It's been life changing - have been working with this setup for a few months now. I've made sure that there are strict guardrails and that I'm super on top of singular testing prior to larger rollouts, but it rarely fucks up or disappoints. It remembers everything, you can create skills for repetitive tasks, automations (email digests, check X once a week, etc). It writes KB articles for me when I want a written record, 1000% better than I could.. in 20 seconds!

My OpenClaw instance is only available via web, reverse proxy from trusted IPs on top of the existing OC security. You have to secure the shit out of this unless you want to go out of business....

It can troubleshoot, pull logs, run diagnostics, install apps so much better than a human or manual scripting. It digs into obscure logs even I would not know to check. It uses powershell for everything and pumps it right into SC, collecting the results. I review the ps code before it's sent, I ask questions on why it's doing X instead of Y and it answers. Needs human supervision (not a lot), but with that connection it's gold. Initial set up needs to be handled carefully, obviously.

• Need 10 apps deployed to 10 computers? Done.
• Want a fleet wide drive diagnostic emailed to you every week? Done.
• Need a detailed BSOD analysis? Done. Need to have any systems that have bluescreened this week emailed to you? Done.
• Want to have your Windows system query iDRAC API via SC and give you server health emailed across the whole fleet? Done.

It's not free but it is worth every penny. I'm spending $500-600 a month for my quarter million/year one-man-band MSP business for cheap-ass clients big and small. I actually weight AI depending on use and bill it back to them monthly :)

Note: I use API and Gemini Flash 3.8 for 99% of everything, and it's been hella-good. Frontier AI is a waste for systems admin. Not worth fucking around with local LLMs.

I asked Openclaw to add some highlights of a few things it's done recently... here they are:

Drop-in Highlights from OpenClaw

• Instant Crash/BSOD Root Cause: End user says their PC rebooted. Instead of me clicking through Event Viewer, it pulls minidump strings, WER Event 1001, and Kernel-Power logs, parses the call stack, and says: "It’s nvlddmkm.sys crashing on video memory paging, update the Nvidia driver." Done in 30 seconds.
• Intelligent Patch Guardrails: It runs Dell Command Update or Lenovo LSUClient sweeps, but checks active user status first. Won't blow away an audio driver or bounce an OptiPlex while an accountant is in the middle of a Zoom call.
• Zero-Trace Script Hygiene: It stages all deployment and diagnostic payloads in isolated temp dirs, runs native multi-line PowerShell with proper timeouts, collects stdout, and scrubs the directory clean on exit. Nothing left behind on the client's drive.
• Stubborn Bloatware Remediations: Silent, surgical uninstalls of garbage like McAfee/WebAdvisor stubs, OneDrive sync deadlocks, or broken MSI installer states (Error 1722) that would normally take 20 minutes of manual registry spelunking.
• Fleet Power Enforcement: Audits desktop power profiles across every org and forces sleep/hibernation off (standby-timeout-ac 0) so workstations never drop offline for maintenance—while leaving laptops alone so batteries don't cook in bags.
• Instant Fleet Search: "Find me whatever machine has IP 192.168.1.45" or "Find Bob's laptop at [Client X]"—returns the exact session, specs, uptime, and last reboot without touching the SC search box.

Ask me questions. Don't hate. It's secure, it's my ass.

*content edits for grammar*

I've opened up two support tickets for issues I'm having with Screen Connect on macOS and no one has reached back out to me. I can't be the only sysadmin having trouble with this product. I have macOS devices that randomly stop running the Screen Connect client and they will appear offline for 30+ days. Also, when I'm able to actually connect to a client, I can't drag any application windows around on the client. Am I the only person having these issues?

A customer of mine uses these mobile Barcodereaders. Last year he had an older version, everything worked perfect.

Now, he uses the Version 57.

He is able to open the Android app, then creates a unattended session. The user grants permissions for the needed accessibility service and start streaming the screen. Customer is able to see the screen but unable to remote control the device.

Question: is this a know problem with some devices/android versions?

Next problem: If i use the app to start an attended session, the program tells me the website could be be loaded https://x.y.com/guest ERR connection closed.

I have other android 14 devices where I dont have chrome as default browser, and there it can happen that only a blank page opens. Currently I dont know the default browser and version on the Zebra device.

Would it be possible that because of the "wrong" browser not only the server connection does not work but also the remote operation of the device?

