Automox Worklets

With work from home and troubleshooting of remote networks the team I am on constantly are getting reports of things “being slow”.  Many times the issue comes down to poor WI-FI connection or an internet issues on the end user side.  Who of us has not heard “But Netflix works just fine”….😣I am using the basic Health Worklet but wanted to create a new worklet that provides more information.  In came SpeedTest.net CLI using the following evaluation code and remediation code I am able to get live speed test for end users.  Download the zip file - Extract and upload the .exe into the worklet. Note: This is windows centricEvaluation Code:exit 1Remediation Code:&'.\speedtest.exe' --progress=no --accept-license | Where-Object {$_.trim() -ne "" } --progress= no live update screen just final results--accept-license = seems to be an undocumented flag to accept the license on initial run of exeThe $.trim() -ne””  is just to remove blank lines in the output. Please provide some feedback.

Hello!I have a very simple issue.I want to run this command in a worklet policy…manage-bde -StatusI then want the output of this to show in the activity log.  As far as I can tell, this isn’t possible, as I’ve tried a whole host of ways to get it working but always end up with a blank log (unless I do something useless like “write-host hello”). I’d be really happy for someone to prove me wrong.Cheers,Mark.

We tap into Automox’s APIs to integrate patch management into our platform. I am wondering how we could do 2 things:Hide the “Automox Notifier” from apps (instead, we would push out notifications through our own app) White label all mentions of “Automox” that users see in the onboarding process, with our own brand name “1Fort” 

Would be super great if Automox can connect to vendor server updates like Dell and Lenovo, and run updates through Automox. We currently have to use the dell app or lenovo vantage to run manufacturer updates.

This is an older CVE that was reissued by Microsoft January 21 2022. There is no patch for this vulnerability. It affects all current and previous versions of Windows OS. And is considered “opt-in” with no plans to enforce stricter verification. This is listed in the CISA known exploited vulnerabilities catalog. Updated reissue:CVE-2013-3900 - Security Update Guide - Microsoft - WinVerifyTrust Signature Validation Vulnerability Other:https://nvd.nist.gov/vuln/detail/CVE-2013-3900https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-098 Evaluation Code:#Clears all errors prior to running script$Error.Clear()#All values tested$Value1 = Test-Path -Path "HKLM:\\SOFTWARE\Microsoft\Cryptography\Wintrust\Config"$Value2 = Test-Path -Path "HKLM:\\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Wintrust\Config"$Value3 = Get-ItemPropertyValue -Path "HKLM:\\SOFTWARE\Microsoft\Cryptography\Wintrust\Config" -Name "EnableCertPaddingCheck"$Value4 = Get-ItemPropertyValue -Path "HKLM

Does anyone know of an Automox solution for installing .mobileconfig files on a Mac? I’ve been doing some digging on how to remotely push our CIS profiles (without using JAMF or some other sort of MDM) but have not had any luck. Thanks in advance!

I have some very basic code in the eval section of a worklet, as well as the remediation section. The output from the remediation sections shows up in the activity log, but the eval output does not. What am I doing wrong? $sysInfo = New-Object -ComObject "Microsoft.Update.SystemInfo"if($sysInfo.RebootRequired){     write-output "pending reboot required"    exit 1}else{    write-output "no pending reboot required."    exit 0}  

I see an awesome MACOS Worklet to install/upgrade zoom.. On PC does patching upgrade? or is there a worklet that targets PCs to install the latest client?

I am trying to install the Barracuda Content Shield for our endpoints but its an EXE and not an MSI, plus it needs a key file. The instruction on their site say to use this on the command line: BarracudaContentShieldSetup-2.3.4.1.exeISFeatureInstall="WebFiltering,MalwarePrevention"KEYPATH="bcs.key" /silent Can i upload both the exe and .key file in a policy? Also, for the command line in the policy it says to use powershell syntax and I am not sure how to convert the above to powershell. Thank you.

