Solved

Hello, I am having issues with the worklet mentioned in the title. I have a PC from our environment that I am testing with this worklet. I have changed nothing on the worklet except change the cutoff day to 60 days. I can see under This PC > Windows > Users that there are profiles that show under the “Date Modified” column as not having any changes since April. However, the worklet is not removing those. It runs the first check and says there are no old profiles. I’ll admit I’m still learning Powershell, so maybe I have something confused, but if someone could point me in the right direction of what I need to modify I would appreciate it. Let me know if you’d like more info. TIA! 

Looking to make a simple worklet to Flush and Register the DNS of a single machine or multiple machines.   Noticed there was not a worklet in the catalog.

Hi all, We are having an issue whereby our Office 365 updates are forcing apps to close and restart. This is happening to some VIP users and as a result they are complaining to IT about applications closing on them. Whilst this mostly recovers, the disruption whilst working is not ideal and it also doesn’t recover things like Mimecast searches (within Outlook via the addin).  We would therefore like to approach this with a separate worklet or update policy to update just Office365.  Does anybody have any recommendations on this one? Perhaps a Worklet whereby I can trigger a notification that the application will update in X minutes, and provide a user-friendly warning to the user (if it detects that the office apps are open). Alternatively, if we can update but not restart the app, and then apply the changes on the next restart of the apps (or device) that would be ideal.  Thanks in advance! 

I want to deploy the Windows App.  I have downloaded the .msix https://apps.microsoft.com/detail/9N1F85V9T8BN?hl=en-us&gl=US&ocid=pdpshare I am copying it to C:\Installs using this command - Copy-Item "Windows_App_2.0.704.0_X64_msix_en-US.msix" "C:\Installs\Windows_App_2.0.704.0_X64_msix_en-US.msix" -ForceThat works fine but I can’t get it to install using Add-AppPackage with this command - Add-AppPackage -Path "C:\Installs\Windows_App_2.0.704.0_X64_msix_en-US.msix"Does anyone have any idea how I can have Automox install this .msix? Thanks!

Is ARM64/Snapdragon supported by Automox on Windows 11 yet? For both install and for updating other ARM applications?

Hello Community!Does anyone have a worklet they can share to enable the local administrator account?Thanks!

I am writing a PS worklet to prompt the user to close Outlook to allow the install of the Mimecast for Outlook plugin. I would like to not go down the road of creating a scheduled task to perform this action. I have tried a couple different options:Send-ActiveUserMessage -Title 'Close Outlook' -Message 'Outlook will close automatically in 1 minute for the Mimecast plugin Install. Please wait 5 mins before opening Outlook again. Thanks, IT.' DialogType 'OK' -Timeout 60&# Add required assembly for MessageBoxAdd-Type -AssemblyName "System.Windows.Forms"# Show MessageBox that Outlook is closing[System.Windows.Forms.MessageBox]::Show('Outlook will close automatically in 1 minute for the Mimecast plugin Install. Please wait 5 mins before opening Outlook again. Thanks, IT.','Close Outlook','OK','Warning') Neither seem to display an interactive message for the user but work in ISE. I read in a previous post here that this was due to the worklet being run as system user and that makes sense

Hi  What is best possible way in automox to update zoom workspace to latest version on 25 devices.  

Good morning! I am attempting to use the worklet to set a login screen for Windows but was wondering if anyone had successfully changed the image source from a URL to an image uploaded into the worklet. If they have, could you please share the syntax used to replace this line? # define the path to download the background image$ImageURL = 'https://www.automox.com/static/images/default-og-image.png'

Hi everyone,Has anyone successfully installed OpenEdge using Automox?Given the payload limitations in Automox, it seems like this might be challenging—or possibly not feasible at all. However, I wanted to check if anyone has attempted this in their environment and managed to get it working.More details about the silent installation process for Progress OpenEdge can be found here:Progress Documentation – Silent Installation Thanks in advance!  

