Automox Worklets

Hello, We are looking to query endpoints to see if they have certain GPO’s applied and want to build a list of who has or doesn't have the two GPO’s.The evaluation code in the below worklet looks like it can identify the GPO’s by the registry setting.https://support.automox.com/help/enforce-windows-registry-settings-worklet Any idea’s or help in accomplishing the remainder of our use-case would be appreciated.

Hello Folks,We are looking to deploy ACS Client Solutions (Java based which resides in the Current User folder) to all machines across our Organization.  I’ve tested the script to work properly via Powershell directly on a test machine:Start-Process -FilePath “\\Server\Path\ACS.exe” -Arguments “/Q” “/File=\\server\path\config.zip” -waitBut when trying to run this script (with our server names) via Automox, it starts the worklet, downloads the scipt to C:\ProgramData\AMAgent folder within Exec…. But hangs and does not execute the command.  What we are guessing is, since Automox runs commands/scripts in elevated system admin powershell, it probably is erroring when trying to run our script.So we are asking if there is a method to run PS scripts via Automox in Current User/logged in user context?

While I am trying to fetch all associative devices of my console via api I am getting [ ] empty array in response.. 

Hi Guys,Is there anything in the pipeline for Automox to start supporting patching of Foxit a sone of the 3rd party products?Also, if anyone has any nice worklets configured for patching this and wouldn't mind sharing  that would be great. Thanks Matt

We use hyper-v and failover cluster manager to host all of our vms.  Is there a worklet that we could write to have each host drain the roles, wait like 20 minutes, and then reboot them?  I would think when they need to reboot b/c of an update Windows would do this automatically but I’m not totally positive just yet.

I have a situation to where a terminated user has not returned their MacBook and our HR department is having a hard time with this guy.  It seems like he has set up a new account on the Mac aside from the domain login and is using the computer for personal/consulting services.  My question is...Is there a way to completely lock out all user accounts on a MacBook via automox or completely make the MacBook unusable? Thanks!

Has anyone try deploying SketchUp successfully using either a Worklet or Require Software Policy? TIA

Hello,When scheduling a Required Software policy, would you set it to run literally every month, every week and every day?  Or is scheduling it once enough?  I ask this because my thinking tells me it’ll run once and then never again - if the software were to be installed by Automox, then removed by a user, the policy wouldn’t pick it up again.  Or at least not until that singular schedule day arrived again in a years time.Or is is best to schedule a Required Software policy to run once every week if this is the case?Cheers,Mark.

Hey FolksAs we all know, IE11 is becoming EOL today (June 15/2022) and there is a worklet in Automox which removes/disables it in Windows 10.  This worklet uses a CMDLET that does not work in Windows 7, and we are in the process of upgrading Windows 7 → 10, but due to inventory shortage at our vendor it may not happen for a while.  In doing a bit of a digging, I’ve come across DSIM.exe which has a script to disable IE11 and it worked while running it manually.  But I’ve created a worklet in Automox, and it would not work while pushing it out.This is the code:Evaluation Code:Exit 1 Remediation Code:Start-Process "DISM.exe" -ArgumentList "/Online /Disable-Feature /FeatureName:Internet-Explorer-Optional-amd64" -Wait As I mentioned, the script works standalone with manual PS entry on a Windows 7 machine, but not when run with Automox.  Any help would be highly appreciated.  BTW, this is to disable IE11

Hello!So we’re trying to get Java updated on our workstations, so we have a worklet set up, but I was wondering what is the best way to target systems with specific software?Or is it a case of firing the policy at basically every workstation and having the PowerShell in the worklet decide whether to run the installer or not depending on whether it finds the software is installed already?Cheers,Mark.

Now that we’ve upgraded most of our Office 365 licences, I’m looking for a worklet which will uninstall Office 2016 overnight, reboot, then install Office 365.I’m struggling to figure out how to do this though, so any help would be much appreciated.I have a list of computers with Office 2016 installed, and I’ve found a VBS script, OffScrub_O16.vbs to do the removal, and I see there is already a worklet for installing 365 I think, but it’s how to piece them all together.I’ve got as far as the below in my thinking. It’d be good if the worklet checks if any Office 2016 apps are installed (although not critical as I’ve pulled a list of computers from our inventory software), before calling the remediation code, which might contain this:taskkill /f /im lync.exetaskkill /f /im winword.exetaskkill /f /im excel.exetaskkill /f /im msaccess.exetaskkill /f /im mstore.exetaskkill /f /im infopath.exetaskkill /f /im setlang.exetaskkill /f /im msouc.exetaskkill /f /im ois.exetaskkill /f /im onenote.e

