Recently active topics

38 Topics

C
CallmePHNovice
asked in Find & Share Worklets

Papercut Deployment

Has anyone had any success deploying the PaperCut Client via Automox? I have tried every angle I can think of and they all time out, or say it was successful but nothing was installed! From PC’s knowledge base it can be deployed via GPO or “ automated software deployment ”  I am just banging my head here lol

0
C
17 hours ago
sparrowhawk
sparrowhawkNovice
asked in Patch Tuesday

Managing 'stale' MS Teams installs under Windows

We use Tenable.io for vulnerability scanning and it has flagged a number of Windows endpoints that have old versions of Teams installed. I was puzzled by this as Automox patches Teams, and it turns out that because we’re using the machine wide installer, the Teams application is being installed into the user’s Appdata directory. This will only get updated if the user logs in but we don’t regularly log in with some accounts.I’ve read suggested fixes including:Create a GPO that deletes old accounts from the machines. This is problematic for us IT admins. Remove the machine wide installer so that Teams is not automatically installed when a user first logs in.Has anyone found a way to resolve this using Automox? I’d be interested to learn how others have resolved this. TIA

8
S
1 day ago
A
Arunchandar NRookie
asked in Find & Share Worklets

Export - Non compatible errored devices

Is there a way to Export non compatible errored devices inside automox? If yes could someone help?

3
MarkH-Automox
1 day ago
jaldeguer
jaldeguerRookie
posted in Using Automox

Deploy AutomoxAgent to macOS via Microsoft Endpoint Manager (intune)

I have created a deployment configuration via the Microsoft Intune dashboard. Before I deployed the app I had to convert it to an intunemac using IntuneAppUtil. In my Intune dashboard, it says the app has been installed on the macOS (Big Sur) device. Using the terminal I can indeed see the agent installed in /usr/local/bin/amagent. But when I checked my Automox devices dashboard I don’t see the device registered. Has anyone done this before successfully what additional steps have you done? Screen Shot 2021-09-02 at 3.55.18 PM1118×623 47.8 KB Thanks.

3
R
2 days ago
S
Selvamuthukumaran ASRookie
asked in Industry Discussion

Customize SQL Patching

I would like to deploy SQL patches (not the latest version) but a N-1 version leveraging ‘Patch Only’ policy or We need to leverage our script to install a specific package.

1
jack.smith
2 days ago
M
Max NewmanRookie
asked in Find & Share Worklets

Uninstall Rapid7 Agent from Linux

Looking for a bash script to uninstall Rapid7 agent on Linux/Ubuntu … please :)

2
M
2 days ago
jack.smith
jack.smithAll Star
posted in Find & Share Worklets

Worklet - Toast Notifications with Branding and Ignores Focus Assist

Yup. Another Toast Notification post :-) What makes this one unique is how customizable it can be with company branding and links to internal sites, interactive buttons and so on. Once you get the hang of this one you can apply this to multiple scenarios that fit your needs.Really need to read Martin Bengtsson blog before you get started. https://www.imab.dk/windows-10-toast-notification-script/  Download the scripts here https://github.com/imabdk/Toast-Notification-Script Edit config-toast.xml to your satisfaction or desired outcome. Create a new worklet and associate to the right groups Set the Evaluation Code to whatever you want exit 1 Set the Remediation Code Payload # Scheduled Task Name$schdtaskname = 'ToastNotify'# Working Directory$workdir = 'C:\ProgramData\ToastNotify'IF((Test-Path $workdir) -eq $false){mkdir $workdir -Force | Out-Null}IF((Test-Path $workdir\Images) -eq $false){mkdir $workdir\Images -Force | Out-Null}# Cleanup Prior Scheduled tasks if they existUnregister-Sc

12
I
2 days ago
S
SophiaAXCommunity Manager
asked in Automox Insiders Podcast

Listen Now: The Fundamentals of Lasting Customer Satisfaction | Automox Insiders, Episode 4

Hear more from the Senior VP of Customer Satisfaction, Charles Coaxum in the latest podcast release! They discuss Charles' role in maximizing customer satisfaction and his passion for exceptional customer experiences. Charles explains why he chose to work in customer experience and why he joined Automox. He also shares his insights on keeping customers happy, emphasizing the importance of building genuine relationships and delivering value-added solutions.Add to the discussion by answering: What's a customer support tool you or your organization appreciates having in your tech stack today or one that you wish you had?