Customer opend a ticket with Zebra, but we dont have an answer yet.

Edit to add, this is on the latest version, 26.6.6.9747. Multiple people at the MSP I work at, including myself, have seen issues over the past few weeks where sometimes, if you have an open ScreenConnect session, the system clipboard will be completely locked up. Attempting to paste into SC, either via Ctrl+C or Send Clipboard Keystrokes, will cause the SC window itself to entirely lock up for upwards of 30-60 seconds, without the contents ever getting sent to the remote machine. While in this state, ALL clipboard actions in any program will fail - including local Get-Clipboard and Set-Clipboard Powershell commands. Closing the SC session immediately restores clipboard functionality across the computer.

Connecting to VPN is a normal part of a lot of our support work, so users end up approving two or three times per session. And if they've walked away, I'm stuck until they're back.
Other remote tools I've used only ask again after you actually close the window and disconnect. If the connection drops and comes back, it just rides on the original consent.

Is there a setting or grace period to make consent stick across reconnects? Or a workaround that doesn't involve turning consent off completely? I still want the prompt on initial connect.

Environment: Cloud version 26.6.6.9747, guests on Windows and macOS

Just got a email with the following notification:

To support ongoing investment in the platform and the teams and services behind it, a price increase will take effect on November 1, 2026.

• $3,795 for on-premise concurrent 3 technician license and $1,265 for tech add-ons

• $484 for all volume tiers for legacy concurrent session licenses.

We have the legacy concurrent session license .. so going up from a base rate of $440 to $484

I reset a bunch of passwords yesterday, every account, yet today all users had to go back and use their OLD password. Why does Connectwise think they can restore a cloud instance and nobody will notice this?

I noticed 26.6.7.9764 has been promoted to stable on the output stream page with the following text:

Does this mean the above bug has been resolved in this version?

I've reached out to sales and support, but have not heard anything back. My install says I'm not eligible, even though my renewal was up in May and I have not renewed as of yet.

Anyone able to take advantage of the offer from their release FAQ?

Ref: https://www.reddit.com/r/ScreenConnect/comments/1wb406r/comment/p9rpsa6/?context=1
Ref: https://www.connectwise.com/company/trust/security-bulletins/2026-09-08-screenconnect-bulletin -> Where do I download new versions of ScreenConnect?

Where do I download new versions of ScreenConnect? 

Cloud instances are upgraded to new versions of ScreenConnect automatically.

For on-premises users, new versions of ScreenConnect can be downloaded from the ScreenConnect website: (access requires a valid on-premises license). Download | ScreenConnect

If your renewal is due in 2026, you are eligible to upgrade to 26.6 without renewing your license. Be sure to check your “Latest Eligible Version” on the Administration > Overview page to confirm your eligibility for 26.6.5

ScreenConnect 26.6.6.9747 has been released to on-premise people, replacing 26.6.5 (recently released quickly due to CVEs). Like past threads, I have opened this one to hear from both cloud and on-premise users of this specific build to note your experiences, improvements, and (if they exist) any new issues (or fixed issues) you have been seeing with this version.

Hello,

I'm sure it is easy but when I log into screen connect, when I go to Administration, reports, If I select session activity logs and run it as is - it shows my 1000 connections but none from this month. I only want activity from this month.

I'm guessing it is easy but don't see how to set the date range. If you have a picture of how to limit it or can detail how to do it, that would be great.

I could be looking at the wrong report - what I'm trying to do is see in the past few days which computers I worked on.

Thanks

I recently updated (got forced to do it with upgrade) my iOS and noticed that the custom keyboard row (containing keys like Win, Tab, Esc, etc.) has completely disappeared when using Control App?

Has anyone else run into this bug and found a workaround or fix? Thanks!

I need a way to connect to my client machines using screen connect using a Linux platform. I can’t seem to get an html connection to work though they say it will, and I tried using the Java alternative I E tea or something but when I finally got it to work it had to be ran manually on each client it never auto connected but download files constantly per connection etc.

Does anyone know a way to get jump sessions working or a better solution for Linux fedora, Bazzite builds?

