Automox Worklets

Hey Automox community!!I am in need of a Worklet to install New Relic on Windows hosts. Hopefully others who are proficient with these Worklets are also in need of the same.

Happy Worklet Wednesday! 🙌 We’ve got one new Worklet to review in the Console Catalog this week. In addition, many Worklets have been verified to work on M1 MacOS devices. Let’s look at the new Worklet first.  Our Factory team has written a new Worklet for Linux that will reboot the device. This one is so short and simple there’s not much else to say! Lastly, a slew of Worklets are now verified to work for Monterey, BigSur, and M1 Mac Devices. You can see all of them in the screenshot below. Come back next week to see what updates we’ve got in the Catalog! Shoutout to our Factory team for churning out so many updates! See ya next week!Jessica Starkey | Technical Marketing Engineer

AND THEN THERE WERE FOUR! Congrats to @habrnero, @jack.smith, @cole, and @jesumyip, who all made it through to the semi-finals! That’s got to be a bit of validation, at least. :) Now, on to the voting for Round 1 of the Semis!Vote for your favorite worklet below!Worklet: Enable Automatic Updates for Pre-downloading Patches by harbrneroCrowdstrike Containment, Disable Cache Logon, Clear Kerberose, Logon Banners by jack.smith   

One of our users upgraded their own device to Windows 11 recently when it became available to them. This obviously isn’t a desirable situation for our enterprise if we’re trying to prevent any kind of incompatibility with our systems so I found this topic on the MS community. Based on that topic I created the following Worklet. The goal is to prevent any other users from seeing the Windows 11 upgrade notification or performing the upgrade.  Evaluation<#.SYNOPSIS This Test script checks to see if the listed registry values are present.DESCRIPTION This script queries the registry for the required values to prevent Windows 11 from installing..Notes File Name :Prevent_w11_Eval.ps1 Original Author :TJ Coppola Prerequisite :PowerShell V2 over win7 and upper#>#define variables$path = "HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate"$wu = Get-ItemProperty -Path $path#check keysif($wu.ProductVersion -match "Windows 10" -and $wu.TargetReleaseVersion -eq 1

Time for Round 4! Check out the links and vote for your favorite below! As always, let us know any questions/etc. in the comments! Worklet to find and remove the JndiLookup.class from all jar files by @Snovak “Just a little something I whipped up after finding that the JndiLookup.class is not isolated to just the log4j jar files (ex. it’s inside of the MineCraft server jar)” -- Snovak Worklet: Enable Automatic Updates for Pre-downloading Patches by @habrnero “In an effort to reduce our required outage time for patching, I’ve created a worklet that sets a few registry keys on Windows systems to enable Windows Update to download (but not install) any newly relevant patches.” -- habrneroVote for your favorite below, and don’t forget to vote in Rounds 1-3!  

In our environment, Windows 10 feature updates weren’t appearing in the list of available patches. Here’s a solution that doesn’t require downloading an ISO file. There is a registry setting to target a specific feature update. Once we set that registry setting, the feature update became available as a regular patch and we could manage it easily with Automox. This script checks if the machine is running Windows 10, and if so it sets the TargetReleaseVersion and TargetReleaseVersionInfo registry values to match the update you specify. To modify the script for your preferred Windows 10 version, just edit the $targetFeatureUpdateVersion variable in the evaluation and remediation scripts. Use the version numbers as listed on the Windows 10 release information page. Evaluation: <# .SYNOPSIS Checks if the registry is set to upgrade Windows 10 to a specific version. .DESCRIPTION Checks if the computer is running Windows 10 and if the TargetReleaseVersion and TargetReleaseVersionInfo

Trying to execute multiple worklets at the same time from the same server.   The worklets run against different groups and ssh to the servers to run commands. Is there an option to allow that. When I try, it only runs one at a time.

Hey Everyone! Happy Worklet Wednesday  We’ve got two more Worklets that were added to the console catalog this week. Is it just me or is our Factory team churning these out like crazy? Woohoo! New Worklets in the Catalog These two Worklets go hand in hand. On Windows, these will check if Google Chrome and Google Drive are installed, respectively. If not, remediation will run to install them. Both check for 32-bit and 64-bit installations. These are easily-deployable and can help ensure preferred software is being utilized on all your endpoints.  Will you be using these? Let us know! Jessica Starkey | Technical Marketing Engineer  

