Find & Share Worklets

Hi Everyone, A large request from my team was the ability to remote wipe machines. As we all know our remote work force is getting larger and sometimes it is hard to get an asset back. Below is a Worklet I created that will wipe a machine with no user interaction. Be CAREFUL and do not run this on your machine. Once it starts it will take a few seconds to run. I recommend creating a group called YourCompanyName - Tech Worklets or Remote Wipe. Then assign machines to the policy that you want to remotely wipe. I would then recommend removing them after a few minutes. $namespaceName = “root\cimv2\mdm\dmmap” $className = “MDM_RemoteWipe” $methodName = “doWipeMethod” $session = New-CimSession $params = New-Object Microsoft.Management.Infrastructure.CimMethodParametersCollection $param = [Microsoft.Management.Infrastructure.CimMethodParameter]::Create(“param”, “”, “String”, “In”) $params.Add($param) $instance = Get-CimInstance -Namespace $namespaceName -ClassName $className -Filter “P

As part of adding security and protect the data on a laptop for a remote exit employee, we would like to force the device to boot with the bitlocker recovery key. The below powershell script works when run locally on the laptop through PowerShell IDE and run as Admin: $hostname = hostnamemanage-bde -forcerecovery C: -computername $hostname The issue is when we try to push the same code with Automox, it bypasses the recovery key and TPM pin and boots to the login screen instead of asking for the bitlocker recovery keyBelow is the code on Automox: Evaluation Code:Exit 1************************Remediation Code:$hostname = hostnamemanage-bde -forcerecovery C: -computername $hostnameExit 0************************I think that it’s an issue with elevating user privillages since the local code is run on PowerShell as Admin and Automox is running the code with the current users rights which are Normal User, but again, I could be wrong. Your help is appreciated. 

USE CAUTION WHEN RUNNING THE BELOW WORKLET! USE GROUPS & TAGS TO TRIGGER THE WORKLET. Please feel free to use the below worklet as needed. The below will reset the devices’ TPM and will force the user to enter the BitLocker Recovery Key after a programmatic forced restart.I found this extremly usefull to “disable” a Windows device, that supports BitLocker, if not returned after they leave the company by removing device access at startup. This will reduce the risk of data leaks. Obviously, needless to say that if the user has the recovery key, the worklet is pointless. Evaluation Code:Exit 1 Remediation Code:$scriptBlock = {$hostname = hostnamemanage-bde -forcerecovery C: -computername $hostname}& "$env:SystemRoot\sysnative\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -NonInteractive -Command $scriptBlockecho " "echo "Internal IT - Forced TPM reset"Restart-Computer -ForceExit 0 SCHEDULE:If a device misses a configured patch time,

Hi all, I’m fairly new to Automox, and also not a powershell wiz, but I’ve spent some time searching the existing community threads and haven’t seen quite what I’m looking for.  Basically, we’ve got some existing software, deployed through an MSI, and i’m looking for ways to use Automox to deploy 1) upgrades and 2) repairs. To upgrade the software, we need to stop it from running.  I have a one-line command from the software company that stops all their services, then I can run the MSI to install the latest version.  If I do this as a Required Software policy, can I add a command before running the installer?  Or do i need to do this through a worklet (the scripts in the worklet catalog to install an MSI seem quite involved)?   similar question:  I want to run a REPAIR on an existing installed application.  When I tried using a Required Software policy but changed the /i arg to /fp, the script didn’t run because it detected that the application was already on the current version so no

Can you su to different user to run a worklet instead of root user in linux?  

