Remote Monitoring & Management Help

RMM Agent Detection Script

To help identify potential business opportunities it can be useful to know whether your Clients are using an alternative RMM solution. As such the following VBScript queries the system for indicators of alternative RMM agents, generating a failure where they are detected.

Simply copy and paste the below script into a file with a VBS extension and upload to the Dashboard. From here it can be deployed as a Script Check or Automated Task.

Please note, if adding the script as a Script Check we would suggest using 24x7 to avoid the script appearing in any Client-facing Reports.

rmm_discovery.vbs

On Error Resume Next

strComputer = "."

Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")

Set colItems = objWMIService.ExecQuery("Select * from Win32_Service",,48)

CompCnt=0

For each objItem in colItems

 'Labtech Check

 If (objItem.Name = "LTService") Then

         CompCnt = CompCnt+1

         If (objItem.Started = "False") Then

                 Wscript.Echo "Labtech instance found and service is not running!"

         Else

                 Wscript.Echo "Labtech instance found and service is running!"

         End If

 End If

 'N-Able Check

 If (objItem.Name = "Windows Agent Service") Then

         CompCnt = CompCnt+1

         If (objItem.Started = "False") Then

                 Wscript.Echo "N-Able  instance found and service is not running!"

         Else

                 Wscript.Echo "N-Able instance found and service is running!"

         End If

 End If

 'Kaseya Check

 If (objItem.DisplayName = "Kaseya Agent") Then

         CompCnt = CompCnt+1

         If (objItem.Started = "False") Then

                 Wscript.Echo "Kaseya instance found and service is not running!"

         Else

                 Wscript.Echo "Kaseya instance found and service is running!"

         End If

 End If

 'AVG/Level Platforms Check

 If (objItem.DisplayName = "MWExpertSystem") Then

         CompCnt = CompCnt+1

         If (objItem.Started = "False") Then

                 Wscript.Echo "AVG/LPI instance found and service is not running!"

         Else

                 Wscript.Echo "AVG/LPI instance found and service is running!"

         End If

 End If

 'Continuum Check

 If (objItem.DisplayName = "SAAZServerPlus") Then

         CompCnt = CompCnt+1

         If (objItem.Started = "False") Then

                 Wscript.Echo "Continuum Instance found and service is not running!"

         Else

                 Wscript.Echo "Continuum Instance found and service is running!"

         End If

 End If                

Next

If (CompCnt = 0) Then

 Wscript.Echo "No Alternative RMM Agents Detected"

 wscript.Quit(0)

Else

 wscript.Quit(1001)

End If