Find & Share Worklets

You're looking at the Yellow Pages for Community Worklets... find Worklets and share your own here!

  • 515 Topics
  • 1,365 Replies

515 Topics

J
jhollisRookie
asked in Find & Share Worklets

Rapid 7 Install with Custom token

Hello,Looking for a worklet that will install Rapid7 Agent with a custom token to link it back to the orgs insightVM platform. The MSI and Custom Token msiexec /i agentInstaller-x86_64.msi /l*v insight_agent_install_log.log /quiet CUSTOMTOKEN=us3:787e4f09-834b-48f6-******************Notes from Rapid7 The command above and the MSI must have the same filename path to apply the token. ######## EDIT WITHIN THIS BLOCK #######$fileName = 'agentInstaller-x86_64.msi'$custArgs = 'CUSTOMTOKEN=us3:787e4f09-834b-48f6-a*******************'###################################################### MAIN CODE ############## MSI/Script location. Joined with filename to pass a single variable to function.$sPath = Split-Path $Script:MyInvocation.MyCommand.Path -Parent$fPath = "$sPath\$fileName"$lPath = "$env:WINDIR\temp"  would the custargs work in this case or do I need to do something else?like CD  C:\$sPath\$fileName\CUSTOMTOKEN=us3:787e4f09-834b-48f6-a******************* I’m shocked Automox is integrated

1
AdamW-Automox
18 hours ago
D
dwseckman12Rookie
asked in Find & Share Worklets

Worklet to Remove User Profiles

My Helpdesk team is encountering an issue in our Warehouse where multiple users will sign into a PC and fill up the disk space seemlingly overnight.I need a worklet that will evaluate the disk space on a shared PC and then delete user profiles that haven’t been modified or used in over 30 days if that disk exceeds 50%. I would also like it to also run disk cleanup every night.

6
J
3 days ago
J
Josh.McWilliamsRookie
asked in Find & Share Worklets

Worklet to Remove .Net Core Server (not SDK)

Has anyone found a good script to uninstall old versions of .NET Core? We’re running through vulnerabilities and we have a lot of servers running older unsupported versions of .NET Core Server Hosting. I’ve been able to upgrade .NET 6.0 without issue but it seems 3.1 versions just won’t update or go away. We have roughly 40+ servers running multiple versions of .NET Core. None are the SDK version so the .NET uninstall tool doesn’t work on them. I’ve tried a script to download the ASP.NET Core Hosting exe and running the uninstall commands from there and, nothing. I’ve tried installing a newer version of 3.1 over the existing version (like I did with 6.0) and didn’t take. How are all of you managing .NET Core versions and eliminating unsupported versions from your environment?I’m at a loss at this point. There are not SDKs and there is no Visual Studio. So there seems to be no easy way to remove these old .NET versions especially when the uninstaller process via Automox can’t provide an

5
MarkH-Automox
4 days ago
L
Landon-AutomoxAutomox Employee
posted in Find & Share Worklets

Worklet: Check Internet Connection Speed Mac OS

I wrote this macOS bash Worklet with the help of Otto AI to check the speed of an internet connection on macOS devices.It’s my entry into the Just Script It challenge! Evaluation# This Worklet runs a speed test on Mac OS devices using the networkQuality command. # This command was included starting with Mac OS Monterrey.#Exit non-compliant to run remediation scriptexit 1 Remediation# ======================# Otto AI Generated Code# ======================#intro message: clearecho "Checking Network Quality......"# s allows for sequential testing, which tends to yield more accurate results# c is computer readable output# networkQuality available starting with Monterrey output=$(networkQuality -sc)# Remove leading/trailing whitespace and curly bracesoutput=${output#*{}output=${output%{}*}# Extract the values using pattern matchinguplink_capacity=$(grep -o '"ul_throughput" : [0-9]*' <<< "$output" | awk '{print $NF}')uplink_capacity=$(($uplink_capacity/1000000))downlink_capacity=$(gr

1
S
5 days ago
C
ChaseFDLICRookie
posted in Find & Share Worklets

Worklet - Check if .NET Framework 3.5 and 4.8 are enabled

I recently came across and issue in my organization that involved me enabling the .NET Framework 3.5 and 4.8 optional features for a user on Windows 10. The issue caused some of our in-house created software to crash and I was informed by my manager after resolving the issue that this user is not alone and he has had to help users with this same issue before.I tasked myself with creating a Worklet that would check if these optional features are enabled on a Windows 10 machine, and if they are not, enable them! With the help of Ask Otto, this task was a breeze and dramatically cut down the time it took to create both of the scripts.(Granted, a few tweaks did need to be made to the syntax of some commands but Ask Otto was able to make a pretty solid script with just a few detailed instructions).If you notice something that could be improved or that could be changed to improve either script please let me know, I’m fairly green when it comes to creating scripts and I’m open to suggestions