Hi all,I would like to ask if there are any ways to extract the historical data to create the line graph as shown where the patches applied are shown in a monthly basis This graph is under Reports > Overview Report Thanks,bigJohn

Hi, The Device Status are Agent Disconnected and Device Not Ready, trying to look for a document to solve both, where can I find it? Or any suggestion to fix?ThanksMv

I’m trying to find a way to change the hosts file on Windows PC’s using automox. Would anyone know of a way to do this? Thank you, MIKE

 Hi Everyone. I’m trying to execute a worklet  through the APPI but Im only getting a bad request error. Any idea what could be wrong ? $polid = MyPolicyWorkletID$headers = @{ "Authorization" = "Bearer $apiKey" }$url = "https://console.automox.com/api/policies/$polid/action?o=MyOrgID"$body = @"  {      "action": "remediateServer"      "serverId": "MyServerID"  }"@Invoke-WebRequest -Method POST -Uri $url -Headers $headers -Body $body Thanks for any help !!Diego  

i’m just getting my feet wet with Automox, and i see a lot of recent enhancements have been made with regard to Tagging, but i’m wondering if there’s a way to auto-assign tags in bulk based on device info?  My use case would be to automatically tag devices based on their AD OU.  If i’ve got a device in the “San Francisco Office” OU in AD, that shows in the Device Info in Automox, so is there some script or worklet i could use to automatically tag all devices reflecting that device info?  thanks!

As the title says, I’m trying to do some troubleshooting through SentinelOne remote shell for some Automox agents that stopped reporting to the console of Automox but are still active on SentinelOne.  I’m able to open a remote shell to the endpoints in question through SentinelOne but I’ve had no luck trying to:deregister the agent set a new key restarting the agent So I’ve come here to ask for help:how would you try and either completely uninstall Automox and then reinstallingorderegistering and setting.a new key to hopefully restore the connectivity of the agentusing a SentinelOne remote shell Thank you everyone!

Has or does anyone have a worklet to update .net core versions? I don’t really want to reinvent the wheel here if I don’t have too. Thought I would ask here before I took a deep dive into it myself. 

How do I search for a specific KB covered?KB5021653 

If I turn on “Install Optional and Recommended Windows Updates” in policies, will workstations automatically install Windows 11 or does that still have to be clicked manually by the user?I’d like Automox to push all the available Windows 10 updates but we aren’t ready for 11 yet. I’m uncertain if windows update would push 11 along with those so I’m just being cautious.

I have a policy that patches windows and it runs for several groups.Initially, it will run for the test group on 2nd Tuesday at 2300. Then another policy will run again for Group 1 on the 2nd Wednesday. (This gives us time to test patches and exclude any that prove problematic)However, sometimes the 2nd Wednesday will come before the 2nd Tuesday of the month.So, how do I sent the policy to run as 2nd Tuesday + 1 so that the policy does not run ahead of patch Tuesday?

Wondering how others are handling driver updates that are being published by Microsoft but not pushed through Automox.We are not using an on-prem WSUS server, we are going direct to MS for updates, but Automox is managing the process.We recently discovered that we are getting Driver updates directly from MS still, and it is causing some issues in our userbase.Thanks.

I have built a patch only policy to patch everything Office. I am targeting a specific machine with Office 2013 installed.The policy runs successfully but for some reason, Office does not get updated to the latest version which is currently 15.0.5501.1000. When I check Word and Excel they are both saying versions 15.0.5449.100 and 15.0.5485.100 respectively. My understanding is that Automox should be updating these to the latest version which was released earlier this month.Does anyone know why Word and Excel would not be updating to 15.0.5501.1000? (There is no information in the logs) The KB article on the Microsoft website is KB5002082 and if I add this to the filter and “preview packages that will be installed” nothing is returned, so I guess that answers that question but then why is Automox not providing the most recent updates for MS Office 2013 which is still in support?

I have manually ran a policy with targeted device. I get the green notifier to say “Success” in the bottom left hand corner.When I check the activity log, there is nothing listed for the policy to confirm it has ran.The machine I am running the policy for is in a group and this group is assigned to the policy.If I click “Preview Impacted Devices” the device is listed.Does anyone know if a policy can be ran more than once against a machine within a certain period? All the policy is doing is patching MS Office and it has ran successfully in the past. The machine I am running it on has an out of date version of Office so I would expect to at least see some form of activity in the log.Thanks

