Running Roon server on Windows 10, a few user questions

Hello Roon Community & Support,

I’m using ROON server, intrial, since yesterday and few things popup right after setting ROON server. I know that most probably I would find answers to my questions on forum after digging for few days or weeks but I think it will be much quicker if post my questions here.

  • How to setup ROON server to start automatically after Windows restart after power loss, without logging to Windows? Please note that Windows is already set to reboot after power loss.
  • How to setup ROON server to prevent users using REMOTE applications, from seeing and having full access to ROON folders, backups and similar? I do not want to have my kids, guests and others to have write access to my folders, backups and other settings which shall be accessible to administrator only.
  • Where, how and from where can I access and download ROON extensions? I have try to “Discover Roon Extensions” from within Roon menu but nothing was discovered and nothing was available to chose from.
  • What’s is the host name and port of ROON server ? I need to set this in Elgato Stream Deck – I know static IP of ROON server and its name but is doesn’t work when I enter values to Stream Deck software.

Current setup:

  • Latest Windows 10, up to date as per today, configured as standalone ROON server
  • Latest ROON server, up to date as per today
  • Elgato Stream Deck

You might find some help in this thread. Autostart Roon in Windows 10

Thanks for advice but running windows without password is not an option for me. I know Roon will start automatically when windows logon, but this so far its only available when there is no password or after logging in to windows.

Well, Roon does not run as a Windows Service. As stated by a dev:

What about security of audio files and backups if anyone can access them? and potentially erase or corrupt by mistake (kid or a guest)?

Here’s what I did… I set Windows to auto-login to my account on boot and I have RoonServer autostart. I also set my Screen Saver to wait a couple minutes and have the checkbox checked for “On resume, display logon screen”.

With this, my PC can autoreboot, start Roon and then the screen saver kicks in to force the next user to login. Perhaps not ideal but it seems to work to avoid the potential misuse of the PC when left unattended yet allows Roon to run.

Thanks for reply Michael, had this same setup but was wondering if there is more save way.

What about access to music folders and backups from any PC running Roon Remote? As far I have discovered all can be modified from anyone who has access to Roon server. Is there any solution to hide those files or limit access to them?

Hmm, you raise an important point I hadn’t considered but should… Roon has a ‘Delete Album’ function buried in the Album Editor/Album Options choices. Yes, it does make it clear that it will permanently remove the album from your hard disk, but that is of little comfort when I allow friends and kids to use Roon Remote. I never want local music files to be modified or deleted via the Roon Remote interface. I suppose I could mark all music files as Read Only and let Windows security block the delete. Not sure what other headaches that might create.

@Support - thoughts on this?

Michael, I thing “read only” will not preserve from random delete, including backup files which are accessible as well (up to my short experience with Roon).

By ‘random delete’ do you mean through Windows? If someone can mess with my files through Windows or on my home network, well bad on me for not better securing them. I don’t let friends and family have Windows access to those files, I don’t share them locally on my LAN and I backup into the cloud with versioning. I’m comfortable that it’s good enough to protect against inadvertent actions and kids.

But, what I hadn’t considered (also bad on me) is that my family and friends (and grandkids - doh!) often use Roon via laptop, tablet or phone which means ‘Delete Album’ or ‘Delete Track’ is only a few clicks away. I don’t believe they would ever intentionally do so but…

I did just test using ‘Read Only’ on my music files. It does result in ‘Access Denied’ within Roon when I hit ‘Delete Album’ and that’s probably good enough. To be honest, I’m curious as to the purpose of Roon’s ‘Delete Album’. Yes, it does delete the music files, but leaves other files (e.g. images) and the directory itself intact. Hardly a good way to manage your music files. Why not just have a ‘Remove Album’ and ‘Remove Track’ without actually touching the files themselves?

Sorry, I seem to have accidentally flagged your response and can’t figure out how to turn it off! :worried::sunglasses:

Hi @mdconnelly,

It is not possible to disable the delete option. If this is something you’d like to see I definitely recommend creating a #roon:feature-requests!

One thing to note is that deleting is not possible on mobile remotes.

Hello Dylan, Thanks for stepping in to discussion. Will you be so kind and provide answers to other raised questions on the start of this topic?
Also I think is will be nice and professional if you, as manager, create ticket for Roon IT on the matter, I think security is extremely important even if not requested by end customers.

Thanks @Dylan. I see that the delete functions are not there on my phone but they do seem to be there on my iPad Pro (which is what I’ve been letting my grandkids use when they’re here). But, marking the music files Read Only solved that for now. @Dylan - will that work equally well on Rock on a NUC (something I hope to soon be moving to)?

@Artur_Bogdanowicz - Roon is very responsive to customers so such a request from you or me in the Feature Request category would likely be far better received and get more attention. Note that my primary interest is to remove the delete functions from within Roon. You questions about security may be a lot broader.

Here’s a feature request I just posted…

If you have your files on a NAS you can set the NAS’ file structure to be read only. If you have the files on an external USB, you can set the files to be read only on a different computer. However, you have no control over internal storage on a ROCK PC.

I’d likely hang a USB drive off the NUC. As long as I can remotely access the drive and set the files Read Only then I can live with that. Thanks for the quick response.

I’m actually testing that out. So give me a day before. I know I can set the file properties on another machine. Not so sure, ROCK will obey them.

Looking forward to hearing your findings… If Rock does not enforce Read Only on a locally attached USB drive then that will change my decision to switch to Rock.

I do have to wonder if Roon will ever get around to addressing these content security issues. Surely they understand the implications and risks. Despite having backups, I would likely never notice that an album was inadvertently deleted…

I was able to run roon server as a service with NMMS tool.

I still don’t understand why Roon cannot run as a service, my Mediamonkey server, LMS, AssetUPNP and lots of other automated download tools work as services : this is a must-have for servers.

Autolog-on is a really BAD idea for servers : it generates numerous issues in terms of server security.