Get Installed Remote Access Tools
Summary
This script performs a comprehensive inventory of endpoints to identify a curated set of remote access tools. It analyzes multiple data sources, including uninstall registry keys, active processes, installed services, and known executable paths, to ensure accurate detection.
Optional exclusions can be configured using a System Property, allowing flexibility in tailoring the results.
The collected data is then stored in the custom table pvl_installed_remote_access_tools for reporting and further analysis.
Supported tool display names (use exact spelling when excluding):
AeroAdminAmmyy AdminAnyDeskBeyondTrustChrome Remote DesktopScreenConnectCW RMMDWServiceGoToMyPCLiteManagerLogMeInManageEngineNinja RMMNoMachineParsecRemote UtilitiesRemotePCSplashtopSupremoTeamViewerTightVNCUltraVNCVNC Connect (RealVNC)Zoho AssistAteraAutomateDatto RMMKaseyaN-Able N-CentralN-Able N-SightSyncro
Dependencies
Sample Run
User Parameters
| Name | Required | Example | Description |
|---|---|---|---|
| SetEnvironment | False | 1 | Set the SetEnvironment parameter to 1 during the initial execution of the script to create the system property and required EDFs. |
System Properties
| Name | Required | Example | Description |
|---|---|---|---|
| WhiteListedRemoteAccessTools | False |
| Optional comma-separated list of remote access tool display names that should be excluded from detection. Use this when specific tools are approved for the site and should not be reported by this script. Different ScreenConnect instances can also be excluded by specifying the instance identifier after ScreenConnect Client, for example: ScreenConnect Client (3429b39dc0180fcf). This allows precise exclusion of individual screenconnect instances. Note : The tools defined in this property will be excluded on all client machines. |
Extra Data Fields
| EDF Name | Level | Type | Section | Example | Description |
|---|---|---|---|---|---|
| WhiteListedRemoteAccessTools | Client | Text | Default |
| Define Tools name separated by comma to be excluded for a particular client. |
| WhiteListedRemoteAccessTools | Location | Text | Default |
| Define Tools name separated by comma to be excluded for a particular location. |
| WhiteListedRemoteAccessTools | Computer | Text | Default |
| Define Tools name separated by comma to be excluded for a particular machine. |
Note : If tools are whitelisted at the system property, client, location, or machine level, the script will consolidate all entries and whitelist the combined set of tools.
Output
- Script Logs
- Custom table
Changelog
2026-05-15
- Updated Powershell to display individual ScreenConnect instances instead of simply listing ConnectWise Control and to also detect CW RMM if present on the machine.
- Introduced Client, Location, and Computer-level EDFs to allow whitelisting at different levels.
- Added CW RMM to the list.
2026-05-05
- Initial version of the document