Datto RMM 12.8.0 release notes


IMPORTANT  *As a result of an issue found in the 12.8.0 release, we have decided to delay the deployment on the Concord (US East) and Merlot (EU2) platforms to March 5. Our teams are working on a hotfix for this issue.

Platform Date From (UTC) To (UTC) Duration
Syrah (APAC) Tuesday, February 27, 2024 10:00 13:00 3 hrs
Zinfandel (US West) Wednesday, February 28, 2024 09:00 12:00 3 hrs
Vidal (US East) Monday, March 4, 2024 09:00 12:00 3 hrs
Pinotage (EU1) Monday, March 4, 2024 18:00 21:00 3 hrs
Concord (US East) Tuesday, March 5, 2024 09:00 12:00 3 hrs
Merlot (EU2) Tuesday, March 5, 2024 18:00 21:00 3 hrs

NOTE  *The schedule is subject to change. Please check the Status Page for regular updates.

IMPORTANT  This is a full platform and Agent release; therefore, partners should expect brief disconnections of the Agent during the update window.

About the release

The 12.8.0 release is the second of our twelve monthly releases planned for 2024. Please see below for the highlights, along with the full list of fixes and improvements. As always, we look forward to your feedback as we continue to improve the product every single month.

Unified Login with KaseyaOne

NOTE  This update is scheduled for simultaneous release after all platforms are updated, currently scheduled for March 5, 2024.

IMPORTANT  To log in via KaseyaOne, users must be added to a KaseyaOne access group with Datto RMM assigned.

A new KaseyaOne menu is now available on the Setup > Integrations page. This feature is visible only to users with the administrator security level, as it significantly impacts user login functionality. Users with Manage permission for Setup > Integrations through another security level will not be able to access or edit these settings. For an overview of this feature, refer to Unified Login with KaseyaOne.

Datto RMM will now support single sign-on with KaseyaOne, making user management and access much easier across Kaseya modules. Using Unified Login provides a range of powerful user management tools as described below.

Enable login with KaseyaOne

This setting allows users to log in to Datto RMM if their email address matches in both products and they are assigned to at least one KaseyaOne access group with Datto RMM assigned.

Require login with KaseyaOne

This option will prevent users from logging in via Datto Partner Portal and allow them to authenticate only via KaseyaOne. Exceptions can be set for users in the drop-down menu and will ensure support for users with no KaseyaOne access (for example, co-managed users).

Automatic user provisioning

Once enabled, your users in KaseyaOne who are granted access to Datto RMM (using KaseyaOne access groups) will automatically have a Datto RMM user created during their first login. It is recommended to choose a lower level of access as the default security level to follow the principle of least privilege.

Future-planned features for Unified Login

  • Role Based Access Control (RBAC) will allow you to match Datto RMM security levels to KaseyaOne groups, enabling a technician’s Datto RMM security permissions to be updated by changing their group membership in KaseyaOne.
  • De-provisioning will enable Datto RMM users to be automatically deactivated when the corresponding user is deactivated or deleted in KaseyaOne.

Web Remote: Autotask companion re-enabled

The Autotask companion within Web Remote will be re-enabled with the 12.8.0 release, now with more granular security level controls. Refer to Autotask Ticket in Web Remote.

Two new toggles in the Remote control tools section of security levels allow control of the following:

  • Whether the Web Remote Autotask companion is enabled.
  • Whether the user can use the ticket search feature when linking a ticket to the Web Remote session.

Refer to Web Remote Autotask and Web Remote Autotask Search in Remote control tools.

Furthermore, the ticket search results are now limited to tickets within the same Autotask company as the device, better supporting use by internal IT staff of an MSP's customer. Refer to Searching for an Autotask ticket in Web Remote.

Switch user from profile menu

The active user can now be switched directly from the profile menu when multiple users with the same email address exist within one Datto RMM instance. Refer to Switch User.

Run job from list of alerts

When an alert with a known, repeatable fix is raised, it's beneficial to use an automated script for a swift and predictable repair. While a fully automated response is preferred, it's common to require a manual review before running a remediation job. For instance, rebooting a device should not be an immediate action upon an alert trigger.

It is now possible to run a quick job to or schedule a job for a more appropriate time from any list of alerts, including in dashboard widgets. Refer to List of alerts, Device Alerts in Single Alert View, and Alerts in Device Summary.

Additions to the ComStore

We release new ComStore components and update existing ones every month. Notable additions this month include the following:

  • Microsoft Teams [WIN]: We now install new and classic Microsoft Teams.
  • ClamAV Monitor [LIN]: Because Linux deserves love too, we now have an antivirus monitor for ClamAV that supports AV overrides to provide a live status.

Updates since the last release

Type Summary
Foundation The filter query timeout for the Frontend-API to audit service has been extended from 20 seconds to 30, reducing the likelihood of complex queries failing to complete during the execution window.
Fix The maximum database connection count has been optimized to address intermittent issues.

Want to know what's coming next?

Interested in what we’re currently working on and the broader roadmap? Check out this post in the Kaseya Community for more information on our broader roadmap vision, what we’re currently working on, and priorities for upcoming releases!

List of improvements and fixes in this release


Type Summary
Foundation All .dll and .exe files built for the Windows agent are now signed, with the exception of third-party libraries. Refer to Agent and Web Remote security.


Type Summary
Fix Audits will no longer fail for non-printer devices that were sending printer audit data.

Autotask Integration

Type Summary
Feature Ticket search in the Web Remote Autotask companion now shows results only from the same Datto RMM site to better support co-managed use cases. Refer to Searching for an Autotask ticket in Web Remote in Autotask Ticket.
Fix Data that has been synced to Autotask is no longer cleared when the configuration item/asset has been inactivated upon device deletion in Datto RMM.