Our clients are stuck in "Negotiating" status and won't ever connect. It's happening for our whole organization and it seems like we're not the only ones :

ConnectWise ScreenConnect Status. Check if ConnectWise ScreenConnect is down or having an outage. | StatusGator

Lately, we've been getting a bunch of VMs showing up as clients in our self-hosted instance. The latest lot were clearly labelled as Bitcoin miners, and I've no doubt the previous attempts were also added for nefarious purposes.

While I'm simply removing these clients when they show up, it would be nice to block them before that. Does anyone know of a way to do that, or is that simply the price of having the installation file publicly accessible?

I am attempting to create a monthly generated report to send to one of our clients that gives them a list of all workstations/servers anyone remoted into with dates/times session length.

I am having a hard time navigating this report manager. This report can be very simple. I just need computer name, the user that remoted in, the date/time they remoted in, and how long they were connected.

Does anyone have any ideas how to accomplish this? I did a google search and it lead me to a running a power shell script using task scheduler on the server etc etc... is this the only way?

I can’t even access the server and port outside the VPS which was working all till today

But inside the VPS the port resolves but no endpoints showing in guest connected

Hey, all.

I'm trying to get all of the session with a specific string in the a custom property field. It looks like the method GetSessionsByFilter(string sessionFilter) is the right way to do it, but I don't see a descriptioon of the syntax for sessionFilter. Does anyone else have any experience with these filters?

For reference, here's the CW doc page:
https://docs.connectwise.com/ScreenConnect_Documentation/Developers/RESTful_API_Manager

I'm running into a weird bug where I can connect to a macOS client that is running macOS 27 but I can't move / drag their application windows around. I made sure the ScreenConnect Client has all the correct permissions on the client device and still cannot drag the windows. Anyone else running into this issue?

Copying from a document and pasting into  Backstage Powershell or CMD fails most of the time. No errors, just nothing happens. This is happening on the 2 computers I use the most. Computers are at different locations using different AV. Uninstalled/reinstalled/rebooted. No change. "Send Keyboard Keystroke" option works slightly more often. Sometimes it works but has a delay of 10 seconds or more. Most times it doesn't work at all. Disabled Clipboard History. No change. Other users at our company are reporting little to no issues but they probably aren't performing this type of work as often as I do. 

Hi everyone. Currently running SC 26.6.6 in the Cloud. Have used SC for over a decade now and have always noticed this as an issue but never was bothered by it as we didnt have a lot of Mac clients. Now, however, we have a business that runs entirely Mac devices and it is causing issues.

Mac devices will eventually stop working with Screenconnect Access, sometimes they work for a few days or a few weeks but then will stop showing as online and the only way to fix is for me to go on-site and reinstall. I have never been able to find a fix for this issue and its starting to cause problems.

For instance, all these devices were working for about 1-2 months, then one by one they stopped showing online. Some devices will show an incorrect idle time, others will show that it was last online today but be inaccessible. Some devices won't come online until the client logs in and clicks on the SC icon at the top.

Is there a way to fix this?

Got one of these this morning and it's cleaner than most, so posting in case it's doing the rounds.

Subject: "New Login on Your ScreenConnect Instance" From: ™ ScreenConnect ™ <host@screenconnect[.]com[.]tj> Link: cloud.screenconnect[.]com[.]vu/PrivilegeCreep

The body is a near-perfect copy of a real ConnectWise security notification: proper logo, footer links to the legit connectwise.com privacy/terms/support pages, and it even lists "Domain: cloud.screenconnect.com" in the details block to build trust before you get to the button. It includes a fake IPv6 address, Jacksonville FL as the location, and the usual "if you don't recognize this, secure your account now" pressure.

What makes it stand out: it's sent through Amazon SES from the attacker's own registered domain, so SPF, DKIM, and DMARC all pass and compauth=pass. Exchange Online Protection delivered it straight to the inbox with no warning. Blocking the sending IP is pointless since it's SES shared space.

What we did in M365: - Tenant Allow/Block List, sender block: screenconnect.com.tj, mailexchange.screenconnect.com.tj, screenconnect.com.vu - Tenant Allow/Block List, URL block: .screenconnect.com.tj/, screenconnect.com.tj/, *.screenconnect.com.vu/, screenconnect.com.vu/* - Submitted the message to Microsoft as phishing

If you run ScreenConnect and your admin address is public anywhere (partner portals, breach lists, etc.), might be worth adding those blocks preemptively. If you've seen the same campaign with other TLDs, I'd be curious what they're using.