So here is the worklet I have been testing; I can get it to work in Windows but when I try deploying through AUTOMOX always an error. Any help would be appreciated.  So the objective is to Install office 365 from a worklet. The current code over PS will install the latest version of office 365; but fails in AUTOMOX. Remediation Code__________________________________________________________________[CmdletBinding(DefaultParameterSetName = 'XMLFile')]param(  [Parameter(ParameterSetName = 'XMLFile')][String]$ConfigurationXMLFile,  [Parameter(ParameterSetName = 'NoXML')][ValidateSet('TRUE', 'FALSE')]$AcceptEULA = 'TRUE',  [Parameter(ParameterSetName = 'NoXML')][ValidateSet('Broad', 'Targeted', 'Monthly')]$Channel = 'Broad',  [Parameter(ParameterSetName = 'NoXML')][Switch]$DisplayInstall = $False,  [Parameter(ParameterSetName = 'NoXML')][ValidateSet('Groove', 'Outlook', 'OneNote', 'Access', 'OneDrive', 'Publisher', 'Word', 'Excel', 'PowerPoint', 'Teams', 'Lync')][Array]$ExcludeApps,  [Parame

Round 3, y’all!Here we go with Round 3! Check out the links and vote for your favorite below! As always, let us know any questions/etc. in the comments! Linux TPM encryption Worklet by @cole -- from the author’s description: “The Worklet we created here ultimately wound up turning into a full-fledged project that we’ve since named: “Lockbox.”...Lockbox builds off of pre-existing Linux encryption tools and aims to offer IT staff with a linux endpoint encryption experience that feels similar to Windows Bitlocker or macOS FileVault.” Prevent Windows 11 Upgrade by @TJ_Coppola -- I mean, the title says it all right? From the description: “The goal is to prevent any other users from seeing the Windows 11 upgrade notification or performing the upgrade.“ Go vote!! 

This worklet will disconnect all mapped drives specified by $removeDrives in the evaluation and remediation. Be sure to set $removeDrives identically in both. The drives will not appear disconnected until after a reboot. Details of the user and drives disconnected will appear in the activity log. Evaluation: <# .SYNOPSIS Delete Specified Mapped Drives for All Users on a System OS Support: Windows 7 and above Powershell: 2.0 and above Run Type: Evaluation .DESCRIPTION This worklet is designed to search for any mapped drives specified with $remoteDrives, and disconnect them. If any setting is found to be non-compliant, the evaluation script will close with an exit code of '1' to trigger remediation. $removeDrives needs to be set the same for evaluation and remediation to work correctly. If drives are found and disconnected, the drives will not appear disconnected until after a reboot. To use this worklet, add the desired parameters to the $removeDrives

 Here we go! Round 2 is off & running, and the polls work again. Check out the links and vote for your favorite below! As always, let us know any questions/etc. in the comments! Create scheduled task to run at user log-on as user him/herself -- as @jesumyip says in the description, this worklet will help to “...replicate the behaviour of GPOs that run in the user context.”Sentinel One Install - Linux -- a handy little worklet from @jesse for installing the SentinelOne agent on LinuxOk go vote! 

How to deploy a policy to all the workstations without removing its default(already existing) policies? We have to deploy a policy to all the workstations, but we do not want to remove its existing policies/groups? How to do that? 

Happy Worklet Wednesday! We’ve got a couple updates in the Worklet Catalog to highlight this week, let’s get into it.First, there’s been an update to the worklet to upgrade macOS to include Monterey. This one is incredibly valuable, so we recommend that you get a policy setup with it as soon as possible. A new worklet has been published that allows you to enforce the presence of a repository on your endpoints. The comments in the code specify what variables should be updated for your specific use case. All that’s needed is to edit the repo variable as well as the apt or yum variable and you’ll be on your way! Happy Worklet-ing!Jessica Starkey | Technical Marketing Engineer

Okay, that’s too many worklets...Hi, everybody! I’m pleased to announce the start of our 2nd annual March Worklets Tournament!! Last year saw none other than @Mrichards take home the trophy for his (“award-winning”??) Windows Health Check worklet. Will Matt be willing and able to defend the crown? There’s only one way to find out…  So to copypasta our own @Brittany-Automox from last year’s tourney post, like last year “we are picking 16 of the hottest user-generated Worklets in the Automox Community to participate in a single-elimination showdown. Twice a week in March, we’ll be pitting two Worklets against each other and relying on you to vote on your favorite! From there, each winner will battle each other until one Worklet remains.” There will be some special prizes for our winner again, and you should all feel free to submit more worklets before the tournament begins on Monday! It’s your civic duty! 

Hi, y’all! This week’s Insight Hub post is a quick tutorial from our own @Peter-Automox (although re-narrated by me). In just three short minutes, we’ll give you a quick overview of Worklets and how they function within the AX console.  You can find more information on worklets at the Automox Support KB, or you can download our Worklets 101 Guide. If you have any questions, let us know in the comments or email us at community@automox.com. 

