Skip to main content

Find & Share Worklets

You're looking at the Yellow Pages for Community Worklets... find Worklets and share your own here!

  • 635 Topics
  • 1,870 Replies
634 Topics
D
danursulineNovice
posted in Find & Share Worklets
Deployment of Google Remote Desktop

I threw this together for my org to get some easy remote support tools in place. Just wanted to post it here if someone else found it useful or could do a better job 😉 Evaluation Code: #REQUIRES -Version 2.0 <# .SYNOPSIS This Test script checks to see if Chrome is installed .DESCRIPTION This script queries the installed files for 32 and 64bit software and returns 0 if product is installed or 1 if not .Notes File Name :ChromeRemoteDesktop_Install_Test.ps1 Author :Automox Prerequisite :PowerShell V2 over win7 and upper #> #Handle Exit Codes: trap { $host.ui.WriteErrorLine($_.Exception); exit 90 } function ChromeRemoteDesktop_Install_Test { [array]$key = Get-UninstallRegistryKey -SoftwareName "Chrome Remote Desktop Host" $alreadyInstalled = $false $version = '80.0.3987.18' if ($key.Count -ne 0) { $key | ForEach-Object { if ($_.DisplayVersion -eq $version) { $alreadyInstalled = $true } } } $packageArgs = @{ pa

3788
D
D
dcadmin
posted in Find & Share Worklets
Using a worklet to remove Skype Appx

Attempting to check for the presence of the Microsoft Store App version of Skype. If present, run the Remediation (remove). The Worklet displays an Error status in the Activity Log, but I do not know why, nor how to check the logs/console. Using a modified version of the Skype install script - it does the same 32/64 bit checks, but remediates if Skype was found, rather than not found. At least I think. Eval: #REQUIRES -Version 2.0 <# .SYNOPSIS This Test script checks to see if Skype is installed .DESCRIPTION This script queries the installed files for 32 and 64bit software and returns a 1 if product is installed or 0 if not .Notes File Name :Skype_Uninstall_Test.ps1 Author : Prerequisite :PowerShell V2 over win7 and upper #> #Handle Exit Codes: trap { $host.ui.WriteErrorLine($_.Exception); exit 90 } function Skype_Uninstall_Test { <# .SYNOPSIS This function Checks a Skype installation. .DESCRIPTION After c

1331
A
Z
zglaserRookie
posted in Find & Share Worklets
Using worklet to deploy files

I am wondering if anyone has tried using Automox to deploy files to users. We have many remote users and every once in a while we need to deploy a batch file or RDP to their desktop. In the past it was reliant on them connecting with VPN to our site and downloading the appropriate file. I would like to remove the shared folder dependency and upload the file to Automox and deploy directly from there. What i was looking to do was something like Copy-Item -Path ".\file.rdp" -Destination "C:\Users\Public\Desktop" which does work when run in PowerShell from the folder containing the file. It doesn’t need a remediation script just the ability to execute and deploy/overwrite any existing files. Thanks in advance!

13808
JasonG-Automox
T
twadleNovice
posted in Find & Share Worklets
Worklet: Execute .exe file

I have tested variations of required software policy and worklets, but I can not get a .exe agent installer to execute. I have tested with powershell code and can run the .exe locally, but the same script will not work through automox. I have uploaded the file to the worklet, then put the remediation code as: .\filename.exe the worklet status will then display as a checkmark and the agent will not be installed. how can I troubleshoot this?

114020
Nic-Automox
AdamW-Automox
AdamW-AutomoxAutomox Employee
posted in Find & Share Worklets
Worklet: Disabling SMBv1 across Windows Devices

Server Message Block (SMB) is a network communication protocol used share access to files, printers, etc across devices in a network. SMBv1 was first designed and used 30 years ago and in no longer adequate in providing security in today’s modern network infrastructure, where the complexity is only rivaled by that of the malicious code looking to exploit it. Frankly, using, or having SMB1 enabled is unacceptable in today’s world as you lose key protections offered by later SMB protocol versions Pre-authentication Integrity Secure Dialect Negotiation Encryption Insecure guest auth blocking, Protects against MiTM attacks. Better message signing Additionally, if your clients use SMB1, then a man-in-the-middle can tell your client to ignore all the above . All they need to do is block SMB2+ on themselves and answer to your server’s name or IP Automox recommends that you disable SMB1 across all of your Windows devices. Below is the Worklet code needed to evaluate against if SMB1 is enab

1160
AdamW-Automox
JasonG-Automox
JasonG-AutomoxNovice
posted in Find & Share Worklets
Worklet: Automatic OS Upgrade to Windows 10 2004

