Automox Q&A

Automox Team-  Are there any Otto’s still floating out there? Happy sec engineer here who would love to add one to my swag shelf. 

Is it possible to assign specific device group access to user ?

I’m using the worklet to delete devices after 30 days of being disconnected.  I currently have a script in Intune that should add in the access key as well as stop then start the Automox service.  This has been working for some time.However, I’m now seeing “to many Requests” within the amagent logs and devices not being added back in.  I know Automox suggests uninstalling and re-install the agent manually but within the environment and with limited numbers on my team this isn’t a viable option.I do also have the Automox agent as required within Intune so am trialling a group for uninstalling the agent to which I’ll then remove those devices and the app should re-install.Anyone got a better way and an automated way of getting devices to add back to the portal that have been deleted

We’re using Automox in a less protected environment, but I’m trying to evaluate if I can use it closer to our factory systems. Does Automox have an on-prem solution for partially air-gapped systems? It would be similar to an on-prem proxy.

Would it be possible to get a auto close/timeout on the agent? We have had some users gripe that after they click Install Updates and they install the agent window just remains open. Would it be possible to get that to auto close after X minutes?

Hello Everyone!We're inviting you to our upcoming Automox Live Q&A session Tuesday, Jan 13th at 9 am MST/ 11am ET.Have a few minutes? Bring your Automox questions — our experts will solve them live!Got a tough question? Submit it in advance by emailing our team at (success@automox.com) so we can expedite live answers.Click here to register for the session.

My place of work has a plague of computers that get filled up on the local drive by our end users which has been causing trouble when trying to use automox. So I put this question forth, if there is a way for automox to automate cleaning up space? My problem is we can’t just do a be all delete all process as our users like to save important stuff locally. We have tried to educate them not too bt it doesnt work.

How do I create an email alert that informs me when an asset has not communicated with the portal for x days?

In our Automox environment we’ve noticed an increase in users reporting updates on Windows devices taking a very long time to progress before eventually failing with error message "Something didnt go as planned. No need to worry - undoing changes. Please keep your computer on."The whole process seems to take about 30-45 minutes, and there were no errors listed in the effected devices activity logs. Has anyone else noticed this behaviour?

Hi everyone,We’re planning to expand our IT operations team with remote IT admins who will be managing endpoints and creating Worklets in Automox. We’re exploring best practices for onboarding and enabling remote hires efficiently.Has anyone worked with remote IT talent sourced through a remote recruitment agency like CrewBloom? I’m especially interested in: Strategies for giving remote admins secure access to endpoint environments Tips for training them on creating and managing Automox Worklets effectively Collaboration methods for distributed teams to maintain and deploy scripts across Windows, macOS, and Linux Any advice, examples, or lessons learned would be greatly appreciated!Thanks in advance.

I have been looking to get the details of users who performed what action in Automox and I don’t see it anywhere. Please have this fixed as this is a critical audit requirement

We have a Windows 11 Golden Image running for VDI.We noticed that MS Teams wasn’t being upgraded to latest version.I found a worklet.Windows - Software Lifecycle - Upgrade to the New Microsoft Teams (MSIX)I created a policy from it and assigned to that specific VM.The initial evaluation code runs and comes back with:The New Microsoft Teams client is already installed. Device is compliant.This is not true because when I check the version installed its: 2025 July 25 [removed by moderator] .8024 and of course, latest version is 2025 November 19 [removed by moderator] .7193

We have Automox deployed on our users devices and overall it is great for keeping devices up to date, but if a device has need of updates that we can see on our console, the icon on the users device still says that it is up to date?

