Skip to main content

Find & Share Worklets

You're looking at the Yellow Pages for Community Worklets... find Worklets and share your own here!

  • 630 Topics
  • 1,853 Replies
629 Topics
A
Arunchandar NNovice
asked in Find & Share Worklets
Agent uninstallation restriction

Hey Folks, We were told that automox team has this road map on agent tamper protection last year, Where are we on this do we have any ETA when this will be implemented.This would be very useful and does not let end users tamper or play with the agents when they are provided with admin rights.

1605
jack.smith
Juanmbi
JuanmbiRookie
posted in Find & Share Worklets
Worklet: WinVerifyTrust Signature Validation Vulnerability (CVE-2013-3900) mitigation

This is an older CVE that was reissued by Microsoft January 21 2022. There is no patch for this vulnerability. It affects all current and previous versions of Windows OS. And is considered “opt-in” with no plans to enforce stricter verification. This is listed in the CISA known exploited vulnerabilities catalog. Updated reissue:CVE-2013-3900 - Security Update Guide - Microsoft - WinVerifyTrust Signature Validation Vulnerability Other:https://nvd.nist.gov/vuln/detail/CVE-2013-3900https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-098 Evaluation Code:#Clears all errors prior to running script$Error.Clear()#All values tested$Value1 = Test-Path -Path "HKLM:\\SOFTWARE\Microsoft\Cryptography\Wintrust\Config"$Value2 = Test-Path -Path "HKLM:\\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Wintrust\Config"$Value3 = Get-ItemPropertyValue -Path "HKLM:\\SOFTWARE\Microsoft\Cryptography\Wintrust\Config" -Name "EnableCertPaddingCheck"$Value4 = Get-ItemPropertyValue -Path "HKLM

42232
Juanmbi
jack.smith
jack.smithAll Star
asked in Find & Share Worklets
Worklet - Install Cisco Umbrella Anyconnect Agent

This worklet will install Cisco Umbrella with certificate and config files. This also checks for the OpenDNS agent and removes as well.  EvaluationParamaters Thumbprint ID of the root certificate used by your own SWG deployment If any of the services don’t exist, run remediation csc_vpnagent csc_swgagent csc_umbrellagent If running an older version of the service Umbrella_RC, run remediation If the Root Certificate is missing, run remediation If OrgInfo.json is not in place, run remediation#params$thumbprint = "<your-org-thumbprint>"# Cisco AnyConnect VPN Module$service = Get-Service csc_vpnagent -ErrorAction SilentlyContinueIF(!$service){ exit 1}# Cisco AnyConnect Diagnostics and Reporting Tool$service = Get-Service csc_swgagent -ErrorAction SilentlyContinueIF(!$service){ exit 1}# Cisco AnyConnect Umbrella Roaming Security Agent$service = Get-Service csc_umbrellaagent -ErrorAction SilentlyContinueIF(!$service){ exit 1}# Root Certificate used to inpsect HTTPS traffic

6887
A
M
Maulik_BusaNovice
asked in Find & Share Worklets
Activity log not showing output for below worklet.

Hi all, im trying to fetch those system update packages from endpoints. im doing this via this worklet here , for some reason its not showing output in Automox console. can anyone suggest what am i doing wrong here.. i also have same problem for other command Test-PendingReboot -detailed to when i try to verify if endpoint is waiting for a reboot or not..  i also checked out this too and ive tried both standard output stream PowerShell: Write-Output/Write-Host but none of it worked.. just getting an empty box in log summary. Any help would be highly appreciated. Thanks  # Check if the PSWindowsUpdate module is installed, if not, install itif (-not (Get-Module -Name PSWindowsUpdate -ListAvailable)) {    Install-Module -Name PSWindowsUpdate -Force -AllowClobber -Scope CurrentUser -Repository PSGallery}# Import the PSWindowsUpdate moduleImport-Module PSWindowsUpdate# Get a list of available updates$updates = Get-WindowsUpdate# Iterate through each updateforeach ($update in $updates) {   

1323
jack.smith
james.whiting.gsl
james.whiting.gslRookie
asked in Find & Share Worklets
Worklet? Crowdstrike Uninstall to Move Asset to another Crowdstrike Console

We’ve just set up 2 extra Crowdstrike consoles to allow segregation of assets and users. However, I’m struggling to find a way to move these assets in bulk, as I need to uninstall the sensor on each asset, and then reinstall with a different Customer ID. Does anyone think this would be possible via a couple of worklets? Otherwise I’m looking at a huge manual job… Thanks!