With the new (and awesome btw) Status page roll out, is there a way to api pull from that page? Just looking for base info... up,degraded,down and the like! I looked a bit to see if I could find that but coming up empty lol!

Please explain Patch Now in Software/Actions/3 dots/Patch Now.  Does it patch only the devices impacted? 

Have a worklet that find and removes appdata for a legacy application from all user profiles on a system. Unfortunately it doesn’t appear to be working when I run it for all endpoints ( worked fine for a single endpoint test ). $NameShort = "Q-Pulse" if ($NameShort.Length -gt 7) { $NameShort = $NameShort.Substring(0, 4) + "\." } $rex = $NameShort + "\..+" $Paths = @( "$env:Localappdata\Apps\2.0" "$env:Localappdata\Deployment" "$env:Localappdata\Microsoft\Windows\INetCache\IE" "$env:Temp\Deployment" )foreach ($Path in $Paths) { Get-ChildItem -Recurse $Path | ForEach-Object { If ($_ -match $rex) { Remove-Item -Force -Recurse $_.FullName } } } $startMenuPath = [Environment]::GetFolderPath("StartMenu")$appShortcut = Get-ChildItem -Path $startMenuPath -Recurse -Filter "*$($NameShort)*.appref-ms"if ($appShortcut) { Remove-Item -Path $appShortcut.FullName -Force}Remove-Item -Path "$env:

Hey Ottobots! We are pleased to say that the new tray icon and notifications have started appearing for our users on Automox, however we note that this doesn’t appear to have the text defined in our policy.  Does anybody know if: We can adjust the logo and the “Automox” text to be company-branded?  We are able to adjust the text in the notification window? We would like to tell our staff WHAT is being updated, for example.  In the policies, we are currently still seeing deferral, rather than “deadline” which was announced. Does anyone know where we configure the deadline please? Thanks in advance!  

I have been trying to figure out a way to remove local admin rights from users on domain joined devices with an Automox worklet but haven't made any progress.  The closest I got was with a worklet that would check to see if the current signed in user is a member of the local administrator's group, and if so, add them to the local Users group and delete them from the local administrator's group, but it always tries to move the NT AUTHORITY\SYSTEM account.  I need to do this on a large scale, so having to specify the account to move isn't viable.  Has anyone tried to do something like this before?  Any hints or suggestions? The only domain account that should be in the local administrator's group would be “[Domain]\Domain Admins“ This is what I tried:# Get the current logged-in user$currentUser = [System.Security.Principal.WindowsIdentity]::GetCurrent()$userName = $currentUser.Name# Define the local groups$usersGroup = "Users"$adminGroup = "Administrators"# Check if the user is already i

Hello, I am trying to follow the Automox/PowerBi guide here: https://help.automox.com/hc/en-us/articles/8180172309780-Custom-API-Dashboard-through-PowerBI#h_01HAT7WZ8E95S0YA6E8FCYVY5B but running into an issue on step #6 (Double click to open Automox_Reports_Example_v1_wAPI.pbit from C:\temp\.). When I do this, PowerBI states “query is blocked by the following errors: health, The column 'name' of the table wasn't found.”  Due to this, all the PowerBI report pages are blank as the rest of the queries don’t load. When opening up health.csv, I see that it is empty.  Any thoughts? 

Is there a way in the console currently to restrict access to the console based on IP addresses?I know we can likely do this with SAML and utilizing restrictions with our idP of choice, but it would be ideal to lock down the console to a set of IPs that we own or operate from.This way, even if SAML breaks down, we can be sure our accounts are protected somewhat via IP addresses that we can access from. If it’s a request from support, that can work as well. But it’d be nice to have the option in console (even it means we can stub our own toes). 

