Skip to main content

Using Automox

Sharing is caring, so we'll share our best practices and tips for using Automox. Ask your questions to make the most of your Automox experience!

  • 672 Topics
  • 2,233 Replies
672 Topics
Z
Zach NodakRookie
asked in Using Automox
Windows 2016 Servers not updating

Good Morning, We’ve been dealing with an odd issue for the last few months on 2 of our servers when it comes to updating. We run a “patch except” policy for our servers that can be rebooted once a month to update them and without fail both of these servers will succeed in installing the update 5 times, then fail once and not actually install the updates or reflect the updates on Automox.Below is what I see when I filter the AX Activity Log for the day after running the policy. Failed to apply patches ("2024-11 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5046612)" "Windows Malicious Software Removal Tool x64 - v5.130 (KB890830)" "Microsoft Visual C++ Redistributable 32-bit" "Microsoft Visual C++ Redistributable 64-bit" "Broadcom Inc. - System - 9.8.18.1"): Installed patches: "2024-11 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5046612)" "Windows Malicious Software Removal Tool x64 - v5.130 (KB890830)" "Microsoft Visual C++ Redistrib

620
Z
S
srheinsPro
posted in Using Automox
Enforce Scheduled Reboot on Machines

I’m new to AutoMox and would like to know how to create a worklet that I can assign to a group of machines and schedule them to reboot on a monthly basis. Is this possible and how would I go about creating this worklet.

9385
R
K
KadThomp
asked in Using Automox
Automox System Tray Agent Beta - Popup Location

We signed up for the new system tray agent beta. I was curious if anyone knows if the location of the popup can be configured? Currently it is not popping up over the system tray. It’s popping up in the center of the screen. 

1591
S
S
SophiaAXCommunity Manager
posted in Using Automox
FYI: Automox's Third-Party Patching Process

The challenge with third-party patching lies in the diversity of solutions each vendor employs to distribute updates. Without a centralized solution, your teams are left juggling various update processes, creating inefficiencies and leaving endpoints vulnerable.Automox’s Third-Party Patching ProcessWe offer a cloud-native solution that simplifies third-party patching by consolidating various update methods into a single, cohesive process. Here’s how the process works from start to finish:Step 1: Inventory and IdentificationDevices are scanned to identify updates needed for first and third-party applications. The default scan interval is 24 hours, but this can be customized to meet specific needs.Step 2: Centralized Policy ManagementIT teams can implement flexible policies to automate patch deployment, allowing for consistent updates across devices without manual input.Step 3: Caching and DistributionFor macOS and Windows software, Automox caches third-party updates in its software cata

160
S
cpletcher
cpletcherRookie
posted in Using Automox
Bulk deployment of automox agent using Lansweeper's deployment package

Hello,I was unable to find any information on Lansweeper's deployment page or on Automox on deploying the Automox agent using the Lansweeper deployment tool. This deployment package will install, and can also assign the device to the group you want. Below is how I have mine set up. Action - InstallerStep Name - Install (or whatever you want to name it.)Install File - {PackageShare}\installers\Automox_Installer-2.0.28.msi (Or when you placed the installer.)Parameters - ACCESSKEY=YOURACCESSKEY GROUP="Default Group/Group you want to assign it to"MSI Options - Install, No Restart, QuietThis will populate the result command, so below is a preview of my Result command.msiexec.exe /i "{PackageShare}\installers\Automox_Installer-2.0.28.msi" /norestart /qn ACCESSKEY=********-****-****-****-************ GROUP="Default Group/City Computers" The part for GROUP, will be the Parent group that you have set up, and then the name of the second group. Mine is still Default Group, and then the other grou

810
cpletcher
joeattcg
joeattcgRookie
asked in Using Automox
IP based restrictions to the Automox Console

Is there a way in the console currently to restrict access to the console based on IP addresses?I know we can likely do this with SAML and utilizing restrictions with our idP of choice, but it would be ideal to lock down the console to a set of IPs that we own or operate from.This way, even if SAML breaks down, we can be sure our accounts are protected somewhat via IP addresses that we can access from. If it’s a request from support, that can work as well. But it’d be nice to have the option in console (even it means we can stub our own toes). 

661
A
R
RAHULNATHNovice
asked in Using Automox
Assistance Required to Configure Install Notifications for Third-Party Applications

Hi Team,While updating the third-party application on our client device, the client needs to be informed that, before the application update, an installation notification will be triggered on the device. From this installation notification, the end user should be able to identify which applications are going to be updated on the device.We can customize the installation notification using 125 characters, but how can we use the notification to inform the user that these specific applications are going to be updated?Could you please assist us in configuring this setup?