Note: the new version of the Windows 10 upgrade code is now here: Worklet: Automox OS Upgrade to Latest Windows10 OS version Worklets The following Worklet will ensure all of your devices are always on the most current release of Windows 10. Since the current version is 2004, that is the version this Worklet will upgrade you. This Worklet supports multiple languages: DISCLAIMER: THIS WILL AUTOMATICALLY REBOOT THE DEVICE WHEN THE UPGRADE IS COMPLETE Evaluation: $iso = "C:\programdata\amagent\Windows1909OSUpgrade.iso" if ((Test-Path $iso) -eq $true) {Remove-Item $iso } $osversion = (Get-Item "HKLM:SOFTWARE\Microsoft\Wi… It’s a general purpose version that will always take you to the latest version of Windows 10.

30718
Nic-Automox
MinnesotaJoe
MinnesotaJoeNovice
posted in Find & Share Worklets
Issue with a worklet

I am working on a worklet to report back in the Activity log and then take after if the firewall is enabled on some CentOS boxes. But for some reason I cannot get the echos to appear in the activity log. Below is what I have. #!/bin/bash if [[ `firewall-cmd --state` = running ]] then firewall_state=active else firewall_state=inactive fi echo "Firewall State: $firewall_state" 1>&2 if [[ `systemctl is-enabled firewalld` = enabled ]] then firewall_status=enabled elif [[ `systemctl is-enabled firewalld` = masked ]] then firewall_status=masked elif [[ `systemctl is-enabled firewalld` = disabled ]] then firewall_status=disabled else firewall_status=unknown fi echo "Firewall Status: $firewall_status" 1>&2 if [ "$firewall_state" = "active" ] || [ "firewall_status" = "enabled" ] then exit 1 else exit 0

6111
Nic-Automox
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Find & Share Worklets
Worklet: open website on end user's computer

I wrote this worklet at the request of one of our customers. They want to pop open a browser window to a survey site every morning for their users. To edit this for your use case, all you need to do is replace the URL in the $command variable, and to make sure that Powershell is allowed to run scripts on the endpoint as a user. This is because it’s making use of the scheduled task feature to run the worklet as the logged in user instead of System. To do that, you can run this command (as admin) on the endpoint: `Set-ExecutionPolicy RemoteSigned’ Evaluation code: Exit 1 Remediation code: $time = (Get-Date).AddSeconds(5) $triggerAt = New-ScheduledTaskTrigger -At $time -Once $currentusr = (Get-WmiObject -class win32_process -ComputerName 'localhost' | Where-Object name -Match explorer).getowner().user $command = "start https://www.google.com" New-Item -Path "c:\ProgramData\Amagent" -Name "message.ps1" -ItemType "file" -Value $command $action = New-ScheduledTaskAction -Execute Powe

650
Nic-Automox
Ariel-Automox
Ariel-AutomoxNovice
posted in Find & Share Worklets
Enhanced worklet ideas! Tell us yours!

What would improve your experience with worklets in Automox? It can be worklets you’d like created, ways of making them easier to work with, how you view the results in the console or …??

182
Nic-Automox
T
taranbir.singhNovice
posted in Find & Share Worklets
is there Worklet to uninstall MS office from Windows??

i want to uninstall MS office 2016 using Automox.

18814
B
E
ews
posted in Find & Share Worklets
Worklet: Install Powershell 5.1 on Windows 7 via Chocolatey

Noticed that Windows 7 devices (with the extended support update) weren’t showing software inventory in Automox. After working with Automox support, they discovered that Windows 7 devices need Powershell 5 (supposedly they’ll have a fix for Windows 7 devices soon). I attempted to use the Microsoft provided powershell script to install Windows Management Framework 5.1 (KB3191566) (which installs powershell 5 on Windows 7), but couldn’t get it to run consistently. Tried installing chocolatey and then running ‘choco install powershell’ and it worked consistently. So that’s what this script does: installs chocolatey offline and then runs ‘choco install powershell’ on Windows 7 machines. It isn’t pretty, but it works. Would appreciate someone with actual Powershell experience/skills to clean up. Evaluation [string]$ThisPackagePSHVersion = '5.1.14409.1005' if ($PSVersionTable -and ($PSVersionTable.PSVersion -ge [Version]$ThisPackagePSHVersion)) { Write-Warning "PowerShell version, $($PS

