About This Article

None of this is confidential to the best of my knowledge. The webinar is recorded and I expect all of the new features to make their way into the documentation if they haven’t already. Quotes are best effort, I’m typing them up as they go, so they might not be exact. Some quotes have been cleaned up for grammar and spelling. Finally, the post isn’t chronological, I ordered things so that it fits into understandable narrative.

Panelists

Overview:

Kaseya wants to build out an RMM that is more cloud-focused. Manage M365 in the RMM.

I was (and am) EXTERMELY skeptical of the Kaseya promises to deliver new and better features after the Datto acquisition. That Kaseya did – and does* – purchase companies, ask for 3 year contracts, and only then disclose the purchase is unethical. That said, between the last product update and this one, Kaseya is making actual improvements to their products.

If the product works as advertised this will be real progress. The updates shown today are aimed at things MSPs want, not just what Kaseya wants to sell.

Highlights:

• Launch Web Remote from Autotask and other products
• Track and record time in Web Remote against Autotask tickets
• M365 manager — reset passwords, view logins, see MFA status, see Secure Score and more
• Ingest endpoint data into Autotask for automatic client billing
• Software manager will manage 200 products!

If I were a vendor that had a product that only focused on one of these areas, I’d be thinking about what benefits and features my product had over Datto RMM. Other than not being Kaseya owned (not an insignificant consideration).

*IT Glue, ConnectBooster, AuditIT, TMT, Pulseway. Some of these are good products, there is no need to be deceptive about the purchases.

Datto RMM Usage Statistics

Jobs taking too long to run: Smit promises they are working on it, “we’ve done work here.” From my personal knowledge, this has been an issue for multiple MSPs. My team has gone crazy over it.

Under the hood: upgrading to DotNet 6, especially for better performance on macOS/Linux. Count me a little skeptical, both of these have never performed at par. N.b., Smit thinks that the future of the macOS RMM is in MDM so it is tied into the operating system. I think it will only work when it is MDM.

Autotask

You can now add attachments to the ticket from the Web Remote. That includes grabbing a screenshot (in November) and — maybe in the future — adding files from the endpoint to the ticket.

Great for logs, might be an issue for PII…

Datto Backup Integration

Datto SaaS backup status now available in the RMM dashboard:

It’s real progress towards a single pane of glass.

Coming in the future, link users to SaaS Backup data in the RMM:

Oddly, Spanning integration isn’t on the roadmap. (Spanning is another Kaseya product that covers SaaS backup, it predates Datto as a Kaseya company)

Azure Backups “Cloud Siris”

“Cloud Siris” devices can now back up Azure servers, no physical device required. You can spin up a virtual server through this cloud-based Siris.

myITprocess Integration

This is the same thing that Kaseya went over in their last platform-wide product update, last copy and paste into myITprocess and more direct imports.

New UI Updates

Device Deletions are now available in the new UI.

See what is pending, such as devices that are offline when you hit delete. (There are other problems here today, maybe I’ll write it up in the future)

There are “patch management improvements” such as:

• Customize messages to end users
• Multi language support
• Auto-resolution for patch alerts

Notable missing: promising that patch management actually works.

Activity log is now available in the REST API.

Coming soon: uninstall software at a Global or Site Level.

Smit promises that there will be an end date for the legacy UI, but that it isn’t now. Chaplin: “We are going to start defaulting people to the new ui starting in 12.6. you will still be able to access the old UI”

Co-managed Improvements

M365 Manager

900 partners have access to today, “it will be 100% available to everyone by DattoCon.”

Global View:

Client level view:

Users view:

User level details. Notice the ability to reset M365 passwords in the upper right-hand corner, and the sign-in log with location info at the bottom.

Oddly, in the Q&A a question was asked about if the M365 manager had a read-only mode, not easy to reset a password in read-only. Kaseya answered, “This first release is mostly around displaying data and managing access. We are following Microsoft’s security recommendation and always have security top of mind with everything we build.”

Agent now looks to see if computers are Azure AD joined, and will be able to link users to devices. This is like SaaS Alerts Unify built into Datto RMM.

Roadmap Summary

Events

Q&A

Google Workspace Support (like M365)

no. Gonna get M365 right first.

M365 Costs?

What was shown here today will be included in Datto RMM for no additional charge.

Will Datto add OTP integration when using IT Glue passwords in web remote sessions?

“”Not now. “We have it logged as a request,”

What about the integration problem with ITGlue, is there any progress on fixing it? In concrete terms.

“Yes – this fix will be part of the release we are deploying now. (12.3) – just added to this release today”

IT Glue in Web Remote shows me archived password vault entries. Are you aware of this, and is it on the list to be fixed?

“yes we’ve got this on our radar and it is queued to be addressed shortly.”

