Automox Q&A

We have >1K servers that are distributed among ~50 different groups and policies that patch according to specific maintenance windows based on the application they run.Our policies allow the server to reboot if the patch being applied requires it, but I’d like ALL the servers to reboot at the end of the monthly maintenance window regardless of installing any patches.What’s the recommended way to implement this?

Hi Team,Please could anyone let me know if there is a way to have the new community site use a dark theme, the old one was perfect.Cheers.

Introduction See it in Action What is Vulnerability Sync? How does it Work? How Does Automox Consume the Scan Data? How do I Patch the CVEs, are Reboots Automatic?  What Errors may I see?  What Does Each Task Status Mean? What are the Technical Constraints? Frequently Asked Questions Conclusion Introduction

We have had problems with large files that are generated in the path C: \ ProgramData \ amagent in some cases we saw files of up to 120 GB. We do not know why the agent is taking this behavior, has this happened to someone else?  

Redoing this poll from February '19 to see if anything has changed in terms of which helpdesk software everyone is using. We’re using this data to help us determine which helpdesk software might be worth integrating with Automox in the future, so please let your vote be heard! Spiceworks Freshdesk Jira Service Desk ServiceNow ITSM Zendesk

I’m curious if anyone out there has several versions of Windows 10 throughout their enterprise? Currently we have mostly Enterprise, but have a swath of Professional machines in the wild.I ask because it’s extremely difficult to manage Microsoft Store App vulnerabilities and updates for PRO machines. 

We want the community to be a welcoming and helpful place for everyone that visits, so to ensure that things go along smoothly, we’ve established just a few community guidelines. These rules are short and sweet, and will go a long way in fostering a healthy community.Be nice - don’t call people names, imply they are stupid, or tell them to just Google the answer. Don’t spam - please don’t post any promotional content without prior approval. Worklets are reviewed - if you submit a Worklet, our team will review to ensure that the code works and is not malicious. Don’t post sensitive information, about yourself or others - this includes email addresses, API keys or other confidential company information, so as to protect yourself and others. Don’t do anything illegal - hacking, phishing, posting copyrighted information, posting malicious links, etc. are all forbidden.If you have any concerns regarding moderation, please reach

How do I scan for new devices that should have the agent installed? Thank you!

Anyone have a worklet or policy to suppress the windows 11 upgrade notification?

We have recently been re-imaging devices so they are Whitegloved with Intune, instead of the legacy USB custom WIM image. This means we have duplicate devices appearing in Automox, is there any way to automate the removal of dormant devices from Intune with Automox?

Hey Folks We are using Automox in our company now and just wondering how to do the following: I am using a community worklet “uninstall specific app using version” I’ve added the name and version of of app to uninstall There is an uninstallation file i can use if need be Now when we try to manually uninstall it using PC directly, it is requiring console password With the community worklet, the worklet is erroring out because of the password missing in the context of the worklet So What is the method to include the password in the worklet when trying to uninstall an application? Do we need to insert the password in remediation code? or evaluation code? Sorry we are newbie with using Automox and some help would be much appreciated.

Ask us anything – beyond just using the Automox patching and endpoint hardening platform. Our experts have answers to help you navigate best practices on securing your hybrid workforce and more. Register here for Office Hours on November 4th at 2pm ET. The giveaway is back, you’ll have to join live for a chance to win! Be sure to submit your questions during registration. See you there!

I am old-school and tell my (Windows 10 Enterprise) PC to shutdown every night, however, I don’t think it does which leads to automox nagging me about restarting my machine and then eventually forcing a reboot. Has anyone come across this before? I have tried turning off fast-boot and using the command “shutdown.exe /s /f /t 0” but it still seems like it’s sleeping instead of shutting down properly, has anyone any ideas what else I can try?

Hi Automox Community, I was wondering if anyone is running Automox with Oracle Linux boxes. We have tried some and the agent never gets past initialization stage. -c in console indicates that it runs through sever get commands and seemingly just starts over. Has anyone else encountered this issue and possibly can give me advice on resolution and troubleshooting? Running on Oracle Linux 8 VM, Thanks, Dan

I’m looking to search for a device name by using like or contains. I’ve found that using name=PartialName* I can put a * a the end of the term and it works. Using a * at the front of the term results in an error 400. $FullURI = "https://console.automox.com/api/servers?name=partialname*&o=$orgID" This page talks about advanced filters for HostName and “like_any” or “not_like_any” but there is no info on where to include that or how the spacing work on the URI if that’s where it goes. It also mentions “display-name” and “contains” or “does-not-contain” with the same issue. Where do these filters go? The body?

