Forum for AX newbs and vets ,alike!
- 559 Topics
- 2,105 Replies
Workaround To Patch Adobe Acrobat Reader DC 32-bit in Windows
Update: Thanks to @Douglas_C post, there is a way to obtain the latest version of Acrobat here: https://get.adobe.com/reader/enterprise/ Use it to do a more desirable single required software policy (the first policy listed below) which will update existing Acrobat installs and install it on systems that don’t have it. If you’re only looking to update systems that currently have it installed and not install on systems that don’t have it, use just my second policy with the .msp files. Due to a current issue with Adobe restricting how their software is distributed, Automox is currently only able to support patching Acrobat Reader DC up to version 20.013.20064. I’ve setup the following to be able to keep it updated to the latest version. First, I created a required software policy with the latest version I could get from their FTP site when it was active. This policy would at least install it on systems that didn’t have it or update it to that version if systems had an older version, b
What worklets would you like us to write next?
We’re continuing to crank out more worklets for you to download and use: https://community.automox.com/c/worklets and we’re looking for some input from the community as to what we should work on next. What tasks would you love to automate but haven’t had the time to script? Tell us what you’d like and we can help by putting together a worklet for you.
Adobe reader failing to update
Hi newbie to automox. I am trying to get all of my adobe acrobat readers up to date. a majority the patch works. for some it fails and I am not sure why - where do I look to see why it failed ? I have a policy that runs daily and I also look at devices and scroll to the bottom - select adobe and select click now
[Mod Note: Issue Resolved] Inconsistent patching using Automox with UTC time - not good
I have an open, ongoing support case with Automox on this already, but would like to put it out there to the community in case others are seeing this behavior as well. We are testing Automox and have about 240 Linux servers using Automox for patching. These systems are in various groups/policies that have different times. All groups and policies are exactly the same (all created by API’s) other than the name and they date/time - they all patch for Criticals and Highs when the OS is Linux. Automox identifies that the systems have scheduled patches to apply, but doesn’t actually execute against the systems and ‘skips over’ groups of systems. On some, it does patch them just fine. Our Automox policies are all set to use UTC time rather than the local system time because our maintenance windows are all defined using Eastern Time - and the servers reside in several different time zones. Again, I do have an open support case with Automox, but this is a HUGE issue as the main functionality
How to monitor if a Certain Software is Installed on All Devices
Hello Automox Community! After using 2 years SCCM, I have switched to Automox two months ago. So far I cannot find an adequate way to monitor the progress of an application’s rollout. Does I can’t see which devices failed to update certain application to the latest version or completely missing the app. I have tried this script - Use API to Determine if a Certain Software is Installed on All Devices but does not generate in the report information in the columns for application name and version. Only generates the names of all our devices. Could you please advise what is the best way to monitor the progress of rollout of application or to get in a report the name and the version of particular software on all devices? Thank you in advance 🙂
COMING SOON: New Community Content
Hi, everybody - Chad here. Before I head out for a nice, long weekend, I wanted to pose a question. As we start to ramp up content creation for the Community, it makes no sense to just make a bunch of irrelevant docs and files that nobody will engage with. That’s where you come in. This is your community, so let us know what you’d like to see. I’ll put up a quick poll with some current ideas, but please don’t be shy about telling us your own - because, as Jack Donaghy once said: “There are no bad ideas in brainstorming, Lemon.” What kind of content should we create for the Community? High-level video tutorials (5min+) High-level video tutorials (~90sec) New Feature videos (~60sec) Recurring open “Office Hours” with AX Traditional/KB-style articles 0 voters These are just ideas we’re throwing around, but there are some that I think will be great resources, have some cool tips & tricks, and maybe even introduce you to parts of Automox you’ve never seen before. So, again -
Deploy AutomoxAgent to macOS via Microsoft Endpoint Manager (intune)
I have created a deployment configuration via the Microsoft Intune dashboard. Before I deployed the app I had to convert it to an intunemac using IntuneAppUtil. In my Intune dashboard, it says the app has been installed on the macOS (Big Sur) device. Using the terminal I can indeed see the agent installed in /usr/local/bin/amagent. But when I checked my Automox devices dashboard I don’t see the device registered. Has anyone done this before successfully what additional steps have you done? Screen Shot 2021-09-02 at 3.55.18 PM1118×623 47.8 KB Thanks.
