Community Worklets

Automate and enforce any scriptable action on endpoints

  • 373 Topics
  • 1,007 Replies

373 Topics

D
dan_btgNovice
asked in Community Worklets

Microsoft Patch Supercedence - How To?

Hi All,I was wondering if anyone has found a way to manage supersedence of Microsoft patches in a scalable manner?To illustrate:Let’s say you have a monthly patch policy on 2nd Thursday of the month. Most of the time it would be after Patch Tuesday, however for whatever reason you are do no install current month’s cumulative and want the previous month and you do this on rolling basis.EI in June you you install the May cumulative and in July you install June’s.Does anyone practice this with Automox? Because if you have you patch policy after Patch tuesday it will only pick up the latest cumulative. 

3
ElmerP-Automox
2 months ago
M
MrichardsPower User
posted in Community Worklets

Worklet: Install Forticlient VPN and provision gateway

Hi Guys, We use Fortigate Firewall/VPN Concentrators and needed an easy way to push out the newest client with all the gateway settings pre-applied. Shoutouts to @awhitman for helping point us in the right direction with a couple free professional hours. So basically what we do is run the installer, and then in order to actually modify all the settings we want, we need to throw some regkeys in the HKLM-Software hive. This will allow us to push the app to the end user and its prepopulated with the right URL/path/etc It’s worth noting, theres 2 versions of the forticlient VPN software, online and full. Online is readily available but if you want the full installer, you need to logon to forticare and download it behind a membership wall. Things to change: $pathtourl is your publically accessible vpn concentrator $gateway is what the end user will see for a friendly name. Start-Process -Wait -FilePath "FortiClientVPNSetup_6.4.1.1519_x64.exe" -ArgumentList "/S /v /qn /norestart" -passthru

5
J
2 months ago
D
Dinesh MishraRookie
asked in Community Worklets

User, Account and Access Management

Hi, I have gone through the documents and available APIs. But confused with the actual modelling. There are accounts, and user can be a part of account. Whether there can be users without associating with any accounts? There are groups, organizations, RBAC Roles. Whether all these can be assigned and revoked from a particular user or is it possible to manage at account level. I am confused with the entire organization structure and how access can be controlled in Automox. Could you please check and share some detail around it. I want to know how to manage users and accounts, and also wants to know how to manage the accesses. Thanks.  

0
D
2 months ago
T
todde69Rookie
asked in Community Worklets

Install Cisco Umbrella for Windows

Hi, I am attempting to install Cisco Umbrella to my Windows PC using a worklet using the following: msiexec /i Setup.msi /qn ORG_ID=ORG_ID ORG_FINGERPRINT=ORG_FINGERPRINT USER_ID=USER_ID I have added my specific information from the read me file and nothing gets installed. However, when I run it in powershell on the local machine it works. Any help is appreciated. Thanks

1
K
2 months ago
S
SomeITGuyRookie
asked in Community Worklets

How to query endpoints for GPO or their registry settings and build a list

Hello, We are looking to query endpoints to see if they have certain GPO’s applied and want to build a list of who has or doesn't have the two GPO’s.The evaluation code in the below worklet looks like it can identify the GPO’s by the registry setting.https://support.automox.com/help/enforce-windows-registry-settings-worklet Any idea’s or help in accomplishing the remainder of our use-case would be appreciated.

1
J
2 months ago
D
Deepan.balaRookie
asked in Community Worklets

Can we run powershell script in Current User context

Hello Folks,We are looking to deploy ACS Client Solutions (Java based which resides in the Current User folder) to all machines across our Organization.  I’ve tested the script to work properly via Powershell directly on a test machine:Start-Process -FilePath “\\Server\Path\ACS.exe” -Arguments “/Q” “/File=\\server\path\config.zip” -waitBut when trying to run this script (with our server names) via Automox, it starts the worklet, downloads the scipt to C:\ProgramData\AMAgent folder within Exec…. But hangs and does not execute the command.  What we are guessing is, since Automox runs commands/scripts in elevated system admin powershell, it probably is erroring when trying to run our script.So we are asking if there is a method to run PS scripts via Automox in Current User/logged in user context?

