Hey everyone! I've got around 260 Windows PCs under management by an external Managed Service Provider (MSP) who handles patching, monitoring, and support through their own remote management tool. Due to security and compliance policies, they can't give us access to their console, but we still need a way to occasionally connect to these machines without a user present.
I'm looking for solutions that allow for unattended access with the following requirements:
- Full local admin rights so we can install software and manage UAC elevation during our sessions
- The ability to grant limited access to some external partners for specific machines, like POS or cash registers.
We're mainly considering TeamViewer because some external partners already use it. Has anyone faced a similar setup with an MSP? Any insights or best practices to keep in mind? Thanks!
6 Answers
We really like Splashtop for this kind of setup. You can invite people in and grant limited access, plus it's more budget-friendly than TeamViewer. It plays nicely with other tools too!
I've tried a few different tools. Besides TeamViewer, there’s RustDesk, which is free, and Splashtop which is paid. Both have good features for unattended access.
RustDesk supports a wide range of operating systems, including iOS and Android, which can be really handy!
It's pretty common to have this setup. TeamViewer is effective, but you do need to ensure it plays well with your MSP's remote tools and security policies. I'd also take a look at AnyDesk or something self-hosted like MeshCentral for better control. The essential part is making sure access boundaries are clear!
Have you looked into Proxy tools? I used it in a factory setting where IT had their own remote options, and it worked really well for us in operational tech.
Windows 10 Pro has Easy Assist built-in for vendors and also the option for attended remote access. It's free and easy to use, really useful for temporary vendor access. If VPN or Remote Desktop isn't feasible, consider Chrome Remote Desktop for unattended access. Just keep in mind that TeamViewer does have security concerns from time to time, so locking screens when inactive is essential.
What type of Microsoft licensing do you have? You might already have access to Intune's remote access feature which could help you out!
Right now, we have the standard license.
Another vote for Splashtop! We've been using it for a couple of years, and it covers everything we need at a great price.