3651
jack.smith
M
Marcus73Rookie
asked in Find & Share Worklets
Agent: DIsconected

I moved some servers from VMware to Proxmox. Since then they show up with Agent: Disconnect.Uninstalling and reinstalling didn't help.With amagent --setkey c2ba..... Error creating Path: mkdir C:\Program Files (x86)\Automox: A file cannot be created if it already exists.amagent --checkcompat2024/03/21 08:24:12 Error creating Path: mkdir C:\Program Files (x86)\Automox: A file cannot be created if it already exists.2024/03/21 08:24:13 Setting for AUTOMOX_API_BASE_URL:https://api.automox.com2024/03/21 08:24:15 Checking agent compatibility against https://api.automox.com2024/03/21 08:24:15 Posting /compatibilitycheck...2024/03/21 08:24:15 POST https://api.automox.com/compatibilitycheck2024/03/21 08:24:15 No proxy found. Using direct connectionSuccessfully verified system compatibilityDoes anyone here have an idea for me?

951
jack.smith
H
harryc123Rookie
asked in Find & Share Worklets
Disable ALL reboots on Servers unless done so via restart worklet

There are a few servers that we do not want to restart at any time, unless done manually by our application teams.The policy assigned to devices  has "Do not enable automatic restart after updates are installed" however, these servers do reboot overnight an hour or so after updates are installed. From talking to support Automox cannot stop all reboots.  Has anyone from the community found a relaible GPO/Scripit or anything that can prevent restarts completely on servers? Process we are aiming for: 2nd Wednesday of the week at 11PM install all updates.2nd Thursday of the week at 6AM restart via worklet if restart is required. Currently, the restart can happen anytime after updates are installed, so i’d like the policy/script to prevent that, so that the server only restarts when the worklet is ran. 

991
jack.smith
A
anuj.johriRookie
asked in Find & Share Worklets
Script to unhide Cisco Secure Client VPN module

Hi all,  I'm looking for PowerShell to unhide the Cisco Secure Client VPN Module. Cisco Secure Client is already on our machine, but the VPN module is hidden. I want to unhide it.   

1721
S
Tony-Automox
Tony-AutomoxAutomox Employee
posted in Find & Share Worklets
Set Windows 10 Screensaver

Set your screensaver, the timeout, and whether prompted for a login upon resume. This code is easy to select any of the built-in savers located in C:\Windows\System32, but you could enhance it to attach your own screensaver, copy it to System32, and set it as the one to use. Note: The settings may not take effect until after a reboot Evaluation: # Define desired registry settings. Set remediation to match ------ # 1 = On resume display logon screen, 0 = No logon screen on resume $ssSecure = 1 # Time in seconds $ssTimeout = 600 # Screensaver used $saver = "C:\WINDOWS\system32\Ribbons.scr" #------------------------------------------------------------------ if (!((Get-WmiObject Win32_OperatingSystem).Caption -match "Microsoft Windows 10")) { Exit 0 } $regPath = 'Control Panel\Desktop' # Get User details including SID from Get-LocalUser $users = Get-CimInstance -Class Win32_UserProfile -Filter "Special = $false" #Add HKEY_USERS to a PSDrive for easy access later New-PSDrive -PSPr

4495
D
CallmePH
CallmePHPro
posted in Find & Share Worklets
Linux server not showing in device console.

I have a few Linux servers (varying flavors including Centos and RHEL) that after successful install and service start do no show up in the Device Console. I have made sure ports 443 etc are open, and not having this issue with the other Linux servers I have installed in the same network and vlan. Any thoughts or help would be greatly appreciated! 