Hi, our network threat detection system is alerting about hundreds of PCs downloading TightVNC.  The URLs used to conduct these downloads look like this (defanged version): hxxps://d1ovafk2iqpmhd[dot]cloudfront[dot]net/automox.com/tightvnc/@v/v2.8.84.windows-amd64.zip Can you please confirm if it is by design for the amagent.exe to download TightVNC even if no admin ever intentionally installed TightVNC on any PCs?  If so, why would this happen if we don’t use TIghtVNC or Automox for remote desktop control?

Hi Ottomaters! I am currently working on a script to obtain the “Needs Attention” devices from the API. The idea is to deliver this to our agents by email / Teams so that we can proactively remediate any update problems before they turn into major problems.  I have two devices in my test group which require attention (This is from the dashboard in console): However, when I try to run the API call:/reports/needs-attention?limit=250&offset=250&o={orgID} It seems that the API returns no results? : { "nonCompliant": { "total": 0, "no_known_cves": 0, "unknown": 0, "none": 0, "low": 0, "medium": 0, "high": 0, "critical": 0, "devices": [] }} I suspect that I am missing something really silly and simple here, but I’ll be honest it’s got me scratching my head a bit! Grateful for any pointers as to where I might be going wrong. Thanks in advance.

Hi all,  Does anyone know if Automox has any recommended Microsoft Defender exclusions please? We use Microsoft Defender for Endpoint and want to ensure we’re not impeding on Automox performance / usability at all please. Further, if anyone knows of any local client firewall rules (other than the 7844 for Cloudflare Tunnels) that might be needed please.  I tried to search but I can’t seem to see anything, so thought I’d best double check. Thanks in advance!  

I am looking for a PS script to get a list of all software installed in our environment and determine which ones Automox can patch and which ones cannot be patched by Automox. Thanks 

Good Morning, I’m experiencing a lot of unexpected trouble with what should be a simple Windows program install. The program in question is called ElevateUC. installer is 32bit and does not require any special permissions or license to install.I ran “start-process -filepath "C:\Temp\elevate-uc.exe" -ArgumentList "/S” in a non elevated powershell and it installed in about 30 seconds, but when I try it in Automox it gets stuck at “pending” and eventually times out after about 30 minutes. with this error:Standard Output: Failed to install Elevate UC 2.16.456 version 2.16.456. Please see installation logs if applicable.Standard Error: COMMAND TIMED OUT.I Tried the “EXE Software Installation (System Wide-All Users)“ Worklet and after triple checking the version, display name, etc as well as using wildcards it still does not work, I get variations of the error above based on using wild cards, different versions, etcI can see it start the process (evaluateUC.exe) in task manager, but it just

HelloHow do you keep linux up to date?I would like to understand what would be the best practice.Do patch policies address Linux OS machines?Or is it necessary to do it via worklet?

I’m trying to use automox to reset a local user on a bunch of windows 10 machines. But I keep getting an error.# Define the username and new password$scriptBlock = {$adminUsername = "Local User"$newPassword = "Password"$securePassword = ConvertTo-SecureString -String $newPassword -AsPlainText -ForceSet-LocalUser -Name $adminUsername -Password $securePassword -ErrorAction SilentlyContinue}$exitCode = & "$env:SystemRoot\sysnative\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -NonInteractive -Command $scriptBlock Anyone been able to make this work? 

Overnight we received at least 100 failed update notifications for Google Chrome on our endpoints. The error is pretty vague and we confirmed that on each endpoint that received the error Chrome was not updated to the expected version 131.0.6778.109. What’s even more bizarre, each endpoint that reported this error no longer shows that Chrome is installed, either directly from the Control Panel or within the Automox Console. So now those endpoints won’t get updated at all since Automox isn’t seeing Chrome installed. “Failed to apply patches ("Google Chrome"): Update of google_chrome failed with exit code 1603” I’m looking for any help in figuring out how to remediate this. I’m going to start by trying to redeploy Chrome with other tools, and pausing the original “Keep browsers up-to-date” policy that was enabled during our onboarding into the product.