Find & Share Worklets

We’ve just set up 2 extra Crowdstrike consoles to allow segregation of assets and users. However, I’m struggling to find a way to move these assets in bulk, as I need to uninstall the sensor on each asset, and then reinstall with a different Customer ID. Does anyone think this would be possible via a couple of worklets? Otherwise I’m looking at a huge manual job… Thanks!

I moved some servers from VMware to Proxmox. Since then they show up with Agent: Disconnect.Uninstalling and reinstalling didn't help.With amagent --setkey c2ba..... Error creating Path: mkdir C:\Program Files (x86)\Automox: A file cannot be created if it already exists.amagent --checkcompat2024/03/21 08:24:12 Error creating Path: mkdir C:\Program Files (x86)\Automox: A file cannot be created if it already exists.2024/03/21 08:24:13 Setting for AUTOMOX_API_BASE_URL:https://api.automox.com2024/03/21 08:24:15 Checking agent compatibility against https://api.automox.com2024/03/21 08:24:15 Posting /compatibilitycheck...2024/03/21 08:24:15 POST https://api.automox.com/compatibilitycheck2024/03/21 08:24:15 No proxy found. Using direct connectionSuccessfully verified system compatibilityDoes anyone here have an idea for me?

There are a few servers that we do not want to restart at any time, unless done manually by our application teams.The policy assigned to devices  has "Do not enable automatic restart after updates are installed" however, these servers do reboot overnight an hour or so after updates are installed. From talking to support Automox cannot stop all reboots.  Has anyone from the community found a relaible GPO/Scripit or anything that can prevent restarts completely on servers? Process we are aiming for: 2nd Wednesday of the week at 11PM install all updates.2nd Thursday of the week at 6AM restart via worklet if restart is required. Currently, the restart can happen anytime after updates are installed, so i’d like the policy/script to prevent that, so that the server only restarts when the worklet is ran. 

Hi all,  I'm looking for PowerShell to unhide the Cisco Secure Client VPN Module. Cisco Secure Client is already on our machine, but the VPN module is hidden. I want to unhide it.   

Set your screensaver, the timeout, and whether prompted for a login upon resume. This code is easy to select any of the built-in savers located in C:\Windows\System32, but you could enhance it to attach your own screensaver, copy it to System32, and set it as the one to use. Note: The settings may not take effect until after a reboot Evaluation: # Define desired registry settings. Set remediation to match ------ # 1 = On resume display logon screen, 0 = No logon screen on resume $ssSecure = 1 # Time in seconds $ssTimeout = 600 # Screensaver used $saver = "C:\WINDOWS\system32\Ribbons.scr" #------------------------------------------------------------------ if (!((Get-WmiObject Win32_OperatingSystem).Caption -match "Microsoft Windows 10")) { Exit 0 } $regPath = 'Control Panel\Desktop' # Get User details including SID from Get-LocalUser $users = Get-CimInstance -Class Win32_UserProfile -Filter "Special = $false" #Add HKEY_USERS to a PSDrive for easy access later New-PSDrive -PSPr

I have a few Linux servers (varying flavors including Centos and RHEL) that after successful install and service start do no show up in the Device Console. I have made sure ports 443 etc are open, and not having this issue with the other Linux servers I have installed in the same network and vlan. Any thoughts or help would be greatly appreciated! 

Hi, I tried to use the PS script to directly install MS Office 2021 to the client machine that is currently having the MS Office 2019. I’m getting the error message saying “ You have to uninstall MS Office 2019 ….” I’m not sure if possible, but I’m looking for the worklet with script that first to Uninstall Microsoft Office 2019 Pro then install MS Office 2021 Plus after that...Please help if any one got this procedure done successfully.Thank you!