Checks the percentage of free space on all drives. Only run manually. The evaluation code will always return true. The output will be in your activity log. Edit the variable $SpaceAlert to equal the percentage to report on. If the percentage free is greater then this number nothing will happen. If its lower it will echo to your activity log. • Under Evaluation Code: If (Test-Path "$env:allusersprofile\SoftwareDistribution") { Exit 0 } Else { Exit 1 } • Under Remediation Code: $SpaceAlert = '10' $disks = get-wmiobject -class "Win32_LogicalDisk" -namespace "root\CIMV2" $results = foreach ($disk in $disks) { if ($disk.Size -gt 0) { $size = [math]::round($disk.Size/1GB, 0) $free = [math]::round($disk.FreeSpace/1GB, 0) $freespace = ($free/$size) * 100 $freespace = [math]::Round($freespace) } } If ($freespace >$SpaceAlert) { Exit 0 } Else { Write-Output "Free space " $freespace"%" }

Hey Automox community!!I am in need of a Worklet to install New Relic on Linux hosts. Hopefully others who are proficient with these Worklets are also in need of the same.

Wondering if I can configure automox to send an alert to a specific email address if a patch fails on a server. I was unable to find anything in the knowledge base. For example. If policy A encounters an error on Server B, Automox sends an alert to email@example.com.

This is a worklet that will install Splashtop Streamer (business account required). A Deployment package needs to be created first, this will generate your URL that can go into the URL variable field. The Code variable is your Deployment code for that specific deployment. Evaluation Code: #REQUIRES -Version 5.0 <# .SYNOPSIS This Test script checks to see if Splashtop is installed .DESCRIPTION This script queries the WMI class Win32_Product for the 'Splashtop Remote Server' package and exits with 0 if it is found .Notes File Name : splashtopInstalled.ps1 Author : reuben_f Prerequisite : WMF 5.0 or higher #> #Handle Exit Codes: trap { $host.ui.WriteErrorLine($_.Exception); exit 90 } function splashtopInstalled { param ( [switch]$Debug = $false ) $packages = $(Get-WmiObject -Class Win32_Product -Filter 'Name="Splashtop Streamer"').Name $len = $packages.Length if ($len -gt 0) { if ($Debug) {Write-Host "Splash

This worklet can be used to install any standalone Windows 10 KB patch that you can download from the Microsoft Update Catalog. We often use this to install Windows patches that aren’t included in the official patch releases. For example, sometimes the Intel Microcode patches that patch Meltdown, Spectre, and other speculative execution vulnerabilities aren’t included in the standard Windows patches. Note: I’ve only test this on Windows 10 PCs. Evaluation Code: In this example, I am installing KB4558130, which is the Intel Microcode Patch that was released for Windows 10 build 2004 on 8/31/2020 (https://support.microsoft.com/en-us/help/4558130/intel-microcode-updates). This evaluation code checks if that patch is currently installed. If it is currently installed, the script will quit and not move onto the remediation code. If the patch isn’t installed, it will continue on to the remediation script. #Check for this Windows Patch. #Replace KB4558130, with your patch KB $kb="KB4558130" i

Hi all,Here’s the worklet for https://msrc-blog.microsoft.com/2022/05/30/guidance-for-cve-2022-30190-microsoft-support-diagnostic-tool-vulnerability/ to check if the registry key exists, and export/delete if it does.Evaluation Code:# Check if the registry key exists.Get-ItemProperty "Registry::HKEY_CLASSES_ROOT\ms-msdt"# If Get-ItemProperty returned without error, then the registry key exists.if ($?) { $response = 'Registry Key HKEY_CLASSES_ROOT\ms-msdt present' Write-Output $response exit 1} else { $response = 'Registry Key HKEY_CLASSES_ROOT\ms-msdt not present' Write-Output $response exit 0}Remediation Code:# https://msrc-blog.microsoft.com/2022/05/30/guidance-for-cve-2022-30190-microsoft-support-diagnostic-tool-vulnerability/reg export HKEY_CLASSES_ROOT\ms-msdt "C:\Windows\temp\hkey_classes_root_ms_msdt"reg delete HKEY_CLASSES_ROOT\ms-msdt /f Likewise you can reuse the above to import the registry key if it’s not already present; just flip the exit codes. This assu

Hi all, if you use 1Password, here’s a Worklet to check if it’s installed, if not, it will proceed install it Evaluation: #!/bin/bash #Checks whether 1Password.app is installed in the /Applications directory, if not, Exit 1 code and goes to next step if [[ -d "/Applications/1Password 7.app" ]]; then echo "1Password 7 is installed." exit 0 else echo "1Password 7 is not installed." exit 1 fi Remediation: #!/bin/bash echo -e "Downloading 1Password 7..." #Downloads 1Password 7 pkg to /tmp/ curl -L -o "/tmp/1pwpkg.pkg" https://app-updates.agilebits.com/download/OPM7 echo -e "Installing 1Password 7..." #Runs the installer sudo installer -pkg /tmp/1pwpkg.pkg -target / echo -e "Cleaning up..." rm -f "/tmp/1pwpkg.pkg"

Hey guys, need help setting up a wallpaper for Windows 10 through Automox.  We have a golden image via MDT but were having a hard time trying to set wallpapers with task sequence.  Just trying to see if there is a way we can set it via Automox so post deployment of Windows OS, once the PC connects to Automox it would pull the policy and get the new wallpaper.  Is this possible?