Manually deleting site mapping or running a new analysis with the Delete any existing mappings and remap selected companies option selected now properly unmaps sites from Autotask companies.
Foundation The sync logic for Autotask has been updated to only sync a UDF when its value has been changed or cleared.

Datto AV Integration

Type Summary
Feature Datto AV will now be listed as Antivirus Product on servers when installed and active. Refer to Antivirus products.
Feature The Datto EDR status is now calculated based on the features enabled in the Datto EDR agent, ensuring accurate reporting if the agent only runs Datto AV.

Endpoint Security

Type Summary
Fix Settings for Windows Defender Catch-up scans have been corrected.
Fix Settings for Windows Defender scan Execution Time have been corrected.
Fix Settings for Windows Defender Scheduled scans have been corrected.


Type Summary
Fix Device Group, Site Device Group, and Site Group filters using is not a member of criteria has been fixed to show correct results when using grouped and ungrouped OR conditions.

EXAMPLE  Device Group is not a member of Device Group A OR Device Group is not a member of Device Group B produces different results than Device Group is not a member of Device Group A OR Device Group B.

NOTE  This change is being rolled back on Syrah and Zinfandel. Our teams are working on a hotfix for this issue.

Fix Custom site filters configured using global Device Group criteria will now properly list global Device Groups instead of Site Device Groups or a group ID.
Fix Custom site filters with criteria for global Device Groups have been fixed to display the proper Device Group.
Fix Viewing custom site filter criterion in a filter's detail pane properly shows the Device Group name used in the filter.


Type Summary
Jobs Job variables added in the New UI now properly display greater than/less than and ampersand characters.
Jobs Options to delete or disable an already deleted job have been removed from the New UI.
Jobs Running a quick job from a group device list using Select all rows across all pages will now set the job to the proper group target.

Kaseya Design System

Type Summary
Feature Breadcrumbs now adhere to the Kaseya Design System.


Type Summary
Feature Logging out from Datto RMM with the Logout button will now also log the user out of KaseyaOne. Refer to Logout.


Type Summary
Fix All processes created when a response component script is executed will now be terminated when the script is complete or after its configured timeout.
Fix Monitoring policies can now be saved in the New UI when added components have empty variables.
Foundation Additional checks have been implemented in the alert resolution logic so that emails are sent more consistently.

Network Discovery

Type Summary
Fix Adjustments were made to the onboarding logic to accommodate network devices with multiple MAC addresses.

Patch Management

Type Summary
Fix The correct Patch Management policy will apply to a device when using the Patch Now action from the Patch Management card on the Device Summary page.

Platform backend

Type Summary
Foundation Enhancements have been made to the connection process for new Agents to improve the time it takes to onboard new devices.
Foundation The database load has been reduced by improving the efficiency of Patch Management policy recalculation.


Database query times have been improved by the addition of a new unique index to the software audit table, enhancing the performance of software pages and associated filtering.


Type Summary
Fix Policies that were failing to save as a result of a backend error have been corrected, and constraints were added to avoid further errors.


Type Summary
Fix If a report fails to be generated due to backend load, Datto RMM will retry the operation several times before abandoning the operation.
Fix Last Seen values have been updated in device list exports to populate the value for online devices as the report execution time, as this is the time the device was last seen online.
Fix Online agentless devices will now show proper check marks in the Online within last 30 days column of the Device Health Summary and Hardware Lifecycle reports.

Software Management

Type Summary
Feature Activity logging has been added for Advanced Software Management install and uninstall actions.
Feature Software set to require manual approval within a Software Management policy will now respect a scheduled deployment window instead of installing immediately upon approval, while schedules set to Immediately On Detection continue to run at approval time. Refer to Approve in Software Management and Action in the Software card.
Foundation The Aria2c binary has been removed from the Agent installation directory and is no longer a dependency for Software Management.


Type Summary
Foundation The Splashtop Streamer for macOS was updated to version Refer to Current Splashtop Streamer versions.
Foundation The Splashtop Streamer for Windows was updated to version Refer to Current Splashtop Streamer versions.

User-defined fields

Type Summary
Foundation User-defined fields are updated only upon value changes after an Agent's submission, thereby reducing the risk of locks and deadlocks on the device entity in the database.

ComStore updates

IMPORTANT  This table does not list updates for components that are installed via Software Management.

NOTE  To access a full list of ComStore components, refer to List of ComStore components.

Component Name Platform New/Updated Description
Integration: Acronis Cyber Protect All Updated Vendor update.
Integration: DefensX Window
Integration: RMMMax All Updated Vendor update.
Integration: Threatdown (was MalwareBytes) Window
Updated Branding update from MalwareBytes to Threatdown.
7-Zip Windows Updated If versions for both architectures are installed, the 32-bit version is now removed first.
Agent Health Direct-Check Windows Updated Removed go.microsoft.com from Windows Update URL checks
ClamAV Monitor Linux New  
ConnectWise ScreenConnect (Control) Windows Updated Bugfixes.
Datto Endpoint Backup (for PCs & Servers) Agent Windows Updated Better handling of disk size support.
Microsoft Teams (New/Classic) Windows Updated Component now installs New and Classic builds of Microsoft Teams.
Shutdown/Reboot Device Windows Updated BitLocker, when suspended, is only suspended for the boot drive.
Splashtop Streamer Configuration Tool Windows Updated Splashtop service is restarted only if it is running.
Yum/Dnf Update / Upgrade Linux Updated Added Dnf support.
Monitor BitLocker State Windows Updated Refer to the CyberDrain Components tab of the spreadsheet in the following topic: List of ComStore components.
Monitor if Application is not installed Windows Updated
Monitor Windows 10 Feature Release ID Windows Updated