3971
E
L
L4d1kNovice
posted in Find & Share Worklets
Splashtop Streamer MAC install

I am trying to push the installation using the instructions found on the splashtop help page: Splashtop Business - Support Command-line parameters to silently install your deployable Splashtop Streamer Note: Deployable Streamer is a feature available only to Splashtop Business Access and Splashtop Remote Support users. Download your deployable Streamer by logging into my.splashtop.com and clickin... should be simple: two files: deploy_splashtop_streamer.sh Splashtop_Streamer.dmg and execute command: sudo ./deploy_splashtop_streamer.sh -i Splashtop_Streamer.dmg -d REG-CODE -w 0 -s 0 -v 0 Initially I was receiving errors. changed it to: sh ./deploy_splashtop_streamer.sh -i Splashtop_Streamer.dmg -d REG-CODE -w 0 -s 0 -v 0 using sh to execute the command fixed it. Just in case someone else needs help to deploy it.

74816
Nic-Automox
AdamW-Automox
AdamW-AutomoxAutomox Employee
posted in Find & Share Worklets
Worklet: Ensuring Firefox is installed on Mac devices

This worklet will evaluate Mac devices to ensure the latest version of Firefox is installed. If the worklet finds the Firefox applications is not installed, the remediation code will install it on the device. Evaluation: #!/bin/bash #example script for installing Firefox on Mac devices #evaluate the device to see if Firefox is currently installed. if [ -d "/Applications/firefox.app" ]; then exit 0 else exit 1 fi Remediation: #!/bin/bash #example script for installing Firefox on Mac devices #create a temporary directory to download Firefox install file set -e tempfile=$(mktemp) #download the latest version of Firefox to the temp file echo "Downloading Firefox..." curl -L "https://download.mozilla.org/?product=firefox-latest&os=osx&lang=en-US" -o "$tempfile" echo "Installing Firefox..." #mount the firefox dmg file to a volume hdiutil attach /tmp/Firefox.dmg #copy the firefox app to the devices applications cp -R /Volumes/Firefox/Firefox.app/ /Applicatio

38923
Nic-Automox
AdamW-Automox
AdamW-AutomoxAutomox Employee
posted in Find & Share Worklets
Worklet: Automatic OS Upgrade to Windows 10 1903

Big shoutout to @aescolastico and @Gen123 for contributing to my previous 1903 OS Upgrade Worklet that made this new automatic 1903 feature update possible! Automox has the functionality to upgrade Windows OS versions natively through any patch policy. Due to some recent changes made by Microsoft, Automox is unable to discover the Windows 10 version 1903 OS upgrade advertised through Windows Update. Automox engineering is working directly with Microsoft to rectify this issue and expect to support this upgrade natively soon. It is a one-click automatic upgrade without needing to pre-deploy the 1903 .iso image to your devices. This Worklet will automatically build out the download link for 1903 based on your OS’s architecture, download the .iso image to you local system, mount the .iso to a disk drive, and then automatically run the download setup all silently without any user interaction. The Evaluation and Remediation code for the Worklet is as follows: Evaluation: $iso = "C:\programda

26711
S
T
TimL-AutomoxAutomox Employee
posted in Find & Share Worklets
Worklet: Suppress macOS Catalina Upgrade Notifications

macOS Catalina has arrived and as you may know, Apple sends upgrade notifications to all macOS devices soon after release. While Automox will be compatible with macOS Catalina shortly after it’s public release, you may not be. Apple installs this upgrade notifier via Apple Software Update. If you are using an internal Software Update Server, you can remove the update macOSInstallerNotification_GM and ‘macOS Catalina’ from scope, if not you can tell your macOS devices to ignore this update. If you’re reading this too late and the update has already installed, this script will still remove the notifier bundle. Check script: #!/bin/bash set -e ############################################################################ # suppress_macOS_upgrade_notifications_check # # exit 0 = upgrade notifier is not installed AND is not pending installation # exit 1 = upgrade notifier is installed OR pending installation ############################################################################ #

1012
Nic-Automox
AdamW-Automox
AdamW-AutomoxAutomox Employee
posted in Find & Share Worklets
Worklet: Windows 10 Hotfix - Patches a bug that kills internet connections on Windows 10 devices

Microsoft has released an update for a bug which disrupted Internet connections on certain Windows 10 devices. This bug prevents many Microsoft products, such as Office365, Internet Explorer/Edge, and Outlook from being able to communicate out to the internet when using a VPN. Coming at the absolute wrong time for remote users to lose connectivity to enterprise applications, Microsoft has reacted quickly with this patch. You can find more information about this bug by clicking here. The patch is currently only available as an out-of-band update on the Microsoft Update Catalog and not within Windows Update itself. With that said, this will not be supported by traditional patching methods. I have created a Worklet that will check to see if the hotfix is installed for all of your Windows devices. If the hotfix is not installed, it will download and install it. This will ensure all of your Windows devices have this patch applied no matter what OS version, or architecture your device is ru