Can you suggest any way to delete cashed credentials on a Macbook via Automox? Just to give context: We have an unreturned asset that we see user is online. We are trying to prevent user using it any further

This worklet changes the local user’s password and logs them out of the computer. This is useful in instances where there is security risk or an abrupt/unexpected termination. Evaluation exit 1 Remediation #Credit for parts of this script go to Progress $logoutReset = { #Set the username that should have its password changed and sessions logged off on the targeted workstations $user = 'jeff' $password = 'y0urn3wPa$$woRd_heR3' # #Comment out the line below if you do not need to change the password locally but prefer to change it in Active Directory net user $user $password $ErrorActionPreference = 'Stop' $quser = "C:\Windows\Sysnative\quser.exe" $logoff = "C:\Windows\Sysnative\logoff.exe" try { ## Find all sessions matching the specified username $sessions = & $quser | Where-Object {$_ -match $user} ## Parse the session IDs from the output $sessionIds = ($sessions -split ' +')[2]

Cisco AnyConnect and Umbrella Roaming client is EOL in April/24 I’m looking for guidance to create a worklet that will install a Cisco secure client with an Umbrella module and enable the Computer Services option so only administrators start/stop Cisco Secure Client's services on a device. https://support.umbrella.com/hc/en-us/articles/17890678933012-Cisco-Secure-Client-with-Umbrella-Module-Installation

Hi Allwe’ve noticed DELL Support Assist started running an agent task that is hogging major amounts of system RAMwe have a dispersed user population so I'd like to look at uninstalling the DELL Support Assist application from our remote users via Automox, has anyone managed to uninstall DELL SA remotely?cheers :)

Evaluation Code:# Check for pending updates$updateSession = New-Object -ComObject Microsoft.Update.Session$updateSearcher = $updateSession.CreateUpdateSearcher()$updates = $updateSearcher.Search("IsInstalled=0")# If there are pending updates, proceedif ($updates.Updates.Count -gt 0) { Write-Host "There are pending updates. Proceeding..." exit 1}else { Write-Host "No pending updates. Exiting..." exit 0}Remediation Code:# Check for administrative privilegesif (-not ([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)) { Write-Host "Please run this script as an administrator." exit}# Save the current execution policy$originalPolicy = Get-ExecutionPolicy# Set the execution policy to allow scriptsSet-ExecutionPolicy Bypass -Scope Process -Force# Install NuGetInstall-PackageProvider -Name NuGet -ForceGet-PackageProvider -Name NuGetRegister-PackageSource -Name NuGet.org -Loc

I have many worklets that I need to update the payload on but there is no way to remove previously uploaded payloads, only to upload more.I tried overwriting the previous payload by uploading another with the same name but I just get a error.The only work around I found is to delete the worklet and recreate it, which can be quite a chore. Is there a better way?

Hi Everyone, im trying to figure out why critical patch policies is keep failing with below error code(ignore OpenVPN). its happening to almost 70 percent of device.. i tried restarting windows update services to find out if that resolve the issue but so far no luck. any suggestion this would be highly appreciated.Thanks    Failed to apply patches ("OpenVPN Connect" "Remote Desktop" "2024-01 Security Update for Windows 10 Version 22H2 for x64-based Systems (KB5034441)" "FileZilla Client" "AWS Command Line Interface v2"): Error: OpenVPN Connect is unable to patch because it is currently runningInstallMSUpdates : Install failed with ResultCode 4 and HResult -2145124318At C:\Program Files (x86)\Automox\execDir177495117\execcmd237205320.ps1:1727 char:17+                 InstallMSUpdates $lst+                 ~~~~~~~~~~~~~~~~~~~~~    + CategoryInfo          : NotSpecified: (:) [Write-Error], WriteErrorException    + FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,I

Greetings all,I’m looking for a worklet that will allow me to enter in whatever number of days I’d like and to generate a list of systems that are at or above that number of days offline. There seems to be a few existing worklets that may be able to be modified to perform that function, but I’m not the best script editor out there.I also found this, and it would also accomplish the same thing plus move them into their own group, but I can’t get it to do anything when I run it: Powershell script to move devices that have been disconnected longer than X days to a group | Community (automox.com)