511
K
R
rob.hendryRookie
posted in Using Automox
Run worklet on agent install

Hi,Is it possible to automatically run a worklet directly after the Automox agent has been installed on a new device. I want to deploy software using Automox during user enrollment.Thanks,Rob

351
K
C
Carl_OlsenRookie
asked in Using Automox
Automox Console - How do I disable the notification/message bottom right ?

Automox Console - How do I disable the notification/message blue circle bottom right, that keep doing popup?I couldn’t find anything, I assume there is no setting for it ? Let me know if it’s possible, else I will use an ad blocker.Thanks !

872
C
R
rav001Rookie
asked in Using Automox
SentinelOne Exclusions

I cant be the only one experiencing this. S1 seems to be causing issues with Windows Servers being consistently patched. We have exclusions in place, but this doesn't seem to help. When we want patches to be fully applied across all servers, we have to disable the S1 agent completely during patching window. This is of course unacceptable. Anytime I contact support all they say is they see the device that had issues when trying to scan and receive this error: {"args":"","response":"[\"255\", They then point me to their documented S1 exclusions. I’ve attached our S1 exclusions that we have in place but they don't seem to help. I even tried changing the amagent execution directory to C:\ProgramData\amagent and that didn't help either.  

2361
K
AX-YazMoreno
AX-YazMorenoAutomox Employee
posted in Using Automox
What’s Next? Your Turn to Shape our Expert Insights

We’re committed to providing the most valuable resources to help you conquer your patching and Automox console challenges. 🤝 That’s where YOU come in. We’re hosting future Expert Insights webinars, and we want to make sure they’re packed with the info you need. 🗒️ 💡 What Automox features or integrations would you like to see demonstrated or discussed in future webinars? Did you miss out on January’s Expert Insight webinar on best practices and configurations for patching? We’ve got you covered! You can still be a patching pro by catching the recording here: https://university.automox.com/automox-expert-insights-first-third-party-patch-policy-best-practices

1222
AX-YazMoreno
T
Tea-JRookie
posted in Using Automox
Automated Way to Group Devices

Is there an automated way to group devices in Automox? I have over a thousand devices discovered and need to group them but I don’t want to have to search for each device and assign to groups. Is there a way to maybe import a csv file into groups in Automox?

6365
T
A
automox_admin_8732Rookie
asked in Using Automox
XDR alerting about hundreds of machines downloading tightvnc

Hi, our network threat detection system is alerting about hundreds of PCs downloading TightVNC.  The URLs used to conduct these downloads look like this (defanged version): hxxps://d1ovafk2iqpmhd[dot]cloudfront[dot]net/automox.com/tightvnc/@v/v2.8.84.windows-amd64.zip Can you please confirm if it is by design for the amagent.exe to download TightVNC even if no admin ever intentionally installed TightVNC on any PCs?  If so, why would this happen if we don’t use TIghtVNC or Automox for remote desktop control?

582
A
Marshyp
MarshypPro
asked in Using Automox
Needs Attention Report - API

Hi Ottomaters! I am currently working on a script to obtain the “Needs Attention” devices from the API. The idea is to deliver this to our agents by email / Teams so that we can proactively remediate any update problems before they turn into major problems.  I have two devices in my test group which require attention (This is from the dashboard in console): However, when I try to run the API call:/reports/needs-attention?limit=250&offset=250&o={orgID} It seems that the API returns no results? : { "nonCompliant": { "total": 0, "no_known_cves": 0, "unknown": 0, "none": 0, "low": 0, "medium": 0, "high": 0, "critical": 0, "devices": [] }} I suspect that I am missing something really silly and simple here, but I’ll be honest it’s got me scratching my head a bit! Grateful for any pointers as to where I might be going wrong. Thanks in advance.

431
Marshyp
Marshyp
MarshypPro
asked in Using Automox
Automox Defender Exclusions

Hi all,  Does anyone know if Automox has any recommended Microsoft Defender exclusions please? We use Microsoft Defender for Endpoint and want to ensure we’re not impeding on Automox performance / usability at all please. Further, if anyone knows of any local client firewall rules (other than the 7844 for Cloudflare Tunnels) that might be needed please.  I tried to search but I can’t seem to see anything, so thought I’d best double check. Thanks in advance!  

2006
Marshyp
A
Andrew_ReadRookie
posted in Using Automox
User Role - More Ganularity

Is it possible to assign a role that enable the user to execute policies, but not allow them to add/delete/edit policies? It would also be helpful to assign permissions based on Group membership or some other construct where devices belong to an organisational unit. - For example, delegating controls to a regional IT team, or to a team that supports end-user devices, but should not be able to manage servers.

