Unknown devices getting added in RMM
This is likely caused by virtual sandbox devices.
- One or more unknown devices are being added to the RMM Dashboard
- These devices typically do not have any active checks or tasks
- Devices show as offline / overdue
There could be multiple reasons for this behaviour:
- Some AV software will create a temporary VM to run any suspect executable - this is known as sandboxing
- On domain-joined machines this may cause the RMM agent to be installed as part of group policy
- Once the VM is destroyed the device will show as overdue/offline in the RMM Dashboard
- Some products that have been seen to cause this:
- Microsoft ATP (When sending the installation file through email)
- Kaspersky Antivirus
​Feel free to remove these devices at your convenience.
We would advise to make sure that Site installation packages are not left saved on the device as some Antivirus will sandbox these executable files and will run it on a virtual machine to test the file if it is a threat.
Related Articles
N-sight RMM agent losing connection
There is an issue in the current Windows GA Agent (v10.13.2), which is causing some servers to incorrectly show as overdue. It also fixes an issue related to Take Control policies not being adhered to in some cases. We encourage you to upgrade to ...
N-sight RMM User Audit Report
User Audit Report The User Audit Report records all changes made to the Checks. You can use the User Audit Report to track tasks performed on the N-sight RMM Dashboard, including the following tasks: Installation and removal of Agents Addition and ...
EDR permissions in N-able RMM
Currently on the RMM integrated EDR, when you go to the menu and then open the Dashboard your sessions will be on "view only" mode. This is because of the integration with Sentinel One website. To work around this problem follow these steps: 1. Go ...
Change the default license type for a device
You can change the license type to upgrade to a professional license on an individual device. Click Views > All Devices and select the device you want to change. Click the Settings tab > Properties > License Mode. In the License Mode drop-down menu, ...
Remote Control Summary report with connection audit
This report provides two different data, depending on whether you are accessing the report at the Customer level or the SO level. At the Customer level, this report provides a detailed list of Remote Desktop Support and managed device remote control ...