Find & Share Worklets

Hi guys,  I want to use a worklet to install the SCCM client, how would be the evalution code?, when is possible that the machine already has the client installed but pointing to an old sccm server.This worklet is intended to be used most over remote machines that connect to system center over VPN.So the evaluation code should check if “C:\Windows\ccmcache” exist or not, and run the remediation code exist or not the folder.I already has the remediation code ready and tested, just need the evaluation code that allow both conditions,  exist or not the ccmcache folder. i know this code check if the folder exist, but not sure if also will run the remediation code if the folder not exist: if( Test-Path -Path "C:\Windows\ccmcache" ) {exit 1 }i Just need that worklet works exist or not the ccmcache folder Apprecciate any help.regards.

Does anyone know if you can leverage the Automox API to show the Policy Compliance for a device? We’d like the ability to report the system status policy (EX: Compliant / Non-Compliant) and show this on the desktop using bginfo. Thank you!

Hi All, I’ll start this with I’m a novice at writing these scripts, so it could be something obvious. I’ve got a bash script worklet mostly working to install the Tanium client to RHEL/CentOS servers, but am running into an issue when it needs to copy a file to a directory created after the install. It seemly does everything else properly when I run it, except copy the tanium-init.dat file. I confirmed it properly extracts it to /tmp from the tarball payload as well. I thought adding the pause may help in case it was trying to copy it before the directory was created, but that doesn’t seem to be the case. #!/bin/bash # Copies the tarball to /tmp scp TaniumClient-7.4.5.1225.tar.gz /tmp # Extracts the tarball to /tmp tar xvzf /tmp/TaniumClient-7.4.5.1225.tar.gz -C /tmp # Installs the Tanium client, outputs install log to /tmp sudo rpm -i /tmp/TaniumClient-7.4.5.1225-1.rhe7.x86_64.rpm > /tmp/taniumclient_install.log # Sets the Tanium Client Server info sudo /opt/Tanium/TaniumClient

Happy Wednesday everybody!  This week we’ve got five new/updated worklets posted to the catalog. Latest Updates to the Worklet CatalogNotably, the Log4Shell Worklets to detect and fix the vulnerability for Windows and Linux, respectively, have been added to our catalog. The detection code was originally written by Arctic Wolf and was so popular our team added it! If you aren’t sure if Log4j is in your code stack and haven’t taken steps to remediate yet, these will help you do so quickly! The Worklets to Enable Gatekeeper and Enable Firewall on Mac have also been updated, so if you are currently using these in your patching policies, take a look at the latest versions to see if you should include the updates. Lastly, we’ve got the worklet to Uninstall Apps and Pre-Installed Windows Bloatware from the Microsoft Store. This one can be super handy if you don’t want these default apps installed on your endpoints. What Worklets do you use from the Catalog? Let us know in the comments! ‘Til N

Happy Wednesday Community!New Year, new series  Each Wednesday, we’ll review the new Worklets that have been added to our Worklet Catalog in the console. These have been created by our team, so they are vetted and verified to work. Our team is churning out new Worklets like their lives depend on it, so we’ll highlight the new additions each week so you know what you have in your IT arsenal  There are three new Worklets to review this week. The first two shown above are made for Mac and ensure settings are enabled on your endpoints and the last Worklet initiates root SSL certificate updates on Linux. These are great, simple scripts to add to your policies that can give you peace of mind! What Worklets do you use from the Catalog? Let us know in the comments! ‘Til Next Time,Jessica Starkey | Technical Marketing Engineer

If anyone else is in the same boat of wanting to remove Microsoft System Center Configuration Manager agents from endpoints and servers this is the worklet we used to accomplish it. Evaluation script (cache folder only exists if client was configured): if( Test-Path -Path "C:\Windows\ccmcache" ) { exit 1 } Remediation script (using official Microsoft method): $process = Start-Process -FilePath "C:\Windows\ccmsetup\ccmsetup.exe" -ArgumentList '/uninstall' -PassThru Exit $process.ExitCode

Hi all I looking for Worklet that help me to force update to the latest version. Apple release a lot of updates and users not turn off Mac. I need Worklet that help me to update to 11.5.2 Someone here tried to do something like that?