0
D
2 months ago
S
SW1Rookie
asked in Community Worklets

End user communication

Hey All!We just finished setup and configuring our patch policies and was wondering what everyone was doing in terms of user communications. Would anyone be willing to post a “template” that they for end user comms? Thanks in advance!

1
R
2 months ago
B
broken_stranger_nRookie
asked in Community Worklets

Empty Response in API of devices

While I am trying to fetch all associative devices of my console via api I am getting [ ] empty array in response.. 

4
B
2 months ago
M
MattEWG
asked in Community Worklets

3rd Party Patching Foxit

Hi Guys,Is there anything in the pipeline for Automox to start supporting patching of Foxit a sone of the 3rd party products?Also, if anyone has any nice worklets configured for patching this and wouldn't mind sharing  that would be great. Thanks Matt

4
M
3 months ago
jgrant999
jgrant999Rookie
asked in Community Worklets

Failover Cluster Manager

We use hyper-v and failover cluster manager to host all of our vms.  Is there a worklet that we could write to have each host drain the roles, wait like 20 minutes, and then reboot them?  I would think when they need to reboot b/c of an update Windows would do this automatically but I’m not totally positive just yet.

0
jgrant999
3 months ago
E
Epp79Rookie
asked in Community Worklets

Lockout User on MacBook

I have a situation to where a terminated user has not returned their MacBook and our HR department is having a hard time with this guy.  It seems like he has set up a new account on the Mac aside from the domain login and is using the computer for personal/consulting services.  My question is...Is there a way to completely lock out all user accounts on a MacBook via automox or completely make the MacBook unusable? Thanks!

1
K
3 months ago
A
aabarcaRookie
asked in Community Worklets

Worklet or Require Software for SketchUp Install

Has anyone try deploying SketchUp successfully using either a Worklet or Require Software Policy? TIA

0
A
3 months ago
M
MRayboneRookie
asked in Community Worklets

Required Software Scheduling...

Hello,When scheduling a Required Software policy, would you set it to run literally every month, every week and every day?  Or is scheduling it once enough?  I ask this because my thinking tells me it’ll run once and then never again - if the software were to be installed by Automox, then removed by a user, the policy wouldn’t pick it up again.  Or at least not until that singular schedule day arrived again in a years time.Or is is best to schedule a Required Software policy to run once every week if this is the case?Cheers,Mark.

2
M
3 months ago
F
FlyerAdmin326Rookie
asked in Community Worklets

Windows updates downloading but not installing

I’ve got a fairly basic patching policy in place to apply critical, high and medium priority Windows 10 updates.  Everything seems to be running smoothly and the devices are showing as fully compliant in the Automox dashboard but the updates are merely downloading and not installing.I have scheduled reboots running against the devices in question but this has resulted in a reboot without the updates installing.  Is there some element of the patching policy I need to set up or enable, or is actually installing updates not part of the patching policies within Automox?

4
F
3 months ago
D
Deepan.balaRookie
asked in Community Worklets

IE11 disable from Windows 7

Hey FolksAs we all know, IE11 is becoming EOL today (June 15/2022) and there is a worklet in Automox which removes/disables it in Windows 10.  This worklet uses a CMDLET that does not work in Windows 7, and we are in the process of upgrading Windows 7 → 10, but due to inventory shortage at our vendor it may not happen for a while.  In doing a bit of a digging, I’ve come across DSIM.exe which has a script to disable IE11 and it worked while running it manually.  But I’ve created a worklet in Automox, and it would not work while pushing it out.This is the code:Evaluation Code:Exit 1 Remediation Code:Start-Process "DISM.exe" -ArgumentList "/Online /Disable-Feature /FeatureName:Internet-Explorer-Optional-amd64" -Wait As I mentioned, the script works standalone with manual PS entry on a Windows 7 machine, but not when run with Automox.  Any help would be highly appreciated.  BTW, this is to disable IE11

0
D
3 months ago
A
anthony_1fortRookie
asked in Community Worklets

How to white label with our own brand?