1061
T
jermicide
jermicideNovice
posted in Find & Share Worklets
WORKLET :: Evaluate and install multiple apps using one worklet

as i am learning this platform, i have a few items in my environment to fix. today, i wanna knock out getting CylancePROTECT installed globally and rollout CylanceOPTICS. i have looked at the required app policy (in fact, i am using this to push a few other apps). i think this would work for most required apps. three small items prove challenging for me: i would like to install multiple apps under one policy (prolly just over complicating things??). this would be a nifty concept for PC Imaging or Day 1 Patching kinda workflows. i am not sure i understand how to best leverage the version field. in my small mind, if i insert a version number in the required app versioning field, the policy would run if the version number of the installed app is lower than the defined version number - OR if the application is not installed, at all. what if i i want to install an app ONLY if it is not present, could i set this value to 0.001? would the value of 0.001 fundamentally function as an “i

3264
RichardM-Automox
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Find & Share Worklets
Worklet: Turn off SMBv3 compression to remediate CVE-2020-0796

There’s a buffer overflow vulnerability in SMBv3. Currently no patch exists, so Microsoft recommends turning off SMBv3 compression on your Windows 2019 servers. There’s not yet a known exploit in the wild for this vulnerability. The following code will turn off compression on Windows Server 2019. Evaluation code: Exit 1 Remediation code: Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" DisableCompression -Type DWORD -Value 1 -Force This will protect servers from being exploited, but does not protect Windows 10 SMBv3 clients. To stop any Windows 10 clients in your environment being exploited, Microsoft recommends blocking port 445 on your external firewalls. However, if an attacker has already infiltrated your network then they’ll still be able to exploit Windows 10 clients if they can trick a user into connecting to an SMBv3 share. References: Ars Technica Windows has a new wormable vulnerability, and there’s n

481
Nic-Automox
J
jesumyipPower User
posted in Find & Share Worklets
Worklet: Place Shortcut on Current User's Desktop

Hi there. I would like to deploy icons on the current user’s desktop. This is currently being done using group policy as part of the user’s logon. Is there a way to achieve this using Worklets? Is there an evaluation script I can run to figureout the currently logged on user? Then a remediation script to run that will create the icons on the current logged on user’s desktop?

4035
Nic-Automox
jermicide
jermicideNovice
posted in Find & Share Worklets
WORKLET NOTIFICATION :: Send an email alert when a worklet is evaluated

While putting together a few Automox Worklets, I found I wanted a quick way to tell whether a worklet had been processed by a remote agent (vs. combing through logs 😇). I cobbled together a hasty email snippet to drop into the Evaluation Code window (this prolly should be placed before any real evaluation code block to ensure exit codes don’t overstep this snippet). 🙈🙉🙊 Example email: Evaluation code: <# Grab some system variables to pump into the email alert (as an example). #> $Hostname = $env:COMPUTERNAME.ToUpper() $HostDomain = $env:USERDOMAIN.ToUpper() $HostWindowsVersion = (Get-WmiObject -class Win32_OperatingSystem).Caption.ToUpper() $HostWindowsBuild = (Get-WmiObject -class Win32_OperatingSystem).Version.ToUpper() <# Build a message body. #> $smtpHTMLBody = @" <!doctype html> <html lang="en"> <head> <meta charset="utf-8"> <style> table { font-family: "Trebuchet MS", Arial, Helvetica, sans-ser

2191
AdamW-Automox
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Find & Share Worklets
Worklet: Set Screensaver Settings for Windows 7

Only works on Windows 7 and prior. Evaluation code: #REQUIRES -Version 2.0 <# .SYNOPSIS This script tests to see if the Screen saver remediation script has been run. .DESCRIPTION This script checks the screen saver reg keys of the current user, if the remediation script has been run, these value will match. If the values are different then those in in this script, it will return a 1. if the settings match it will return a 0. .NOTES File Name :ScreenSaverSettings.ps1 Author :Automox Prerequisite :PowerShell V2 over win7 and upper #> #Handle Exit Codes: trap { $host.ui.WriteErrorLine($_.Exception); exit 90 } function ScreenSaverTest { #############These settings must match those in the Remediation file####################### $ScreenSaveActive = 0 $SCRNSAVEEXE="C:\Windows\system32\Bubbles.scr" #Which screen saver to use. EX: C:\Windows\system32\Bubbles.scr $ScreenSaverIsSecure= 0 #password needed on wake up $ScreenS