Hi, After following this documentation, as well as enabling and configuring the “Enable Apple Silicon Patching” worklet (with the correct admin credentials) I have been unsuccessful in my attempts to remediate the `_automoxserviceaccount` SecureToken authorization.First I tried sudo /usr/local/bin/amagent --adminuser '<admin_username>' --adminpass '<admin_password>' but received: ENABLE Automox service account given account not found  I tried this remotely (via mdm) and locally, same result. I confirmed that _automoxserviceaccount exists at /Local/Users/_automoxserviceaccount The admin user has SecureToken enabled Then I tried the suppl

Hi all, We are having an issue whereby our Office 365 updates are forcing apps to close and restart. This is happening to some VIP users and as a result they are complaining to IT about applications closing on them. Whilst this mostly recovers, the disruption whilst working is not ideal and it also doesn’t recover things like Mimecast searches (within Outlook via the addin).  We would therefore like to approach this with a separate worklet or update policy to update just Office365.  Does anybody have any recommendations on this one? Perhaps a Worklet whereby I can trigger a notification that the application will update in X minutes, and provide a user-friendly warning to the user (if it detects that the office apps are open). Alternatively, if we can update but not restart the app, and then apply the changes on the next restart of the apps (or device) that would be ideal.  Thanks in advance! 

Morning, events have transpired that we need to move half of our devices in one Automox account to a new one.Is there an easy way to do this? I’d rather not have to go round and uninstall and reinstall Automox with the new key. I saw a similar ticket that had a script but it doesn’t seem to be accessible now.Thanks,F_IT

Hi Automox Community,We’ve recently started integrating edge computing environments into our infrastructure primarily for retail locations and remote branches. Automox has been performing well in our core setup, and now we’re excited to extend its automation and security advantages to our decentralized edge computing environments.I’d love to hear from anyone who has experience managing patching and policy automation for edge devices using Automox. Are there specific best practices you follow for scheduling, bandwidth usage, or handling limited connectivity?So far, the flexibility of Automox policies has made initial deployments smooth, and I’m optimistic about scaling further. Any tips or lessons from real-world edge use cases would be much appreciated especially around performance, security hardening, and g

I would like to suggest adding when the software was installed under Software. 

I have installed all available patches in Automox, but the vulnerabilities I scanned on Lansweeper have not decreased. Why is this? 

Anyone using the beta agent and running into issues? I am seeing a number of failures and the log shows they failed due to execution policy issues. Unable to run the script because running scripts is disabled. This is new.

Is ARM64/Snapdragon supported by Automox on Windows 11 yet? For both install and for updating other ARM applications?

Hello!I’m trying to make it so that a user in a single Organization can use a Custom Role I have created.  So far this is proving difficult, as the distinction between whatever “Account” level and “Global” level is is about as clear as mud.  The descriptions of them are the same.  The best I could muster was a user who had the role assigned shown via Organizations, but if you looked under Roles & Permissions the role had 0 users assigned.I had a conversation with someone who used 3 terms (Account/Zone/Organization) to refer to Organization.  And also “Account” referring to… something else.I guess my 2nd question is… what is an Account in terms of Roles & Permissions Account/Global?3rd… what else is “Account?”More confusing is, as a Global Administrator, I can see users defined in 2 places.  With my custom role assigned to nothing, I can see the user in question at a Global level “unassigned” but not present within the Organization I want th

Hi all,  We are currently making use of the Windows 11 Feature Upgrade worklet (Windows - Configuration - Windows 11 Feature Upgrade) and this had been working quite nicely for us, however we are recently experiencing and issue whereby this does not seem to be working. Upon checking the logs of devices, we are seeing that they have:  {"args":"","response":"[\"124\",\"Device is on a Windows 10 build. Running the Windows 11 Readiness Check to determine eligibility for the Feature Upgrade.\\r\\nEligibility check passed.\\r\\nDevice is Windows 11 Ready.\\r\\nFlagging Device for remediation.\",\"COMMAND TIMED OUT.\"]"} Please can somebody advise of how I can review why these are timing out and perhaps up the timeout limit to ensure that this is back working?  Thanks! 

Hi all,We would like to have a download time different than the patch time.At this moment, we have a policy schedule at 00:00 and a automatic restart enabled with a deferral of 12h in order to reboot all critical systems during working hours if something happening. But if any patch installation succeed but generates any problem in the machine, it will stop working. Is there any workound or idea of how to achieve what we want? To dowload around 00:00, patch around 11:00 and then reboot at 12:00? Thank you,David.  

Hi, I just started creating different groups based on OS and core business functions, and came to realise that you can not really automate based on those filters, automation is based on policies. I can run a policy for all devices affected to it, but can not run all policies affected to a group. Am i missing on something, or is Automox just not built this way, and that is possible room for improvement ?