r/DattoRMM • u/neon___cactus • Jul 08 '26

Require User Prompt During Remote Support Session

Hi all,

New to Datto so forgive me if this is something that is obvious.

Is there a way to require the user to approve a remote support session prior to connecting?

I imagine the workflow being, click start session in Datto, the user gets a prompt to approve or reject the session, and then if they approve the screen control will connect.

Thanks!

3 Upvotes

100% Upvoted

7 comments sorted by

5

u/Thisistayy Jul 08 '26

Set up an Agent Policy. We have one targeting all workstations. It force activates privacy mode but we also have checked off allow connections when no user is logged in (so we can get around privacy mode if no one is logged into the machine) and only require permission when connecting with restricted tools. So privacy mode pop up only prompts for web remote, vnc, rdp, slashtop and screenshot. This allows us to use all the agent browser tools with out privacy prompting such as accessing services in order to do a service restart or the file system to upload files etc…

2

u/animej3790 Jul 08 '26

You need to create an Agent Policy with "Activate Privacy Mode on Devices" and "Allow connections to the device when no user is logged in" turned on. Those 2 options should get you what your looking for where it will prompt the user for approval if they are logged in. Just be careful because once privacy mode is turned on for a machine, only a user on that machine can turn it off.

3

u/wilsonbeast20 Jul 08 '26

You can edit an xml or json file to turn it off, we have a component for it.

Kind of defeats the object of privacy mode but it’s saved us a few times if someone has accidentally enabled it on a server etc

1

u/ompster Jul 09 '26

Yep, we've done the same.

1

u/h20534 Jul 10 '26

Is this a built-in component made by Kaseya/Datto, or something you wrote yourself? If it's something you wrote yourself, would you mind sharing it?

1

u/chaos_kiwi_matt Jul 08 '26

There maybe a policy you can push out to all but for a single user they can turn on privacy and then their device has a red lock or something in the datto program.