Automox Worklets

May I know if Automox will be available in China on business? And the management instances are hosting on China AWS environment.

I have successfully used this worklet and would like to implement it in my environment. However, I want to give my users more than one minute to close their applications and files before being forced to restart. I couldn't find any part of the script that allows me to make this adjustment.

Would anyone have a worklet that can rename a folder in a users profile, i.e looking to rename C:\Users\USERSPROFILE\AppData\Roaming\Microsoft\Signatures so the folder Signatures is renamed to SignaturesOLD

This worklet will install Cisco Umbrella with certificate and config files. This also checks for the OpenDNS agent and removes as well.  EvaluationParamaters Thumbprint ID of the root certificate used by your own SWG deployment If any of the services don’t exist, run remediation csc_vpnagent csc_swgagent csc_umbrellagent If running an older version of the service Umbrella_RC, run remediation If the Root Certificate is missing, run remediation If OrgInfo.json is not in place, run remediation#params$thumbprint = "<your-org-thumbprint>"# Cisco AnyConnect VPN Module$service = Get-Service csc_vpnagent -ErrorAction SilentlyContinueIF(!$service){ exit 1}# Cisco AnyConnect Diagnostics and Reporting Tool$service = Get-Service csc_swgagent -ErrorAction SilentlyContinueIF(!$service){ exit 1}# Cisco AnyConnect Umbrella Roaming Security Agent$service = Get-Service csc_umbrellaagent -ErrorAction SilentlyContinueIF(!$service){ exit 1}# Root Certificate used to inpsect HTTPS traffic

Has anyone created a Windows 11 22h2 feature update worklet?

I generated this worklet for a customer that wanted to take a text file called “signin.slacktoken” with a Slack token in it and have it copied to users’ Download directory. For your purposes, upload the file you want to be copied and set the $uploadfile variable in the evaluation and remediation to be exactly equal to the name of the uploaded file. Then just set the location you want the file in evaluation and remediation. Evaluation: # Set variable to the exact name of the installation file uploaded $uploadfile = 'signin.slacktoken' # Sets current user $currentusr = (Get-WmiObject -class win32_process -ComputerName 'localhost' | Where-Object name -Match explorer).getowner().user # Check to see if the file exists in the user's profile location where it should be saved. If so, exit with no action. if (Test-Path -Path "c:\Users\$currentusr\Downloads\$uploadfile") { exit 0 } else { Exit 1 } Remediation: # Sets current user $currentusr = (Get-WmiObject -class win32_process -Computer

I have been trying to figure out a way to remove local admin rights from users on domain joined devices with an Automox worklet but haven't made any progress.  The closest I got was with a worklet that would check to see if the current signed in user is a member of the local administrator's group, and if so, add them to the local Users group and delete them from the local administrator's group, but it always tries to move the NT AUTHORITY\SYSTEM account.  I need to do this on a large scale, so having to specify the account to move isn't viable.  Has anyone tried to do something like this before?  Any hints or suggestions? The only domain account that should be in the local administrator's group would be “[Domain]\Domain Admins“ This is what I tried:# Get the current logged-in user$currentUser = [System.Security.Principal.WindowsIdentity]::GetCurrent()$userName = $currentUser.Name# Define the local groups$usersGroup = "Users"$adminGroup = "Administrators"# Check if the user is already i

I am trying to create a worklet that will enable  Wake-on-LAN on every network adapter on Windows 11.  Here is the script.# Enable Wake-on-LAN on all network interfaces# Function to enable WoLFunction Enable-WakeOnLAN { # Get all network adapters $adapters = Get-NetAdapter -Physical | Where-Object { $_.Status -eq "Up" } foreach ($adapter in $adapters) { Write-Host "Configuring adapter: $($adapter.Name)" -ForegroundColor Green try { # Enable "Wake on Magic Packet" Set-NetAdapterAdvancedProperty -Name $adapter.Name -RegistryKeyword "WakeOnMagicPacket" -RegistryValue 1 -ErrorAction Stop # Enable "Wake on Pattern Match" (optional, depending on requirements) Set-NetAdapterAdvancedProperty -Name $adapter.Name -RegistryKeyword "WakeOnPattern" -RegistryValue 1 -ErrorAction Stop # Ensure the "Shutdown Wake-On-Lan" setting is enabled Set-NetAdapterPowerManagement -Name $adapter.Name -AllowWakeArmed $true -Wa

Yup. Another Toast Notification post :-) What makes this one unique is how customizable it can be with company branding and links to internal sites, interactive buttons and so on. Once you get the hang of this one you can apply this to multiple scenarios that fit your needs.Really need to read Martin Bengtsson blog before you get started. https://www.imab.dk/windows-10-toast-notification-script/  Download the scripts here https://github.com/imabdk/Toast-Notification-Script Edit config-toast.xml to your satisfaction or desired outcome. Create a new worklet and associate to the right groups Set the Evaluation Code to whatever you want exit 1 Set the Remediation Code Payload # Scheduled Task Name$schdtaskname = 'ToastNotify'# Working Directory$workdir = 'C:\ProgramData\ToastNotify'IF((Test-Path $workdir) -eq $false){mkdir $workdir -Force | Out-Null}IF((Test-Path $workdir\Images) -eq $false){mkdir $workdir\Images -Force | Out-Null}# Cleanup Prior Scheduled tasks if they existUnregister-Sc

Hello,As the .NET installers are as yet unsupported on Automox, I’ve been working on a script that’ll update/remove versions via Automox.  I’ve had varying levels of success, but it seems that attempting to run the .NET Uninstaller Tool from within an Automox worklet results in failure.  My assumption is that this is because Automox runs as SYSTEM.Happy for anyone to prove me wrong!Cheers,Mark

