Machine Policy

Remote Control > Policy Settings> Machine Policy

The Machine Policy page determines how you want to notify users a remote control session to their machine is about to begin. This policy is applied to machine IDs.

Note: See User Role Policy to apply remote control notification policies by machine ID. Machine policy takes precedence over user role policy.

Exceptions

Applies only to "shared" (console) remote control sessions. Does not apply to Terminal Server Sessions.

K-VNC supports all options on this page. Kaseya Remote Control supports all options on this page except Notify user when session terminates.

Actions

• Apply - Applies policy parameters to selected machine IDs.
• Remove - Clears policy parameters from selected machine IDs.

Parameters

• Select User Notification Type
  • Silently take control - Do not tell the user anything. Take control immediately and silently.
  • If user logged in display alert - Display notification alert text. The alert text can be edited in the text box below this option.
  • Ask permission. Approved if no one is logged in- Ask the user if it is alright to begin a remote control session. The ask permission text can be edited in the text box below this option. Remote control can not proceed until the user clicks the Yes button. If nothing is clicked after one minute, No is assumed and the VSA removes the dialog box from the target machine. If no user is logged in, proceed with the remote control session.
  • Require Permission. Denied if no one logged in - Ask the user if it is alright to begin a remote control session. The ask permission text can be edited in the text box below this option. Remote control can not proceed until the user clicks the Yes button. If nothing is clicked after one minute, No is assumed and the VSA removes the dialog box from the target machine. The remote control session is canceled.

Note: Only the console user will receive notifications and have the ability to approve sessions. Notifications will not be displayed for terminal server (RDP) session users. If the "If user logged in ask permission" option is selected, the remote control session will proceed if there is no user logged onto the console (even if there are terminal session users logged in).

• Notification Alert Text / Ask Permission Text - Displays only if the Select User Notification Type is not Silently take control. Modify the default message if necessary. The <admin> variable is the only variable that can be used in this message.
• Notify user when session terminates - Check this box to notify the user when the session terminates.
• Session Termination Message - Displays only if the Notify user when session terminates box is checked. Modify the default message if necessary. The <admin> variable is the only variable that can be used in this message.
• Disable Remote Control File Transfer - gives the ability to transfer files directly between the source machine and the remote control target, directly within the remote control application. In this case, users do not have to use the Live Connect application to transfer files while working in an active Remote Control session. This option is enabled by default per user role and per machine.

  Note: By VSA design, Machine Policy takes precedence over User Role Policy. For example, if a VSA agent has Remote Control File Transfer “disabled” in its Machine Policy, Remote Control File Transfer will be disabled for any user of VSA when Remote Controlling said device. If Remote Control File Transfer is not “disabled” in a Machine Policy but is “disabled” in a User Role Policy, Remote Control File Transfer will be disabled for any Remote Control session performed while such User Role is in use.

• Require admin note to start remote control - Click this box to require VSA users to enter a note before starting the remote control session. The note is included in the remote control log and is not displayed to the machine user.
• Record all remote control session - If checked, Kaseya Remote Control sessions on Windows and Mac machines are recorded. Recordings are viewed using the Agent > Screen Recordings page. See Recording KRC Sessions.
• 1-Click Access - If checked, it enables 1-Click Access function to selected role. See 1-Click Access Requirements.

Columns

Check-in status

These icons indicate the agent check-in status of each managed machine. Hovering the cursor over a check-in icon displays the agent Quick View window.

Agent is currently offline

User Logged In and Agent is Active

User Logged In and Agent is Inactive

User Not Logged In and Agent is online

User Not Logged In and Agent is Idle

The agent has been suspended

Agent has never checked in

• Select All/Unselect All - Click the Select All link to check all rows on the page. Click the Unselect All link to uncheck all rows on the page.
• Delete - Click the delete icon next to a user role to clear the policy.
• Edit Icon - Click a row's edit icon to populate header parameters with values from that row. You can edit these values in the header and re-apply them.
• Machine.Group ID - The list of Machine IDs displayed is based on the Machine ID / Group ID filter and the machine groups the user is authorized to see using System > User Security > Scopes.
• Policy - The remote control policy applied to a machine ID.
• Message - The text messages applied to a machine ID.