Find & Share Worklets

Leveraging the power of Automox Worklets™ has never been easier! Take a look some of our most popular Worklets that help you plug and play IT automation for hundreds of use cases across Windows, macOS, and Linux devices. Uninstall Specific App by NameThis Worklet is designed to grant an administrator the ability to uninstall an application or remove software with minimal knowledge of the bitness, installer type, or uninstall command line. Using this PowerShell Worklet is the easy answer to the questions, “How do I uninstall a program by name?” or “How do I uninstall a specific app?”.Targeted Reboot within a Defined TimeframeDo your users sometimes ignore their computers’ "updates ready to be installed” notifications? Well, now you can help them complete reboot actions with ease. The Targeted Reboot within Defined Timeframe Worklet can conditionally force a reboot on a system within a scheduled timeframe. This Worklet may be useful for machines that an administrator would only want to r

We have many instances where we need to push out a specific piece of software to a single end user/device, when the device is online it is easy to handle this by manually running the policy by clicking “Run On This Device”.  But this does not seem to work / queue if the device is offline at the time, (at least in my experience) as such we have to carefully coordinate with the end user as opposed to simply pressing the button and the next time the device checks in it will run the script. We have in the past moved a device to a one off group and scheduled it, but that gets messy and easy to forget the device was moved while we wait for worklet completion. Is there a better way to do this?

I need to re-install a new palo alto VPN client software with a new profile and right now I have 2 tasks that I have to run -uninstall software (using a generic uninstall worklet) -install software with the new portal configuration (using requires software policy)Start-Process msiexec.exe -Wait '/I vpn.msi /quiet PORTAL="mynewportal.test.com"' how can this be done efficiently in maybe a 1 task? 

When an applications must be closed in order to update (e.g. Zoom, Notepad++, SnagIT) the Automox agent will not update the application if it is open, nor will it auto-close the application. This is intentional to prevent you from randomly losing unsaved work or dropping from a Zoom call.This Worklet can be used in conjunction with a patch policy by configuring it to run 5 minutes before the application-specific patch policy is set to run.Example:PatchZoom policy runs every Friday at 3pm Set this policy to prompt for Zoom close to run at 2:55pm (at least several minutes prior to the PatchZoom policy execution)This increases the likelihood that applications that cannot be running during an update are indeed closed. Note: You need to copy the promptAppClose.ps1 code below and save it to your disk as promptAppClose.ps1 since you must upload this script into the Worklet in step 3. Step 1:Evaluation:# Force the Remediation code to run regardless of machine stateexit 1 Step 2:Remediation:# C

Is it possible to create a worklet to restart the Automox agent without throwing the agent service into a loop? The below code won’t stop exicuting a stop and start of the agent. Evaluation: Exit 1 Remediation: Restart-Service amagent

need help with creating a worklet to install a personal certificate store and be able to deploy thos to multiple machines. I came across this but need help on how to apply in automox and start testing  $certificatePath = "C:\Path\to\certificate.pfx"$certificatePassword = ConvertTo-SecureString -String "YourCertificatePassword" -Force -AsPlainText $certificate = Import-PfxCertificate -FilePath $certificatePath -Password $certificatePassword -CertStoreLocation Cert:\LocalMachine\My

Can an Automox worklet implement MS Recommended Block rules somehow (without relying on MS WDAC, Defender, Intune etc). 

It would be extremely helpful to be able to manage worklets in git and then have those from the main/master/prod branch be what’s active in Automox. Unfortunately no API exists to make that possible either. Anyone aware of possible solutions that would help? 

Hi, I have uploaded a file named “config” to the remediation code, and I want to copy it to the directory "/usr/local/bin"In the script I tried using :Copy-Item .\config -Destination “/usr/local/bin”but it didn’t work.Could somebody help me ? Thanks in advance !

Is there a worklet available for macOS to stop automatic software updates?

I need a script to upgrade mac version to 13.3

This worklet checks for Adobe Reader and installs it if not found. Evaluation code: #REQUIRES -Version 2.0 <# .SYNOPSIS This Test script checks to see if Acrobat Reader is installed .DESCRIPTION This script queries the installed files for 32 and 64bit software and returns a 0 if product is installed or 1 if not. .Notes File Name :Acrobat Reader_Install_Test.ps1 Author :Automox Prerequisite :PowerShell V2 over win7 and upper #> #Handle Exit Codes: trap { $host.ui.WriteErrorLine($_.Exception); exit 90 } function Adobe_Reader_Install_Test { # Application Name which is to be installation verified. $appName = 'Adobe Acrobat Reader' # Finding the Systen Directory (system32 Directory). $sysDir = [Environment]::SystemDirectory # Making the 32 bit and 64 bit path names blank. $32BIT = "" $64BIT = "" #Get 32 bit software Try {$32BIT=Get-ItemProperty 'HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\*

UPDATE: I just discovered Automox will always run Remediation when the policy is run manual - this is an extremely aggravating feature which makes testing evaluation code much more difficult.  My question to the Automox staff - doesn’t this do more damage than good, what is the actual purpose of this?  This makes testing policy very tedious, just like how running a policy manually will not display notifications the same as when run via schedule.  Something this impactful should be a warning on the worklet, not buried in documentation!  Please include something like the below as this causes such an unbelievable headache It appears the worklet evaluation block (Windows) either doesn’t work, or I’m doing something wrong…I’m building a BitLocker worklet and exit code 0 in the evaluation block will always run the remediation block.  According to the documentation, exit code 0 is meant to mark as compliant and exit code 1 is meant to trigger remediation, but clearly this is not the case.See

Hi. I have a CMD script file. How to deploy it using policy? I think I need a command line. 

