User Guide

Learn how to check device status, provide remote support, apply usage restrictions, deploy software, and review vulnerabilities with Remotto. This guide covers everyday operations and the settings that support them.

For server and client installation, see the Installation Guide. Available features depend on your license, device operating system, and client capabilities.

Getting Started

Use the browser-based Admin Console to manage your environment and Remotto Viewer on an operator device to work with client screens.

Admin Console

Basic workflow

1. Sign in to the Admin Console and check that your devices appear under Devices.
2. Create groups for classrooms, departments, or other uses, and assign devices to them.
3. Configure the required restrictions, log collection, and scheduled tasks.
4. Set the role of the device used for screen viewing and remote control to Operator, then launch Remotto Viewer.
5. Open Security to review devices and software that need attention, and use logs and reports to monitor day-to-day operations.

Dashboard

The dashboard brings together device connectivity, vulnerabilities that need prompt attention, print totals, license information, and recent management activity. The information updates automatically.

Start here for your daily checks, then open device details or activity records as needed.

Screen Monitor

Open Screen Monitor in the Admin Console to view device screens in real time in your browser.

1. Select a group.
2. Use the minus and plus buttons to change the grid from 1×1 to 5×5.
3. Move between pages to view additional devices.
4. Enable Auto to advance to the next page every 10 seconds.

You can choose whether to include offline devices. Use Remotto Viewer for remote mouse and keyboard control.

Device Management

Find devices, check their status, assign groups, and run management operations. Search using information such as hostname, username, IP address, or tags.

Device list and details

The list shows reported device information, including connection status, OS and build, active window, and disk usage. You can reorder columns and open logs or reports for an individual device.

Click a hostname to open the General, Installed Software, and Vulnerabilities tabs. General shows device information such as CPU, memory, storage, and network details. Installed software inventory supports Windows and macOS and can be searched by name, version, and publisher. It reflects the most recently collected information; coverage varies by OS and installation method.

Run operations on selected devices

Select the target devices, choose an operation from the action menu, and review the targets and settings before confirming.

Supported operations depend on the OS and client capabilities.

Change device roles in bulk

Choose Client for devices whose screens will be viewed or controlled, or Operator for devices used to operate Remotto Viewer. Select multiple devices to assign the same role in one operation.

1. In Devices, select the devices whose role you want to change.
2. Open the action menu, choose Role, then select Client or Operator.
3. Review the target devices and new role in the confirmation dialog, then confirm.
4. Check the role icons and tooltips in the device list to verify the assigned role.

Wake-on-LAN requirements

• Wake-on-LAN is enabled in the BIOS or UEFI settings.
• The network adapter allows the device to wake when it receives a magic packet.
• When the target device is on a different network from the server, another Remotto Client must be running on the same network as the target device.

Register login credentials

Before using One-Time Login or Auto-Login, download the CSV template from the login user settings and import the required credentials.

1. Download the CSV template from the “Devices” screen in the Admin Console.
2. Edit the username and password columns in the downloaded CSV file.
3. Upload the edited CSV file and import it.

Launch applications remotely

Choose Launch Application, search the reported application list, and select one or more applications. The list includes applications reported by the selected Windows and macOS devices. Review your selection before submitting the request.

A user must be signed in on the target device. Applications cannot start if they are missing or unavailable to that user.

Manage the Windows Update service

You can stop and disable the Windows Update service or restore its previous startup setting and start it. Status icons and tooltips show the confirmed state, pending changes, failures, or missing reports. Offline devices show their last reported state.

Disabling the service can also affect Microsoft Store app installation and updates.

Run domain operations in bulk

Join or remove one or more Windows or macOS devices from an Active Directory domain.

Requirements and follow-up

The target device must run a compatible Remotto service and be able to communicate with the server. Joining also requires network and DNS access to the domain controller and credentials with permission to join devices. Devices with another pending management command or a domain operation already in progress are skipped.

Sign out and sign in again when switching to a different account after joining or leaving. On Windows, check the operation log for any restart requirement and verify startup-dependent settings after the next startup.

Security and Vulnerability Management

Remotto checks reported operating system and installed software information against vulnerability data to identify devices and software that need attention. The Security page is available on all plans.