5
S
5 days ago
D
DACOYNERookie
posted in Find & Share Worklets

Worklet - Scan for and Install all Dell Firmware updates

This worklet will check if Dell Command Update is installed and install it from a network share if not found (this can be changed to download URL). Once install is verified it will scan for and install any available Dell firmware updates from the Dell catalog, silently with reboots disabled.  -Bitlocker must be suspended first to install BIOS updates which requires a BIOS password if your organization uses one. I have my Dell machines run this policy on Tuesdays to catch the MS patch Tuesday reboot on Wednesdays.# Define the path to Dell Command Update dcu-cli.exe if installed $dcuCliPath = "C:\Program Files\Dell\CommandUpdate\dcu-cli.exe"# Check if dcu-cli.exe existsif (-Not (Test-Path -Path $dcuCliPath -PathType Leaf)) { # Install Dell Command Update from the network location $msiPath = "\\********\Installs\Dell\Dell Command Update\DellCommandUpdateApp.msi" if (Test-Path -Path $msiPath -PathType Leaf) { # Install Dell Command Update silently Start-Process -Fil

1
S
5 days ago
jack.smith
jack.smithAll Star
asked in Find & Share Worklets

Worklet - Install Cisco Umbrella Anyconnect Agent

This worklet will install Cisco Umbrella with certificate and config files. This also checks for the OpenDNS agent and removes as well.  EvaluationParamaters Thumbprint ID of the root certificate used by your own SWG deployment If any of the services don’t exist, run remediation csc_vpnagent csc_swgagent csc_umbrellagent If running an older version of the service Umbrella_RC, run remediation If the Root Certificate is missing, run remediation If OrgInfo.json is not in place, run remediation#params$thumbprint = "<your-org-thumbprint>"# Cisco AnyConnect VPN Module$service = Get-Service csc_vpnagent -ErrorAction SilentlyContinueIF(!$service){ exit 1}# Cisco AnyConnect Diagnostics and Reporting Tool$service = Get-Service csc_swgagent -ErrorAction SilentlyContinueIF(!$service){ exit 1}# Cisco AnyConnect Umbrella Roaming Security Agent$service = Get-Service csc_umbrellaagent -ErrorAction SilentlyContinueIF(!$service){ exit 1}# Root Certificate used to inpsect HTTPS traffic

1
S
5 days ago
jack.smith
jack.smithAll Star
posted in Find & Share Worklets

Worklet - Install Tenable

This worklet will install Nessus Agent on 64-bit versions of Windows. Does require your own key and nessus agent be uploaded to worklet. EvaluationParameters The Function Convert-EpochtoCST will break during DST and Currently removes 5 hours to make UTC time CST The $status variable assumes 64-bit agent was installed. Add logic if you have 32-bit agents deployed. Converts output of nessuscli agent status to powershell object If Link Status is not connected, run remediation If Last Connected is 28+ days, run remediation If no status exists, run remediationFunction Convert-EpochtoCST ($epochTime){ (New-Object DateTime 1970,1,1,0,0,0).AddSeconds($epochTime).AddHours(-5) # UTC to CST}Function Get-NessusStatus{ # Collect Status $status = cmd /c "C:\Program Files\Tenable\Nessus Agent\nessuscli" agent status # Last Scanned $epochTime = $(IF($status -match "Last scanned"){($status -match "Last scanned").Split(": ")[-1]}) $LastScanned = Convert-EpochtoCST $epochTime # Las

1
S
5 days ago
F
fina27Rookie
asked in Find & Share Worklets

Delete file in privileged folder like system32

I’m trying to remediate https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-38175We use a 3rd party antivirus and not Microsoft Defender. Microsoft recommends deleting the file MpSigStub.exe. It’s located in C:\Windows\System32.  I tried to create the following but i think it’s not working because system32 needs elevated privileges. Any ideas? Evaluation Code: Exit 1 Remediation code: Remove-Item -path "C:\Windows\System32\MpSigStub.exe”

2
F
7 days ago
J
JT.PhillipsRookie
asked in Find & Share Worklets

Microsoft Office 365 Release Channels

Hello,I noticed in our Automox environment that we have a lot of client devices reporting they still need to update Microsoft Office 365 to latest version. However, we use the Semi-Annual Enterprise release channel and Automox is showing the Office version for the Current Release channel. Is there a setting or configuration I can change to make the Automox agent use a different release channel?  Example of What Automox is Showing https://learn.microsoft.com/en-us/officeupdates/update-history-microsoft365-apps-by-date 

0
J
10 days ago
C
catiedRookie
asked in Find & Share Worklets

Win 11 iso

Hey all,I’m having 0 success updating to windows 11 using the windows installation assistant from automox and from running it directly on the laptops I’m testing with.I have had success downloading the iso, mounting it, and running the upgrade from there.Has anyone else tested the Windows 11 worklet? I’ve thought about trying to create a worklet that downloads and mounts the iso and runs through the setup so I can put automation and control/schedule around the updates.

