RMM & Monitoring

The RMM Policies interface for managing monitoring configurations

Overview

RAD Repairs includes a full Remote Monitoring and Management (RMM) platform built for Managed Service Providers (MSPs) and repair shops that offer managed services. Install the lightweight agent on your customers' Windows computers to monitor health and security, run scripts remotely, receive alerts, automate remediation, provide remote support, and offer cloud backup — all from the same system that handles your tickets, invoices, and customers.

Policies & Monitoring

Create monitoring policies with configurable thresholds for performance, stability, hardware, security, and Windows Defender. Assign them to customers, folders, or individual assets.

Script Automation

Run PowerShell, Batch, and Bash scripts on remote devices instantly over WebSocket. Build a reusable script library with runtime variables and attached files.

Alerts & Auto-Remediation

25 alert types covering malware, BSODs, disk failures, failed logins, and more. Build remediation rules that automatically run scripts, create tickets, or send emails when alerts fire.

Remote Access & Backup

Connect to managed devices with your own RustDesk or ScreenConnect infrastructure, and offer opt-in cloud backup powered by your own Comet Backup server.

The RMM Agent

The RAD RMM agent is a lightweight Windows service that runs on each managed computer. Once installed, it:

• Checks in every 5 minutes so you always know whether a device is online
• Syncs hardware inventory hourly - CPU, memory, storage, motherboard, BIOS, video cards, network, OS details, and more
• Collects installed software and missing Windows updates during each hardware sync, powering the Software Inventory and patch reports
• Maintains a persistent WebSocket connection for instant command delivery (scripts start within seconds on online devices), with automatic fallback to HTTP polling if the connection drops
• Monitors the system continuously based on the assigned policy and raises alerts in real time
• Auto-updates itself - the agent checks for new versions every hour and verifies every download with a SHA-256 checksum before installing, so your fleet stays current without any manual work
• Keeps the RMM Monitor tray app running in the logged-in user's session (checked every 10 minutes), giving your customers a branded way to reach you
• Runs in Safe Mode - the agent registers to start in Safe Mode and Safe Mode with Networking, so it keeps running and stays remotely manageable even when a machine is booted into safe mode (for example, during malware cleanup)

Installing the Agent

Agent installers are generated per customer, so every device automatically enrolls under the right account. To generate an installer:

Maintenance Plans

Every managed asset belongs to a maintenance plan tier: Calling Card, Bronze, Silver, or Gold. You can rename the tiers with custom display names in Admin Settings > RMM Settings to match your own service offerings.

• Automatic billing - plan pricing feeds recurring invoices, so managed devices are billed automatically each cycle
• Per-asset plans - change any asset's plan from its detail page with the Change Plan button
• Plan marketing - a public plans widget can be embedded on your website, and plan-specific email marketing is available in Admin Settings

RMM Policies

Policies define what to monitor and when to alert. Create policies for different device types or customer requirements, then assign them to customers, asset folders, or individual assets.

Managing RMM monitoring policies

Creating Monitoring Policies

To create a new monitoring policy:

Available Monitors

Each policy can enable monitors across five categories with configurable thresholds:

Performance Monitors

Stability Monitors

Hardware Monitors

Security Monitors

Windows Defender Monitors

Assigning Policies

Policies can be assigned at three levels:

• Customer Assignment - Assign a policy to a customer to cover all their assets
• Folder Assignment - Assign a policy to an asset folder (e.g., "Servers" or "Front Office") to override the customer default for that group
• Asset Assignment - Assign a policy directly to a single asset when it needs special handling
• View Assignments - Open a policy and check the "Assignments" tab to see which customers and folders are using it

Asset Folders

Each customer's assets can be organized into folders. Folders are useful for:

• Separating locations, departments, or device types (e.g., "Warehouse PCs", "Servers")
• Applying a different policy to a group of devices via folder assignment
• Generating folder-specific installers so new devices enroll directly into the right folder

RMM Scripts

Execute PowerShell, Batch, and Bash scripts on remote devices for automation, maintenance, and troubleshooting. Build a library of reusable scripts with runtime variables and attached files.

The RMM Scripts library for managing automation scripts

Supported Script Types

Script Library

The script library stores your automation scripts for reuse. Each script includes:

• Name - Descriptive name for quick identification
• Description - Explanation of what the script does
• Category - Organize scripts by purpose (Maintenance, Security, Cleanup, etc.)
• Script Type - PowerShell, Batch, or Bash
• Script Content - The actual script code with syntax highlighting
• Runtime Variables - User-provided inputs when running the script (text, number, dropdown, checkbox, password)
• Required Files - Attach files from the File Library (installers, config files) that the agent downloads before running the script; downloads are SHA-256 verified
• Run As - Execute as System account or logged-in user
• Timeout - Maximum execution time in seconds (default 300)
• Favorites - Mark frequently used scripts for quick access

File Library

The File Library tab on the Scripts page stores files your scripts need - software installers, configuration files, license files, and so on. Attach files to a script as Required Files, and each agent downloads and verifies them (SHA-256 checksum) before the script executes.

