Deploying with Datto RMM

For IT providers: a PowerShell component installs the agent, updates it when a release is published, or removes it. It can be run again and again on a whole fleet: a machine already up to date is left alone.

Installation guide

Downloads

SHA-256
aymond-datto.ps1Datto RMM componentPowerShell 5.1, Windows 64-bitc6450a3572ed2de6313ad15df790825cb36c8caeff764f5c186936e555327155

1. One parc key per customer

  • In your Aytechnet account (Monitoring), create one parc per end customer: its key AYT-XXXX-XXXX-XXXX is shown once.
  • In Datto RMM, on that customer's site, add a site variable AytechnetParcKey holding the key, masked if the option is offered. The script never prints it; a machine enrols in the parc whose key is on its site.

2. Create the component

  • Components, new component: category Applications, script type PowerShell, and paste the content of aymond-datto.ps1.
  • AytechnetAction, a selection Install / Remove, Install by default: install or update, or uninstall.
  • AytechnetSHA256, optional text: the expected checksum of aymond.exe, pinned from the installation guide, if you prefer not to rely on the SHA256SUMS file of the site.
  • AytechnetUDF, optional text: a user-defined field number, 1 to 30, that receives "aymond 0.6.x" at the next audit.

3. Run it

  • One job on a test machine first, then on the site. The job's output says what was done: installed, updated, already up to date, or why it failed (exit code 1).
  • During the beta: run it twice on that machine, the second run must answer "nothing to do", and send us both outputs.
  • To keep the fleet up to date, schedule it weekly: with no new release, it does nothing.

What the script does

  • Reads the published version and the SHA-256 of aymond.exe on aytechnet.fr/downloads (or the pinned checksum), downloads the executable and stops if the checksum does not match.
  • No service yet: copies the executable to C:\Program Files\Aytechnet and installs the service with the site's key (LocalSystem, automatic start).
  • Service present: does nothing if the installed executable is the same (and starts the service if it was stopped); otherwise the new release replaces the old one, keeping the machine's identity and settings.
  • Remove: deletes the service, the executable and the machine's identity (C:\ProgramData\Aytechnet\aymond). Then press "Forget" on the machine in your account, which deletes its data.
  • Network: outbound HTTPS only, to aytechnet.fr (download) and watch.aytechnet.net (reports). Nothing to open inbound.

Known limits

  • The binaries are not code-signed yet: if your antivirus blocks unsigned executables, add an exclusion for C:\Program Files\Aytechnet\aymond.exe, or pin the checksum.
  • Moving a machine to another parc is not automatic: its identity is tied to its parc. Run Remove, then Install.
  • 64-bit Windows only: Windows Server 2016 and later, Windows 10 and later.
  • The script's messages are in plain English without accents: Datto's job output does not always render accented characters.

A question, a quotation, a site to move? We answer the same working day.

Write to us