Find & Share Worklets

Hi all, Here is a method to install Microsoft Office 365 via a Worklet. Basically it checks whether Word, Excel, PowerPoint and Outlook are installed, if not, it then downloads the pkg for MS Office which I got from https://macadmins.software/ and then installs from the /tmp/ directory, then removes the installer. You may want to change the download link if it expires or doesn’t work. Evaluation: #!/bin/bash #Checks whether these .apps are installed in the /Applications directory, if not, Exit 1 code and goes to next step if [[ -d /Applications/Microsoft\ Word.app && -d /Applications/Microsoft\ Excel.app && -d /Applications/Microsoft\ PowerPoint.app && -d /Applications/Microsoft\ Outlook.app ]]; then echo "Microsoft Office is installed." exit 0 else echo "Microsoft Office is not installed." exit 1 fi Remediation: #!/bin/bash echo -e "Downloading Microsoft Office..." #Downloads MS Office pkg to /tmp/ curl -L -o "/tmp/mspkg.pk

Hello,Can anyone help me to understand why…Start-Process -FilePath "dotnet-hosting-6.0.36-win.exe" -ArgumentList "/install /quiet /norestart" -Wait...does absolutely nothing when Automox runs it, but is fine to use manually at a PowerShell prompt?  I just don’t get it.Cheers,Mark

I’m trying to standardize hostnames on all of our PCs. We aren’t using AD, just local users. We have a standard for our hostnames to be “company-lastname-pc”… from what I understand WIN local users don’t have the concept of a last name. I’m wondering if there is anyway to pass in some sort of meta data from automox to the worklet so I can automate this. I would obviously need to tag the user in automox with their last name somehow… just wondering if this is doable.

Hello,We’re encountering a problem where we are running a worklet to import a Group Policy object on a domain controller - the Automox worklet runs as System so has no domain permissions to be able to interact with Group Policy.  Has anyone found a way to run a set of PowerShell commands within a worklet as a domain user with elevated privileges, eg. Domain Admin?Cheers,Mark.

An easy worklet to create a desktop shortcut for everyone to a program. I have to use this to create a special Icon shortcut on desktops to our ERP software.  CODE: $SourceFilePath = '{INSERT Direct Path Here - without brackets}'$ShortcutPath = "C:\users\public\desktop\XXXXX.lnk"$WScriptObj = New-Object -ComObject ("WScript.Shell")$shortcut = $WscriptObj.CreateShortcut($ShortcutPath)$Shortcut.WorkingDirectory = "{If Needed Insert Working Directory Here - without brackets}"$shortcut.TargetPath = $SourceFilePath$Shortcut.Arguments = "{IF Needed Insert Arguments for filepath - without brackets}"$shortcut.IconLocation="{IF needed for custom Icon without brackets full path to icon}"$shortcut.Save() EXAMPLE:$SourceFilePath = '\\xxx\xxx\xxx\xxx\xx\xxxxxx.exe'$ShortcutPath = "C:\users\public\desktop\xxx.lnk"$WScriptObj = New-Object -ComObject ("WScript.Shell")$shortcut = $WscriptObj.CreateShortcut($ShortcutPath)$Shortcut.WorkingDirectory = "\\xxx\xx\xx\xxx\xxx"$shortcut.TargetPath = $SourceFil

Has anyone created a worklet to change the root password on Linux machines? Can Secrets be leveraged maybe to have this automated on a 90-120 days basis maybe? 

HelloWe are deploying an asset management tool called magma3 in our environment.With that, I needed a worklet that would install the agent on Linux machines.The agent is a .sh fileany worklet? Thank you very much

Happy Wednesday Community!New Year, new series  Each Wednesday, we’ll review the new Worklets that have been added to our Worklet Catalog in the console. These have been created by our team, so they are vetted and verified to work. Our team is churning out new Worklets like their lives depend on it, so we’ll highlight the new additions each week so you know what you have in your IT arsenal  There are three new Worklets to review this week. The first two shown above are made for Mac and ensure settings are enabled on your endpoints and the last Worklet initiates root SSL certificate updates on Linux. These are great, simple scripts to add to your policies that can give you peace of mind! What Worklets do you use from the Catalog? Let us know in the comments! ‘Til Next Time,Jessica Starkey | Technical Marketing Engineer