Hi all, I know CrowdStrike integrates with Automox to easily install it. but here’s another way to install it via Automox. Basically this script utilises the CrowdStrike Sensor Download API to get the 2nd latest Windows Sensor, which then pulls it to a temp directory and then runs the installer. There’s a few things we need to do first before we get this working. You will need to log in to the CrowdStrike Portal and ‘Add new API Client’ - https://falcon.crowdstrike.com/support/api-clients-and-keys - once added, you’ll get your Client ID and Secret, keep these to hand as you will need to paste it in the Worklet section as shown below, replacing the CLIENTID and SECRETKEY with the relevant details. Body = 'client_id=CLIENTID&client_secret=SECRETKEY' Also, you will need to click on ‘Edit’ on your newly made API client and tick the tickbox under the ‘read’ section for Sensor Download API Screenshot 2021-03-05 at 15.43.051712×1500 177 KB You will also need to get your Customer ID (CID)

Hello,I am attempting to create a script that creates/updates a policy and then uploads a file to the policy. So far, so good, but….While referencing these scripts, in order:Automox Console API Documentation | Create a New PolicyAutomox Console API Documentation | Retrieve a Specific PolicyAutomox Console API Docs | Upload Installation File,and using Powershell (version 5.1.19041.1320) I am bumping into Parameter issues where...the last line of Upload Installation FIle.:$response = (Invoke-WebRequest -Method Post -Uri $url -Headers $headers -Form $form).ContentGenerates this error code: Invoke-WebRequest : A paramenter cannot be found that matches parameter name ‘Form’I’m attempting for use the ‘Try It’ selection, the file uploads with no issue. So I am thinking there’s an issue with the command syntax itself. Any help?

In the automox kb the ansible playbook is broken and I wanted to submit my corrections- https://support.automox.com/help/deploying-the-automox-agent-in-bulk:Deploying with AnsibleYou can distribute the Automox agent with Ansible using the Ansible playbook: get-automox.yml. Contact Automox Support for further assistance.From the directory where the ‘get-automox.yml’ file is located, invoke the playbook with the following command, substituting your unique user key (zone key) as indicated: ansible-playbook get-automox.yml --extra-vars "zone=YOUR-ZONE-KEY-HEREIn get-automox.yml:    - name: Ensure amagent is enabled and started      service:         name: amagent         state: running <- Causes the playbook to fail.        enabled: yesstate: running is not a valid state.  Changing it to state: started fixes the problem.Also, the command fails: ansible-playbook get-automox.yml --extra-vars "zone=YOUR-ZONE-KEY-HEREChanging the command toansible-playbook -i hosts get-automox.yml --extra-va

Following a vulnerability test recommendation, I enabled the Powershell execution policy on a Windows 2012 server that had had Automox running fine for ages. Now Automox can no longer communicate with the server and it seems this is because the Powershell scripts it tries to run are being stopped by the execution policy. So I disabled the execution policy but this hasn’t resolved the issue. running a Get-ExecutionPolicy - List command shows that at the machine level, the policy is still set to require signed scripts. However, in the local group policy editor and in the registry, the policy has been disabled.I need to find a way to set the execution policy to run all local and signed remote scripts, so that I can have Automox running but still secure the server.Any help will be most welcome! Thanks.

Is anyone using PSADT with Automox? If so, Can you share how you have things setup please?  Thanks!

This worklet takes the logged in user from Win32_ComputerSystem username attribute and adds them to the local Administrators group. The worklet then creates two Scheduled tasks. One will run a rollback script in a set # of minutes post running worklet or when the computer starts up. The rollback script will remove the scheduled tasks and files associated with this worklet. # Set rollback time (minutes)$minutes = 240# working directory$workdir = 'C:\Windows\Temp'IF((Test-Path $workdir) -eq $false){mkdir $workdir -Force | Out-Null}# Cleanup Prior RunUnregister-ScheduledTask -TaskName "LocalAdminGroup*" -Confirm:$false | Out-NullRemove-Item $workdir\id.txt -ErrorAction SilentlyContinue | Out-NullRemove-Item $workdir\LocalAdmin.ps1 -ErrorAction SilentlyContinue | Out-Null# Add Local user to Admin Group$user = (Get-WmiObject -Class Win32_ComputerSystem).UserNameWrite-Output "Adding $user to local Administrators Group. "$user | Out-File $workdir\id.txtcmd /c net localgroup Administrators $us