Is Splashtop going to be dropped at some point? I am having more and more issues with it…

“Nope, we have no plans to remove it. We want to give people the option for what works best for them. We will be continuing to improve Web Remote but there are no plans to remove any remote technology.”

I agree that Splashtop is not a tier 1 solution at this point.

Will the ALT+TAB be supported in web remote?

“Good idea.” Uhm, yeah.

Will Web Remote replace the ‘agent browser’ in the future? Or will you still invest time in it, and update the agent browser look and feel?

“We do not currently have plans to update the agent browser. We are working on adding more functionality to web remote but have no plans to remove the agent browser.” Yeah good call, the agent browser is awful. It would be nice if they made it less awful until all of its features are integrated into the Web Remote

How can I filter out AT companies – we have a ton that aren’t needed in DRMM, but the mapping seems backward. Every site maps to a company, but not every company maps to a site.

“[We] understand your point, but there were two factors that we wanted to prioritize for this – having multiple sites map to a single company, and the ability to easily “add a new site” for those that don’t exist yet. The tables can be filtered down to show “unmapped only” which can help sift out those you don’t need to see”

Can the Web Remote provide separate menu items to remote, chat or PowerShell?

[No], “we have had some conversation for changing the UI for Web Remote so that you can switch between the chat/powershell/screenshare but we don’t have a current timeline

How do you submit ideas on the ideas portal? Will someone really read what we submit?

“You should be able to submit them here: https://rmm.ideas.datto.com/ideas. we may not respond to every comment/idea but we do look at them and see how/when we can fit them in.”

Are there any plans on adding more widgets, maybe custom widgets?

“It is something we have thought about but do not have firm plans for that right now”

Will the mystery device issue be resolved in the latest release?

No open issue to my knowledge. This is generally related to AV “sandboxing”. https://rmm.datto.com/help/en/Content/3NEWUI/Devices/MysteryDeviceRecords.htm?Highlight=mystery

This is a bad answer. Yes, there are technical roadblocks. I’m confident that Datto/Kaseya could overcome them. Maybe a blog post for another day.

Will Ransomware Detection require a paid license in the future (as expected) or will it remain free indefinitely?

“We do not have a blanket approach, it is determined on a per customer basis” Ha. Negotiate well my friends.

Will quick jobs get an option to set an expiration upon creation, either as a default or user specified?

“We have no plans to add an expiration for quick jobs.” This is a bad answer. The problem is that if you trigger a job and it doesn’t run now — say the device is offline — it will run whenever the device turns back on. If it is user-impacting, or restarting a service (say DNS), it will now happen a point you don’t control. There ought to be a default setting for quick job expirations, I’d say an hour.

When will server metrics be added to the API?

No firm timeframe on it, “but we working on splitting off some of our engineers to be dedicated to the API so we can have more improvements there”

Any Patch management for MAC computers coming in the future?

“Yes, we are hoping to address that in Q1/Q2.” Yeah maybe. You can use softwareupdate -l to get data and other flags to install them, so it certainly is possible.

usage: softwareupdate <cmd> [<args> ...]

** Manage Updates:
	-l | --list		List all appropriate update labels (options:  --no-scan, --product-types)
	-d | --download		Download Only
	-i | --install		Install
		<label> ...	specific updates
		-a | --all		All appropriate updates
		-R | --restart		Automatically restart (or shut down) if required to complete installation.
		-r | --recommended	Only recommended updates
		     --os-only	Only OS updates
		     --safari-only	Only Safari updates
		     --stdinpass	Password to authenticate as an owner. Apple Silicon only.
		     --user	Local username to authenticate as an owner. Apple Silicon only.
	--list-full-installers		List the available macOS Installers
	--fetch-full-installer		Install the latest recommended macOS Installer
		--full-installer-version	The version of macOS to install. Ex: --full-installer-version 10.15
	--install-rosetta	Install Rosetta 2
	--background		Trigger a background scan and update operation

** Other Tools:
	--dump-state		Log the internal state of the SU daemon to /var/log/install.log
	--evaluate-products	Evaluate a list of product keys specified by the --products option
	--history		Show the install history.  By default, only displays updates installed by softwareupdate.

** Options:
	--no-scan		Do not scan when listing or installing updates (use available updates previously scanned)
	--product-types <type>		Limit a scan to a particular product type only - ignoring all others
		Ex:  --product-types macOS  || --product-types macOS,Safari
	--products		A comma-separated (no spaces) list of product keys to operate on.
	--force			Force an operation to complete.  Use with --background to trigger a background scan regardless of "Automatically check" pref
	--agree-to-license		Agree to the software license agreement without user interaction.

	--verbose		Enable verbose output
	--help			Print this help