Remote Access, Admin Accounts & Your Privacy
Explore best practices for managing remote access and securing admin accounts to enhance your organization's cybersecurity.
Table of Contents
REMOTE ACCESS, ADMIN ACCOUNTS & YOUR PRIVACY
VeritGuard Knowledge Base | Privacy & Access
When you sign up for VeritGuard Managed IT, we set up a few things on your devices and accounts so we can keep everything secure and running smoothly. This article explains exactly what we set up, why we need it, and what controls you have over your own privacy.
In This Article
- Why Verito Creates a Local Admin Account on Your Device
- Why Verito Creates a User in Your Microsoft 365 / Google Workspace
- Remote Access: How It Works
- How to Know When a Remote Session Has Ended
- Your Privacy and Controls
- What Verito Can and Cannot See
- Frequently Asked Questions
Why Verito Creates a Local Admin Account on Your Device
During onboarding, we create a local administrator account on each managed device. This is a standard practice for any managed IT provider, and here is why it is necessary:
- Installing and updating security tools -- Antivirus, endpoint detection, backup agents, and other protective software all require admin-level permissions to install and keep current.
- Deploying patches and updates -- Windows updates, driver updates, and application patches need elevated access to apply correctly.
- Troubleshooting system issues -- When something goes wrong, our technicians need admin access to diagnose and resolve the problem without delays.
- Managing security policies -- Enforcing firewall rules, encryption settings, and access controls all require administrator privileges.
Without admin access, Verito simply cannot manage the device. The admin account is used only for management tasks. It is never used to access your personal files, browse your documents, or monitor your day-to-day activity.
Why Verito Creates a User in Your Microsoft 365 / Google Workspace
In some cases, we create a user account in your Microsoft 365 or Google Workspace environment. There are two main reasons for this:
1. Deploying Email Protection
We use an email security tool to protect your inbox from phishing, spoofing, and other email-based attacks. For it to integrate with your email flow, it needs an unlicensed user account within your Microsoft 365 or Google Workspace (there is no unlicensed account for Google). This is how the tool plugs into your mail system to scan and filter messages before they reach your team.
2. Managing Security Policies and Configurations
The account also allows us to manage security policies, conditional access rules, and other configurations within your cloud environment. This helps us enforce best practices without needing to use your personal admin credentials.
Whether this user requires an additional license (and any associated cost) depends on whether you use Microsoft 365 or Google Workspace. Microsoft 365 admin user can be added without a license, while Google Workspace user needs an additional paid license. We recommend reaching out to your Verito account manager for details specific to your setup.
Remote Access: How It Works
Verito uses a RMM Tool (Remote Monitoring and Management) to manage your devices. Here is how it works in practice:
Background Management (No Screen Access)
The vast majority of what we do happens silently in the background. This includes:
- Deploying patches and updates
- Running security scans
- Monitoring system health (CPU, memory, disk space)
- Checking that security tools are active and up to date
None of these tasks involve viewing your screen or interacting with your desktop. You will not notice them happening.
Live Remote Sessions (Screen Access)
Sometimes, a technician needs to take remote control of your screen to troubleshoot an issue. When this happens:
- You are notified and asked for permission before the session begins
- A notification appears in your taskbar showing that a remote session is active
- You may see the cursor moving on your screen as the technician works
- You can watch everything the technician does in real time
Remote screen access is never silent or hidden. You will always know when a technician is on your screen.
How to Know When a Remote Session Has Ended
When a remote session ends, you will see clear indicators:
- The remote session notification disappears from your taskbar
- The Datto RMM tray icon returns to its normal state (no active connection indicator)
- The cursor stops moving on its own and you regain full control
All remote sessions are logged, so there is always a record of when access occurred and how long it lasted
Your Privacy and Controls
We take your privacy seriously. Here is what you should know about what the RMM tool does and does not do:
- Verito cannot see your personal files, browsing history, or keystrokes through the RMM agent. It is not a surveillance tool.
- RMM monitors system health (CPU usage, disk space, update status, security alerts). It does not monitor user activity.
- Remote screen access requires explicit initiation by a technician and is always logged. It does not happen automatically or silently.
- Verito's access is governed by internal audit policies. This means there are formal procedures, access restrictions, and audit trails in place to protect your data.
Think of the RMM agent like a health monitor for your computer. It checks vital signs (CPU, disk, updates) but it cannot read your emails, open your files, or watch what you type.
What Verito Can and Cannot See
| What Verito CAN See | What Verito CANNOT See |
|---|---|
| System health metrics (CPU, memory, disk usage) | Your personal files or documents |
| Installed software and versions | Email content or attachments |
| Windows update status | Browsing history |
| Security alerts and threat detections | Passwords or saved credentials |
| Disk space and storage status | Keystrokes or typed content |
| Device online/offline status | Screen activity (unless in an active remote session you approved) |
Frequently Asked Questions
Q: Can I decline a remote session?
Yes, always. When a technician initiates a remote screen session, you will receive a prompt asking for your permission. You can decline it.
Q: What if I am away from my computer and something needs fixing?
Most management tasks (patches, scans, monitoring) run in the background and do not require screen access. If a technician needs to take remote control of your screen for troubleshooting, they will coordinate a time with you rather than accessing it unannounced.
Q: Can I remove the admin account Verito created?
We do not recommend it. Removing the admin account would prevent us from troubleshooting issues on that device if the user is not able to login using their account. If you have concerns about the account, please reach out to your account manager so we can address them.
Q: Does the Microsoft 365 / Google Workspace user count toward my license limit?
It depends on your specific service. Microsoft 365 admin user can be added without a license, while Google Workspace user needs an additional paid license.
Verito Technologies | VeritGuard Managed IT | Questions? Contact us at itsupport@verito.com or 844-629-9899.
Table of Contents