Running Scripts

Run On-Demand

1. Go to RMM > Scripts in the main navigation
2. Find the script you want to run and click the Run button
3. Select one or more assets from the asset selector (you can search and filter)
4. Fill in any runtime variables if the script requires them
5. Optionally check "Skip Offline Assets" to avoid queuing for offline devices
6. Click Execute Script

Online devices receive the command instantly over the agent's WebSocket connection and typically start executing within seconds. Offline devices run the script when they next check in (unless skipped). You can also run a script on a single device from its asset detail page.

For ad-hoc, one-off runs you don't need a policy at all: on the Assets page you can select multiple devices and use Run Script, Reboot, or Broadcast a message to all of them at once. See Assets & RMM > Bulk Actions on Devices.

Scripts in Policies

Scripts can be attached to policies in two ways:

Setup Scripts

Run when an asset first receives the policy or based on conditions:

• Always - Run every time the agent checks in
• If Never Run - Run only once per asset
• If Not Run Within - Run if the script hasn't executed within a specified number of days

Recurring Scripts

Run on a schedule for all assets with the policy:

• Hourly - Run at a specific minute each hour
• Daily - Run once per day at a specified time
• Weekly - Run on specific days of the week
• Monthly - Run on a specific day of the month
• Manual Only - Only run when manually triggered

Run History

View script execution results in the Run History tab:

• Status - Pending, Running, Completed, Failed, Timeout, or Cancelled
• Exit Code - The script's exit code (0 typically indicates success)
• Duration - How long the script took to execute
• Standard Output - The script's console output
• Standard Error - Any error messages

Filter history by status and paginate through results. Click on any run to view detailed output. Each asset's detail page also shows a Script History tab scoped to that device.

Alerts

The agent raises alerts for 25 different event types across performance, stability, hardware, security, and Windows Defender categories - everything from malware detections and BSODs to SMART disk warnings, failed logons, RDP logons, pending reboots, service crashes, and admin group changes. Which alerts fire on a given device is controlled by its assigned policy.

The Virus & Defender Alerts dashboard

Virus & Defender Alerts Page

The Virus Alerts page gives you a security-focused view of the fleet:

• Malware Detection - Alerts when Windows Defender detects malware or threats
• Protection Status - Alerts when real-time protection is disabled or the Defender service stops
• Definition Updates - Alerts when virus definitions are outdated
• Scan Errors - Alerts when Defender scans fail or encounter errors

Alert Information

Each alert displays:

Filtering and Managing Alerts

• Summary Cards - Quick view of critical, warning, and info alert counts
• Filter Tabs - Filter by All, Malware, Protection, Updates, or Scans
• Time Range - View alerts from last 24 hours, 7 days, 30 days, or all time
• View Asset - Click to navigate to the asset detail page
• Resolve - Mark an alert as resolved to remove it from the active list

Alerts also appear on each asset's detail page, and can trigger automatic actions through Automated Remediation (below).

Automated Remediation

The Remediation page lets you build rules that respond to alerts automatically - fix common problems, open tickets, and notify people without a technician touching anything. Rules cover both agent alerts and Comet backup failure alerts.

How Rules Work

Each rule has a set of conditions and a set of actions. When a new alert matches ALL of a rule's conditions, its actions run automatically.

Conditions

Conditions match on alert and asset properties:

• Alert fields - title, message, type, category, severity, source
• Asset fields - hostname, operating system, customer
• Operators - is, is not, and contains

Actions

Safety Controls

• Run once per alert - when checked (the default), the rule fires only once per alert instance instead of re-firing every time the alert re-occurs
• Max runs per asset per day - caps how many times a rule can fire on the same device in one day (default 11), preventing runaway loops
• Enable/disable toggle - turn rules off without deleting them

Execution Log

Every rule execution is logged - which alert triggered it, which actions ran, and whether they succeeded - so you can audit exactly what your automation did and when.

RMM Monitor Tray App

Every managed device gets the RMM Monitor tray app - a small icon in the Windows system tray that gives your customers a one-click way to reach you, branded as your company. The agent installs it automatically and makes sure it's running in the user's session (checked every 10 minutes), and it starts with Windows.