1
jack.smith
3 days ago
D
danrubinsRookie
posted in Using Automox

Feature request: Crowdstrike deploy via tags

We’ve been making good use of the Automox Agent Deployer and it really has helped us get started quickly. As we enter the next phase of our rollout, we want to target deployments with a given Automox Key to a subset of machines that share a Crowdstrike Host Group with machines we don’t want to target - so we’d really like to be able to deploy using FalconGroupingTag and SensorGroupingTag.I think our workarounds would be move machines into different Crowdstrike Host Groups, which would be challenging due to our other integrations, or manually run the script against each host via Crowdstrike RTR, which would require other development work and doesn’t make use of the excellent Automox Agent Deployer that is already built.

1
jack.smith
3 days ago
L
lsandersRookie
asked in Using Automox

Scan without patching for a baseline report

Is it possible to create a policy to scan a group of devices for missing critical patches then create a report the breaks out which critical patches are missing.  We do not want to patch those devices with this policy, only scan.  

3
jack.smith
3 days ago
Gina-Automox
Gina-AutomoxAutomox Employee
posted in Product Updates

New Third Party Title Added this Week!

We’re excited to announce that Automox now supports patching for the following third-party application: YubiKey Manager Windows/macOS  We’ll share third-party titles that are in progress and coming soon as well as they become available!Don’t forget that our third-party support catalog is always available to find the most up-to-date coverage of our third-party supported titles. Have a great weekend! 

0
Gina-Automox
7 days ago
D
doomerNovice
asked in Find & Share Worklets

Worklet - Deployment language tool on windows x64

 Hello,I'm trying to create a worklet to deploy LanguageTool on my Windows x64 fleet. However, in the feedback, it says that the installation went well but ultimately fails. Can you help me fix the code?Evaluation Code ########################################## --! Evaluate Compliance !--if (Get-Win32App | Where-Object { $_.Name -eq $appName }) {    Write-Output "$appName is already installed. Now exiting."    exit 0}# Si LanguageTool n'est pas détecté, le worklet déclenchera l'installationelse {    Write-Output "$appName was not detected."    installLanguageTool -AppName $appName -AppInstallerType $appInstallerType -AppURL $appURL -IsSilent}Remediation Code # Set temporary folder path$tempFolderPath = Join-Path -Path $env:TEMP -ChildPath "automox"Write-Output "Creating temporary folder at $tempFolderPath"New-Item -ItemType Directory -Force -Path $tempFolderPath | Out-Null# Download Language Tool setup executable$url = "https://languagetool.org/download/windows-app/LanguageTool-latest.

8
D
10 days ago
A
Arunchandar NRookie
asked in Find & Share Worklets

Agent uninstallation restriction

Hey Folks, We were told that automox team has this road map on agent tamper protection last year, Where are we on this do we have any ETA when this will be implemented.This would be very useful and does not let end users tamper or play with the agents when they are provided with admin rights.

5
jack.smith
11 days ago
R
richel.valdezRookie
asked in Industry Discussion

Cumulative Update for Windows not showing as available

Hello, We have quiet a few devices that does not have monthly “Cumulative Update for Windows...” available.I don’t see a special pattern. All of them are OS supported and have agent version up-to-date.  I could do an OOB patch to push install the missed CU that is not showing in the available software. But would like to know what others have been practising. What do you do guys do? 

2
jack.smith
14 days ago
C
ChristinecazRookie
posted in Hello, my name is _____.

Hello, my name is Christine!