Hello,I was trying to write a worklet,Downloading a file from a URL and save it to a folder.the problem is that I get error saving the file on the mac.What should I write in the worklet to download the file from URL and save it to local folder ? TNX   Ronen

This worklet will run Dell Command on a users machine to update to latest drivers, it also does firmware updates if found. This is possibly a two part worklet, depending on the version of Dell Command installed. If you have the normal executable application version you can run the Run Update script below. However if running the UWP version for Win10, you need to uninstall that and install the non UWP version using the uninstall/reinstall script below (Make sure to include all needed files like the DCU executable, MUP and Package files. Those are currently available at: https://www.dell.com/support/article/en-us/sln311129/dell-command-update?lang=en Dell Command Uninstall/Reinstall: $dellc = Get-WmiObject -Class Win32_Product | Where-Object {$_.Name -match "Dell Command" } $dellc.Uninstall() Start-Process -FilePath "DCU_Setup_3_1_3.exe" -ArgumentList "/S /v/qn" The run update command itself is: Start-Process -FilePath "C:\Program Files (x86)\Dell\CommandUpdate\dcu-cli.exe" -ArgumentLi

I’m trying to standardize hostnames on all of our PCs. We aren’t using AD, just local users. We have a standard for our hostnames to be “company-lastname-pc”… from what I understand WIN local users don’t have the concept of a last name. I’m wondering if there is anyway to pass in some sort of meta data from automox to the worklet so I can automate this. I would obviously need to tag the user in automox with their last name somehow… just wondering if this is doable.

Hello,Can someone point me in the direction of an article or guide showing all the various PowerBI queries that can be performed, please?I’ve connected my report to the organisation, which brings back effectively one query with linked tables attached, i.e. detail, policy, etc. but what I’m really looking for is a list of pending software updates, and then those that would require a reboot.Would someone be able to advise or point me in the right direction, please?Many thanks,Dayna

An easy worklet to create a desktop shortcut for everyone to a program. I have to use this to create a special Icon shortcut on desktops to our ERP software.  CODE: $SourceFilePath = '{INSERT Direct Path Here - without brackets}'$ShortcutPath = "C:\users\public\desktop\XXXXX.lnk"$WScriptObj = New-Object -ComObject ("WScript.Shell")$shortcut = $WscriptObj.CreateShortcut($ShortcutPath)$Shortcut.WorkingDirectory = "{If Needed Insert Working Directory Here - without brackets}"$shortcut.TargetPath = $SourceFilePath$Shortcut.Arguments = "{IF Needed Insert Arguments for filepath - without brackets}"$shortcut.IconLocation="{IF needed for custom Icon without brackets full path to icon}"$shortcut.Save() EXAMPLE:$SourceFilePath = '\\xxx\xxx\xxx\xxx\xx\xxxxxx.exe'$ShortcutPath = "C:\users\public\desktop\xxx.lnk"$WScriptObj = New-Object -ComObject ("WScript.Shell")$shortcut = $WscriptObj.CreateShortcut($ShortcutPath)$Shortcut.WorkingDirectory = "\\xxx\xx\xx\xxx\xxx"$shortcut.TargetPath = $SourceFil

When software is updated, it often results in unwanted icons being added to the desktop. Is there any way to avoid this?

With work from home and troubleshooting of remote networks the team I am on constantly are getting reports of things “being slow”.  Many times the issue comes down to poor WI-FI connection or an internet issues on the end user side.  Who of us has not heard “But Netflix works just fine”….😣I am using the basic Health Worklet but wanted to create a new worklet that provides more information.  In came SpeedTest.net CLI using the following evaluation code and remediation code I am able to get live speed test for end users.  Download the zip file - Extract and upload the .exe into the worklet. Note: This is windows centricEvaluation Code:exit 1Remediation Code:&'.\speedtest.exe' --progress=no --accept-license | Where-Object {$_.trim() -ne "" } --progress= no live update screen just final results--accept-license = seems to be an undocumented flag to accept the license on initial run of exeThe $.trim() -ne””  is just to remove blank lines in the output. Please provide some feedback.