Your Branding

The tray app displays your company name, phone number, and website, uses your custom program icon, and follows your accent color - all configured in Admin Settings > RMM Settings.

What Customers Can Do

• Click the tray icon - opens a support request form. The customer describes their problem and can optionally tick a "Send a screenshot" checkbox (unchecked by default). Submitting creates a ticket under the asset's customer with status Customer Reply, so it shows up in your "needs attention" queue immediately. The ticket is pre-filled with the device's details, and the screenshot (if included) is attached to the ticket.
• Shift+click the tray icon - opens the activity window, a live feed of what the agent has been doing on the device (script runs, deployments, support requests).
• Toast notifications - when you deploy software or run a script that completes on their machine, the customer sees a brief self-closing Windows notification, so managed work is visible without being intrusive.

Remote Access

RAD Repairs integrates with two bring-your-own remote access tools: RustDesk and ConnectWise ScreenConnect. Both are configured in the App Center and used straight from the asset detail page.

RustDesk (Self-Hosted)

1. Stand up your own RustDesk server (hbbs + hbbr), and install the RustDesk client on your technician machine pointed at it (installed, not portable - installation registers the rustdesk:// link the RustDesk button uses)
2. On that client: Settings > Network > Unlock network settings > Export Server Config, then paste the copied string into App Center > RustDesk > Server Config String. NOTE: delete any leading = (equals) signs - they are just padding, not part of the config string (the field also strips them automatically on save)
3. Enable Remote Access (RustDesk) on the RMM policies where you want it - the agent deploys RustDesk automatically on those assets using RustDesk's official deployment script. For a one-off machine outside those policies, click Install RustDesk on its asset detail page instead
4. Click the RustDesk button on any asset detail page to connect - the machine's unattended-access password (set during deployment) is copied to your clipboard automatically; paste it at the prompt and check Remember password for one-click access from then on

ScreenConnect (Bring Your Own Instance)

1. Enter your ScreenConnect instance URL in App Center > ScreenConnect (cloud instances and self-hosted/on-premise instances with a custom port both work)
2. On an asset's detail page, click Install ScreenConnect - the RMM deploys the ScreenConnect access agent to the device, preconfigured for your instance and organized by customer name
3. Once installed, the button becomes ScreenConnect and joins that device's session directly - your Host page opens and auto-launches the connection

Cloud Backup (Comet)

Offer managed cloud backup to your RMM customers using your own Comet Backup server. Configure your Comet Server URL and admin credentials in App Center > Comet Backup (credentials are stored encrypted).

How It Works

• Opt-in at installer creation - the cloud backup question is asked every time an installer is generated (by staff or via the customer portal). Only devices enrolled with a backup-enabled installer get the backup client; existing assets are never changed.
• Automatic provisioning - one Comet user account is created per customer, and the backup client is deployed automatically to opted-in devices as they enroll
• Status monitoring - backup job status is polled every 30 minutes; each asset's detail page shows a backup badge (Backup OK with last backup date, Backup FAILED, or opted in / not installed)
• Retry install - if a device opted in but the client didn't install, an Install Backup button on the asset page redeploys it
• Failure alerts - backup failures raise alerts, and you can optionally have tickets created automatically for them
• Billing data - per-customer backup device counts are tracked so you can bill for backup seats

Automated Cleanup

When you delete an asset or customer, their Comet backup devices and user account aren't removed immediately - cleanup is scheduled after a configurable buffer (90 days by default) so data isn't lost if the deletion was a mistake. Pending cleanups are listed and can be cancelled, and a cleanup is cancelled automatically if the device re-registers.

Software Inventory & Missing Patches

During each hourly hardware sync, the agent collects the device's installed software list and its missing Windows updates. This data powers three fleet-wide reports on the Reports page:

• Software Inventory - every installed application across your managed endpoints, with version and publisher
• Missing Patches by KB - which Windows updates are missing fleet-wide, grouped by KB number with severity and affected devices
• Vulnerable Systems - at-risk devices ranked by missing critical/important patches and staleness

Asset Information

View hardware and system information for managed devices from the Asset detail page.

Collected Information

For each managed asset, the agent collects and displays:

• System Information - OS version, hostname, serial number, model, last user, last boot time
• CPU Details - Processor name, manufacturer, cores, logical cores, max clock speed
• Memory - Total RAM, installed DIMMs
• Storage - Physical and logical drives with capacity and free space
• Network - Local and public IP addresses

See the Assets page for full details on the asset list and detail views, including archiving assets and uninstalling agents.

Frequently Asked Questions

Related Documentation

Assets Reports Admin Settings Customers Tickets