Deploying the agent using Datto RMM

This article explains how to deploy the Kaseya MDR agent to endpoints using Datto RMM.

Datto RMM is a supported deployment method and can be used to install the agent on new endpoints or expand coverage across customer environments managed through Datto RMM.

This deployment method is available from the Kaseya MDR user interface through the Agent Deployment tab in the Kaseya MDR interface.

Before you begin

Before deploying the agent using Datto RMM, ensure the following:

  • You have administrative access to Datto RMM.

  • Target endpoints meet the supported operating system requirements.

  • Target endpoints do not already have the agent installed.

Coming from RocketCyber or existing MDR deployments

If you previously or currently use RocketCyber or Kaseya MDR:

  • Existing agents can be reused.

  • Agents do not need to be redeployed to enable Kaseya MDR.

  • Datto RMM deployment is required only for endpoints that do not already have an agent.

How Datto RMM–based deployment works

Kaseya MDR supports two Datto RMM deployment options, as shown in the MDR interface:

  • Deploy with Datto Component (preferred)

  • PowerShell (alternative)

These options represent two different execution models, not two different agents.

Deploy with Datto Component (Datto RMM supported deployment)

The Deploy with Datto Component option refers to deploying the agent using the existing RocketCyber Agent [WIN] Windows deployment component that is available in Datto RMM.

This is the same Windows deployment component historically used by RocketCyber for Datto RMM–based installations. It encapsulates the agent installation and registration logic and is maintained by Datto/RocketCyber.

When using this method:

  • Agent deployment is implemented through the RocketCyber Agent [WIN] Windows component

  • Deployment is managed entirely within Datto RMM

  • PowerShell may be used internally by the component, but execution is treated as a component‑based deployment, not a custom script

This is labeled as the preferred option because it relies on Datto‑maintained deployment logic rather than customer‑managed scripting.

PowerShell (alternative)

The PowerShell option deploys the agent using a PowerShell installer payload generated by Kaseya MDR and executed through a Datto RMM Job.

This method is provided for environments that prefer or require script‑based automation.

When using the PowerShell option:

  • Kaseya MDR provides a PowerShell installer script.

  • The script must be executed through Datto RMM automation.

  • Script execution is customer‑managed.

Using the PowerShell deployment option

Obtain the installer payload from MDR

  1. In Kaseya MDR, go to Organizations > Select an organization > Agent Deployment.

  2. Locate the Datto RMM option.

  3. In the Datto RMM section, locate the PowerShell installer.

  4. Choose one of the following:

    • Select the option to download the installer and save it as a .ps1 file.

    • Select the option to copy the installer script to your clipboard.

Both options provide the same installer payload.

Execute the PowerShell installer in Datto RMM

Step 1: Create a PowerShell component

  1. In Datto RMM, go to Automation > Components.

  2. Select Create Component and choose PowerShell.

  3. Create a new PowerShell component.

  4. Provide the installer payload:

    • If you copied the installer, paste the full script into the component editor.

    • If you downloaded the installer, open the .ps1 file and paste its full contents into the component editor.

  5. Save the component.

Step 2: Create and run a Datto RMM Job

  1. Go to Automation > Jobs.

  2. Select Create Job.

  3. Enter a job name (for example, Deploy MDR Agent).

  4. Add the PowerShell component you created.

  5. In the Targets section, select target endpoints (sites, device groups, or filters) where the agent should be installed. Target only endpoints that do not already have an agent installed.

  6. Review the job configuration. Select Create Job and confirm execution.

Verifying the agent in Kaseya MDR

After deployment:

  1. In Kaseya MDR, go to Organizations > Select the target organization.

  2. Open the agent inventory.

  3. Confirm that the endpoint appears and shows a reporting status.

  4. Allow several minutes for the first agent check‑in.

If the agent appears in the inventory, deployment was successful.

Deployment installs endpoint visibility and allows the endpoint to send telemetry to Kaseya MDR. It doesn't integrate Datto RMM with Kaseya MDR, configure organization mapping, enable alerts or detections, or configure response actions or SOC workflows. Those steps are handled in separate integration and configuration articles

NOTE  Agent deployment installs endpoint visibility only. Additional configuration is required after deployment to integrate Datto RMM telemetry with Kaseya MDR. For details, refer to Integrating Datto RMM with Kaseya MDR.