Hello! New to Automox!Trying to install a tenable agent on linux ubuntu server.this is my script:1 #!/bin/bash2 dpkg -i NessusAgent-10.0.1-ubuntu1110_amd64.deb3 /sbin/service nessusagent start4 /opt/nessus_agent/sbin/nessuscli agent link --key=fcc9aea6f008dc2af0f5b83e5619d0b98da0a1c292d8f6658a65c8029a1f6151 --host=totalcareauto.com --port=8834 and this is the error 

If you’ve not yet read our announcement concerning Oracle SE Java 8 Support Shift and How It Impacts Automox Users, please see our blog post for further detail and context. Hello Automox Community! Given the recent support shift concerning Java SE 8 Updates, we’ve created an Automox Worklet template for Required Software Policy that you may use in extending the patch care continuum of Java SE 8. In addition, this template can be refactored as-needed for other such third-party software solutions. How To Use Overall process is documented on our blog post, but to summarize: Obtain the patch through a manual download of the “offline” install file or via Worklet. Upload the patch to the Automox Console in a new Required Software Policy and add the template to the policy. Make any adjustments necessary to scope, and be sure that the patch name and version are matching exactly to the patch upload name and version. Tips If you have an issue with the template, be sure to check that th

Just a little something I whipped up after finding that the JndiLookup.class is not isolated to just the log4j jar files (ex. it’s inside of the MineCraft server jar)Evaluation#!/bin/bash# # Author - Sam Novak# Notes - after discovering that the JndiLookup.class files can exists in other jar files# I decided the I better look at all of them. Fortunately, you can grep the class from a JAR## Save IFS so we can grep folders with spaces in the nameSAVEIFS=$IFSIFS=$(echo -en "\n\b")# Install mlocate to make the evaluation script more efficientif [ ! -f /usr/bin/locate ] && [ ! -f /bin/locate ]; then if [ -f /usr/bin/apt ]; then apt install mlocate -y &> /dev/null elif [ -f /usr/bin/yum ]; then yum install mlocate -y &> /dev/null elif [ -f /bin/yum ]; then yum install mlocate -y &> /dev/null fi updatedbfifor E in $(locate "*.jar"); do grep -i JndiLookup.class "$E" # only run if the class is present if [ $? -eq 0 ]; then

Hi,I am trying to run the following command with Powershell to remove a specific user from the Administrators group:Remove-LocalGroupMember -Group Administrators -Member chnlocaladminWhen I run this with elevated permissions (SYSTEM) in Powershell on the machine itself, it works perfectly fine. However, deploying it via a worklet in Automox does not work. My worklet:Evaluation Code:1. Exit 1Remediation Code:1. Remove-LocalGroupMember -Group Administrators -Member chnlocaladminWhen I run this manually, the local user is still part of the administrators groups. I gave it a few minutes to run and still nothing. Running the same command locally works fine. Any ideas what could be going wrong?

Hi all,I use Automox to deploy software to our endpoints and one of our departments heavily uses an application called Tableau. Tableau regularly releases patch updates every few days/weeks, and i’d like to be able to run a scheduled worklet to search for the latest version and upgrade the application.At the moment, when a new version is released, we are downloading the latest file and uploading it into automox to run the following basic command: Copy-Item $uploadfile -Destination $saveFilePath    Start-Sleep -s 20        ###### Installing Tableau, if any errors will be added in the amagent logs ######        Try {           Start-Process -FilePath $saveFilePath -ArgumentList '/quiet', '/norestart', 'ACCEPTEULA=1', 'REMOVEINSTALLEDAPP=1' -Wait -PassThru            Write-Output " ... $uploadfile Install Finished..."   I was looking on the Github in chocolatey for tableau and found the following as the base for their package: chocolatey-packages/update.ps1 at master · meek2100/chocolatey