My 1st Patch Policy's failed
I’m a new user of Automox and created my 1st 3 Policy’s using the Recommended Best Practices for Patching on https://support.automox.com/help and they failed. Here are the details from the Report:Failed to apply patches (“2021-08 Cumulative Update for Windows 10 Version 1909 for x64-based Systems (KB5005031)” “Google Chrome” “Zoom 32-bit”): InstallMSUpdates : Install failed with ResultCode 4 and HResult -2145124318 At C:\ProgramData\amagent\execDir210347014\execcmd517446573.ps1:1357 char:17 + InstallMSUpdates $lst + ~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: ( [Write-Error], WriteErrorException + FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,InstallMSUpdates InstallMSUpdates : Install failed with ResultCode 4 and HResult -2145124318 At C:\ProgramData\amagent\execDir210347014\execcmd517446573.ps1:1357 char:17 + InstallMSUpdates $lst + ~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: ( [Write-Error], WriteErrorException + FullyQualifiedErrorId :
In Manual Approval - Add column Restart Required
It would be very useful if there was information about an update’s restart requirement in the Manual Approval table. I’d like to approve updates immediately that do not require restart. And I’d like to wait before approving updates that do require restart. Any suggestions to improve this workflow?
How to Setup Flexible Device Targeting
Many Automox customers have asked us for a flexible method to manage and execute policies on a subset of endpoints based on criteria that match their IT operational workflows. The result? Flexible device targeting, which gives you the ability to perform actions on endpoints based on device and user-defined attributes – without being locked in to rigid dependencies. What is Flexible Device Targeting? Flexible Device Targeting allows Automox users to add filters to policies so that the chosen policies will only run on devices that match those device filters. Plus, you can add up to 10 filters per policy to give you an amazing degree of precision to manage your endpoints. Current device filters include: Hostname Device Tag Operating System OS Version IP Address Active Directory Organizational Unit Here is how to access Flexible Device Targeting. Access “Manage” from the top menu and then go to “Policies.” Click on “Create Policy” on the upper right - Choose your policy type such
find if certain patch has been applied
i am new to automox. took it over from someone who left. trying to figure out how to see if a certain patch has been applied to all window machines. i can see how to check each machine to see what has been apllied but i need to see if a particular patch has been applied across ALL machines
Package Targeting - Restart Required
I see there is Package Targeting by severity. Is there a way to target packages that do not require restart? I’d like to create a policy that patches without notification, if a restart is not required. For patches that do require a restart, I’d like a policy with notifications and deferrals.
User Role - More Ganularity
Is it possible to assign a role that enable the user to execute policies, but not allow them to add/delete/edit policies? It would also be helpful to assign permissions based on Group membership or some other construct where devices belong to an organisational unit. - For example, delegating controls to a regional IT team, or to a team that supports end-user devices, but should not be able to manage servers.
Add more third party titles
Other RMM software supports a ton of titles, Automox supports only a few, will you support more in the near future and have ability to filter ‘third party titles’ when selecting this in a policy as it seems currently you either need to create individual policies to patch certain third party titles or create a worklet
Worklet Deep Dive (August 2021)
Hi, everybody - Chad here. As we keep re-launching some popular recurring posts, I discovered the Worklet Deep Dive interview series, where we get some details into the creation of a specific worklet. This month, we’re talking to @marina about her SeriousSAM/HiveNightmare LPE Vulnerability worklet and how it came to be. What prompted the creation of this particular worklet? This worklet stemmed from the disclosure of a 0-day impacting Windows machines, so time was of the essence to get this tested and shipped to protect users and customers. I also wanted to try my hand at PowerShell scripting, so this was an opportune moment to help protect customers and get some practice. What difficulties or obstacles came up while creating it? Well, I’ve never written a Windows worklet before, and I have limited PowerShell scripting prowess, so there was a steep learning curve for me. For the script itself, there were lots of variables to account for: presence of shadow copies, presence of builtin u
Already have an account? Login
Login to the community
No account yet? Create an account
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.