We tap into Automox’s APIs to integrate patch management into our platform. I am wondering how we could do 2 things:Hide the “Automox Notifier” from apps (instead, we would push out notifications through our own app) White label all mentions of “Automox” that users see in the onboarding process, with our own brand name “1Fort” 

0
A
3 months ago
M
MRayboneRookie
asked in Community Worklets

Targeting 3rd party software updates...

Hello!So we’re trying to get Java updated on our workstations, so we have a worklet set up, but I was wondering what is the best way to target systems with specific software?Or is it a case of firing the policy at basically every workstation and having the PowerShell in the worklet decide whether to run the installer or not depending on whether it finds the software is installed already?Cheers,Mark.

1
D
3 months ago
P
ParkerDanRookie
asked in Community Worklets

Worklet needed to uninstall Office 2016, reboot, and install 365

Now that we’ve upgraded most of our Office 365 licences, I’m looking for a worklet which will uninstall Office 2016 overnight, reboot, then install Office 365.I’m struggling to figure out how to do this though, so any help would be much appreciated.I have a list of computers with Office 2016 installed, and I’ve found a VBS script, OffScrub_O16.vbs to do the removal, and I see there is already a worklet for installing 365 I think, but it’s how to piece them all together.I’ve got as far as the below in my thinking. It’d be good if the worklet checks if any Office 2016 apps are installed (although not critical as I’ve pulled a list of computers from our inventory software), before calling the remediation code, which might contain this:taskkill /f /im lync.exetaskkill /f /im winword.exetaskkill /f /im excel.exetaskkill /f /im msaccess.exetaskkill /f /im mstore.exetaskkill /f /im infopath.exetaskkill /f /im setlang.exetaskkill /f /im msouc.exetaskkill /f /im ois.exetaskkill /f /im onenote.e

0
P
3 months ago
JasonG-Automox
JasonG-AutomoxAutomox Employee
posted in Community Worklets

Worklet: Get Hard Drive Free Space Percentage

Checks the percentage of free space on all drives. Only run manually. The evaluation code will always return true. The output will be in your activity log. Edit the variable $SpaceAlert to equal the percentage to report on. If the percentage free is greater then this number nothing will happen. If its lower it will echo to your activity log. • Under Evaluation Code: If (Test-Path "$env:allusersprofile\SoftwareDistribution") { Exit 0 } Else { Exit 1 } • Under Remediation Code: $SpaceAlert = '10' $disks = get-wmiobject -class "Win32_LogicalDisk" -namespace "root\CIMV2" $results = foreach ($disk in $disks) { if ($disk.Size -gt 0) { $size = [math]::round($disk.Size/1GB, 0) $free = [math]::round($disk.FreeSpace/1GB, 0) $freespace = ($free/$size) * 100 $freespace = [math]::Round($freespace) } } If ($freespace >$SpaceAlert) { Exit 0 } Else { Write-Output "Free space " $freespace"%" }

2
A
3 months ago
Pete_Turner
Pete_TurnerRookie
posted in Community Worklets

Worket: Install New Relic on Linux

Hey Automox community!!I am in need of a Worklet to install New Relic on Linux hosts. Hopefully others who are proficient with these Worklets are also in need of the same.

1
ElmerP-Automox
3 months ago
T
taylor.jonesRookie
asked in Community Worklets

How to enable failed patch alerts

Wondering if I can configure automox to send an alert to a specific email address if a patch fails on a server. I was unable to find anything in the knowledge base. For example. If policy A encounters an error on Server B, Automox sends an alert to email@example.com.

4
D
3 months ago
R
Reuben_FRookie
posted in Community Worklets

Install Splashtop Streamer

This is a worklet that will install Splashtop Streamer (business account required). A Deployment package needs to be created first, this will generate your URL that can go into the URL variable field. The Code variable is your Deployment code for that specific deployment. Evaluation Code: #REQUIRES -Version 5.0 <# .SYNOPSIS This Test script checks to see if Splashtop is installed .DESCRIPTION This script queries the WMI class Win32_Product for the 'Splashtop Remote Server' package and exits with 0 if it is found .Notes File Name : splashtopInstalled.ps1 Author : reuben_f Prerequisite : WMF 5.0 or higher #> #Handle Exit Codes: trap { $host.ui.WriteErrorLine($_.Exception); exit 90 } function splashtopInstalled { param ( [switch]$Debug = $false ) $packages = $(Get-WmiObject -Class Win32_Product -Filter 'Name="Splashtop Streamer"').Name $len = $packages.Length if ($len -gt 0) { if ($Debug) {Write-Host "Splash