Hello.  What I’m trying to do is install an application.  Then once it is installed, create 2 folders and then create and modify a configuration file and put it into the last layer folder.  The MSI installs with my parameters.  If I manually create my subfolders, the PS script will create my file with configurations.  It seems to be tripping up with creating the folders.  Below is my script.  I hope someone can see what I did wrong and help me to get it to work.   exit (Start-Process -FilePath 'msiexec.exe' -ArgumentList ('/qn', '/i', '"splunkforwarder-8.2.8-da25d08d5d3e-x64-release.msi" LAUNCHSPLUNK=0 AGREETOLICENSE=Yes GENRANDOMPASSWORD=1 INSTALLDIR="c:\Program Files\SplunkUniversalForwarder" SERVICESTARTTYPE=auto /quiet') -Wait -Passthru).Endscript# Pause 1 minutesStart-Sleep -Seconds 60# Make 2 DirectoriesNew-Item "c:\Program Files\SplunkUniversalForwarder\etc\apps" -Name "ks_all_deploymentclient" -ItemType "directory"New-Item "c:\Program Files\SplunkUniversalForwarder\etc\apps\ks_

I have created a worklet policy to apply security patches on my Ubuntu servers and when I manually trigger the policy, it is working without any problems. I have given it a schedule and I see it is not getting triggered at all unless I run the policy manually. Did anyone run into a similar issue before? Please help me out.

Hi Team , We have below script which we are using to create LOcal admin account in windows:It is working fine manually, but not through AUTOMOX Worklets. Kindly suggest. $username = "username"   # Administrator is built-in name$password = ConvertTo-SecureString "Password here" -AsPlainText -ForceFunction Write-Log { param(     [Parameter(Mandatory = $true)][string] $message,     [Parameter(Mandatory = $false)]     [ValidateSet("INFO","WARN","ERROR")]     [string] $level = "INFO" ) # Create timestamp $timestamp = (Get-Date).toString("yyyy/MM/dd HH:mm:ss") # Append content to log file Add-Content -Path $logFile -Value "$timestamp [$level] - $message"}Function Create-LocalAdmin {   process {     try {       New-LocalUser "$username" -Password $password -FullName "$username" -Description "local admin" -ErrorAction stop -PasswordNeverExpires       Write-Log -message "$username local user crated"       # Add new user to administrator group       Add-LocalGroupMember -Group "Administrators" -

Hello Everyone. I remember asking this question before we purchased automox and I think the answer was no, but I wanted to confirm. I have a company laptop at home with automox installed and a desktop in the office that i log on too. Last week my dekstop in the office asked me to reboot to update, but my laptop at home did not. They are both part of the same policy. I’m not sure where to look to make sure. Thank you, newbie to the service. MIKE

Hello,I am running into an issue where I can install Netskope to laptops via Automox using the following: Start-Process msiexec "/I NSClient.msi token=123456ABCDEF host=addon-company.goskope.com mode=peruserconfig autoupdate=on /qn" But when I try to push to AWS Workspaces - It will not install via Automox. Any ideas? 

We are trying to push an HP OfficeJetPro 8020 series to all AAD workstations. We followed the worklet but NO GO. HP has 2 drivers, 1) Easy & 2) Full. We tried both but still NO GO.The policy we created was executed but no action. What’s the magic to achieve that? TIA

Hey there guys, I have an issue with the Automox agent.We have a few specific M1 endpoints that are not compatible with Automox because they require granting Automox a security token. All of them used the user prompt method (which works for most of the company) but the issue still exists.I also tried the command line method but again, it’s not working.I already sent a mail to the support team and I’m waiting for a reply, but I thought it’ll be a good idea to get help from multiple resources ;) Does someone have any suggestion how to handle this issue & grant Automox a security token in this scenario? Thanks in advance :D 

How do we fetch the list of software installed on all the user’s devices? Suppose, there are 100 machines and we want to get the list of software installed on these machines? Is there any shorter way in AUTOMOX? Note: I have used those scripts provided in Community but they did not help.