44815
K
V
VTM9Rookie
asked in Find & Share Worklets
Worklet to first Uninstall Microsoft Office 2019 then install MS Office 2021

Hi, I tried to use the PS script to directly install MS Office 2021 to the client machine that is currently having the MS Office 2019. I’m getting the error message saying “ You have to uninstall MS Office 2019 ….” I’m not sure if possible, but I’m looking for the worklet with script that first to Uninstall Microsoft Office 2019 Pro then install MS Office 2021 Plus after that...Please help if any one got this procedure done successfully.Thank you!

6378
M
F
FerOzNovice
asked in Find & Share Worklets
Delete cashed credentials on Mac

Can you suggest any way to delete cashed credentials on a Macbook via Automox? Just to give context: We have an unreturned asset that we see user is online. We are trying to prevent user using it any further

526
F
Stambo-Automox
Stambo-AutomoxAutomox Employee
posted in Find & Share Worklets
Remote lock workstation and change user's password

This worklet changes the local user’s password and logs them out of the computer. This is useful in instances where there is security risk or an abrupt/unexpected termination. Evaluation exit 1 Remediation #Credit for parts of this script go to Progress $logoutReset = { #Set the username that should have its password changed and sessions logged off on the targeted workstations $user = 'jeff' $password = 'y0urn3wPa$$woRd_heR3' # #Comment out the line below if you do not need to change the password locally but prefer to change it in Active Directory net user $user $password $ErrorActionPreference = 'Stop' $quser = "C:\Windows\Sysnative\quser.exe" $logoff = "C:\Windows\Sysnative\logoff.exe" try { ## Find all sessions matching the specified username $sessions = & $quser | Where-Object {$_ -match $user} ## Parse the session IDs from the output $sessionIds = ($sessions -split ' +')[2]

13286
F
A
anuj.johriRookie
asked in Find & Share Worklets
Worklet to deploy Cisco Secure Client Umbrella module

Cisco AnyConnect and Umbrella Roaming client is EOL in April/24 I’m looking for guidance to create a worklet that will install a Cisco secure client with an Umbrella module and enable the Computer Services option so only administrators start/stop Cisco Secure Client's services on a device. https://support.umbrella.com/hc/en-us/articles/17890678933012-Cisco-Secure-Client-with-Umbrella-Module-Installation

3092
A
L
laurencechildsnsNovice
asked in Find & Share Worklets
uninstall DELL Support Assist

Hi Allwe’ve noticed DELL Support Assist started running an agent task that is hogging major amounts of system RAMwe have a dispersed user population so I'd like to look at uninstalling the DELL Support Assist application from our remote users via Automox, has anyone managed to uninstall DELL SA remotely?cheers :)

3381
M
K
KTicerRookie
posted in Find & Share Worklets
Worklet: Force Check\Install Windows Updates

Evaluation Code:# Check for pending updates$updateSession = New-Object -ComObject Microsoft.Update.Session$updateSearcher = $updateSession.CreateUpdateSearcher()$updates = $updateSearcher.Search("IsInstalled=0")# If there are pending updates, proceedif ($updates.Updates.Count -gt 0) { Write-Host "There are pending updates. Proceeding..." exit 1}else { Write-Host "No pending updates. Exiting..." exit 0}Remediation Code:# Check for administrative privilegesif (-not ([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)) { Write-Host "Please run this script as an administrator." exit}# Save the current execution policy$originalPolicy = Get-ExecutionPolicy# Set the execution policy to allow scriptsSet-ExecutionPolicy Bypass -Scope Process -Force# Install NuGetInstall-PackageProvider -Name NuGet -ForceGet-PackageProvider -Name NuGetRegister-PackageSource -Name NuGet.org -Loc

1311
S
N
neothebatRookie
asked in Find & Share Worklets
How do I delete payloads from my worklet?

I have many worklets that I need to update the payload on but there is no way to remove previously uploaded payloads, only to upload more.I tried overwriting the previous payload by uploading another with the same name but I just get a error.The only work around I found is to delete the worklet and recreate it, which can be quite a chore. Is there a better way?