6
R
3 months ago
A
Andrew
posted in Community Worklets

Worklet: Install Any Standalone Windows 10 KB Patch (e.g. Intel Microcode Patch)

This worklet can be used to install any standalone Windows 10 KB patch that you can download from the Microsoft Update Catalog. We often use this to install Windows patches that aren’t included in the official patch releases. For example, sometimes the Intel Microcode patches that patch Meltdown, Spectre, and other speculative execution vulnerabilities aren’t included in the standard Windows patches. Note: I’ve only test this on Windows 10 PCs. Evaluation Code: In this example, I am installing KB4558130, which is the Intel Microcode Patch that was released for Windows 10 build 2004 on 8/31/2020 (https://support.microsoft.com/en-us/help/4558130/intel-microcode-updates). This evaluation code checks if that patch is currently installed. If it is currently installed, the script will quit and not move onto the remediation code. If the patch isn’t installed, it will continue on to the remediation script. #Check for this Windows Patch. #Replace KB4558130, with your patch KB $kb="KB4558130" i

1
Afonso_Alves_31
3 months ago
R
rami.malekRookie
posted in Community Worklets

Worklets - CVE-2022-30190 (msdt registry key export and delete, and reimport)

Hi all,Here’s the worklet for https://msrc-blog.microsoft.com/2022/05/30/guidance-for-cve-2022-30190-microsoft-support-diagnostic-tool-vulnerability/ to check if the registry key exists, and export/delete if it does.Evaluation Code:# Check if the registry key exists.Get-ItemProperty "Registry::HKEY_CLASSES_ROOT\ms-msdt"# If Get-ItemProperty returned without error, then the registry key exists.if ($?) { $response = 'Registry Key HKEY_CLASSES_ROOT\ms-msdt present' Write-Output $response exit 1} else { $response = 'Registry Key HKEY_CLASSES_ROOT\ms-msdt not present' Write-Output $response exit 0}Remediation Code:# https://msrc-blog.microsoft.com/2022/05/30/guidance-for-cve-2022-30190-microsoft-support-diagnostic-tool-vulnerability/reg export HKEY_CLASSES_ROOT\ms-msdt "C:\Windows\temp\hkey_classes_root_ms_msdt"reg delete HKEY_CLASSES_ROOT\ms-msdt /f Likewise you can reuse the above to import the registry key if it’s not already present; just flip the exit codes. This assu

0
R
3 months ago
V
viennaNovice
posted in Community Worklets

Worklet: Install 1Password for MacOS

Hi all, if you use 1Password, here’s a Worklet to check if it’s installed, if not, it will proceed install it Evaluation: #!/bin/bash #Checks whether 1Password.app is installed in the /Applications directory, if not, Exit 1 code and goes to next step if [[ -d "/Applications/1Password 7.app" ]]; then echo "1Password 7 is installed." exit 0 else echo "1Password 7 is not installed." exit 1 fi Remediation: #!/bin/bash echo -e "Downloading 1Password 7..." #Downloads 1Password 7 pkg to /tmp/ curl -L -o "/tmp/1pwpkg.pkg" https://app-updates.agilebits.com/download/OPM7 echo -e "Installing 1Password 7..." #Runs the installer sudo installer -pkg /tmp/1pwpkg.pkg -target / echo -e "Cleaning up..." rm -f "/tmp/1pwpkg.pkg"

1
J
3 months ago

Badge winners

  • Conversation Starter
    amithnischalhas earned the badge Conversation Starter
  • Conversation Starter
    Ussmakhas earned the badge Conversation Starter
  • Conversation Starter
    srheinshas earned the badge Conversation Starter
  • Conversation Starter
    mikesidhas earned the badge Conversation Starter
  • Conversation Starter
    GoldInRookhas earned the badge Conversation Starter
Show all badges
Terms & ConditionsCookie settings