RMM & Monitoring

The RMM Policies interface for managing monitoring configurations

Overview

RAD Repairs includes Remote Monitoring and Management (RMM) capabilities designed for Managed Service Providers (MSPs) and IT departments. Create monitoring policies, run scripts on remote devices, and receive Windows Defender security alerts from a central interface.

Policy Management

Create monitoring policies with alert thresholds for CPU, memory, disk space, and security events. Apply policies to customers or asset groups.

Script Automation

Run PowerShell, Batch, and Bash scripts on remote devices. Build a library of reusable scripts with runtime variables and scheduling.

Windows Defender Alerts

Monitor Windows Defender status including malware detection, protection state, definition updates, and scan errors.

Remote Access

Optional RustDesk integration for remote desktop access to managed devices (requires RustDesk configuration).

Who Should Use RMM

The RMM module is designed for organizations that need to remotely manage and monitor multiple devices:

Managed Service Providers (MSPs)

Useful for MSPs managing multiple client environments. Configure alert policies, run maintenance scripts, and monitor Windows Defender status across client devices.

Internal IT Departments

Helpful for IT teams managing company devices. Automate routine maintenance tasks and monitor security status across your fleet.

Key Use Cases

Automated Maintenance - Schedule and run maintenance scripts across managed devices
Security Monitoring - Monitor Windows Defender status, detect threats, and receive alerts when protection is disabled
Remote Script Execution - Run PowerShell, Batch, or Bash scripts on remote devices for troubleshooting and maintenance
Asset Inventory - Track hardware information and software across managed devices
Alert Management - Configure thresholds for CPU, memory, disk space, and security events

RMM Policies

Policies define what to monitor and when to alert. Create policies for different device types or customer requirements, then assign them to customers or asset groups.

Managing RMM monitoring policies

Creating Monitoring Policies

To create a new monitoring policy:

Navigate to RMM Policies

Go to RMM > Policies in the main navigation, then click New Policy.

Configure Policy Details

Enter a descriptive name for the policy (e.g., "Standard Workstation Monitoring" or "Server Critical Alerts"). Add a description explaining the policy's purpose. You can also enable RustDesk remote access if configured in Admin Settings.

Configure Monitors

Enable monitors and set thresholds in categories: Performance, Stability, Hardware, Security, and Windows Defender. See the Monitors section below for details.

Configure Scripts and Updates

Optionally add setup scripts (run when policy is first applied) and recurring scripts (run on schedule). Configure Windows Update settings.

Available Monitors

Each policy can enable monitors across five categories with configurable thresholds:

Performance Monitors

Monitor	Description	Default Threshold
High CPU Usage	Alert when CPU consistently exceeds threshold	90%
Low Memory	Alert when available memory falls below threshold	10% free
Low Disk Space	Alert when free disk space falls below threshold	10% free
Offline Detection	Alert when asset stops checking in	30 minutes

Stability Monitors

Monitor	Description
Application Crashes	Detect application crashes via Windows Event Log
Blue Screen (BSOD)	Detect system crashes and unexpected shutdowns
High Uptime Alert	Alert when system hasn't been rebooted (configurable days)

Hardware Monitors

Monitor	Description
Device Manager Errors	Detect driver and device errors
HD SMART Failure	Detect hard drive SMART warnings and failures
Disk Fragmentation	Alert when HDD fragmentation exceeds threshold

Security Monitors

Monitor	Description
Firewall Disabled	Alert when Windows Firewall is turned off
Failed Login Attempts	Alert on multiple failed login attempts (configurable threshold per hour)
New User Created	Alert when new local user accounts are created

Windows Defender Monitors

Monitor	Description
Real-time Protection Disabled	Alert when Windows Defender real-time protection is turned off
Malware Detected	Alert when Windows Defender detects malware or threats
Malware Action Failed	Alert when Defender fails to quarantine or remove a threat
Definitions Outdated	Alert when virus definitions are out of date (configurable days)
Scan Error	Alert when a Defender scan fails or encounters an error

Assigning Policies

Policies are assigned to customers or asset folders. To view or change assignments:

Customer Assignment - Edit a customer's settings to assign a policy to all their assets
Folder Assignment - Assign a policy to an asset folder for organizational grouping
View Assignments - Open a policy and check the "Assignments" tab to see which customers and folders are using it

Policy Priority

Each asset inherits its policy from its customer or folder. Direct asset-level policy assignment may be available depending on your configuration.

RMM Scripts

Execute PowerShell, Batch, and Bash scripts on remote devices for automation, maintenance, and troubleshooting. Build a library of reusable scripts with runtime variables.

The RMM Scripts library for managing automation scripts

Supported Script Types

RAD Repairs supports three scripting languages:

Language	Target OS	Use Cases
PowerShell	Windows devices	Windows Update management, software installation, registry changes, system configuration
Batch (.bat)	Windows devices	Simple command-line tasks, legacy script support
Bash	Linux and macOS	Package management, service control, file operations

Script Library

The script library stores your automation scripts for reuse. Each script includes:

Name - Descriptive name for quick identification
Description - Explanation of what the script does
Category - Organize scripts by purpose (Maintenance, Security, Cleanup, etc.)
Script Type - PowerShell, Batch, or Bash
Script Content - The actual script code with syntax highlighting
Runtime Variables - User-provided inputs when running the script (text, number, dropdown, checkbox, password)
Run As - Execute as System account or logged-in user
Timeout - Maximum execution time in seconds (default 300)
Favorites - Mark frequently used scripts for quick access

Built-in Scripts

RAD Repairs includes built-in scripts for common tasks. Built-in scripts are marked with a "BUILT-IN" badge and cannot be edited, but you can clone them to create customized versions.

