By David,
RMM (remote monitoring and management) is software that lets an IT team or managed service provider (MSP) watch, maintain and fix computers remotely. A small program called an agent runs on each managed device and reports its health to a central console. From that console, technicians get alerts when something goes wrong, approve and install patches, run scripts across many devices at once, and open remote sessions to fix problems, without visiting the machine.
In one line: an RMM is how an MSP keeps hundreds or thousands of client devices healthy, patched and supportable from one place. It's usually paired with a PSA, which handles the tickets, time and billing around that work.
How an RMM works
Almost every RMM has the same three parts:
- The agent. A lightweight service installed on each Windows, macOS or Linux device. It collects data (CPU, memory, disk, services, installed software, event logs), runs the checks and scripts it's given, and installs updates. Most agents connect out to the RMM over HTTPS, so the device doesn't need an open inbound port.
- The server or cloud service. Where the data lands and where policies, scripts and schedules live. It can be the vendor's cloud (SaaS), a server you run yourself, or a deployment inside your own cloud tenant.
- The console. The web interface technicians use to see the fleet, triage alerts, approve patches and start remote sessions, usually organized by client and site.
A typical loop: a disk fills up on a client's server, the agent's disk check fails, the RMM raises an alert and opens a ticket in the PSA, a cleanup script runs automatically, and if that doesn't fix it a technician opens a remote session from the ticket.
What an RMM does
These are the core jobs. A tool that's weak on any of them isn't a full RMM.
| Job | What it means in practice |
|---|---|
| Monitoring and alerting | Checks on CPU, memory, disk, services, event logs and custom scripts, with thresholds per client or device, and alerts routed to the people who act on them |
| Patch management | Operating system updates with approvals, deferrals and rollout rings, third-party application updates, reboot control and compliance reports |
| Scripting and automation | A script library, parameters and schedules, run on one device or thousands, with the output kept for review |
| Remote access | Attended and unattended remote control, plus background tools such as a terminal, file transfer and services view that don't interrupt the user |
| Inventory | Hardware, installed software and warranty data, searchable across every client |
| Reporting | Patch compliance, device health and asset reports you can hand to a client or an auditor |
| PSA integration | Alerts that become tickets, devices that sync to the client record, and time that flows to billing |
Who uses RMM software?
- Managed service providers. RMM is the core tool of most MSPs, because it lets a small team look after many clients. MSP-focused RMMs are multi-tenant: each client's devices, policies and scripts are kept separate, and technicians are given access client by client.
- Internal IT teams. Larger IT departments use RMM-style tools to manage their own fleet, often alongside Microsoft's endpoint management tools.
RMM vs PSA vs MDM vs remote desktop tools
These categories overlap, and vendors increasingly bundle them, but each has a different job.
| Tool | Main job | Example question it answers |
|---|---|---|
| RMM | Monitor, patch, script and remotely support devices | "Which client servers are missing this month's patches?" |
| PSA (professional services automation) | Run the business: tickets, time, contracts, billing | "How many hours did we spend on this client, and have we billed them?" |
| MDM / UEM (mobile device or unified endpoint management) | Enroll devices and enforce configuration and compliance policy | "Is every laptop encrypted and compliant before it reaches company data?" |
| Remote desktop tool | Connect to a screen to help a user | "Can I see what the user is seeing right now?" |
Microsoft Intune, for example, is described by Microsoft as a cloud-based endpoint management service that secures and manages devices and apps. Many MSPs use Intune for policy and compliance and an RMM for monitoring, scripting and day-to-day support. A remote desktop tool on its own gives you the connection but not the monitoring, patching or automation around it.
Types of RMM
By hosting model:
- Vendor cloud (SaaS). The vendor runs everything. No servers to maintain; ask where the data is stored.
- Self-hosted (on-premises). You run the server, so you control the data and also own its patching, backups, certificates and uptime.
- In your own cloud tenant. The tool deploys into a cloud subscription you control, so the data stays inside a boundary you already govern, without a server of your own to look after.
By scope:
- Standalone RMM, bought and run on its own and integrated with your other tools.
- Platform RMM, part of a wider suite that may include PSA, documentation, backup and security from the same vendor.
Is RMM software secure?
An RMM can reach every device it manages, which makes it one of the most valuable targets in an MSP's environment. CISA and its international partners published a joint advisory on protecting MSPs and their customers, and it's worth reading before you choose one. When you evaluate an RMM, ask:
- How do technicians sign in? Ideally with your existing identity provider, such as Microsoft Entra ID, with MFA and Conditional Access, rather than a separate user store.
- How are clients kept apart? What could a single compromised technician account reach?
- Who can start a remote session, can remote control be switched off, and is every session recorded in an audit trail?
- Does the agent need an inbound port, or does it only connect out?
- Who patches the RMM itself? For a self-hosted server, that's you.
How RMM software is priced
Most RMMs license per managed device (sometimes called per endpoint or per agent); some add minimums, distinguish servers from workstations, or charge per technician instead. Many are sold by quote or through the channel rather than on a public price list. Before comparing quotes, count your real device mix per client: workstations, servers, Macs, Linux machines, network devices, and virtual machines. If your clients use Azure Virtual Desktop, count the session hosts too, because a per-device RMM treats each one as a device.
Choosing an RMM
The tools in the shortlist all do the core jobs above, so the decision usually turns on architecture and fit: where the data lives, how technicians sign in, how clients are isolated, which PSA it integrates with, which operating systems it patches, and how it counts devices. Our RMM buyer's guide for Azure-first MSPs walks through those criteria and gives an honest best-for on seven RMMs. If you're already on a platform and weighing a move, see NinjaOne alternatives and Datto RMM alternatives.
Where Atlas fits: Atlas Reach is the RMM built into the endpoint agent of Atlas AVD, the platform MSPs use to run their clients' Azure Virtual Desktop estates. It deploys into your own Azure subscription, technicians sign in with Microsoft Entra ID, remote control is limited to entitled operators and every session is audited, and AVD session hosts in host pools Atlas has synced don't use a unit. It patches Windows and winget-managed software rather than macOS, and it needs the Atlas platform rather than running standalone, so it suits Azure- and AVD-first practices rather than every MSP.
FAQ
What does RMM stand for?
Remote monitoring and management. It's software that monitors devices and lets technicians maintain and support them remotely.
What is an RMM agent?
A small service installed on each managed device. It reports health and inventory data to the RMM, runs the checks and scripts it's given, installs updates, and makes remote sessions possible.
What's the difference between RMM and PSA?
An RMM manages the devices: monitoring, patching, scripting and remote support. A PSA manages the business around that work: tickets, time tracking, contracts and billing. Most MSPs use both and connect them, so that RMM alerts become PSA tickets.
Is RMM the same as remote desktop software?
No. Remote desktop software gives you a connection to a screen. An RMM includes remote access, but also monitors devices, patches them, runs scripts and keeps an inventory, across many clients.
Do I need an RMM if I use Microsoft Intune?
Often, yes. Intune focuses on enrolling devices and enforcing configuration and compliance policy. MSPs typically add an RMM for proactive monitoring and alerting, scripting at scale, PSA integration and remote support. The two are complementary.
Is there a free RMM?
Some RMMs are source-available and can be self-hosted, such as Tactical RMM, though you carry the cost of running the server and some features need a sponsorship. Most commercial RMMs offer a free trial.
Microsoft's description of Intune is from What is Microsoft Intune? on Microsoft Learn, checked on 9 November 2026. Tactical RMM details are from the Tactical RMM documentation, checked the same day.