Curious to see how many different policies and groups everyone has setup in their console - also include how many endpoints those cover!

Hi All, I have a question about setting up a run book with possible mutiple stages. Is it possible to chain dependent policies? For example I want to do the following as a single workflow: 1 - Run Worklet, if it unsuccessfull - STOP send notification 1, if it successful, CONTINUE 2 - Run Policy, if it unsuccessfull - STOP send notification 2, if it successful, CONTINUE 3 - Run Another Worklet

Would be great if Windows, macOS, and Linux could all serve dialog prompts / pop-ups to users when Automox patch policies are running. Even something baked into Linux that we could tap into such as “notify-send” would suffice here. I’m sure we could create a script to do this but I feel like having to script something and create a patch policy is sort of counterintuitive.

So say you schedule something for the 5th Saturday of a month and there is no 5th Saturday of the month. Does the policy just kick off on the 4th Saturday then?

Right now, we can edit device tags, but in order to keep from overwriting current valuable device tags, we need run a GET command, save all device tag content into an array, and then execute a PUT command to write an entirely new batch of tags. It would be way easier if we could just run a PATCH command as an additive operation add more new tags. This is a particular pain point when we have scripts creating from-scratch tags for devices that end up overwriting valuable manually-created tags that some of our technicians have added for their own records.

I’m having a problem in one of my saved Policy’s. I enabled Device Targeting and added an Attribute, Condition and Option and saved successfully. But now I can’t clear all those values and turn off the Device Targeting. When I clear those values, turn off the Device Targeting and attempt to Save I get this error message: Error: Device filters must have a “field” key. Device filters must have a “op” key. Device filters must have a “value” key Additionally, I didn’t like the idea of giving end users too much time to defer reboots so I changed the hours of the Deferral Settings from 1, 4 and 8 to 1, 2 and 4. After speaking with my manager we agreed that some of our positions will need to defer 8 hours. So I set them back to 1,4 and 8 and Save but when I open the policy again they are back to 1, 2 and 4. Any suggestions?

I assume this has been asked before but the only reference I could find was about the planned dynamic groups feature. I’m new to this product so maybe I’m missing something. Are there plans to allow a device to be a member of more than one group? From an outsider standpoint it seems relatively easy but I assume there is more to it. Thanks for your insights Ron

Hi All, want to see what I’m doing wrong here… trying to follow the example here https://developer.automox.com/openapi/axconsole/operation/issueDeviceCommand/, to issue a command to a server so it can remediate itself, I want to do it one server at a time so it doesn’t take everyone down at once… I’m trying to use the command type “policy_{policy_id}_remediate”  so here is how I’m calling it through curl  curl -X POST‘https://console.automox.com/api/servers/{server_id}/queues?o={org_id}’-H ‘Authorization: Bearer {api_key}’-H ‘Content-Type: application/json’-d '{“command_type_name”: “policy_{po

hi, I was wondering if any of you have trouble with the “remember me” checkbox on https://console.automox.com/? no matter what I do, it will not remember my user name nor password, that check box seems to be doing nothing…I have 4-5 different devices (Mac, pc, iOS) and none of them works…even created a new account and tried, still the same…  thanks! 

Hi, everybody - Chad here. We’ve seen/heard a few issues from users concerning certificates, and it turns out that our LetsEncrypt cert recently expired. From our Engineering team: "As of September 30, 2021, the previous root certificate leveraged by Let’s Encrypt - Automox’s certificate issuer - has expired. For most of our customers and their devices, this will not result in any expected impact to service due to the previously issued ISRG Root X1 root cert that is supported on modern browsers and devices as documented in more detail here: DST Root CA X3 Expiration (September 2021) - Let's Encrypt. In addition to this expiring root certificate, Automox rotates our Console and API certificates every 90 days, and in some cases more frequently, requiring any whitelisting of certificates to be handled accordingly. In order to ensure devices are able to c