Hi Automoxers!  We recently had a requirement to automatically disable the requirement for remote control consent based on device group. With this in mind, I wanted to share a script for automating the disabling of remote control consent via the API.  How the script worksThe script runs two API calls. The first one gets all device UUIDs based on a group ID. (For us, we only allow a single group to be used without consent requirement). These are stored in an array and passed to the second API call which sets the config to disable remote control consent.  Why use a scriptThe reason that we’re using a script is twofold. First, this means that we don’t need to grant excessive members of staff a high privilege role, and instead we can automate this using an API token. The second is so that any changes made to the group can be reversed to return the group to a standard set configuration on schedule. We configure this to run on schedule on one of our servers, though you could also use somethi

Good Morning, I’m experiencing a lot of unexpected trouble with what should be a simple Windows program install. The program in question is called ElevateUC. installer is 32bit and does not require any special permissions or license to install.I ran “start-process -filepath "C:\Temp\elevate-uc.exe" -ArgumentList "/S” in a non elevated powershell and it installed in about 30 seconds, but when I try it in Automox it gets stuck at “pending” and eventually times out after about 30 minutes. with this error:Standard Output: Failed to install Elevate UC 2.16.456 version 2.16.456. Please see installation logs if applicable.Standard Error: COMMAND TIMED OUT.I Tried the “EXE Software Installation (System Wide-All Users)“ Worklet and after triple checking the version, display name, etc as well as using wildcards it still does not work, I get variations of the error above based on using wild cards, different versions, etcI can see it start the process (evaluateUC.exe) in task manager, but it just

Hi Folks, Has anyone did this before? We have a need to enforce the windows laptop of user to bitlocker recovery screen.We have tried few scripts however when the machine has customised laptop hostname or netbios name it keeps failing. Can someone help

I’m trying to use automox to reset a local user on a bunch of windows 10 machines. But I keep getting an error.# Define the username and new password$scriptBlock = {$adminUsername = "Local User"$newPassword = "Password"$securePassword = ConvertTo-SecureString -String $newPassword -AsPlainText -ForceSet-LocalUser -Name $adminUsername -Password $securePassword -ErrorAction SilentlyContinue}$exitCode = & "$env:SystemRoot\sysnative\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -NonInteractive -Command $scriptBlock Anyone been able to make this work? 

So I work with a lot of worklets that check for bits of software that are installed.  Obviously there are some good examples contained within Automox’s Worklet Catalog.  These tend to do the whole search several registry hives for keys containing an application’s display name.Is there a reason why this approach is taken instead of using, say, Get-Package?Cheers,Mark

Hello.  I am trying to use the System Wide EXE Worklet to install the KnowBe4 Phishing Alert Button.  I have the worklet ready but I can not figure out where to input the License key.  Below is what I have entered in the Remediation Worklet but I need to know where and how to put in the license key.####### EDIT WITHIN THIS BLOCK #######$displayName = 'KnowBe4 Phish Alert Button'$displayVersion = '1.10.14.152'$fileName = 'PhishAlertButtonSetup.exe'$arguments = '/S'#######################################Any help would be appreciated on this.

Hello,Can anyone help me to understand why…Start-Process -FilePath "dotnet-hosting-6.0.36-win.exe" -ArgumentList "/install /quiet /norestart" -Wait...does absolutely nothing when Automox runs it, but is fine to use manually at a PowerShell prompt?  I just don’t get it.Cheers,Mark

Here I share this one-line code to install the Automox agent on Windows from a remote shell:[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri "https://console.automox.com/installers/Automox_Installer-latest.msi" -OutFile "./Automox_Installer-latest.msi"; if (Test-Path "./Automox_Installer-latest.msi") { Start-Process -FilePath "./Automox_Installer-latest.msi" -ArgumentList "/quiet", "ACCESSKEY=XXXX " -Wait; Remove-Item -Path "./Automox_Installer-latest.msi" -Force }Don't forget to change XXXX with your access key.

I noticed that this question was brought up in another thread, but was not addressed.I have a computer that verifies that secure token access is enabled, but in the console it still shows as “not-compatible”, citing missing secure token access. I also try using the Automox provided worklet to update the access, and it indicates that the token access is already enabled. I have removed and readded the agent with the same issue. Has anyone been able to resolve this?OS: OS X (13.4.1 (c))CPU: Apple M1 ProRAM 32 GBAgent 1.42.22Thank you

Made this since I couldn’t find anything in the worklets for printers from automox that didn’t need a print server. Great for small-medium business’s that don’t use a print server. This script will allow you to install printers and there drivers without the need for a tech to manually touch and add the printers themselves. I do recommend setting this as a policy on a manual run basis to only install the printers to someone’s computer that is missing them. When creating the export files, I recommend creating them in a virtual machine with all built in printers and as many drivers that you can remove as possible. Create a checkpoint in that VM with the OS as clean as possible so you can restore this OS when you want to create a new file. Create the printers with the specific drivers, and preferences that you want and export them to a “.printerExport” file. Make sure to test your exported file to make sure the file works correctly. I’ve seen drivers not like this printer export process an

Hello, I am trying to use Automox to uninstall GoToMeeting across our environment but I am failing. Has anyone successfully completed this take with a worklet? 

Looking for a bash script to uninstall Rapid7 agent on Linux/Ubuntu … please :)

Hi All, I was wondering if anybody tried to leverage Automox for pulling hardware hash for windows Autopilot in their company environment. i want to enroll multiple devices to autopilot but still little confused with pulling hardware hash for all devices and manually upload it to Intune which sucks.  Thanks in advance.

Could you please help me implement the worklet for the security vulnerability in OpenSSL (CVE-2024-4741)?

Hey All, Is there a way we can restrict users from wiping their laptops? Does anyone has prevented this with worklets?