Community Worklets

Automate and enforce any scriptable action on endpoints

  • 454 Topics
  • 1,126 Replies

454 Topics

T
todde69Rookie
asked in Community Worklets

Install Cisco Umbrella for Windows

Hi, I am attempting to install Cisco Umbrella to my Windows PC using a worklet using the following: msiexec /i Setup.msi /qn ORG_ID=ORG_ID ORG_FINGERPRINT=ORG_FINGERPRINT USER_ID=USER_ID I have added my specific information from the read me file and nothing gets installed. However, when I run it in powershell on the local machine it works. Any help is appreciated. Thanks

3
M
1 month ago
J
Julie GoyenRookie
asked in Community Worklets

Computer Lockout after 15 Minutes of Inactivity - Windows and Mac

Hi,We require a Worklet that will lock and requires a password to login after computer is inactive for 15 minutes.  We have searched other worklets and don’t see what we need.  Can someone provide a worklet for this for both Windows 10/11 and Macs?Julie

2
J
1 month ago
T
tylerawoodsRookie
asked in Community Worklets

Worklet COMMAND TIMED OUT. error

I’m attempting to use the Worklet from the catalog named “EXE Software Installation (System Wide-All Users)”. With only a couple of variables I’m at a loss why it is coming back with the error of “COMMAND TIMED OUT.”I’m running the policy on a system that Automox sees online at this time. Has anyone run into this?

2
T
1 month ago
M
MattEWG
posted in Community Worklets

Windows 10 22H2 Upgrade Worklet\Process

Hi Guys, Just wondering what everyone is doing (or thinking of doing) with regards to rolling out Windows 10 22H2 via Automox.I know there are a couple of worklets previously written for older versions and also a script to modify the registry for the targeted release.Just wondered if any other AX Wizards have found a better more streamlined solution may be?CheersMatt 

6
FCPMoxGuy
1 month ago
C
CraigJ1983Rookie
asked in Community Worklets

Install Certificate to Trusted Root CA in Windows

Hi all, first time posting in here!Was hoping the Automox community could help me. Is there a Worklet at all for pushing out a Certificate in Windows to the Trusted Root CA?  I can see that there is one for Mac in the built in Worklet catalog but no sign of a Windows oneAny help would be appreciated!Thank you

2
jack.smith
1 month ago
D
drichardRookie
posted in Community Worklets

Another tool to help deployment.

Would love to see a tool to scan an ip range for the automox agent. I have the gpo up and running but noticed a pc was missing. I know the ip of the machine and would like to be able to push an install script to that machine or machines at will instead of hoping that the install takes next time they reboot

0
D
1 month ago
schweeeeet
schweeeeetRookie
asked in Community Worklets

.NET 4.8 installer

Here is a worklet for installing .NET 4.8.  It checks the registry location for the version number and if it is not 4.8, it will install.  *whoops, didnt mean for this to be labeled a question*THIS INSTALL REQUIRES A REBOOT TO FINALIZE INSTALLATION!############################################################### ~~~ SWEET'S .NET 4.8 INSTALL SCRIPT FOR AUTOMOX! ~~~ ################################################################## --NOTES-- ### ############################################################################## ### - Set the version of the executable for the program as it displays in ###### properties of the file ###### - Set the path to the executable file ###### - Set the name of the log file ###### - Copy/Paste into Worklet!! #####################################################################################

0
schweeeeet
1 month ago
S
SIFAQESRookie
asked in Community Worklets

How can you create a script to copy files with Automox?

Hello, I am using Automox agent to copy a test file. The file is called "hello_world.txt" and the location where I can upload it is "c:". Additionally, I have added "Exit 1" to get a response, but I still don't understand how Exit 1 works. My script checks if the file already exists before copying it. If it does not exist, it makes a copy and responds "New file created".Someone help me, because the script don't work?$filename = 'hello_world.txt'$filepath = 'C:\'If    (Test-Path -Path $filepath$filename -PathType Leaf)    {      Copy-Item .\$filename -Destination $filepath      Write-Output "File copied and replaced existing"    }else    {      Copy-Item .\$filename -Destination $filepath      Write-Output "New file created"    }

1
J
2 months ago
C
curioustoknowRookie
asked in Community Worklets

deploy msi using automox

I need to deploy a msi software using automox and need to know can I get that complete. 