2
C
10 days ago
S
SophiaAXCommunity Manager
posted in Find & Share Worklets

TCP/IP DoS Vulnerability Mitigation Worklet (CVE-2023-38149)

September Patch Tuesday surfaced 61 vulnerabilities, but we built a Worklet to help you mitigate CVE-2023-38149, Windows TCP/IP Denial of Service Vulnerability. This vulnerability allows attackers to disrupt service over the network with a simple attack that does not require user authentication to exploit.  Automox CISO, Jason Kikta, recommends mitigating this with a dedicated Worklet before applying the patch. By using this script, you’ll increase preventative measures by disabling router discovery on all IPv6 interfaces and enhancing safety of your Microsoft corporation software version from multiple vulnerabilities.  

0
S
11 days ago
S
sscotterRookie
asked in Find & Share Worklets

32bit vs 64bit Plans?

Hi,I often find myself running into problems when writing worklets which don’t work as intended. Most of the time the root cause is because I’d failed to remember that the Automox Agent is a 32bit binary and calls 32bit PowerShell.Prefixing my Remediation Code with the following code blocks resolves the issue most of the time, but sometimes it does not, for example if I want to do something to a machine in both the 32 and 64bit registries in the same worklet.##############################################################################If Powershell is running the 32-bit version on a 64-bit machine, we #need to force powershell to run in 64-bit mode .#############################################################################if ($env:PROCESSOR_ARCHITEW6432 -eq "AMD64") { write-warning "It seems we're running 32bit Powershell within a 64bit OS. Executing 64bit Powershell....." if ($myInvocation.Line) { &"$env:WINDIR\sysnative\windowspowershell\v1.0\powershell.exe" -NonI

2
S
13 days ago
T
TimL-AutomoxAutomox Employee
posted in Find & Share Worklets

Worklet: macOS Deferred Reboot

The purpose of this worklet is to detect if a macOS device is pending a reboot and will notify the user to reboot. If the user does not reboot within your given timeframe, the script will force a reboot. If the macOS device is at the login window (no user logged in), the device will reboot immediately with no notification. Example Notification: The Reboot Now button does just that, it reboots immediately The Later button will close the notification and redisplay again based on what you have set (below) You can set the following options in the Remediation script below: title - The Title of the notification message - The message content (use %TIME% in your message to display the time left in minutes forceRebootIn - The amount of minutes until the macOS device is force rebooted notifyInterval - Show the above notification every X minutes until a reboot occurs notifyTimeout - How long the above notification shows on the screen before closing and assuming a deferral iconFile - Upload a .i

4
sparrowhawk
18 days ago
A
AndreyRookie
asked in Find & Share Worklets

Reboot group of Windows servers in specific order?

Cannot find or create the worklet for reboot group of Windows servers in specific order (like with delay 15 minutes) to schedule for once a week group reboot? Any help or advise? THX!

2
jack.smith
25 days ago
S
SophiaAXCommunity Manager
published in Find & Share Worklets

Will you take on the Just Script It! Worklet Challenge? 🥳

Automox is pumped to celebrate the power behind Worklets and offer a preview of our script-writing coach, Ask Otto! Our amazing scripting tools are your keys to ultimate scalability. Today through September 26, we're inviting YOU to channel your energy and input in the Just Script It! Worklet Challenge! Jump into the Community to discuss, workshop, and create new Worklets with our expert Automox engineers and Ask Otto. And guess what… there's some seriously awesome Automox swag on the line (keep reading to find out what)! 🙌Don't miss the opportunity to try out Ask Otto – free! Join us in scripting the unscriptable and enhancing Ask Otto for all!To participate, we challenge you to: Write a script using Ask Otto* (Enable Ask Otto for this challenge here) Share your new Ask Otto-assisted Worklet by posting it in the Automox Community under the Find & Share Worklets category (make sure you’re signed in or sign up) Peek at your peers’ Worklets – they may have built something you can us

4911
S
25 days ago
S
SophiaAXCommunity Manager
published in Find & Share Worklets

Defeat the Windows HTML RCE Vulnerability: CVE-2023-36884

Another day, another foe defeated: CVE-2023-36884 is a Remote Code Execution (RCE) Vulnerability that enables malicious files to spawn child processes on your system, granting attackers remote code execution capabilities.This Automox Worklet is capable of quickly and effectively remediating this vulnerability until you can patch it. It works by interacting with your system’s registry to scan, modify, and create the targeted subkey when needed. To finish the job, it confirms proper configuration and even logs the process to make troubleshooting easier. Mitigate Office & Windows HTML RCE Vulnerability with this automation to provide the additional protection your team needs and save hours with this Automox-verified script. 