CVE-2023-29336 is an important and actively exploited zero-day vulnerability in Win32k that scores a CVSS 7.8, from Patch Tuesday on May 9, 2023. We’ve written a script to help administrators automatically find the vulnerability and ensure that the May 2023 updates from Microsoft have been applied prior to remediation. If the device meets that criteria, then we’ll remediate it. All that’s left for the administrators is to reboot the device after the script has run successfully or grab a worklet to reboot the endpoints you ran the script on at scale.If you’re an Automox customer, or on a free trial, grab the script directly from the Worklet Catalog.  IMPORTANT: If you plan to use the Worklet or script provided, we strongly recommend testing a subset of impacted devices and following any required change control processes prior to applying the script at scale in your organization.  Remember - for the scripts to take effect, you’ll need to reboot all of the endpoints where remediation was

I saw that this was supported by worklets in a cyber essentials Automox PDF, however, I can’t seem to find the worklet that it is describing.Does this already exist?

Is there any way to change the remote control consent option? I’m wondering if we can remote the users’ computer without consent approval.  

I found this useful to create a csv file of pending patches. Remember to change the API key, the org ID and the group ID with yours. Also, the limit=500 can be adjusted to however many server names you want to return. This is run on a machine, not a worklet. # Define your API Key$apiKey = 'yourapikey'# Define headers with your API Key$headers = @{ "Authorization" = "Bearer $apiKey" }# Define the URL for the pre-patch report API endpoint$url = 'https://console.automox.com/api/reports/prepatch?o=yourshere&groupId=yourshere&limit=500&offset=0'# Use Invoke-WebRequest to call the API$response = Invoke-WebRequest -Method Get -Uri $url -Headers $headers# Convert the response from JSON to a PowerShell object$data = $response.Content | ConvertFrom-Json# Initialize an empty array to store the results$results = @()# Loop through each device in the responseforeach ($device in $data.prepatch.devices) {    # Loop through each patch for this device    foreach ($patch in $device.patches) {

Does anybody know a way to limit Adobe updates to not go past a specific one? We have on-prem software which is incompatible with Adobe Acrobat and Reader past a specific patch. 

Is there a powershell script that is already been established where i can install autmox and have it run with the our Key and assign it to a special group that is already been created. 

This 10 minute course overviews how to execute a Worklet for uninstalling software on Windows devices using best practices and critical concepts for Worklet troubleshooting! It’s a great resource if you’re new to using Worklets! The course features the Uninstall Specific App by Name worklet which is a worklet our customers commonly use.  

Sorry if this is a really basic question, but I can’t see how to do this.I can pull up information for a single group and this has the server_count property, but not a list of members.And when I do it the other way round and pull a list of devices I can see the policies assigned to that device but not group memberships. I must be missing something somewhere. Any help gratefully received.

Hi. I am trying to run a worklet against some laptops that will remove a particular piece of software from them. In the Automox console, the laptops are showing as connected with a policy status of ‘compliant’. The device status is shown as ‘refreshing’.I have run the policy several times now and it hasn’t removed the software (my colleague has verified it works on a similar laptop they’re testing with). My questions are:If the laptops are connected to the Automox server, how long will it take to apply the policy it has been assigned to? If a device is shown as ‘refreshing’, will this cause the policy not to work?We will be rolling out this policy company-wide and it would be ideal to have an idea of timeframe of how long it will take for the policy to take affect. I don’t want users’ laptops unexpectantly restarting in the middle of the day for example.TIA

I am trying to download and install DBeaver. Its downloading to the correct place but it will not install.  Below is the code that i am trying to use. Start-BitsTransfer -Source "https://dbeaver.com/files/dbeaver-ee-latest-x86_64-setup.exe" -Destination "C:\temp\dbeaver-ee-latest-x86_64-setup.exe"Start-Process "c:\temp\dbeaver-ee-latest-x86_64-setup.exe" -ArgumentList '/S','/v','/qn' -passthru Any help would be appreciated Thanks

Good morning, We direly need your assistance, and this is really time sensitive as it deals with our Antivirus software (Crowd Strike).  In a nutshell, we have Crowd Strike installed on our environment, but it is managed by parent corporate Sec Ops team.  Just recently they reported not seeing 484 Hosts on the console, and needed us to remediate the issue.  As per their team, to remediate we would need a special key from the registry per host, and provide those keys to Sec Ops team.  They will then provide a token key to uninstall Crowd Strike.  Then installation would be via Automox, which we have already scripted and available. Our issue is scripting an API that could pull registry entries from all of our hosts along with the hostname, and putting them on a table format.  If there is any help you can provide in creating the API script it would be helpful.