Windows administration, finally simplified Manage, migrate and deploy across your Windows environment from a single suite

How to use the RustDesk remote control tool in IDEAL ADMINISTRATION?

How to create a GPO to automatically install RustDesk on Windows computers?

➡️ I would like to automatically install RustDesk on my Windows client computers in order to prepare them for remote control from IDEAL ADMINISTRATION.

Is this possible with an Active Directory GPO and how should I proceed ?

Yes, it is possible to automatically deploy RustDesk on Windows client computers in an Active Directory domain using a Group Policy Object (GPO).

This method allows RustDesk to be installed centrally, without any manual action on each workstation, in order to prepare the computers for remote control from IDEAL ADMINISTRATION.

A GPO deployment can be used to configure :

• the silent installation of RustDesk on client computers
• the automatic startup of the RustDesk service
• the definition of a permanent password for unattended access
• the use of a specific RustDesk ID server
• the use of a specific RustDesk relay server
• the configuration of the RustDesk key associated with the selected server

The recommended method is to use a computer startup script applied by GPO. This script can install RustDesk silently, apply the required configuration, then start or restart the RustDesk service.

The general principle is as follows :

• place the RustDesk MSI installation file on a network share accessible by the client computers
• create a PowerShell installation and configuration script
• create a GPO applied to the relevant computers
• add the script to the computer startup scripts of the GPO
• restart the client computers so that the installation is executed

Example of a network share location :

\\SERVER\Deploy$\RustDesk\

This folder may contain, for example :

• RustDesk.msi : the RustDesk installation package
• install_rustdesk.ps1 : the PowerShell script executed by the GPO

The script can also apply a predefined RustDesk configuration containing the ID server, the relay server and the RustDesk key. This configuration can be applied from the command line using RustDesk’s --config option.

The $RustDeskConfig variable must contain a RustDesk configuration string exported from an already configured RustDesk client. To generate it, manually configure a reference computer with the RustDesk ID server, relay server and key, then use the Export Server Config function available in RustDesk’s network settings.

This string should not be written manually. It is generated by RustDesk and can then be applied automatically to other computers using the rustdesk.exe --config command.

Example PowerShell script :

$MsiPath = "\\SERVER\Deploy$\RustDesk\RustDesk.msi"
$RustDeskExe = "C:\Program Files\RustDesk\rustdesk.exe"
$LogPath = "C:\Windows\Temp\rustdesk_install.log"

# RustDesk configuration containing the ID server, relay server and key.
# This configuration string must be exported from an already configured RustDesk client.
$RustDeskConfig = "EXPORTED_RUSTDESK_CONFIGURATION_STRING"

# RustDesk permanent password
$PermanentPassword = "PASSWORD_TO_DEFINE"

# Silent installation of RustDesk if the software is not already installed
if (!(Test-Path $RustDeskExe)) {
    Start-Process "msiexec.exe" -ArgumentList "/i `"$MsiPath`" /qn CREATEDESKTOPSHORTCUTS=N CREATESTARTMENUSHORTCUTS=Y INSTALLPRINTER=N /l*v `"$LogPath`"" -Wait
    Start-Sleep -Seconds 5
}

# Search for the RustDesk service
$Services = Get-Service | Where-Object { $_.Name -like "*rustdesk*" -or $_.DisplayName -like "*RustDesk*" }

# Set the RustDesk service to start automatically
foreach ($Service in $Services) {
    Set-Service -Name $Service.Name -StartupType Automatic
    Start-Service -Name $Service.Name -ErrorAction SilentlyContinue
}

Start-Sleep -Seconds 3

# Apply the RustDesk server configuration:
# ID server, relay server and RustDesk key
if (Test-Path $RustDeskExe) {
    & "$RustDeskExe" --config "$RustDeskConfig"
}

Start-Sleep -Seconds 2

# Set the permanent password
if (Test-Path $RustDeskExe) {
    & "$RustDeskExe" --password "$PermanentPassword"
}

# Restart the RustDesk service to ensure the configuration is properly applied
$Services = Get-Service | Where-Object { $_.Name -like "*rustdesk*" -or $_.DisplayName -like "*RustDesk*" }

foreach ($Service in $Services) {
    Restart-Service -Name $Service.Name -Force -ErrorAction SilentlyContinue
}

In the Windows Group Policy Management Console, the script can be added under :

Computer Configuration
  > Policies
    > Windows Settings
      > Scripts (Startup/Shutdown)
        > Startup

It is also recommended to enable the following setting so that the computer properly waits for the network at startup before running the script :

Computer Configuration
  > Policies
    > Administrative Templates
      > System
        > Logon
          > Always wait for the network at computer startup and logon

To use a custom RustDesk server or the secure Pointdev RustDesk server, the configuration must include the following information :

• the RustDesk ID server
• the RustDesk relay server
• the RustDesk key associated with the server

If you wish to use the secure Pointdev RustDesk server, you can contact us to obtain the required configuration information : ID server, relay server and RustDesk key.

This information is provided exclusively to customers with a valid IDEAL ADMINISTRATION license.

However, special care should be taken when managing the permanent password. For security reasons, using the same RustDesk password across the entire computer fleet is not recommended. Whenever possible, it is preferable to use a different password for each computer or to let IDEAL ADMINISTRATION manage the RustDesk connection settings.

Once RustDesk is installed and configured, IDEAL ADMINISTRATION can simplify the use of remote control by allowing, among other things, the retrieval of the RustDesk ID, the launch of the remote connection and the management of access according to the selected operating mode.

This method therefore allows a Windows computer fleet to be quickly prepared for RustDesk usage, while keeping centralized administration consistent with the existing Active Directory infrastructure.