Automox Worklets

For powershell experts: I’m trying to customize the Java worklet in the catalog to install Java to non-default custom path. Using Argument-list INSTALLDIR seems to be erroring out. Anyone has the correct syntax to use in the Remediation script (Start-Process) Start-Process "$env:windir\Temp\$javaInstallFile" -ArgumentList "/s REBOOT=0 SPONSORS=0" -WaitWhat can I add to the above line so Java gets installed in path D:\Java ?? Thanks!

"org.filezilla-project.filezilla"Failure: archiveType unknown in UpdateUsingArc How do I resolve this?

Could you request a feature to allow users to patch themselves? 

Hello everybody!What would be the easiest method of installing Homebrew on macOS using worklets. With no user interaction? 

Hey Guys, So if you get locked out of a users box and you don’t have local admin credentials or in our case, not connected to VPN, heres how to make a simple local admin user with a known password to get into a box on the fly. Evaluation: exit 1 Remediation: This will drop a local tempuser onto the box of your choice and a password of your choosing. (keep the quotes on the variables) $scriptblock = { #user defined variables: $yourpass = "Password Here" $yourname = "Name Here" # $Password = ConvertTo-SecureString $yourpass -AsPlainText -Force New-LocalUser $yourname -Password $Password -FullName $yourname -AccountNeverExpires Add-LocalGroupMember -Group "Administrators" -Member $yourname gpupdate /force } & “$env:SystemRoot\sysnative\WindowsPowerShell\v1.0\powershell.exe” -ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -NonInteractive -Command $scriptblock Then, make sure you delete that temp user afterwards, or you can run evaluation to see if you left it behind $scriptblo

Do I need to add the parameter on the script itself?Deploying the Automox Agent Using Windows GPO | Automox Knowledge Base Or on the Script Parameters below? Second arrow Is there any other recommendation?

Hi, I am trying to make a worklet out of a powershell script I have to remove any unapproved Outlook plugins. I have this working fine from the command line, and I ran it through PSScriptAnalyzer too and everything seems to be working fine. $scriptBlock = { $permittedAddIns = "Redemption.Addin","WorkSiteEmailManagement.Connect","imFileSite.Connect" # Registry paths to search $registryPaths = "Registry::HKEY_USERS\S-1-5-21-*\Software\Microsoft\Office\Outlook\Addins", "Registry::HKEY_USERS\S-1-5-21-*\Software\Wow6432Node\Microsoft\Office\Outlook\Addins", "HKLM:\SOFTWARE\Microsoft\Office\Outlook\Addins" # Build up a list of add-ins by searching the specified paths $addIns += ($registryPaths | ForEach-Object {Get-Item $_ | Get-ChildItem | Where-Object –Filter {($_.GetValue("LoadBehavior") -and $_.GetValue("LoadBehavior") -ne 0)}}) write-Output $addins # Narrow down our list of add-ins to only those that don't match our permit

This worklet uninstalls Microsoft Team and cleans up as recommended by Microsoft: docs.microsoft.com Install Teams using Microsoft Endpoint Configuration Manager - Microsoft Teams Use Microsoft Endpoint Configuration Manager to bulk deploy Microsoft Teams to select users or computers. Evaluation: # Define desired registry settings $regPath = "software\Microsoft\Office\Teams" # Get User details including SID from Get-LocalUser $users = Get-WmiObject -Class Win32_UserAccount -Filter "LocalAccount = 'True'" # Add HKEY_USERS to a PSDrive for easy access later New-PSDrive -PSProvider Registry -Name HKU -Root HKEY_USERS -ErrorAction SilentlyContinue | Out-Null $nonCompliant = @() # Loop through the list of users to check each for compliance foreach ($user in $users) { # Retrieve SIDs for each user $sid = $user.SID $name = $user.Name # Load Registries for users, if ntuser.dat exists # this prevents us from attempting t

Hey AM TeamWe had an MSI browser extension to install via Automox but it fails due to UAC.  When we created a required software policy to install the MSI file, it just fails and would not install.  Trying to install locally, we found that it requires UAC and local admin privileges.  Is there a way around this using Automox? From my understanding, Automox should be installing apps as local admin?