Hello, I want to start with how much I have enjoyed working with the patching portion of Automox, works amazingly well. I am no expert in Powershell so please forgive my ignorance if any of the feedback is not valid. Here are the difficulties and or suggestions I have found for Worklets. There are two windows to place code, can we have the option of just having one? I can’t understand the purpose of there being two. We need the ability to deploy the Worklets manually so that you can test the outcome or if you added a new PC and want to deploy software to it. If you could see the code execute line by line troubleshooting would be greatly enhanced. Currently I have to build a PS script outside of Automox in order to troubleshoot and then adopt it to fit the criteria of the Worklet interface. There should be a log feature that we could turn on for verification of the worklets behavior. Unless I am mistaken you can only work with one file per worklet. This greatly limits the ability to i

Howdy! Here is a worklet to detect and disable weak and vulnerable algorithms in the sshd service. These algorithms are usually kept enabled for compatibility reasons but they’re usually safe to disable if your users have updated systems. Here is a good write-up on known weak and vulnerable algorithms. Evaluation: #!/bin/bash sshd -T | grep "\(ciphers\|macs\|kexalgorithms\)" | grep "\(sha1\|rc4|arcfour|md5|blowfish|idea|3des|cast128|cbc\)" # return 0 if value exists; return non-zero if value does not exist [[ $? -eq 0 ]] && exit 1 exit 0 Remediation: #!/bin/bash # Add a definitive list of ciphers to the sshd config. This list was tested to work on a fresh install of Ubuntu 18.04 cat >> /etc/ssh/sshd_config <<EOL Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256 MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@ope

Time for Round 4! Check out the links and vote for your favorite below! As always, let us know any questions/etc. in the comments! Worklet to find and remove the JndiLookup.class from all jar files by @Snovak “Just a little something I whipped up after finding that the JndiLookup.class is not isolated to just the log4j jar files (ex. it’s inside of the MineCraft server jar)” -- Snovak Worklet: Enable Automatic Updates for Pre-downloading Patches by @habrnero “In an effort to reduce our required outage time for patching, I’ve created a worklet that sets a few registry keys on Windows systems to enable Windows Update to download (but not install) any newly relevant patches.” -- habrneroVote for your favorite below, and don’t forget to vote in Rounds 1-3!  

Hello! I have used this Automox approved worklet in the past but now in the Activity log it only outputs “1”  Computer is on 22H2 Windows 10 ProPowerShell 5 Eval<#.SYNOPSIS Enforce Bitlocker Encryption - Evaluation Script OS Support: Windows 8(Server 2012) and above Powershell: 4.0 and above Run Type: Evaluation or OnDemand.DESCRIPTION This Worklet is designed to grant an Admin the ability to encrypt physical drives on a client device using BitLocker. A TPM chip is required to perform the default actions of this worklet. If a non-TPM device is encountered, the Worklet will exit without making any changes, and a note will be added to the Activity Log. Usage: The Evaluation script uses only 1 variable that controls the scope of drives to be encrypted. This variable should be the same value as the Remediation script to ensure devices are targeted correctly. Values provided should be between quotes after the "=". Use only one value per variable. Multiple

Start-Transcript -Verbose -Path 'C:\temp\FileRetrieve.log'$FileToRetrieve='<Path To File>'$S3BucketName='<S3 Bucket Name>'$S3AccessKey='<AWS Access Key ID>'$S3SecretKey='<AWS Secret Key>'Install-PackageProvider -Name NuGet -MinimumVersion 2.8.5.201 -Force$m = 'AWSPowerShell'# If module is imported say that and do nothingif (Get-Module | Where-Object {$_.Name -eq $m}) {    write-host "Module $m is already imported."}else {    # If module is not imported, but available on disk then import    if (Get-Module -ListAvailable | Where-Object {$_.Name -eq $m}) {        Import-Module $m -Verbose    }    else {        # If module is not imported, not available on disk, but is in online gallery then install and import        if (Find-Module -Name $m | Where-Object {$_.Name -eq $m}) {            Install-Module -Name $m -Force -Verbose -Scope CurrentUser            Import-Module $m -Verbose        }        else {            # If the module is not imported, not available and n

Has anyone created a worklet to mitigate the HiveNightmare zero-day? I tried to create one but it didn’t work.