Automox Worklets are a great resource to enable automation of various scriptable actions on Windows, macOS, and Linux devices. For a more comprehensive overview, you can check out our Insight Hub Article, “What’s a Worklet?”Today, we’ll be discussing the top community Worklets to help you get started or get inspired to create your own!Let’s take a look at five of our most popular community Worklets and what they do: Install BitLocker and Store Keys in Device Tag by JHagstromThis script gives you an easy way to manage any BitLocker keys for those who will want to install it through Automox, as an alternative to manually exporting keys or storing them via AD. Note: There are also some helpful tips in the replies should you move forward with setting up this Worklet! Copy a File to a Folder in User’s Profile by Tony W (Automox Employee)This Worklet was initially created for a customer that wanted to take a text file called “signin.slacktoken” with a Slack token in it and have it copied t

Hey folks, I’ve been working a worklet to enroll Windows 10 device in Autopilot using Graph API. Mandatory “it works when run manually” but when testing in NTAUTHORITY/SYSTEM context via psexec, it fails. Specifically, when trying to install modules due to network access being heavily restricted in this account. I could temporarily create a local administrator account, but I’m unsure as to how to run Automox-deployed worklets in another local user context. Any pointers on how to run Worklets in another (local) user’s context? Thanks!

What can I use a Worklet for?  What devices can Worklets run on? How does it work? Where do I start? What does Manual Worklet Execution do?  How do I Test a Worklet? How do I troubleshoot? How do I disable a Worklet? ConclusionWhat can I use a Worklet for? Worklets can automate any scriptable action on Windows, macOS, or Linux, so the possibilities are nearly endless. Worklets can be leveraged to remediate zero days or unpatched vulnerabilities, configure devices, remove unauthorized applications, roll back patches, and much more. What devices can Worklets run on?As we mentioned, Worklets can run on Windows, macOS, or Linux provided that they meet the baseline requirements for the Automox Agent to install. If you have older Windows OSes (e.g. Win7 or Server 2008 R2), make sure you have PowerShell 2.0 or later as well as .NET Framework 3.5 or later. Worklets run in PowerShell for Windows OS, and in Bash for macOS and Linux devices. If you’re running a Worklet on a 64-bit Windows machine

SOC2 Compliance certification is an important milestone for vendors operating in the cloud. Why? Well, it demonstrates that a vendor has proven that they handle customer data responsibly, which means customers trust that vendor more readily. Especially in the cloud, where data handling can seem distant and uncertain, certification can help a vendor build trust and confidence. SOC2 Compliance certification is awarded by an external auditor that gauges an organization’s adherence to the following five Trust Service Principles: Security Availability Processing Integrity Confidentiality Privacy There is no concrete set of criteria to receive certification; rather it is at the discretion of the auditor. As a result, achieving this goal really comes down to your team developing and executing best practices across the five principles listed above. Things to consider when developing best practices are the type of service being provided and industry standards. Does the type of service d

This Worklet will allow you to define a Windows 10 Feature version, and make it possible to install that Feature Update through Standard Automox Patching Policies. Please see the following Community post for additional details:    In mid 2019, Microsoft implemented a change to the way Windows 10 Feature Updates are managed with Windows Update. Once the May 2019 Cumulative update is installed (for all supported Windows 10 production channels), Feature Update deferrals were no longer honored, and the Windows update Agent became aware of the Installer split between the CBS (patches) and the Upgrade Engine (for Feature Updates) in the Unified Update Platform (UUP).Get started with Windows Update - Windows DeploymentImprov…     Setting the Target Release Version enables the ability to manage your preferred Win 10 Feature version.  NEED TO KNOW:    Your devices must be running 1803 or newer   Your OS must be a manageable SKU (Education, Enterprise, Professional, Business)   The version can

Example. I want a worklet to start the print spooler driver if it is stoppedSo the Evaluation Code check to see if the spooler is stopped. If no Exit 0, if yes Exit 1Script finds the spooler is stopped move on to remediation codeThe remediation code starts the spooler, then double checks if the spooler is actually started….uh oh, the service still isn’t running. If I specify exit 1 in the remediation code, the script times out.What do I use to specify in the remediation code that the worklet failed so it shows up in the “Needs attention” report?