Hi everyone 😊 My name is Christine and I am a Customer Success Manager at Automox! I’m thrilled to be here and looking forward to partnering with our various teams to drive value and success for you all.A little about me, I am from sunny Florida 🌞, my background is in Cybersecurity - I spent the past three years partnering with security teams across the world reducing risk and complexity in order to protect their organizations. I am looking forward to learning about what’s top of mind for you all and  If there’s anything I can help with happy to!

2
jack.smith
14 days ago
Gina-Automox
Gina-AutomoxAutomox Employee
posted in Product Updates

New Third-Party Titles Added this Week!

We’re excited to announce that Automox now supports patching for the following third-party applications:  3Dconnexion 3DxWare Windows ePlayer Pro  macOS  We’ll share third-party title that are in progress and coming soon as well as they become available!Don’t forget that our third-party support catalog is always available to find the most up-to-date coverage of our third-party supported titles.

0
Gina-Automox
14 days ago
S
SophiaAXCommunity Manager
posted in CISO IT Podcast

CISO IT Episode with Rich Casselberry, VP of IT Security at ATN International

The latest installment of the CISO IT podcast is out now. Listen on your favorite podcast platform! This episode features special guest Rich Casselberry. Jason and Rich discuss the challenges of security and how to make better risk decisions. They explore the difficulty of proving a negative in security and the lack of obvious metrics of success. They emphasize the importance of balancing risk and finding the right level of security for the organization. Plus a whole lot more! We’d love to hear if you AGREE or DISAGREE with the following statement from the episode: Security is challenging because it involves proving a negative and lacks obvious metrics of success.

0
S
15 days ago
Juanmbi
JuanmbiRookie
posted in Find & Share Worklets

Worklet: WinVerifyTrust Signature Validation Vulnerability (CVE-2013-3900) mitigation

This is an older CVE that was reissued by Microsoft January 21 2022. There is no patch for this vulnerability. It affects all current and previous versions of Windows OS. And is considered “opt-in” with no plans to enforce stricter verification. This is listed in the CISA known exploited vulnerabilities catalog. Updated reissue:CVE-2013-3900 - Security Update Guide - Microsoft - WinVerifyTrust Signature Validation Vulnerability Other:https://nvd.nist.gov/vuln/detail/CVE-2013-3900https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-098 Evaluation Code:#Clears all errors prior to running script$Error.Clear()#All values tested$Value1 = Test-Path -Path "HKLM:\\SOFTWARE\Microsoft\Cryptography\Wintrust\Config"$Value2 = Test-Path -Path "HKLM:\\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Wintrust\Config"$Value3 = Get-ItemPropertyValue -Path "HKLM:\\SOFTWARE\Microsoft\Cryptography\Wintrust\Config" -Name "EnableCertPaddingCheck"$Value4 = Get-ItemPropertyValue -Path "HKLM

2
Juanmbi
15 days ago
jack.smith
jack.smithAll Star
asked in Find & Share Worklets

Worklet - Install Cisco Umbrella Anyconnect Agent

This worklet will install Cisco Umbrella with certificate and config files. This also checks for the OpenDNS agent and removes as well.  EvaluationParamaters Thumbprint ID of the root certificate used by your own SWG deployment If any of the services don’t exist, run remediation csc_vpnagent csc_swgagent csc_umbrellagent If running an older version of the service Umbrella_RC, run remediation If the Root Certificate is missing, run remediation If OrgInfo.json is not in place, run remediation#params$thumbprint = "<your-org-thumbprint>"# Cisco AnyConnect VPN Module$service = Get-Service csc_vpnagent -ErrorAction SilentlyContinueIF(!$service){ exit 1}# Cisco AnyConnect Diagnostics and Reporting Tool$service = Get-Service csc_swgagent -ErrorAction SilentlyContinueIF(!$service){ exit 1}# Cisco AnyConnect Umbrella Roaming Security Agent$service = Get-Service csc_umbrellaagent -ErrorAction SilentlyContinueIF(!$service){ exit 1}# Root Certificate used to inpsect HTTPS traffic