977
S
R
RAHULNATHNovice
asked in Using Automox
Assistance Required : Removing Agent on Debian

Our client attempted to uninstall the Automox agent from a Linux machine but encountered multiple issues.Details of Actions Taken: Stopping the Agent Service: ~$ sudo service amagent stop Deregistering the Agent: ~$ sudo /opt/amagent/amagent --deregister Output: no certificate to deregister Attempting to Purge the Agent Package: ~$ sudo apt-get purge amagentOutput: Reading package lists... Done Building dependency tree Reading state information... Done E: The package amagent needs to be reinstalled, but I can't find an archive for it. Reinstallation Attempt: The client tried reinstalling the agent using the following command: curl -sS "https://console.automox.com/downloadInstaller?accesskey=ORGANIZATION-KEY" | sudo bash However, the result indicated that the agent was already installed: Output: /opt/amagent/amagent already installed Dashboard Attempt: The client also attempted to delete the agent directly via the Automox dashboard. Unfortunately, this action failed, as the

1073
S
V
vhanagamiRookie
asked in Using Automox
Automox Policy Schedule Question

I have a question about the policy schedule option, “If a device misses a patch window, patch it the next time the device checks in” We have systems that need to patch at a particular day and time of the week. If this option is selected and for what ever reason, a server misses the installation on the scheduled date and time, can the server patch and reboot, once it checks in and could that be at any time of the day? If it is only during the window, what does Automox consider the “Window” since the schedule only includes, “Months, Weeks, Days” and a scheduled time

755
M
F
Fabio BrigoniNovice
asked in Using Automox
Updates Linux

HelloHow do you keep linux up to date?I would like to understand what would be the best practice.Do patch policies address Linux OS machines?Or is it necessary to do it via worklet?

1046
CallmePH
N
Nick SRookie
asked in Using Automox
Google Chrome Update Error 1603

Overnight we received at least 100 failed update notifications for Google Chrome on our endpoints. The error is pretty vague and we confirmed that on each endpoint that received the error Chrome was not updated to the expected version 131.0.6778.109. What’s even more bizarre, each endpoint that reported this error no longer shows that Chrome is installed, either directly from the Control Panel or within the Automox Console. So now those endpoints won’t get updated at all since Automox isn’t seeing Chrome installed. “Failed to apply patches ("Google Chrome"): Update of google_chrome failed with exit code 1603” I’m looking for any help in figuring out how to remediate this. I’m going to start by trying to redeploy Chrome with other tools, and pausing the original “Keep browsers up-to-date” policy that was enabled during our onboarding into the product.

2893
M
R
RAHULNATHNovice
asked in Using Automox
Connection Failures Between Client System and the Automox WebSocket Server

Situation:We had scheduled a policy, but the client device disconnected two minutes before the scheduled scan.Findings:Upon analyzing the amagent log, we identified intermittent connection failures between the client system and the Automox WebSocket server (wss://api.automox.com/stomp).After a few minutes, the connection was re-established, and the server sent an install update notification to the client device.Question:What could be the potential causes of these connection failures between the client system and the Automox WebSocket server? What steps can we take to resolve this issue?

501
JohnG-Automox
R
RAHULNATHNovice
asked in Using Automox
How to Test Automox Notifications on Windows Manually

How can I manually test Automox notifications on a Windows device to ensure they are working properly?

561
CallmePH
C
chris.liddiardRookie
asked in Using Automox
How to deal with Assets stuck in 'Needs Reboot'

We are aware of the issue with initiating reboots from windows and that these are not completing the required Automox reboot work. For instance if a user @10AM defers a policy reboot for 4 hours and then decides to reboot their device @1PM during lunch the reboot work is not completed. I understand this is tricky to fix. But how are people dealing with those devices as they can remain in ‘Needs reboot’ for quite sometime if no manual intervention.  Is there not a worklet that can trigger the automox notifications to say ‘click here to reboot’ or similar. Be good if the popup could remain when reboot is deferred so that reboot could be initiated from the popup. Thanks Chris

650
C
R
RAHULNATHNovice
asked in Using Automox
Reboot Notification Issue Post-Windows Updates

We have set up user notifications in the format shown below, but end users are not receiving reboot notifications after completing Windows updates. Could you please help with this? 

12011
R
M
MattEWG
asked in Using Automox
Operating System Native Reboot Integration

Hi Guys,I have previously mentioned this to support although I am not too sure if there is a procedure for requesting additional features for the Automox agent? thus thought it would be useful to post in the community to try and reach out the toe correct team\department.It would be really useful if the Automox agent was able to integrate with windows from a native OS reboot perspective. One thing I am seeing allot  is that users are postponing the reboot notifications generated by Automox and then restarting there device outside of Automox. Although patches are still being applied the Automox dashboard does not appear to be aware of this reboot and the agent continues to report  back to the dashboard that a reboot is required.If the reboot is initiated from the Automox reboot notification the dashboard updates as expected when the r the host reboots although it would be useful if there was some integration to reboots that are initiated outside of the Automox.

2741
L
Terms & ConditionsCookie settings