Install Endgame Sensor application on MacOS through Worklet

I am trying to get this to run in a worklet but I am not great at powershell. Here is what I have: Evaluation code:If (Test-Path -Path "C:\Program Files\Cylance\Optics\CyOpticsUninstaller.exe")  {        return 1    }    else    {        return 0    }  Remediation code: Start-Process -Wait -FilePath 'C:\Program Files\Cylance\Optics\CyOpticsUninstaller.exe' -ArgumentList ‘--use_cli -t v20’ -PassThru    Ultamately what needs to run is:C:\Program Files\Cylance\Optics\CyOpticsUninstaller.exe -use_cli -t v20’ -PassThru  Any direction would be much appreciated.  -Rob

Set Up Default homepage in Macbook through Scripts

Hello and Happy Wednesday!  Before we get to the worklets, did you guys know yesterday was Twosday (as in 2/22/22 on a Tuesday)? I don’t know about you, but I was pretty excited about that. I was hoping that today we’d have 2 worklets to review to continue the trend, but I’ll do you one better , we’ve got three worklets to talk about on this day-after-Twosday (does that make today Threesday?). Okay, I’ll stop with the bad jokes… We’ve got three new/updated scripts to walk through today - let’s get started! The macOS Cacher worklet has been updated and verified to be OS agnostic, so it will work on Monterey 12.2.1. This worklet caches the Apple software installer from their update servers into the devices Applications folder.There’s a new worklet available to install or uninstall Java on Windows 8 and above. There is great documentation in the worklet itself, so I won’t belabor it here, but you can uncomment/comment the appropriate sections of code based on whether you need to install o

Doing some remediation with a worklets they run a system account so its only grabbing half the information that it needs.  My guess is that this is because the local system account doesn’t have complete access to everything.   Anyone come up with a way to get a worklet to run as another account.

Add as many details as possible, by providing details you’ll make it easier for others to reply How to Deploy LAPS Download LAPS to a domain controller Create security group called “LAPS Admins” and populate appropriate users or groups Install LAPS x64 and add all Management Tools Extend AD Schema Import-Module AdmPwd.PS 2Update-AdmPwdADSchema Provide permissions to workstation administrators Set-AdmPwdReadPasswordPermission -OrgUnit "Workstations" -AllowedPrincipals "Workstation-Admins" Set self permissions (what OU the Workstation-Admins can lookup passwords on) Set-AdmPwdComputerSelfPermission -OrgUnit "Workstations" Open Group Policy Management Wizard Create new policy under Workstations OU called “Microsoft LAPS” Edit new policy at Computer Configuration > Policies > Administrative Templates > LAPS Enable “Enable local admin password management” Enable “Password Settings” Set Password Complexity Set Password Length X+ characters Set Password

Hey y’all! Happy Wednesday!  Let’s take a look through some new worklets that have been added to the Worklet Catalog in the console. We’ve got two to look through, so let’s get started!  The first new worklet was written in response to the Linux Pwnkit vulnerability. This worklet simply changes the permissions for pkexec to prevent escalated permissions. For more details on the vulnerability, check out our blog here! The second worklet will help create shortcuts on the desktop or start menu for your endpoints. This is great if you have a uniform setup for your teams and want to configure that automatically. You can create custom images and links and place them in various locations on the endpoint. Which worklets do you use from the Catalog? Comment below and let us know! ‘Til next time,Jessica Starkey | Technical Marketing Engineer

You can’t tell from behind, but that’s YOU after winning the 2022 AX Worklet Tournament!Hi, y’all - I just wanted to post a quick reminder to get your worklets submitted for this year’s AX Worklet Tournament! Check out Brittany’s post for the full details, but TL;DR: submit your worklets now so they can be pitted against each other every week next month.. As far as I know, it’s the only bracket-based tournament in all of March..but I could be mistaken. If you’re new to the product/community and aren’t super familiar with worklets, here’s a good starting point with some helpful resources, from our Support team: https://support.automox.com/help/creating-a-workletGood luck, y’all! 

Start-Transcript -Verbose -Path 'C:\temp\FileRetrieve.log'$FileToRetrieve='<Path To File>'$S3BucketName='<S3 Bucket Name>'$S3AccessKey='<AWS Access Key ID>'$S3SecretKey='<AWS Secret Key>'Install-PackageProvider -Name NuGet -MinimumVersion 2.8.5.201 -Force$m = 'AWSPowerShell'# If module is imported say that and do nothingif (Get-Module | Where-Object {$_.Name -eq $m}) {    write-host "Module $m is already imported."}else {    # If module is not imported, but available on disk then import    if (Get-Module -ListAvailable | Where-Object {$_.Name -eq $m}) {        Import-Module $m -Verbose    }    else {        # If module is not imported, not available on disk, but is in online gallery then install and import        if (Find-Module -Name $m | Where-Object {$_.Name -eq $m}) {            Install-Module -Name $m -Force -Verbose -Scope CurrentUser            Import-Module $m -Verbose        }        else {            # If the module is not imported, not available and n