Hello!I have a worklet that has been running weekly for months with no issue, the worklet essentially grabs patching logs from each device in Automox and exports them all to a CSV. I noticed on around January 18th of 2022 that the script started reporting nothing so I ran the code locally and am getting an error: Invoke-RestMethod : The request was aborted: Could not create SSL/TLS secure channel.At line:11 char:13+ $response = Invoke-RestMethod $apiUrl -Method 'GET' -Headers $headers ...+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : InvalidOperation: (System.Net.HttpWebRequest:HttpWebRequest) [Invoke-RestMethod], WebExc eption + FullyQualifiedErrorId : WebCmdletWebResponseException,Microsoft.PowerShell.Commands.InvokeRestMethodCommandI know Automox has the limitation of no more than 500 results when pulling from the API, but I am well under half that. Here is the full script for context:#Set Execution policy to allow for 3rd p

Has anyone successfully created a worklet to install Teamviewer Host silently?

This worklet is going to reset the components of Windows Update. Windows Update can sometimes pull down a patch that is corrupted and needs to be cleared out. Digging manually through all of the patches can be tedious and depending on the age of the machine very time intensive. Instead this worklet will rename your old patch folders to .bak and allow Windows to generate a new one within a couple minutes. This is designed to be run manually so do not schedule this to be run on a regular basis. It should only be run against a machine that is repeatedly failing to install updates. Eval { Exit 0 } Else { Exit 1 } Rem $services = 'BITS','wuauserv','appidsvc','cryptsvc' #Stop BITS, WUAUSERV, APPIDSVC AND CRYPTSVC Services Stop-Service -Name bits Stop-Service -Name wuauserv Stop-Service -Name appidsvc Stop-Service -Name cryptsvc Foreach ($service in $services) { #check the status of the service to make sure it's stopped $service_status = (Get-Service -name $service).Status #if

We received an email from RingCentral that there is a vulnerability Fix and Enhancement for RingCentral App, RingCentral Meetings, and RingCentral Meetings Rooms. RingCentral recommends to delete the old or legacy version of RingCentral apps and re-install the latest one afterwards. They have provided the PowerShell script to uninstall and cleanup the following apps running on a Windows operating system including removing any shortcuts for all users.RingCentral Meetings app RingCentral Meetings Outlook plugin RingCentral Classic app RingCentral app RingCentral Phonehttps://support.ringcentral.com/app/admin/desktop-web/powershell-scripts-uninstall-ringcentral-mvp-apps-classic-windows-system.html

Is there a way to echo a command and make the status of a worklet visible? Example; if I sent a PS command to a system lets say to unjust something. I would like to see something in the logs showing a status. Get-NetAdapter | foreach { Disable-NetAdapterBinding -InterfaceAlias $_.Name -ComponentID ms_tcpip6 }Current log shows: 1nothing else.Maybe something on how to echo the results or response from the command.

Hi all! I’m a bit new to Automox and was wondering, if there was a worklet for updating bluejeans? 

Does Automox have a way to query the registry and find out version number and if a particular software is installed on a bunch of machines?  The problem is the program that i am trying to search to see if many PCs have does not have a program files entry.We have close to 2700+ end points in Automox and need to know if we can get a CSV report of a particular software installed on many machines.  Any help would be appreciated.

Looks like my PS skillz are still fresh as a daisy!Automox Community Members, I present your 2022 AX Worklet Tournament Winner: @cole!!From cole’s winning entry: Linux TPM encryption Worklet by @cole -- from the author’s description: “The Worklet we created here ultimately wound up turning into a full-fledged project that we’ve since named: “Lockbox.”...Lockbox builds off of pre-existing Linux encryption tools and aims to offer IT staff with a linux endpoint encryption experience that feels similar to Windows Bitlocker or macOS FileVault.”Big congrats to cole, and thanks to everyone who participated - stay tuned for our next community contest (coming soon)!

Hello there, I am new to Automox and was wondering if anyone out there had any info or knowledge regarding deploying Viscosity VPN client via Automox. Not sure if this is the best place, but figured I’d give it a shot! I know am a bit vague here so if more information is needed, just let me know! Thanks in advance all! 

I need to copy Ookla Speedtest.exe CLI to System32 for multiple systems, I setup the below Worklet script but it doesnt seem to work. Am I missing something to do with permissions when copying over files to the system32 folder which always requires Admin priveleges as we all know. Not sure how to get around this if it is the case. I have the speedtest.exe also uploaded to the Policy too. Any ideas will be much appreciated. Copy-Item speedtest.exe -Destination "c:\windows\system32\"

Happy Wednesday!🌻 We know what Wednesday means around here, time to talk Worklets! One new Worklet has been added to the Catalog this week, and it’s all about user notifications. ⏰This notification Worklet will use the built-in macOS tools, but place the dialog box front and center, instead of the default placement in the upper corner. We all get notification fatigue, so changing up the presentation of your notifications is a great way to ensure the message is received. Our Factory team even built in some extra options to further customize the notification by adding additional button selections that direct the user to a certain webpage, or setting timeouts, or categorizing notifications. When do you use custom notifications? Comment below to tell us! 💬 See ya next week!Jessica Starkey | Technical Marketing Engineer 