270
S
25 days ago
K
kaitlin.houserRookie
asked in Find & Share Worklets

Refining Worklet for Mapping Network Drives

Hello, I am trying to make a worklet to map certain network drives to users PCs. I tried the script that was posted about 3 years ago in “Worklet: Network Drive Mount Windows” and it runs but in File Explorer gives the error “Disconnected Network Drive”. Does anyone have an updated script or know how to tweak the previous script to fix this issue? Thanks! 

6
J
28 days ago
J
jhollisRookie
asked in Find & Share Worklets

Create a worklet that installs two programs and pushes a xml profile

Hello,I’m looking for guidance to create a worklet that will install Cisco secure client core VPN and Cisco Umbrella  as well as pushing an xml profile to the end point destination “C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client\Profile”. The goal is to push this software while the end point is not connected to the company network, but rather through the Automox agent. Is this feasible to do? if so, how do I accomplish this? Programs:Windows Installer Package (.msi)cisco-secure-client-win-5.0.03076-core-vpn-predeploy-k9cisco-secure-client-win-5.0.03076-umbrella-predeploy-k9 Endpoints are Windows 10/11

4
DavidV-Automox
1 month ago
P
probertsRookie
asked in Find & Share Worklets

Enable Bitlocker Encryption mystery

Has anyone had success with the Enable BitLocker Encryption worklet in the Worklets Catalog. When running it, I just get a Command Timed Out message - none of the messages built into it ever are written so I can’t tell where it is blowing up… Any information/help is appreciated...

1
J
1 month ago
M
MorganRookie
asked in Find & Share Worklets

Secure Token Access enabled - still incompatible in console

I noticed that this question was brought up in another thread, but was not addressed.I have a computer that verifies that secure token access is enabled, but in the console it still shows as “not-compatible”, citing missing secure token access. I also try using the Automox provided worklet to update the access, and it indicates that the token access is already enabled. I have removed and readded the agent with the same issue. Has anyone been able to resolve this?OS: OS X (13.4.1 (c))CPU: Apple M1 ProRAM 32 GBAgent 1.42.22Thank you

2
M
1 month ago
D
Darth VannessRookie
asked in Find & Share Worklets

Worklet to End task

Has anyone created a worklet to end a task or close an application? In the Automox University specifically the Third Party Patch Policy training, they talk about applications that need to be close in order to update. Has anyone been successful in creating a worklet that accomplishes this?

2
MarkH-Automox
1 month ago
C
curioustoknowNovice
asked in Find & Share Worklets

worklet software install duplicates

I have a worklet created to install software based on scheudle policy which is daily at10am, and when I check the report, I noticed it create duplicates. how to di avoid this?in evaluation code i have : exit 1 also Have a check on : if device misses a configuration patch, it will patch next time it check in 

1
MarkH-Automox
1 month ago
S
slammertRookie
asked in Find & Share Worklets

Does AgentNotifier.exe use a specific firewall port

We have a lot of machines that are currently showing Not compatible because AgentNotifier.exe is not being allowed to communicate back to the Automox console.  Is there a port we need to open on these computers?

1
S
1 month ago
A
Anonymous
published in Find & Share Worklets

Worklet: Install SentinelOne Agent (Linux)

Hi, everybody! Since announcing our strategic alliance that pairs our two platforms, Automox has developed customized Worklets for SentinelOne that includes pre-built scripts for automatic deployment of the SentinelOne agent across Windows, Linux and macOS devices - without manual intervention or wasted IT cycles. Below you’ll find the worklet for Linux.Big thanks to @Zac-Automox  for getting these written.  Worklet Details: Install SentinelOne Agent (Linux) Evaluation Code#!/bin/bash#================================================================# HEADER#================================================================# SYNOPSIS# Installs the SentinelOne agent on the endpoint.## DESCRIPTION# This worklet will check to see if the SentinelOne agent is# installed on the target device.## USAGE# ./evaluation.sh##================================================================# IMPLEMENTATION# version STRAT-1_install_sentinelone_agent (www.automox.com) 1.0# aut

87660
L
1 month ago
Terms & ConditionsCookie settings