Hi,I'm trying to get a Worklet working to install an application to a group group of host. The application is BeyondTrust Jump Client.  The "trick" here is that their application is designed to allow multiple installations on the client. Each install creates a unique installation be adding unique hex identified at the end, and it installs into the ProgramData folder.So, I came up with the idea of when Automox does the first install, to first create a folder and copy a file into it. Then, I can have the Evaluation Code check for the folder. Everything works the first time, but then next time it will install again. I've tried reversing the Exit code in the evaluation, but either way, it install again. The folder and file do get created as well. Can yo help me figure out what's wrong?Thanks, Mike Bailey Here is my Evaluation Code:If (Test-Path -Path "C:\BeyondTrust\")    {        exit 1    }     else     {         exit 0     } And here is my Remediation Code:# Create local folderNew-Item

I’d like a worklet/policy that checks against several flavors of Linux to see if the system requires a reboot (it may be Ubuntu, RedHat, CentOS, etc) and then runs the remediation code if it does require the reboot.  I understand it’s different for each flavor of Linux, but Automox appears to use such code in determining whether a Linux system requires are reboot in the Automox UI.What should be the evaluation code to use for this worklet?

This Worklet will reboot the computer using Scheduled Task running as System account. Evaluation code: (returns exit code of 1 so that the policy will always run the remediation code when scheduled) Exit 1 Remediation code: New-Item -Path "c:\ProgramData\Amagent" -Name "Restart_Once.cmd" -ItemType "file" Add-Content -Path "c:\ProgramData\Amagent\Restart_Once.cmd" -Value "shutdown -r -t 30" $action = New-ScheduledTaskAction -Execute powershell.exe -Argument "-windowstyle hidden c:\ProgramData\Amagent\Restart_Once.cmd" $time = (Get-Date).AddSeconds(10) $triggerAt = New-ScheduledTaskTrigger -At $time -Once Register-ScheduledTask -TaskName "Restart_Once" -Trigger $triggerAt -Action $action -User "NT Authority\SYSTEM" Start-Sleep 11 Unregister-ScheduledTask -TaskName "Restart_Once" -Confirm:$false Remove-Item -Path "c:\ProgramData\Amagent\Restart_Once.cmd"

I have a Worklet that installs an application with the evaluation code below. When I run this in powershell on my computer, it returns a 0 because I do have the folder. But yet, the Remediation code runs and installs the application again. SO, my question is - If the Evaluation returns a 0, does that prevent the Remediation code from running at all (which is what I thought) or, do I need to check for 0 somehow in the Remediation code and Exit if 0? If (Resolve-Path -Path "C:\BeyondTrust\*")    {        return 0    }     else     {         return 1     }

Hi,I tried using the code to install CrowdStrike but I don’t see where I can put the Installation token key. I got this information from another articleDeploy CrowdStrike on Windows | Community (automox.com)Any help will be greatly appreciated.

Hi All,I was wondering if anyone has found a way to manage supersedence of Microsoft patches in a scalable manner?To illustrate:Let’s say you have a monthly patch policy on 2nd Thursday of the month. Most of the time it would be after Patch Tuesday, however for whatever reason you are do no install current month’s cumulative and want the previous month and you do this on rolling basis.EI in June you you install the May cumulative and in July you install June’s.Does anyone practice this with Automox? Because if you have you patch policy after Patch tuesday it will only pick up the latest cumulative. 

Hi Guys, We use Fortigate Firewall/VPN Concentrators and needed an easy way to push out the newest client with all the gateway settings pre-applied. Shoutouts to @awhitman for helping point us in the right direction with a couple free professional hours. So basically what we do is run the installer, and then in order to actually modify all the settings we want, we need to throw some regkeys in the HKLM-Software hive. This will allow us to push the app to the end user and its prepopulated with the right URL/path/etc It’s worth noting, theres 2 versions of the forticlient VPN software, online and full. Online is readily available but if you want the full installer, you need to logon to forticare and download it behind a membership wall. Things to change: $pathtourl is your publically accessible vpn concentrator $gateway is what the end user will see for a friendly name. Start-Process -Wait -FilePath "FortiClientVPNSetup_6.4.1.1519_x64.exe" -ArgumentList "/S /v /qn /norestart" -passthru

Hi, I have gone through the documents and available APIs. But confused with the actual modelling. There are accounts, and user can be a part of account. Whether there can be users without associating with any accounts? There are groups, organizations, RBAC Roles. Whether all these can be assigned and revoked from a particular user or is it possible to manage at account level. I am confused with the entire organization structure and how access can be controlled in Automox. Could you please check and share some detail around it. I want to know how to manage users and accounts, and also wants to know how to manage the accesses. Thanks.