This worklet installs Chrome on Windows. Evaluation code: #REQUIRES -Version 2.0 <# .SYNOPSIS This Test script checks to see if Chrome is installed .DESCRIPTION This script queries the installed files for 32 and 64bit software and returns a 0 if product is installed or 1 if not .Notes File Name :Chrome_Install_Test.ps1 Author :Automox Prerequisite :PowerShell V2 over win7 and upper #> #Handle Exit Codes: trap { $host.ui.WriteErrorLine($_.Exception); exit 90 } function Chrome_Install_Test { #Get 32 bit software $32BIT=Get-ItemProperty HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\* | Select-Object DisplayName | select-string 'Chrome' | out-string #check 64 bit $64BIT=Get-ItemProperty HKLM:\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\* | Select-Object DisplayName | select-string 'Chrome' | out-string if ($32BIT.Trim() -match "Displayname=Google Chrome" -Or $64BIT.Trim() -match "Displayname=Google

Mounts a network drive to a drive letter. Evaluation code: None Remediation code: #REQUIRES -Version 2.0 <# .SYNOPSIS This script allows an admin to mount a new network drive. .DESCRIPTION This script mounts a network drive on clients machines. Script will not execute propery if ran in administrator mode. The new drive will be persistant across reboots. This is an example script that has been tested to work on Win10 and Win7. This script may not work on all systems. Modify to fit your needs .NOTES File Name :NetworkDriveMount.ps1 Author :Automox Prerequisite :PowerShell V2 over win7 and upper #> #Handle Exit Codes: trap { $host.ui.WriteErrorLine($_.Exception); exit 90 } function NetworkDriveMount { #############Change the settings in this block####################### $Name="T" #What letter to mount the drive as. $PSProvider = "FileSystem" # optionally set to Registry to map to reg key $Path= "\\Readyshare\T_D

Here’s a simple worklet for turning off the firewall on your windows PCs. Evaluation: $firewallStatusDomain = (Get-NetFirewallProfile -Profile Domain).enabled $firewallStatusPublic = (Get-NetFirewallProfile -Profile Public).enabled $firewallStatusPrivate = (Get-NetFirewallProfile -Profile Private).enabled $fwCheck = 0 if ($firewallStatusDomain) {$fwCheck += 1} if ($firewallStatusPublic) {$fwCheck += 1} if ($firewallStatusPrivate) {$fwCheck += 1} if ($fwcheck -gt 0) {exit 1} else {exit 0} Remediation: Set-NetFirewallProfile -Profile Domain,Public,Private -Enabled False

I am trying to figure out how to run a scan to update list of devices because we added 7 new users and I want to make sure they have installed the Automox agent on their new devices.

Hey guys, New to Automox and enjoying the tool so far! Been looking through the existing worklets and found how easy it was to deploy Crowdstrike. Figured I might add that the same logic can be applied to the Tenable ‘Nessus Agent’ as well using only the ‘Remediation script’. You can use the following example parameters below: msiexec /i "NessusAgent-X.X.X-x64.msi" NESSUS_GROUPS="GroupName" NESSUS_SERVER="cloud.tenable.com:443" NESSUS_KEY=InsertKeyHere /qn Cheers!

I have a worklet that installs a software. But every time i push the worklet it re-installs each the time the schedule matches to push or i push it manually on all devices. My question is, is there way when it detects that’s installed it should not install and exit while if it doesn’t detect, it should install it.

Hey guys, It has come up a few times that modifying HKCU in a worklet doesn’t behave as expected. This is because the process is running under the SYSTEM account. So only the keys under the SYSTEM SID (S-1-5-18 ) will be modified if you point to HKCU:\. This evaluates and sets the desired value for every local user account tied to that device: Evaluation #Define desired registry settings $regPath = "Key Path Here" $regName = "Property/Value Name Here" $desiredValue = "I'm a String" #Get User details including SID from Get-LocalUser $users = Get-WmiObject -Class Win32_UserAccount -Filter "LocalAccount = 'True'" #Add HKEY_USERS to a PSDrive for easy access later New-PSDrive -PSProvider Registry -Name HKU -Root HKEY_USERS -ErrorAction SilentlyContinue | Out-Null $nonCompliant = @() #Loop through the list of users to check each for compliance foreach ($user in $users) { #Retrieve SIDs for each user $sid = $user.SID $name = $user.Name #Load Registries for users, if ntus