1
J
2 months ago
R
randygarlandRookie
asked in Community Worklets

Output from API GET command "List All Devices"

I am running the “List All Devices” API GET command in a PowerShell script that looks like this:$apiKey = '<MyAPIKey>'$headers = @{ "Authorization" = "Bearer $apiKey" }$url = "https://console.automox.com/api/servers?o=106231&page=0&limit=500"$response = (Invoke-WebRequest -Method Get -Uri $url -Headers $headers).ContentI am running the script from a powershell window as: .\ListAllDevices.ps1It completes, but I have no idea where the output goes.I would like to have the data dump to a .csv file on my desktop.  How do I make that happen?  

1
J
2 months ago
Juanmbi
JuanmbiRookie
posted in Community Worklets

Worklet: WinVerifyTrust Signature Validation Vulnerability (CVE-2013-3900) mitigation

This is an older CVE that was reissued by Microsoft January 21 2022. There is no patch for this vulnerability. It affects all current and previous versions of Windows OS. And is considered “opt-in” with no plans to enforce stricter verification. This is listed in the CISA known exploited vulnerabilities catalog. Updated reissue:CVE-2013-3900 - Security Update Guide - Microsoft - WinVerifyTrust Signature Validation Vulnerability Other:https://nvd.nist.gov/vuln/detail/CVE-2013-3900https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-098 Evaluation Code:#Clears all errors prior to running script$Error.Clear()#All values tested$Value1 = Test-Path -Path "HKLM:\\SOFTWARE\Microsoft\Cryptography\Wintrust\Config"$Value2 = Test-Path -Path "HKLM:\\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Wintrust\Config"$Value3 = Get-ItemPropertyValue -Path "HKLM:\\SOFTWARE\Microsoft\Cryptography\Wintrust\Config" -Name "EnableCertPaddingCheck"$Value4 = Get-ItemPropertyValue -Path "HKLM

1
M
2 months ago
S
SophiaAXCommunity Manager
posted in Community Worklets

ICYMI: 3CX vulnerability and how to remediate ASAP

ICYMI, our team has created Worklets for Windows, macOS, and Linux to help Automox customers as well as a general script in standard languages for any non-Automox users! More info here:  

0
S
2 months ago
Tony-Automox
Tony-AutomoxAutomox Employee
posted in Community Worklets

Install a Font to the Windows Font Library

This worklet will add a TTF or OTF font to your Windows font library. Just upload the .ttf or .otf file to the worklet and set $font to the name of the uploaded font file in the evaluation and remediation. Evaluation: $font = "NAME_OF_FONT.ttf" If (Test-Path "c:\windows\fonts\$($font)") { Exit 0 } else { Exit 1 } Remediation: $font = "NAME_OF_FONT.ttf" try { If (!(Test-Path "c:\windows\fonts\$($font)")) { switch (($font -split "\.")[-1]) { "TTF" { $fn = "$(($font -split "\.")[0]) (TrueType)" break } "OTF" { $fn = "$(($font -split "\.")[0]) (OpenType)" break } } Copy-Item $font -Destination "C:\Windows\Fonts\$font" -Force New-ItemProperty -Name $fn -Path "HKLM:\Software\Microsoft\Windows NT\CurrentVersion\Fonts" -PropertyType string -Value $font } } catch { w

5
I
2 months ago
S
SomeoneSomewhereRookie
asked in Community Worklets

Windows Server 2016 and TLS Client 1.2 only enabled

We have found recently that deactivating the Client TLS 1.0 for a Server 2016 OS, prevents Automox from being able to download the payload associated with the required software policy, the policy itself still runs, but it fails to connect and download the payload.we still have TLS 1.1 and 1.2 enabled, but the payload will not download.the scans and patching still seems to function like normal. as soon as we re enable the TLS Client 1.0,  we can then download the payloads again and have automox install software. in the exact same ENV, instead using Server 2019, and just TLS 1.2 enabled, with the same version of automox agent, 1.42.13, and the same required software deployment, it works without issue.  so it seems like Server 2016 is missing something, that Server 2019 has natively.has anyone seen anything like this, and is there a fix besides upgrading to 2019 ?