412
N
M
Maulik_BusaNovice
asked in Find & Share Worklets
Critical patch policies keep failing

Hi Everyone, im trying to figure out why critical patch policies is keep failing with below error code(ignore OpenVPN). its happening to almost 70 percent of device.. i tried restarting windows update services to find out if that resolve the issue but so far no luck. any suggestion this would be highly appreciated.Thanks    Failed to apply patches ("OpenVPN Connect" "Remote Desktop" "2024-01 Security Update for Windows 10 Version 22H2 for x64-based Systems (KB5034441)" "FileZilla Client" "AWS Command Line Interface v2"): Error: OpenVPN Connect is unable to patch because it is currently runningInstallMSUpdates : Install failed with ResultCode 4 and HResult -2145124318At C:\Program Files (x86)\Automox\execDir177495117\execcmd237205320.ps1:1727 char:17+                 InstallMSUpdates $lst+                 ~~~~~~~~~~~~~~~~~~~~~    + CategoryInfo          : NotSpecified: (:) [Write-Error], WriteErrorException    + FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,I

6476
V
E
ECHazlettRookie
asked in Find & Share Worklets
Worklet to identify disconnected workstations over a specific age

Greetings all,I’m looking for a worklet that will allow me to enter in whatever number of days I’d like and to generate a list of systems that are at or above that number of days offline. There seems to be a few existing worklets that may be able to be modified to perform that function, but I’m not the best script editor out there.I also found this, and it would also accomplish the same thing plus move them into their own group, but I can’t get it to do anything when I run it: Powershell script to move devices that have been disconnected longer than X days to a group | Community (automox.com)

1715
jack.smith
M
mikesidNovice
asked in Find & Share Worklets
Installing msi package using required software

Hello everyone. I have been trying to find some examples, and I thought what I put would work, but its not. I am trying to install an msi package that has some extra arguments. For example, If I run this from a command line it works on a computer: msiexec /i agentmanagersetup.msi /qn DEVREGCODE=XXXX TENANT=XXXX ALLUSERS=1 When using automox it has me do some of this in quotes and parentheses and this is where I am not sure what to do. I currently have this but its not working: exit (Start-Process -FilePath 'msiexec.exe' -ArgumentList ('/qn', '/i', '"agentmanagersetup.msi DEVREGCODE=XXXX TENANT=XXXX ALLUSERS=1"') -Wait -Passthru).ExitCodeIf I removed the DEVREGCODE and TENANT arguments and put them in their own quotes i would get an error about a token. If i put it the way I have it above, it doesnt seem like its running as i dont even see a failed in the activity report.Not sure What I am doing wrong. Also, because the install has specific to our company, I replaced that data with the

2233
M
J
johnfolia1223Rookie
posted in Find & Share Worklets
Need to have Ansible Playbook to deploy Automox agent based on OS - Linux, windows or MacOS

Need to have Ansible Playbook to deploy Automox agent based on OS - Linux, windows or MacOS 

991
jack.smith
K
KirkHNovice
asked in Find & Share Worklets
Cloudflare WARP fails to update, running.

Automox supports the updating of cloudflare warp, per this url: https://www.automox.com/patching/software/cloudflare-warp-clientHowever, when it attempts the update, we’re having a number of issues. First, is that the update most often just fails stating Cloudflare was running. Of course it’s running, it runs all the time. :) Second, is that if an update fails, the laptops network stack is quite impacted. This is more of a WARP client issue, but it needs to be accounted for. What is the best practice way to patch the Cloudflare WARP client with Automox. Anyone with tips on how to handle patching and updating CF WARP, please share. I have been quite unimpressed by CF WARP / ZeroTrust so far, it’s borderline snake-oil.

34711
K
Afonso_Alves_31
Afonso_Alves_31Pro
asked in Find & Share Worklets
Worket to Upgrade VMware tools

Just checking if somebody here in the community created a worklet that upgrades vmware tools and works?

3734
M
I
IceCreamRookie
asked in Find & Share Worklets
Keyboard and languages user

Hi,Anyone use policies for config languages and keyboard layout?Worklet ou scrypt for this?Thx for help.

1025
S
S
srheinsPro
asked in Find & Share Worklets
Join Workstatins to Domain

Is it possible to create a worklet that will join a workstation to a corperate domain?  Has anyone attempted this before?

3264
S
Terms & ConditionsCookie settings