Community Worklets

Automate and enforce any scriptable action on endpoints

  • 454 Topics
  • 1,126 Replies

454 Topics

R
Ronald_FreedNovice
posted in Community Worklets

Install Qualys

Use the below script to install Qualys. Evaluation Code:if (Test-Path -Path "C:\Program Files\Qualys\QualysAgent")     {        exit 0    }     else     {         exit 1     } Remediation Code:.\QualysCloudAgent.exe CustomerId="{INSERT}" ActivationId="{INSERT}" WebServiceUri="INSERT" Note: Leave {} inside the quotes for both CustomerId and ActivationId

1
daniel.newman
3 months ago
P
PRuffinRookie
asked in Community Worklets

Worklet: Retrieve Automox Logs?

Has anyone made a worklet that retrieves Automox logs from a workstation or server and uploads the report to the Activity log?

0
P
3 months ago
L
L4d1kNovice
posted in Community Worklets

Lansweeper LsAgent MAC install

Edit: For those just looking for the final working version of the script, here it is: #!/bin/bash echo -e “Installing LsAgent…” hdiutil attach “./LsAgent-osx.dmg” -nobrowse /Volumes/LsAgent/LsAgent-osx.app/Contents/MacOS/installbuilder.sh --agentkey “Your_Cloud_Key” --mode unattended echo -e “Cleaning up…” hdiutil detach “/Volumes/LsAgent” rm -f “/tmp/LsAgent-osx.dmg” Helllo, I am trying to install inventory agent LsAgent from Lansweeper to our MAC osx laptops without much luck. Here is the required software code I am using: #!/bin/bash echo -e “Downloading LsAgent…” curl -L “https://content.lansweeper.com/l/651653/2018-11-27/4d6yl” -o /tmp/LsAgent-osx.dmg echo -e “Installing LsAgent…” hdiutil attach “/tmp/LsAgent-osx.dmg” -nobrowse ~/Volumes/LsAgent/LsAgent-osx.app/Contents/MacOS/installbuilder.sh --agentkey “OUR-CODE” --mode unattended echo -e “Cleaning up…” hdiutil detach “/Volumes/LsAgent” rm -f “/tmp/LsAgent-osx.dmg” Any help would be appreciated.

13
P
3 months ago
J
JHagstromPro
posted in Community Worklets

Worklet: Install BitLocker and store keys in device tag

Hello everyone, This is just a script that will store bitlocker recovery keys in the device tags for whatever device the script is run on. Thought this would be an easier way to manage any bitlocker keys for those who will want to install it through automox rather than manually exporting keys or storing them via AD. Only thing that needs changing is the API Key. Currently there is a placeholder of just “INSERT API KEY HERE” and you must add in your own for it to work. Remediation Code: $apiKey = "INSERT API KEY HERE" $apiUrl = "https://console.automox.com/api/servers/" $headers = New-Object "System.Collections.Generic.Dictionary[[String],[String]]" $headers.Add("Authorization", "Bearer $apiKey") #$headers.Add("Cookie", "ax_session=eyJpdiI6IlpqM3NxdU03Mk81dHg0RjBkOGZRQmc9PSIsInZhbHVlIjoiL0Z2QVljTVF3SkV2L0Jod0lKMUFHQ0dMalMxQVNNdkswNWRRb2hkN1NiTHBFcWk4S2pXempXU2hpQzhybHE4b3loREhXRUxKSHZPMDBmMHVHNERzVlU2enphQm1sTTA3U2FCSmNlU0lJSjdEKzdDRHRqZXBlNXFSUThWb01zNk5UdXZheXpUNlExeDJKRXdONlZBbFZsV0t

36
N
3 months ago
T
Ted MassonRookie
posted in Community Worklets

GPO Deployment Script changed

Posting this to possibly save someone else the troubleshooting time:The Power Shell script found here: https://help.automox.com/hc/en-us/articles/12796440845716-Install-AXAgentMSI was updated a couple weeks ago.  The client download URL now includes an “installers” folder.  Previous versions did not have this.   

0
T
3 months ago
D
Deepan.balaNovice
asked in Community Worklets

Need help in Removing IBM i Access for Windows 7.1

Hello FolksWe are using the following script to try and uninstall IBM i Access client from windows machines but it is not working:Evaluation Code:# Check 64bit hive on 64bit devicesif([System.Environment]::Is64BitOperatingSystem){    $hklm64 = [Microsoft.Win32.RegistryKey]::OpenBaseKey([Microsoft.Win32.RegistryHive]::LocalMachine,[Microsoft.Win32.RegistryView]::Registry64)    $skey64 = $hklm64.OpenSubKey("Software\Microsoft\Windows\CurrentVersion\Uninstall")    $unkeys64 = $skey64.GetSubKeyNames()    foreach($key in $unkeys64)    {        if($skey64.OpenSubKey($key).getvalue('DisplayName') -like '*IBM i Access for Windows 7.1*' -and $skey64.OpenSubKey($key).getvalue("UninstallString") -like '*msiexec.exe*')        {            $installcount += 1        }    }}# Check 32bit hive on 32/64 bit devices$skey32 = "HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall"foreach($key in Get-ChildItem $skey32 -ErrorAction SilentlyContinue | Get-ItemProperty | Where-Object {($_.DisplayName -li

0
D
3 months ago
N
NickHartOpusRookie
posted in Community Worklets

Remote Control Feature Request

Remote Control shows a notice on connection and disconnection but when active the user has no on-screen notice.  On a longer session or those where the user chooses to walk away to do something else they could come back and not know if the session is over or not.  Please add some kind of notice on the screen that the connection is active.The user should also have the ability to terminate a connection and this should be placed along with the active connection notice.