0
S
2 months ago
TJ_Coppola
TJ_CoppolaNovice
posted in Community Worklets

Enforcing TLS 1.2

Evaluation: $enabledProtocolList = @("TLS 1.2","TLS 1.3")$disabledProtocolList = @("SSL 2.0","SSL 3.0","TLS 1.0", "TLS 1.1")$ProtocolSubKeyList = @("Client", "Server")$Enabled = "Enabled"$registryPath = "HKLM:\\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\"$evalCount = 0foreach($Protocol in $enabledProtocolList){ foreach($key in $ProtocolSubKeyList) { $currentRegPath = $registryPath + $Protocol + "\" + $key Write-Host "Checking" $currentRegPath $currentEnableValue = Get-ItemProperty -Path $currentRegPath -name $Enabled if($currentEnableValue.Enabled -ne 1) { $errorMsg = "[error]" + $protocol + "\" + $key + " is set to disabled. Not compliant." Write-Host $errorMsg $evalCount ++ } }}foreach($Protocol in $disabledProtocolList){ foreach($key in $ProtocolSubKeyList) { $currentRegPath = $registryPath + $Protocol + "\" + $key Write-Host "Checking" $currentRegPath $currentEnableValue = Get-ItemProperty -Path $currentReg

2
S
2 months ago
S
srheinsPro
asked in Community Worklets

Clear Outlook Cache

Is there a way to use Automox to clear the Outlook cache from targeted devices?

0
S
2 months ago
schweeeeet
schweeeeetRookie
posted in Community Worklets

Simple application install template (EXE) - WINDOWS

I needed to make creating software install worklets accessible to non-script savvy people on my team, so I came up with these.Real simple… change the variables as instructed in the script notes, copy/paste into a worklet and that’s it.  This should be quite accessible for even the most n00bish PowerShell users. ################################################################################# ~~~ SWEET'S EXE INSTALL SCRIPT TEMPLATE FOR AUTOMOX! ~~~ #################################################################################### --NOTES-- ### ############################################################################## ### - Set the name of the software ###### - Set the path to the executable file ###### - Set the name of the log file ###### - Copy/Paste into Worklet!! #############################################

1
H
2 months ago
schweeeeet
schweeeeetRookie
posted in Community Worklets

Simple application install template (MSI) - WINDOWS

I needed to make creating software install worklets accessible to non-script savvy people on my team, so I came up with these.Real simple… change the variables as instructed in the script notes, copy/paste into a worklet and that’s it.  This should be quite accessible for even the most n00bish PowerShell users.Cheers! ################################################################################# ~~~ SWEET'S MSI INSTALL SCRIPT TEMPLATE FOR AUTOMOX! ~~~ #################################################################################### --NOTES-- ### ############################################################################## ### - Set the name of the software ###### - Set the path to the executable file (where it lives post-install) ###### - Set the name of the log file ###### - Copy/Paste into Worklet!! ######################################

0
schweeeeet
2 months ago
D
DHERTERRookie
asked in Community Worklets

MacOS updates not applying to test devices.

We have a test policy for a few MacBooks to update MacOS versions to latest (Ventura). We recently installed the Automox agent on some devices and want to do a round of testing before a complete rollout for our Policies. We are not seeing results in any report, email, or any comms saying these devices were scanned or patched. We also have a defferal for max 72 hours for this policy. Our team wants to ensure that MacOS updates are installed fully before we start patching third party apps. We have Mosyle MDM for our MacBooks without any profiles that will enforce or prohibit MacOS updates. Also our test group has Automox notifications enabled and our policy states that users should see the pop-up when the patch has been completed if there is a reboot required. 

0
D
2 months ago
dylan
dylanRookie
asked in Community Worklets

How do I create a worklet to Enable USB Ports?