### Review the summary and priorities

Open Security to see a summary of the current situation and device and vulnerability counts for each priority. Click a priority card to filter the lists; click it again to clear the filter.

Priority is Remotto’s suggested order of response, based on exploitation information, severity, and other factors. It is separate from CVSS severity. Expand Vulnerability data and page guide to read the rules and definitions.

Review findings by device

1. In the By device tab, search by hostname or OS.
2. Click a hostname to see software that needs updating.
3. Review the priority, vulnerability count, recommended version, and update method.
4. Expand the vulnerability list for a software item when you need more detail.

Follow the indicated update method to apply fixes, for example through Windows Update or Software Distribution.

Review findings by software

The By software tab groups affected software by product. Search by software name and review each product’s priority, affected device count, vulnerability count, recommended version, and update method.

Click a product to see its affected devices and their installed versions. Click a device name to open its detailed findings. This view helps you plan updates across devices that use the same product.

Review findings by vulnerability

In the By vulnerability tab, search by CVE ID, summary, or software name, and filter by CVSS severity. Click a CVE ID to review its description, scores, exploitation information, reference links, affected devices, and fixed versions.

Inferred means that Remotto matched a product using details such as the software name and publisher. Check that the product and version are correct. If no fixed version is known, consult the vendor’s information.

Update vulnerability data

Expand Vulnerability data and page guide to check the data version, last update check, download progress, and any update errors.

With the default settings, an online server with no existing data downloads it when first started and keeps it updated automatically. Vulnerability data is downloaded separately from the installer, so findings become available after the initial download and import finish.

For an offline environment:

1. On a computer with internet access, open the distribution site linked in the page guide.
2. Download the full data files (.rvf) whose names begin with snapshot, and transfer them to a computer that can access the Admin Console. For a Linux server, also obtain the data for its distribution.
3. Use the import link under Vulnerability data and page guide to import each file separately.
4. Wait for the import and device matching to finish, then review the findings.

Devices are checked again automatically when the data changes. Counts may change as matching and aggregation progress. Findings depend on the OS and software information reported by devices; outdated or uncollected information may leave gaps in the results.

Group Management

Organize devices by classroom, department, or purpose and apply shared settings. After creating a group, assign devices from Devices.

Streaming settings

Configure resolution, frame rate, and bitrate separately for client screen viewing and operator screen sharing. Adjust them to suit your network and the level of detail you need to see.

Scheduled tasks

Schedule power on, shutdown, restart, automatic login, or application launch for specified dates or weekdays. You can exclude individual devices from a group task.

1. Open Scheduled Tasks for the group.
2. Set the task name, operation, and execution date, time, or weekdays.
3. Select applications or excluded devices when required.
4. Save the task.

Each operation must meet its own requirements: Wake-on-LAN support for power on, registered credentials for login, and a signed-in user for application launch.

Application restrictions

Search the applications reported by the group’s devices and select the applications to restrict. Review the enabled state and selection, then save. Existing process-name rules and saved applications that are absent from the current list are retained.

Web access management

Enable web restrictions and choose a blocklist or allowlist. Enter one domain or IP address per line.

winget install <package-name> --source winget

Log collection

Choose which categories to collect, including startup and shutdown, client operations, file operations, clipboard, communication devices, printing, web access, and drives. Detailed web access logging is configured here too. Enabling detailed logging can affect communication with some websites or applications.

Changes take effect when devices next communicate with the server. Enabling collection later does not recover activity from periods when collection was disabled.

Print Management

Manage per-user quotas, per-job page limits, used page counts, and email notifications. Search and export print history under Reports → Print Usage.

Page limits

The page limit can be set to:
0: Printing not allowed
1 or more: Printing allowed up to the specified number of pages
-1: Unlimited printing

Printed page counts are calculated based on the number of pages sent by the application. For example, even if a 10-page document is printed double-sided, it is counted as 10 printed pages.

Page counts use the number of pages submitted by the application. A 10-page document counts as 10 pages even when printed double-sided.

Bulk settings with CSV

Download the template, edit it, and upload the CSV. Review the preview before importing.

Changing a quota preserves the used page count. Use the reset operation to return usage to zero.

