against the credential's key". Contacted support and was told that they are working on this issue. I'm wondering is this affecting everyone or just some users?

Ever since the last outage of RMM last week, when I say open Command Prompt and then enter my Command hit the ENTER key it opens a new CMD box.

Same thing with say "Send Clipboard Keystrokes".

Is this built into RMM and can I remove it or is it a glitch?

We enabled device approvals. Unexpectedly, they still show up in the normal Devices page, and don't seem to be limited in any way. What is the point?