7
A
15 days ago
sparrowhawk
sparrowhawkNovice
asked in Using Automox

Automatically disable patch after specified number of failed attempts

This doesn’t happen too frequently, thankfully, but when it does it can be very frustrating for end users.A patch that requires a reboot fails to install so Automox tries again on the next scheduled run. As I find I have to run schedules often to keep up with the number of patches, this can mean that a user has to reboot every day.What I’d like is the ability to disable a patch after a number of failed attempts so that this doesn’t happen. I’d also like to be notified about this so that we can investigate the cause.As we get too many failure notifications we’ve actually turned these off for now anyway.Does anyone have any thoughts or suggestions on this?Thanks

1
sparrowhawk
15 days ago
S
sethhallRookie
asked in Using Automox

Patching and Completion Notification

Hello, I would like to notify end users once their patching is completed so that they know if it is okay to shut down their device.If a device is shut down, logged out, or put in sleep mode, the patching will fail. I’ve noticed this multiple times with testing on different devices. There is no real way for an end user to know when their patches have been updated. Furthermore, on Automox I am able to see each “Device Status” as “Refreshing” when updates are being conducted, and “Ready” once they are complete.I would like confirmation that Refreshing = Patching. With that wording it is a little confusing.I have ran manual patches on certain devices that will begin “refreshing” and after completion, they will turn to the “ready” state. Although I will still see the same patches needing an update in the “Software” section of the device. Does anyone know why this is happening? It is as if the patch runs and after completion nothing actually happened with those items that needed to be patche

5
sparrowhawk
15 days ago
M
Maulik_BusaNovice
asked in Find & Share Worklets

Activity log not showing output for below worklet.

Hi all, im trying to fetch those system update packages from endpoints. im doing this via this worklet here , for some reason its not showing output in Automox console. can anyone suggest what am i doing wrong here.. i also have same problem for other command Test-PendingReboot -detailed to when i try to verify if endpoint is waiting for a reboot or not..  i also checked out this too and ive tried both standard output stream PowerShell: Write-Output/Write-Host but none of it worked.. just getting an empty box in log summary. Any help would be highly appreciated. Thanks  # Check if the PSWindowsUpdate module is installed, if not, install itif (-not (Get-Module -Name PSWindowsUpdate -ListAvailable)) {    Install-Module -Name PSWindowsUpdate -Force -AllowClobber -Scope CurrentUser -Repository PSGallery}# Import the PSWindowsUpdate moduleImport-Module PSWindowsUpdate# Get a list of available updates$updates = Get-WindowsUpdate# Iterate through each updateforeach ($update in $updates) {   

3
jack.smith
16 days ago
james.whiting.gsl
james.whiting.gslRookie
asked in Find & Share Worklets

Worklet? Crowdstrike Uninstall to Move Asset to another Crowdstrike Console

We’ve just set up 2 extra Crowdstrike consoles to allow segregation of assets and users. However, I’m struggling to find a way to move these assets in bulk, as I need to uninstall the sensor on each asset, and then reinstall with a different Customer ID. Does anyone think this would be possible via a couple of worklets? Otherwise I’m looking at a huge manual job… Thanks!

1
jack.smith
16 days ago
S
SophiaAXCommunity Manager
posted in Patch Tuesday

150 Vulnerabilities and a Zero-Day Demand Immediate Patching | April 2024 Patch Tuesday

This month's release comes with a notable increase in the number of Common Vulnerabilities and Exposures (CVEs) addressed, marking it as one of the most significant Patch Tuesdays in the past year and a half. Be sure to give the Patch [Fix] Tuesday podcast a listen! Also available on your favorite podcast platform! If you have any thoughts or experiences to share, drop them here for our hosts to see! 

0
S
17 days ago
C
Caseyty13Rookie
posted in Hello, my name is _____.

Hello, my name is Casey

I am a Security Engineer working for an MSP in Washington state.  We currently use Automox for Patch Management and some application deployments.The most recent items we have also been using Automox for is to force Teams to shut down prior to Patching as users tend to leave Teams open, causing conflicts in the update process.We also use Automox to quickly uninstall applications globally and it works so much better than Microsoft or trying to do things manually. 

1
S
17 days ago
Terms & ConditionsCookie settings