Hi everyone,I'm currently using the following PowerShell script to disable USB storage devices and enable mouse and keyboard devices:# Disable USB storage devices$usbDevices = Get-PnpDevice -Class "USB" -Status OK | Where-Object {$_.Service -eq "USBSTOR"}foreach ($usbDevice in $usbDevices) { Disable-PnpDevice -InstanceId $usbDevice.InstanceId -Confirm:$false}# Enable mouse and keyboard devices$mouseDevice = Get-PnpDevice -Class "Mouse" -Status OK | Where-Object {$_.ConfigManagerErrorCode -eq 0}$keyboardDevice = Get-PnpDevice -Class "Keyboard" -Status OK | Where-Object {$_.ConfigManagerErrorCode -eq 0}Enable-PnpDevice -InstanceId $mouseDevice.InstanceId -Confirm:$falseEnable-PnpDevice -InstanceId $keyboardDevice.InstanceId -Confirm:$false# Evaluation codeWrite-Output "This code disables USB storage devices and enables mouse and keyboard devices."However, I need to find an Automox worklet that enables USB drives. Can anyone help me find a worklet that does this?

0
dylan
2 months ago
jesus.barrera
jesus.barreraRookie
asked in Community Worklets

Day Light Savings Time Change RHEL servers GLIBC_2.28' not found

Hello.I noticed all of the am agents installed on my RHEL 7/8 servers are offline and will not start back up. Getting the following error across all affected servers: “/opt/amagent/amagent: /lib64/libc.so.6: version `GLIBC_2.28' not found (required by /opt/amagent/amagent)"I am wondering if the time change had anything to do with it. If I reinstall the agnet, it works fine, I was wondering if anyone has seen this before and if there’s a better solution. We do have quite a bit of servers. Thank You in advance.  Edit: The time marked at disconnection was 2023-03-09 2:04 PM CST So It most likely was not affected by the time change. 

3
R
2 months ago
D
dwanecaballeroRookie
asked in Community Worklets

Issues with worklet outputing into activity reports

This is my remediation script, this will only be run manually output works in local powershell session but does not output in activity reports as expected any advice would be helpful not sure why its not working properly  # Define the registry key path to check$keyPath = "Software\Zscaler\App"# Get a list of all user SIDs in the HKEY_USERS hive$userSids = Get-ChildItem "Registry::HKEY_USERS" | ForEach-Object {$_.PSChildName}# Loop through each user SID and check if the registry key exists$foundUsers = @()foreach ($sid in $userSids) {    $regKey = "Registry::HKEY_USERS\$sid\$keyPath"    if (Test-Path $regKey) {        $user = New-Object -TypeName PSObject -Property @{            UserSID = $sid            RegistryKey = $keyPath            Present = $true        }        $foundUsers += $user    }} # Output to Automox activity reportif ($foundUsers.Count -gt 0) {    Write-Output "The following users have registry key $keyPath in HKEY_USERS hive:"    $foundUsers | Format-Table UserSID, Regi

0
D
2 months ago
T
The Technical SpecialistRookie
asked in Community Worklets

Was it Automox, or something else that patched it?

How can I see that the patching of OS-es and Third Party Apps have been Patched by Automox vs Patched by someone or something else?For Example,The MS Office Suite has a ‘auto-updater’ (at least on macOS). I’ve manipulated the .plist of the Autoupdater to enforce updates. Would Automox claim the owner of the Patch even if it was Autoupdater that triggered it?Or, what if if user him/herself would initiate the update for a particular piece of software before Automox could do it, would Automox then still ‘claim’ the credit for the patch unrightfully?

0
T
2 months ago
A
antrevRookie
asked in Community Worklets

Applications supported by Automox

Would love to see a column within a device where all the applications are shown to say supported or not supported by automox so that we can put in requests to have certain applications supported. Right now it seems that its a manual task to see which applications are not supported by automox

0
A
3 months ago
A
Ahmed WarsameRookie
asked in Community Worklets

Automox Remote Desktop Usage Logs

Hi All, i want to be able to create a remote desktop usage logs, e.g. if i want to investigate who has remotely logged on to a user machine ? I want to know how often we used Automox Remote Desktop to connect a user machine. I hope this make sense:)

3
W
3 months ago

Badge winners

Show all badges
Terms & ConditionsCookie settings