1
S
3 months ago
Tony-Automox
Tony-AutomoxAutomox Employee
posted in Community Worklets

Audit Your Windows Endpoints for Local Administrator Accounts

This simple worklet will audit your Windows endpoints and report any local administrator accounts to the Automox activity log. This will only report on endpoints running at least Windows 10 v1607, Server 2016, or having at least PowerShell v5.1 installed. Evaluation: # If Windows OS isn't at least Win10 v1607 or Server 2016 or PowerShell < v5.1, then exit if ($PSVersionTable.PSVersion -lt [version]'5.1') { Exit 0 } $scriptBlock = { $adminNames = Get-LocalGroupMember -Group Administrators If ($adminNames) { Return 1 } else { Return 0 } } $exitCode = & "$env:SystemRoot\sysnative\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -NonInteractive -Command $scriptblock Exit $exitCode Remediation: $scriptBlock = { $adminNames = (Get-LocalGroupMember -Group Administrators).Name Return $adminNames } $exitCode = & "$env:SystemRoot\sysnative\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass -WindowStyle H

2
L
3 months ago
W
walker.smithRookie
asked in Community Worklets

Worklet for verfiying version of TLS in enabled

Hi we have a request to check the TLS version for a group of servers. I see there is an article, copied below, for enforcing registry settings but what about just checking? Could I leave the remediation code blank?The key I want to check for is HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client\Enabled https://help.automox.com/hc/en-us/articles/5352120268820-Enforce-Windows-Registry-Settings-Worklet

1
J
3 months ago
K
kcardonaRookie
posted in Community Worklets

Please stop force log out

Please stop force logging out admins from the portal. It is unproductive…. Just lost 4 hours of work on a worklet.  If the input box for the code input, senses keydown strokes, DO NOT LOG ME OUT…..

4
J
3 months ago
W
walker.smithRookie
asked in Community Worklets

Pushing out specific Windows KB's

Hi, I am working on a set of policies when zero day patches happen. Something I could not figure out is how to target multiple specific patches in one policy. I did create multiple advanced polices targeting the patches and ran those. Is there something that I missing or is there a better way to do this. 

1
J
3 months ago
S
S.SharpRookie
asked in Community Worklets

Automate an Ubuntu upgrade from 18.04 to 20.04 LTS

Is there a way to automate or script the upgrade of Ubuntu LTS v18.04 to v20.04 

1
E
3 months ago
Stambo-Automox
Stambo-AutomoxAutomox Employee
posted in Community Worklets

Remote lock workstation and change user's password

This worklet changes the local user’s password and logs them out of the computer. This is useful in instances where there is security risk or an abrupt/unexpected termination. Evaluation exit 1 Remediation #Credit for parts of this script go to Progress $logoutReset = { #Set the username that should have its password changed and sessions logged off on the targeted workstations $user = 'jeff' $password = 'y0urn3wPa$$woRd_heR3' # #Comment out the line below if you do not need to change the password locally but prefer to change it in Active Directory net user $user $password $ErrorActionPreference = 'Stop' $quser = "C:\Windows\Sysnative\quser.exe" $logoff = "C:\Windows\Sysnative\logoff.exe" try { ## Find all sessions matching the specified username $sessions = & $quser | Where-Object {$_ -match $user} ## Parse the session IDs from the output $sessionIds = ($sessions -split ' +')[2]

4
E
3 months ago
AdamW-Automox
AdamW-AutomoxAutomox Employee
posted in Community Worklets

Worklet: Predictable Reboot Notifications for Windows

Hey Y’all! Automox offers a fully customizable end-user notification feature that clearly indicates to users when Automox will be patching and potentially rebooting their systems. This feature also allows you to set custom deferral options empowering users to control when their device should be patched. This gives peace of mind to system admins that their environment will be patched without interfering with their users everyday use. Although this is a great feature, Automox recognizes that it does not offer the predictability to users to when the actual reboot event will take place. We are currently working on improving our current notifications to give users better reboot predictability. Automox has gathered a lot of customer feedback aimed to make this feature enhancement as effective as possible. The great thing about this is it will be built into the product and be offered in the same fashion as the current end-user notifications. So, what can you do until this feature is released?