Hello everyone. I have been trying to find some examples, and I thought what I put would work, but its not. I am trying to install an msi package that has some extra arguments. For example, If I run this from a command line it works on a computer: msiexec /i agentmanagersetup.msi /qn DEVREGCODE=XXXX TENANT=XXXX ALLUSERS=1 When using automox it has me do some of this in quotes and parentheses and this is where I am not sure what to do. I currently have this but its not working: exit (Start-Process -FilePath 'msiexec.exe' -ArgumentList ('/qn', '/i', '"agentmanagersetup.msi DEVREGCODE=XXXX TENANT=XXXX ALLUSERS=1"') -Wait -Passthru).ExitCodeIf I removed the DEVREGCODE and TENANT arguments and put them in their own quotes i would get an error about a token. If i put it the way I have it above, it doesnt seem like its running as i dont even see a failed in the activity report.Not sure What I am doing wrong. Also, because the install has specific to our company, I replaced that data with the

Need to have Ansible Playbook to deploy Automox agent based on OS - Linux, windows or MacOS 

Automox supports the updating of cloudflare warp, per this url: https://www.automox.com/patching/software/cloudflare-warp-clientHowever, when it attempts the update, we’re having a number of issues. First, is that the update most often just fails stating Cloudflare was running. Of course it’s running, it runs all the time. :) Second, is that if an update fails, the laptops network stack is quite impacted. This is more of a WARP client issue, but it needs to be accounted for. What is the best practice way to patch the Cloudflare WARP client with Automox. Anyone with tips on how to handle patching and updating CF WARP, please share. I have been quite unimpressed by CF WARP / ZeroTrust so far, it’s borderline snake-oil.

Hi,Anyone use policies for config languages and keyboard layout?Worklet ou scrypt for this?Thx for help.

Is there already a worklet using the “AcroCleaner” tool to uninstall an older version Adobe Acrobat DC (2015), and then install the newest Adobe Acrobat DC (cloud/subscription) all in one worklet?   I’m trying to cobble something together but struggling.  Any help would be appreciated.

Is there a way to remotely wipe Macs either through worklet or script using Automox? Essecially looking for something similar to a factory reset. I found a post for Windows but not Mac. Thanks for the advice!

Looking for a PowerShell script to uninstall the Rapid7 agent from Windows. I used Automox Otto AI to create one (see below), but when I run it, I keep getting “Rapid7 Insight Agent is not installed on this machine.” I checked the system, and the software is installed, so I know it exists.  ======================# Otto AI Generated Code# ======================# Uninstall Rapid7 Insight Agent$uninstallString = Get-ItemProperty -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\*" | Where-Object {$_.DisplayName -like "*Rapid7 Insight Agent*"} | Select-Object -ExpandProperty UninstallStringif ($uninstallString) {    Write-Host "Uninstalling Rapid7 Insight Agent..."    Start-Process -FilePath "msiexec.exe" -ArgumentList "/x $uninstallString /qn" -Wait    Write-Host "Rapid7 Insight Agent has been uninstalled."}else {    Write-Host "Rapid7 Insight Agent is not installed on this machine."}

Working on a  worklet script to kill all of the processes of applications that automox supports on the windows side of things from here https://help.automox.com/hc/en-us/articles/5352042232084-Third-Party-Software-Support) but does anyone have the process names that show up when you run “Get-Process” from command prompt? For instance, Google Chrome = chrome or Microsoft Excel = EXCEL? We have found that automox cannot update applications if they are open which is different coming from SCCM that forced closed applications to install. 

I have a script that works just fine locally through PowerShell. However I am running into a major pain. It seems that winget wont work with automox as it runs in the system context which is incompatible with winget. Has anyone found a solution to this. I have tried set-location i have tried uploading winget.exe to the worklet. This is causing my brain to hurt. Specifically this is checking if Cloudflare WARP is installed and if not installing it and if so updating it all using winget.

So I have created this worklet, but nothing seem to happen when I try to run it manually on a computer. Any idea whats wrong?Evalution:# Runs 'winget upgrade' to dertimne any updates and save the output$output = winget upgrade | Out-String # looking for a specific textif ($output -match "No applicable update found.") {    # no updates found    exit 0} else {    # uådates found    exit 1} Remediation :# Runs a elevated PowerShell session to update all$scriptBlock = {    winget upgrade --all --silent --accept-package-agreements --accept-source-agreements} # Runs the script with admin priviliges Start-Process powershell -ArgumentList "-Command", $scriptBlock -Verb RunAs