Hi, y’all! This week’s Insight Hub post is a quick tutorial from our own @Peter-Automox (although re-narrated by me). In just three short minutes, we’ll give you a quick overview of Worklets and how they function within the AX console.  You can find more information on worklets at the Automox Support KB, or you can download our Worklets 101 Guide. If you have any questions, let us know in the comments or email us at community@automox.com. 

Hi EveryoneI hope you're all doing well! I come to you today seeking some assistance with an issue I've been facing with my Lenovo G24e-20 monitor. Despite being advertised as a gaming monitor, it's not being recognized as such by the Automox software. I'm hoping to tap into the collective knowledge of this wonderful community to find a solution or workaround for enabling the gaming features on this monitor.Issue Details: Monitor Model: Lenovo G24e-20Problem Description: I recently acquired the Lenovo G24e-20 monitor, primarily for its gaming capabilities. However, when I tried to configure gaming settings using the Automox software, I noticed that it doesn't detect the monitor as a gaming monitors. This means that I'm unable to access specific gaming features, such as higher refresh rates, adaptive sync, and other optimizations that should be available on this monitor.If you have any other suggestions or ideas, please feel free to share them. I'm eager to get the most out of my gaming

Hi Folks, Has anyone did this before? We have a need to enforce the windows laptop of user to bitlocker recovery screen.We have tried few scripts however when the machine has customised laptop hostname or netbios name it keeps failing. Can someone help

Can you suggest any way to delete cashed credentials on a Macbook via Automox? Just to give context: We have an unreturned asset that we see user is online. We are trying to prevent user using it any further

This particular worklet looks for any system set to never run a full scan and changes it to run on Wednesdays. You could obviously alter it to look for a different condition and set it how you wish. For example… You could look for systems not set to do a full scan every day in the evaluation and change it to do so… Evaluation: if ($Preferences.RemediationScheduleDay -ne 0) Remediation: Set-MpPreference -RemediationScheduleDay 0 Or conversely, if you want Defender to never do a full scan… Evaluation: if ($Preferences.RemediationScheduleDay -ne 8) Remediation: Set-MpPreference -RemediationScheduleDay 8 The acceptable values for this parameter are: 0: Everyday 1: Sunday 2: Monday 3: Tuesday 4: Wednesday 5: Thursday 6: Friday 7: Saturday 8: Never Evaluation: # Determine if full Defender scans are set to never run $Preferences = Get-MpPreference if ($Preferences.RemediationScheduleDay -eq 8) { exit 1 } else { exit 0 } Remediation: # Set a full Defender scan to run on Wednesdays

 Here we go! Round 2 is off & running, and the polls work again. Check out the links and vote for your favorite below! As always, let us know any questions/etc. in the comments! Create scheduled task to run at user log-on as user him/herself -- as @jesumyip says in the description, this worklet will help to “...replicate the behaviour of GPOs that run in the user context.”Sentinel One Install - Linux -- a handy little worklet from @jesse for installing the SentinelOne agent on LinuxOk go vote! 

How do you generate a report of installed updates on app systems  for a certain period of time ( 1 month up to 1 year) for adding purpose 

Hi all, I’m fairly new to Automox, and also not a powershell wiz, but I’ve spent some time searching the existing community threads and haven’t seen quite what I’m looking for.  Basically, we’ve got some existing software, deployed through an MSI, and i’m looking for ways to use Automox to deploy 1) upgrades and 2) repairs. To upgrade the software, we need to stop it from running.  I have a one-line command from the software company that stops all their services, then I can run the MSI to install the latest version.  If I do this as a Required Software policy, can I add a command before running the installer?  Or do i need to do this through a worklet (the scripts in the worklet catalog to install an MSI seem quite involved)?   similar question:  I want to run a REPAIR on an existing installed application.  When I tried using a Required Software policy but changed the /i arg to /fp, the script didn’t run because it detected that the application was already on the current version so no

I need to push an updated Word letterhead template to all users because an attorney joined the firm, but the template already exists on all machines, The existing worklet Copy File from Payload checks to see if the file already exists and skips it if it does. I don’t code, can anyone help with a worklet that would copy the file to the directory I specify and overwrite it if it already exists?Thanks!

I need a script to uninstall automox agent  using GPO. 

Hello there, I am new to Automox and was wondering if anyone out there had any info or knowledge regarding deploying Viscosity VPN client via Automox. Not sure if this is the best place, but figured I’d give it a shot! I know am a bit vague here so if more information is needed, just let me know! Thanks in advance all!