33
G
3 months ago
V
viennaNovice
posted in Community Worklets

Worklet: Install Microsoft Office on Windows

Hi all, I thought I’d upload the worklet I am using to install Microsoft Office (I know, there’s probably other and better ways to do this but this method works for us.) I downloaded the Office Deployment Tool via https://www.microsoft.com/en-us/download/details.aspx?id=49117, extracted it and uploaded the setup executable to my Worklet and configured the XML to fit my needs - you can also configure that here https://config.office.com/ - and uploaded it to my Worklet. You may need to rename them in the worklet so they have your correct the filenames. The evaluation first checks whether the Microsoft Office directory exists in Program Files, if found, it then uses the O365 installer. The remediation then logs everything in verbose to a msoffice.log file, copies the uploaded files to a temp directory, checks whether the path exists, if so, writes the output and skips the install, otherwise it installs it. Evaluation: if (Test-Path -Path "C:\Program Files\Microsoft Office") { exit 0 }

2
schweeeeet
3 months ago
J
Jim FanRookie
asked in Community Worklets

Is Automox available in China

May I know if Automox will be available in China on business? And the management instances are hosting on China AWS environment.

0
J
3 months ago
P
paulRookie
asked in Community Worklets

Evaluation code to check if program is currently running

Hello,I am using an Automox worklet to deploy an internal application to a group of devices.If the program is installed while the previous version is running it could cause unexpected behavior so I need to check if the program is currently running and if running then do not install but wait until the next opportunity.Can I achieve this using the Evaluation Code section?Right now my evaluation code looks something like this:# Check if program is running.$in_use = (Get-Process $program_name -ErrorAction SilentlyContinue) -ne $Nullif($in_use) { # If running then abort and wait until next patch window. Write-Output "Program is currently running." exit 1}if($installed_version -ne $version){ Write-Output "Version $version will be installed." exit 1}else { Write-Output "Version $version is already installed" exit 0}I’m not sure if my assumption is correct so I would appreciate some clarity on how the evaluation code section worksWill this cause the Remediation Code to wa

0
P
3 months ago
D
DivyanshiShRookie
asked in Community Worklets

Audit logs of user activity using API

Hi,Is there any way to find the info about “which user performed what activity at what time” report, like seeing when which specific user pushed a certain patch or renamed a certain device, or run a certain policy/patch. The “Data Extracts” report is close but it only shows when a patch was pushed, just not how it was initiated (like by a user or by a scheduled policy).Is there any way to extract this information using Automox API?

1
M
3 months ago
B
bhavik_TTRookie
asked in Community Worklets

CVE-2022-36122

We are receiving a vulnerability alert on our SentinelOne console stating that the version of Automox we are running has a High Severity risk. The vulnerability is CVE-2022-36122  (https://www.cve.org/CVERecord?id=CVE-2022-36122).I confirmed that we are running the latest version (1.42.13) but the vulnerability is stating The Automox Agent before 40 on Windows incorrectly sets permissions on key file. Please advise on how we can fix this.   

1
G
3 months ago
A
abo-secRookie
asked in Community Worklets

SCCM Countdown

Hello all, I would like to know if I’m the only one who regrets the fact there is no possibility to have a kind of countdown regarding the final reboot message whenever an update requires it. It would be good for our users to really have, like SCCM did, a countdown, let’s say during the last 30 minutes where he has really no option except think about saving his work and reboot.I already opened a ticket and made some research but it seems that it is, except into SCCM, very tough to implement (at least as an option).Am I the only one who would like to see that in Automox ?  Example : https://learn.microsoft.com/en-us/mem/configmgr/core/clients/deploy/media/3976435-1906-final-restart-countdown.png

1
G
3 months ago
H
hanlong.leeRookie
asked in Community Worklets

Automox shows that my device is disconnected when user logged in.

We have total 542 device deploy.419 device is disconnected when user logged in.Mac    265Windows    154Any way to fix this issue for Windows and Mac?  

0
H
3 months ago
M
megangiovannottoRookie
asked in Community Worklets

Does anyone here have a worklet for removing Apex One

I have the CUT Tool from Trend Micro, but trying to figure out where in the Evaluation Code to put that. We normally run a powershell script to uninstall as well. Where in the worklet would that be placed? Any advise is appreciated! I am pretty new to Automox. Thank you

0
M
3 months ago
N
NvlddmkmRookie
asked in Community Worklets

API policy data incorrect

When connecting to the API, the data returned for policies does not appear to be accurate - specifically the policy status field.  When polling all /api/policies, the status field shows ‘inactive’ despite the policies being active in our console (in fact one shows active where it is inactive in our console).  I’ve checked through all other fields and do not see any other field to denote the policy status.Below is the API output and the status in the console, for the same 2 policies.name status ---- ------Workstation [Win] - All Update inactiveWorkstation [Win] - All Update (Test Group) inactive EDIT: This wasn’t supposed to be under worklets and I am unable to delete or move the post.  

0
N
4 months ago
A
anjaliguptaRookie
asked in Community Worklets

Service Graph Connector

We are looking for scope of Service Graph connector to use to create incidents for failure patches from Automox.What could be the best way to get that information from Automox to Service now that can create incidents to the respective team?

0
A
4 months ago
Afonso_Alves_31
Afonso_Alves_31Pro
asked in Community Worklets

Unexpected EOF while looking for matching - MacOS

 Has anyone seen this error on the MacOS env?  

0
Afonso_Alves_31
4 months ago

Badge winners

Show all badges
Terms & ConditionsCookie settings