LDAP/AD import and notifications

With LDAP/AD integration configured, you can preview and import users who belong directly to a selected group. Existing users retain their used page counts and quotas.

Configure emails for approaching or reaching a quota. Email delivery requires the SMTP settings under Settings.

Subject: 【Printing limit is approaching】

Body:
{username}

Your printing allowance is nearly exhausted.

Used: {used_pages} pages
Limit: {limit_pages} pages
Remaining: {remaining_pages} pages
Printing will be blocked once the limit is reached.
If you have any questions, please contact the administrator.

Software Distribution

Upload installers to the Admin Console and install software on multiple devices.

Deploy software

1. Drop or select an installer in Software Distribution. Uploading starts automatically.
2. Click Install for the uploaded file.
3. Review the command and add any required options.
4. Filter by group or hostname and select the target devices.
5. Confirm the deployment and follow its pending, running, completed, or failed status in the history.

Installation can run while a device is locked or no user is signed in, provided its service is running and can communicate with the server. Use installers that support unattended installation for the whole device rather than packages that require user input or an individual user’s environment.

If a deployment remains pending, check the reason shown in its history. Before retrying a failed deployment, check the device and the installation result.

Update Remotto clients

Download the latest client installer, upload it, and deploy it using the same workflow. On Windows, use the same installer format as the existing installation. MSI-to-MSI updates preserve saved server connection settings, so additional server properties are normally unnecessary.

Reports

Review usage trends and conditions that need attention through charts and tables. Filter by period, group, and device, and save frequently used filters as saved views.

Review items that need attention

The Overview tab highlights devices with Act now or Act soon vulnerabilities, update or deployment failures, low disk space, and other issues. Follow an item’s link to open the relevant page or tab.

The list of devices needing attention shows up to 200 devices based on their current state. If there are more, check the heading for the displayed and total counts. Usage trends cover the selected period, while this list reflects the state at the time you view it.

Vulnerability reports

The Vulnerabilities tab shows current unresolved findings and devices needing prompt attention, together with detections and resolutions over the selected period. It also lists software that needs updating and devices with vulnerabilities.

Device totals and unresolved findings reflect the current state. Changing the period does not show a past snapshot of those values. Detections and resolutions count the findings recorded for each device during the selected period.

The device list also includes devices whose highest-priority findings are Plan ahead or Routine, and displays up to 10 devices. The list of devices needing attention in Overview uses different criteria, so the totals may differ. Click a device name to review its findings on the Security page.

Configure reporting

Under Settings → Reports, set the organization-wide time zone and usage hours for each weekday. Days without configured hours count as non-working days. After saving changes, results may be incomplete until recalculation finishes.

Active use and logged-in time are different measures. Active use is based on records with input activity while the screen is unlocked. Use it as supporting information alongside attendance or time records.

Device status in Overview represents the current state rather than activity within the selected period. Results also depend on collection settings, submitted logs, and aggregation progress. Web access history and print history can be exported as CSV.

Logs

Review device activity and management operations in chronological order. Filter by period and category, or search for a hostname, username, application, filename, or URL.

Expand a record for targets, changed settings, and results. Requests affecting multiple devices show the target count, with per-device information in the details. Export logs matching your search as CSV.

A request record and its execution result are different records. A Wake-on-LAN or application launch request does not confirm that the device started or that an application window opened.

Settings

Remotto Viewer

Launch the Remotto application on a device with the Operator role. On Windows, open Remotto Client from the Start menu. Changing the device role does not automatically launch Viewer.

View screens and use remote control

Select a group and view device screens in a 1×1 to 5×5 grid. Double-click a device thumbnail to switch to control mode. Mouse and keyboard input can then be sent to the selected device. Switch to full-screen display when needed.

Save a screenshot

Use the camera button in control mode to save the target device’s screen as a PNG at its original resolution. Check the completion notification. On Windows, screenshots are saved in the `remotto` folder under Pictures, with the capture time, username, and hostname in the filename.

Share your screen

Choose your desktop, a window, or a selected area and share it with clients. Use this for demonstrations, instructions, or classroom materials. Stop screen sharing in Viewer when finished.

Distribute files

Select the destination devices and the files or folders to transfer. Choose a destination such as Desktop, Documents, or Downloads, start distribution, and check progress.