Running Scripts

Scripts can be executed from the Scripts page:

Run On-Demand

Go to RMM > Scripts in the main navigation
Find the script you want to run and click the Run button
Select one or more assets from the asset selector (you can search and filter)
Fill in any runtime variables if the script requires them
Optionally check "Skip Offline Assets" to avoid queuing for offline devices
Click Execute Script to queue the script

Scripts in Policies

Scripts can be attached to policies in two ways:

Setup Scripts

Run when an asset first receives the policy or based on conditions:

Always - Run every time the agent checks in
If Never Run - Run only once per asset
If Not Run Within - Run if the script hasn't executed within a specified number of days

Recurring Scripts

Run on a schedule for all assets with the policy:

Hourly - Run at a specific minute each hour
Daily - Run once per day at a specified time
Weekly - Run on specific days of the week
Monthly - Run on a specific day of the month
Manual Only - Only run when manually triggered

Run History

View script execution results in the Run History tab:

Status - Pending, Running, Completed, Failed, Timeout, or Cancelled
Exit Code - The script's exit code (0 typically indicates success)
Duration - How long the script took to execute
Standard Output - The script's console output
Standard Error - Any error messages

Filter history by status and paginate through results. Click on any run to view detailed output.

Virus & Defender Alerts

Monitor Windows Defender status and receive alerts when security issues are detected on managed devices.

The Virus & Defender Alerts dashboard

Windows Defender Monitoring

The Virus Alerts page focuses on Windows Defender status and events:

Malware Detection - Alerts when Windows Defender detects malware or threats
Protection Status - Alerts when real-time protection is disabled
Definition Updates - Alerts when virus definitions are outdated
Scan Errors - Alerts when Defender scans fail or encounter errors

Note on Antivirus Integration

The current implementation monitors Windows Defender. Integration with third-party antivirus products (Bitdefender, Malwarebytes, ESET, Webroot, etc.) may be available depending on your configuration and agent version.

Alert Information

Each alert displays:

Field	Description
Severity	Critical, Warning, or Info based on alert type
Alert Type	Malware, Protection, Updates, or Scan category
Title & Message	Description of the security event
Asset	Which device triggered the alert (links to asset detail)
Customer	Customer the device belongs to
Time	When the alert was detected
Occurrence Count	Number of times this alert has occurred

Filtering and Managing Alerts

Use the alerts dashboard to filter and manage security events:

Summary Cards - Quick view of critical, warning, and info alert counts
Filter Tabs - Filter by All, Malware, Protection, Updates, or Scans
Time Range - View alerts from last 24 hours, 7 days, 30 days, or all time
View Asset - Click to navigate to the asset detail page
Resolve - Mark an alert as resolved to remove it from the active list

Alert Actions

Automatic ticket creation for high-severity threats may be available depending on your policy configuration.

Asset Information

View hardware and system information for managed devices from the Asset detail page.

Collected Information

For each managed asset, the agent collects and displays:

System Information - OS version, hostname, serial number, model
CPU Details - Processor name, manufacturer, cores, logical cores, max clock speed
Memory - Total RAM, installed DIMMs
Storage - Disk drives and capacity
Network - IP addresses and MAC addresses

Note on Real-Time Monitoring

Live performance metrics (real-time CPU/memory usage graphs, network throughput) may be available depending on your configuration and agent version. The current implementation focuses on hardware inventory and alert-based monitoring through policies.

Remote Access (RustDesk)

RAD Repairs supports RustDesk integration for remote desktop access to managed devices.

Enabling Remote Access

To enable RustDesk remote access:

Configure your RustDesk server settings in Admin Settings
Edit an RMM policy and enable the "Enable Remote Access (RustDesk)" option in the General tab
Assets with this policy will have RustDesk deployed when the agent checks in

RustDesk Configuration Required

RustDesk integration requires a RustDesk server (self-hosted or cloud) and proper configuration in Admin Settings before remote access will function.

Frequently Asked Questions

How do I install the RMM agent on customer devices?

Agent deployment varies by configuration. Check with your administrator for agent installer downloads and deployment instructions. The agent may be deployed via the RMM installer script or through your existing deployment tools.

Can I run scripts on devices that are currently offline?

Scripts are queued for execution. If you select "Skip Offline Assets" when running a script, offline devices will be excluded. Otherwise, the script will be queued and executed when the device comes online.

What script types are supported?

PowerShell (.ps1), Batch (.bat), and Bash scripts are supported. Use the appropriate type for your target operating system.

What happens if a script takes too long to run?

Scripts have a configurable timeout (default 300 seconds / 5 minutes). If a script exceeds the timeout, it's terminated and marked as "Timeout" in the results. You can increase the timeout up to 3600 seconds (1 hour) when creating or editing the script.

How do I resolve a virus alert?

Click the "Resolve" button on any alert to mark it as resolved and remove it from the active alerts list. Investigate the issue on the device before resolving to ensure the threat has been addressed.

Can I edit built-in scripts?

Built-in scripts cannot be edited directly. To customize a built-in script, use the "Clone" button to create a copy that you can modify.

How do I assign a policy to a customer?

Edit the customer record and select the desired policy from the RMM Policy dropdown. All assets belonging to that customer will inherit the policy settings.

What are runtime variables?

Runtime variables allow users to provide input values when running a script. Define variables (text, number, dropdown, checkbox, or password) in the script editor, then use $VariableName in your script code to reference them.

Need Help?

Have questions about RMM setup or configuration? Contact our support team for assistance.

Contact Support