Big ups to free bracket makers!It’s finally happening - Today marks the beginning of our AX Worklet Tournament 2022! To kick off round 1, we’ve got a couple of powerful worklets from a couple of powerful humans. Below you’ll find a quick breakdown and links to both worklets, as well as a spot to vote (once the poll is working - in the meantime, just let us know with a 1 or a 2 in the comments!) Set preferred Windows 10 version by @Stephen_Wade -- I think the title says it all. I mean, I hope so! Crowdstrike Containment, Disable Cache Logon, Clear Kerberose, Logon Banners by @jack.smith  -- Created to accomplish 4 specific tasks: 1) Network contain device using CrowdStrike API, 2) Disable Cached Credential Logon and logoff current user, 3) Clear all Kerberos tickets, 4) Set Logon Banners Which worklet was your favorite of Round 1? (option 1) Stephen_Wade - Set preferred Win10 vers.(option 2) jack.smith - Crowdstrike containment/etc.   

THERE CAN BE ONLY ONE.It’s here! Today is the start of the AX Worklet Tournament Finals! Be sure to vote, as we’ll announce the winner (and give away some other prizes/etc.) during our Community Webinar on March 31st. Congrats and thanks to everyone who participated in this year’s tournament, but more specifically: congrats to @cole and @jack.smith for making it all the way to the finals! Check out their worklets and vote for your favorite below!  Linux TPM encryption Worklet by @cole -- from the author’s description: “The Worklet we created here ultimately wound up turning into a full-fledged project that we’ve since named: “Lockbox.”...Lockbox builds off of pre-existing Linux encryption tools and aims to offer IT staff with a linux endpoint encryption experience that feels similar to Windows Bitlocker or macOS FileVault.”Crowdstrike Containment, Disable Cache Logon, Clear Kerberose, Logon Banners by jack.smith -- from the author’s description: This worklet Accomplishes a few tasksONE

Happy Thursday, y’all! We’re back for the next round of the semi-finals! Now, on to the voting for Round 2 of the Semis!Vote for your favorite worklet below!Linux TPM encryption Worklet by @cole -- from the author’s description: “The Worklet we created here ultimately wound up turning into a full-fledged project that we’ve since named: “Lockbox.”...Lockbox builds off of pre-existing Linux encryption tools and aims to offer IT staff with a linux endpoint encryption experience that feels similar to Windows Bitlocker or macOS FileVault.”Create scheduled task to run at user log-on as user him/herself -- as @jesumyip says in the description, this worklet will help to “...replicate the behaviour of GPOs that run in the user context.”  

Hi, everybody! Since announcing our strategic alliance that pairs our two platforms, Automox has developed customized Worklets for SentinelOne that includes pre-built scripts for automatic deployment of the SentinelOne agent across Windows, Linux and macOS devices - without manual intervention or wasted IT cycles. Below you’ll find the worklet for Linux.Big thanks to @Zac-Automox  for getting these written.  Worklet Details: Install SentinelOne Agent (Linux) Evaluation Code#!/bin/bash#================================================================# HEADER#================================================================# SYNOPSIS# Installs the SentinelOne agent on the endpoint.## DESCRIPTION# This worklet will check to see if the SentinelOne agent is# installed on the target device.## USAGE# ./evaluation.sh##================================================================# IMPLEMENTATION# version STRAT-1_install_sentinelone_agent (www.automox.com) 1.0# aut

Hi, everybody! Since announcing our strategic alliance that pairs our two platforms, Automox has developed customized Worklets for SentinelOne that includes pre-built scripts for automatic deployment of the SentinelOne agent across Windows, Linux and macOS devices - without manual intervention or wasted IT cycles. Below you’ll find the worklet for Windows.Big thanks to @Zac-Automox  for getting these written.  Worklet Details: Install SentinelOne Agent (Windows) Evaluation Code<#.SYNOPSIS Evaluate the existence of the SentinelOne agent OS Support: Windows 7 and above Required modules: NONE.DESCRIPTION This worklet will ensure the SentinelOne agent is installed on the targeted devices. The environment specific installer will need to be uploaded to the Automox console. $AppName is the name of the application being updated, ie "Sentinel Agent".EXAMPLE $AppName = "Sentinel Agent".NOTES Author: Zac Youtz Date: August 13, 2021#># Predefinied Variables$AppName