Using Automox

Our team is looking for some feedback around device attributes and group configuration. All you need to do is take a quick survey here and leave your thoughts. Thanks for your help!

Just wondering if there are others out here that have internet access disabled for servers and are having trouble getting windows updates allowed. We are struggling with this and notice an inconsistent Automox experience because of this. We have allowed almost every known URL of windows updates and the packages URL of Automox but just wondering how you are handling this.

Context: I have this script that edits local GPO for a specific usecase I have. When run locally the script runs fine, makes the changes to the local GPO and ends. When running in automox the worklet reports it ran all the way through, but when checking the machine itself it does not actually change anything. Any ideas on what might be causing this? Script: #Set Execution policy to allow for 3rd party modules Set-ExecutionPolicy Unrestricted -Force #Instal NuGet which is needed for PolicyFileEditor Install-PackageProvider -Name NuGet -MinimumVersion 2.8.5.201 -Force #Install PolicyFileEditor Install-Module -Name PolicyFileEditor -RequiredVersion 3.0.1 -Force Import-module -Name PolicyFileEditor #Designate the User's local group policy directory $MachineDir = "$env:windir\system32\GroupPolicy\Machine\Registry.pol" Get-PolicyFileEntry -Path $MachineDir -All #Enable Deny write access to removable drives not protected by Bitlocker $RegPath = 'System\Cu

As an MSP, we need the ability to notify our customers when their scheduled device group is complete. Looking to the community to see if anyone has accomplished what we’re looking to do! Currently, Automox has the ability to notify on an individual device basis, but not when an entire group is finished. This notification also does not discriminate between device groups or users, so if you subscribe to the notification, you get an email for every patch action for every device in the org vs a summary for the entire group when it completes. To work around this, we’ve abstracted the patch execution into a PowerShell GUI that allows us to execute the policy, automatically check the command queue every so often for each individual device until we can ensure patching is complete, and then automatically pull a summary of each device’s status (e.g. outstanding patches, reboot required) in the group, wrap it all up into a nice email and then send that to our customer’s email add

A place for customer feedback about Automox

Hi, The software menu seems abit incomprehensible to me, in order to fix the recent 0day exploits to Chrome I had to manualy force “Patch Now” on Chrome. As you can see on the picture below (it was worse before patching yesterday) I get several lines with 1-5 devices based on the OS version and with several different OS versions the list gets long. It gets tedious to click “Patch Now” on all these, and hard to keep track of which you forced. Is it possible to get a submenu or something on the different softwares and force update on all affected devices at once, regardless of the OS Version?

Hey guys, Wondering if there is a way a ‘Check device’ button could be thrown up with the ‘Scan’ and ‘Reboot’ buttons on the primary device search screen? Obviously the ‘Check Device’ name isn’t right but something that can produce the same functionality?

NOTE: If you are an AX employee please do not take this test, for customers only! I’d love for you to take this quick 2 minute usability test around the dashboard. << It is not the final visuals >> Thank you!

I see that I can use Action -> Ignore to block the installation of specific software patches by Automox, but does that actually block the manual installation by a local user with admin privs? I’m attempting to block installation of Big Sur until we have had time to test with core applications, etc. Any ideas or suggestions?

Hi all, Has anyone else noticed a significant drop in speed of the Policy Editor? Specifically when I’m using ‘Patch Except’. It takes upto 10 seconds to search through the filter package list, so you can waste minutes if you want to add 6 or more. I dread to think what larger companies are having to wait for, when it spins through all the applications. Is there anything I can do to speed it up? I’m on W10 & Chrome. Cheers, Chris.

Hi, I would like to request a feature to run a Patch Policy each hour in order to patch Microsoft Defender updates as soon as possible when they get released by Microsoft. Currently we run it once a day at 11 AM, but then the update might have been released and superseded several hours ago. Also scanning for updates should also be able to run every hour if not every half an hour. Kind regards Tom Aril Virak

Is there a way I can target multiple policies to a single computer? For example, I have 10 computers. Computers 1 - 5, I would like them to be a target of a worklet that deploys Powerpoint templates. Computers 1-10, I would like to apply a specific patching policy for OS updates. Computers 6-10, I would like to apply a specific patching policy for Firefox. I notice a computer can only be a member of one group. I was initially thinking of putting the computer into multiple groups so achieve #1-#3 above. Thanks

I am just getting in to leveraging the Automox API and my first hold up is successfully authenticating with 2FA enabled. Is there a way around this or a separate process to be able to make this work?

Hi, Is anyone else running into issues with OSX still prompting users with a notification about amagent wants access to control “Microsoft AutoUpdate.app”? I followed the guide here: https://support.automox.com/help/macos-privacy-preferences and near as I can tell i configured a privacy policy for it correctly in JAMF. But recently some new employees started getting the notifications.

Don’t worry, I’m not going anywhere, I’m just getting some help with running the community. @Brittany joins us from Spiceworks, where I worked with her previously. She’s going to be another person besides me that you can reach out to for assistance with anything related to the community. I’ll let her do the rest of her intro in the reply below.

Why is it when I create tags they will sometimes show up in the list with quotes? Sometimes they do not.

Built In Colorado sat down (virtually) and talked with Automox CEO Jay Prassl to discuss our company’s move from the offices in Boulder to the offices in our homes all over the world. If you’re curious about the shift and some of the tactics used to make the transition easier, check out this amazing write up! Built In Colorado

I am looking to patch mostly ubuntu workstations and have a question about the reboots in a policy. Does it always reboot, or just when a reboot is required?

Hi Automoxers! Are any of you using an asset management tool that integrates with Automox? If so, what is it and do you like it? Looking for one that has barcode/QR code capabilities. Thanks!!!

I’m looking to schedule user research sessions to learn how you use our current platform for deploying and managing software and what other tools you use for your software deployment needs. Let me know directly if you are available for a conversation this or next week!

I have a use case where i need to install a certificate, and the EXE wanting to do that needs to be run as the user. Automox runs as SYSTEM, is there anyway i can execute an EXE as another user (the logged in user) to install the certificate, without prompting the user? Full context here, under the Windows section: https://duo.com/docs/trusted-endpoints-generic

Hi, Some of our users are experiencing issues with random reboot when we enforce reboot in the patch policy. We patch every Wednesday at 13:00 (1 PM) and have set up that devices can be patched outside maintenance window if they missed it. Users report that they get the notification and option to Defer the restart, but the device restart immediately even if they choose to wait. Seems to be an issue when a client patches outside maintenance window. Had to turn off automatic reboot because of this. Another issue is that the end user never gets a notification to reboot the device after it has been patched and automatic restart is not enforced. The user should be reminded regulary.

Anyone using Automox to track missing mandatory software on a workstation? Such as CrowdStrike, etc.

I am trying to install MSI file using automox. unfortunately everything I try fails exept executing the MSI install from BAT file. If I place the MSI command in a BAT file the deployment works correctly. Here is the BAT file command which works for deployment using automox: QuickCardSetup.msi /qb tclientkey=ClientKeyHere then in automox I have: return $(Start-Process “cmd.exe” “/c quickcard.bat” -Passthru -Wait).ExitCode if I try to do the same using powershell the execution will eventually time out: exit(Start-Process -FilePath ‘msiexec.exe’ -ArgumentList (’/qb’, ‘’“QuickCardSetup.msi” “tclientkey=ClientKeyHere”’) -Wait -Passthru).ExitCode I have tried different arguments without any luck /i /qn Not sure what I am missing. Any help is appreciated.