1812
Nic-Automox
owl-IT
owl-ITPower User
posted in Find & Share Worklets
Worklet: Remove Microsoft Mail App from Managed laptops - Windows 10

<# .SYNOPSIS Check for presence of Microsoft Mail App on Managed laptops .DESCRIPTION Exits with 0 for compliance, 1 for Non-Compliance. Non-Compliant devices will run Remediation Code at the Policy's next scheduled date. .NOTES The Mail and Calendar apps help you stay up to date on your email, manage your schedule and stay in touch with people you care about the most. Designed for both work and home, these apps help you communicate quickly and focus on what’s important across all your accounts. Supports Office 365, Exchange, Outlook.com, Gmail, Yahoo! and other popular accounts. .LINK https://www.microsoft.com/en-ca/p/mail-and-calendar/9wzdncrfhvqm?activetab=pivot:overviewtab #> EVALUATION Code $App = Get-AppxPackage Microsoft.windowscommunicationsapps | Select-Object Status if ( $App -eq 'NULL' ) { Exit 0 } else { Exit 1 } REMEDIATION CODE # This code execution will REMOVE the MS Mail app from the managed laptop Get-AppxPackage Microsoft.windowscommunicationsapps | R

1456
Nic-Automox
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Find & Share Worklets
Worklet: Install LogMeIn client on Mac or Windows

This worklet will check to see if LogMeIn is installed and if it isn’t, will download and install it. See this KB article for how to setup a worklet:https://help.automox.com/hc/en-us/articles/5603324231700-Creating-a-Worklet  Evaluation Code:  #!/bin/bashif [ -d "/Applications/LogMeIn Client.app" ]; then exit 0else exit 1fi Remediation Code:  #!/bin/bashecho -e "Downloading LogMeIn Client..."curl -L -o "/tmp/LogMeInClientMac.dmg" https://secure.logmein.com/LogMeInClientMac.dmgecho -e "Installing LogMeIn Client..."hdiutil attach "/tmp/LogMeInClientMac.dmg" -nobrowseditto "/Volumes/LogMeInClient/LogMeIn Client.app" "/Applications/LogMeIn Client.app"echo -e "Cleaning up..."hdiutil detach "/Volumes/LogMeInClient"rm -f "/tmp/LogMeInClientMac.dmg"

1023
Nic-Automox
J
jim.collier
posted in Find & Share Worklets
Issue with worklet updating registry.

I have the following worklet which works fine with the exception it updates the wow64 runonce reg key install of the 64 bit runonce reg key? Anyone have any ideas how to get it to update the 64-bit key? $ScriptBlock = { param($tempDir = 1, $filename = 2) $MSIPath = “$tempDir\SAPGUI_7.6_Patch3.msi” if (-not (Test-Path -Path $MSIPath)) { Copy-Item $filename -Destination $tempDir } Set-ItemProperty -Path ‘HKLM:\Software\Microsoft\Windows\CurrentVersion\RunOnce’ -Name “UpdateSAPGUI” -Value “C:\WINDOWS\system32\WindowsPowerShell\v1.0\powershell.exe -noexit -command ‘Start-Process -FilePath ‘msiexec.exe’ -ArgumentList (’/qn’, ‘/i’, ‘$tempDir\SAPGUI_7.6_Patch3.msi’) -Wait -Passthru’” } $args=@("$env:windir\Temp", $filename) $returnCode = & “$env:SystemRoot\system32\WindowsPowerShell\v1.0\powershell.exe” -ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -NonInteractive -Command $scriptblock -args $args exit $returnCode

1173
Rich-Automox
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Find & Share Worklets
IE Zero Day Remediation for CVE-2020-0674

This worklet is to remedy CVE-2020-0674, as detailed in this article: BleepingComputer Microsoft Issues Mitigation for Actively Exploited IE Zero-Day Microsoft published a security advisory containing mitigation measures for an actively exploited zero-day remote code execution (RCE) vulnerability impacting Internet Explorer. This is a remote code execution zero-day, affecting users on IE. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. Note: if your windows directory is different from c:\windows then you’ll need to make that change in the remediation code. Evaluation code: exit 1 Remediation code: # Define Full Scriptblock to cover 64-bit scenario $scriptBlock = { takeown /f $env:SystemRoot\syswow64\jscript.dll cacls $env:SystemRoot\syswow64\jscript.dll /E /P everyone:N takeown /f $env:SystemRoot\system32\jscript.dll cacls $env:

672
Nic-Automox
Terms & ConditionsCookie settings