Using Automox

Sharing is caring, so we'll share our best practices and tips for using Automox. Ask your questions to make the most of your Automox experience!

642 Topics
2,191 Replies

asked in Using Automox

Windows - Manually Click "Check for Updates"

Hi all,Last night we had a system reboot unexpectedly. The policy used on this system is set to never reboot. The end user told me that they manually went into Settings → Updates → Check for updates before they left for the day, which triggered a CU to download/install. My question is, if a user manually checks for updates, clearly this overrides the Automox update policy. But, does this also override the Automox reboot setting which is configured in the policy? Thanks in advance for any help!

RoobusBoiNovice

posted in Using Automox

Feature Request - Tag Management

This I feel is especially important for those who manage consoles of multiple offices/entities. As each organization has their different nomenclatures and tagging practices, the only ways you can effectively track down all existing tags in the environment is by going to the Devices section and double clicking the Tags column, this will present all devices tagged in descending order, or by using the Actions option and clicking on Apply Tags (Read-only users can’t assign the tags but can see them). Lastly one can fetch a CSV report from the Devices tag and find from there. Point is, natively from the cloud console, there is no “dedicated” way. It would ideal if Zone Operators, Admins could create tags arbitrarily (like as it is right now) but one can also check existing tags and which devices have been tagged with them, kind of like the Groups subsection in the Manage section.

victor.tremeaRookie

asked in Using Automox

Delete file in privileged folder like system32

Working in a script able to delete files in privileged folder like system 32. But getting “File '\Windows\System32\Tryme\new 2.txt' does not exist.” on the script bellow. According to the reponce on this: Automox runs as SYSTEM so this issue is unlikely related to elevated privileges.Any suggestions? What am I missing here? Evaluation Code:Exit 1 Remediation code: $filePath = "C:\Windows\System32\Tryme\new 2.txt"# Check if the file existsif (Test-Path $filePath) { try { # Attempt to delete the file Remove-Item -Path $filePath -Force -Recurse Write-Output "File '$filePath' has been successfully deleted." } catch { # If an error occurs, display the error message Write-Output "An error occurred while trying to delete the file: $_" }} else { # If the file does not exist, inform the user Write-Output "File '$filePath' does not exist."}

asked in Using Automox

Deploy Dell SupportAssist OS Recovery

With the recent events in CrowdStrike world, we have all Dell enpoints and found that they could not get into the winRE without the SupportAssist OS Recovery to fix issue. Is there a way to deploy this tool via Automox?

asked in Using Automox

Automox FreshService integration

Hello,I am currently trying to integrate Automox with FreshService but when i search for a device that is compliant within Automox and also is a Asset within FreshService the Automox app within FreshService keeps saying: “The Device does not exist in Automox”. I configured the API and set the schedule to run daily at 12:00 AM but it has been a couple of days now and still no information is displayed.Has anyone here have any experience in setting up this integration?

asked in Using Automox

Automox Console Timeout

Hi Team,The Automox Console seems to have a very quick timeout on a session.Is there a way we can choose the timeout?It would also be useful if there was a way of enabling conditional access rules to say, that login request coming from a specific IP is trusted and therefore doesn’t require MFA?Cheers.

Anthony_DCCARookie

asked in Using Automox

How to submit Feature Requests?

What’s the most effective way to submit feature requests to Automox? All the links in this post: are broken, so that feature board doesn’t appear to still work. Do I need to open a support ticket? Start a new topic? Do something else entirely? Thanks.

posted in Using Automox

Feature Request - Filter Software Section

In our case, we don’t do Microsoft Updates, it would be great if we could only see 3rd-Party updates.. 10-15 vs. 250 updates…So please filter out MS Updates (and ability to make it default view)ty

lgaudreauRookie

asked in Using Automox

How to actually change groups from the commandline?

I’ve tried multiple ways to change groups a device is in from the commandline on the device, all unsuccessfully.I’ve tried the suggestions from https://help.automox.com/hc/en-us/articles/5384338960020-Deploying-the-Automox-Agent-in-Bulk, and installing with the MSI options to add to a group are ignored - it always ends up in the Default Group only.This command will only install it to the Default Group, ignoring the child group:Start-Process 'msiexec.exe' -ArgumentList '/i "Automox_Installer-latest.msi" /qn /norestart ACCESSKEY=<key> GROUP="Default Group/Dev Group 1"'The PowerShell script just fails silently to even install at all when I run it, using the command as an administrator, although the same is true when run from Windows PowerShell ISE interactively..\Install-AXAgentMSI.ps1 -AccessKey <key> -GroupName "Dev Group 1"https://github.com/AutomoxCommunity/se-utilities-public/blob/main/Scripts/Install-AXAgentMSI.ps1 On Linux it’s even worse - the options to move to differ

MD Shoaib PashaNovice

asked in Using Automox

Dynamic groups in Automox.

Hi,In Automox, do we have Dynamic group populated? Instead of static group or manual group?

JSTRookie

asked in Using Automox

Feature Update Question - uninstall tight VNC

We have PCs dotted around the world, although most are in the UK. All of them at some time or another can be a struggle to connect to with automox.I found with a couple recently, I had to use team viewer to connect and remove VNC - because the port was engaged by VNC, it was seen as ‘busy’ when attempting to connect. So you could never connect.After removal, Automox would then re-connect, re-install VNC and all would be well.I could write a worklet to remove VNC I guess, but was wondering how easy it would be just to use a worklet to free up the port?

Nick SRookie

asked in Using Automox

Server 2012 R2 Agent Service Fails to Start

I’ve recently noticed that when our 2012 R2 servers restart the Automox Agent service does not automatically start. The service on each server is set to “Automatic” but this fails to happen. Checking the event log I see the Error below. Is this a known issue for Automox on Server 2012 R2, or could this be something specific to our environment? During the boot process this event is logged:“A timeout was reached (300000 milliseconds) while waiting for the Automox Agent service to connect.” After logging in I can manually start the Automox Agent service without issue, it’s just not ideal to need to do that each time the servers restart.

RLSAFRookie

posted in Using Automox

would be nice to mitigate dashboard items faster by triggering multiple patch now actions.

would be nice to mitigate dashboard items faster by triggering multiple patch now actions.clicking on a dashboard hotlink will take me to the softwares that need to be patched or mitigated but then i have to go to over to actions and then patch now. would be nice if I can select ALL the products I wanted to patch and then do a “patch now” to save myself lots of clicks.

asked in Using Automox

Tag removal question

I don’t think this is a bug per say, but when “removing” a deployment tag from new pc’s the console deleted the tag as a whole! Is there a way to not have this happen? Also, this isn’t a worklet question, but I can’t post in the platform forum lol!! The category drop down doesn’t list it! =(

Fabio BrigoniNovice

asked in Using Automox

How do I create an email alert that informs me when an asset has not communicated with the portal for x days?

posted in Using Automox

Automox and Drivers

Hey all, Just wanted to check to see if Automox has the ability to patch drivers on Windows devices? I.e. how WSUS has this ability? Would like to retire WSUS completely for end user devices, and would be beneficial to tap into the MS Windows driver update channel.

jaldeguerRookie

posted in Using Automox

Deploy AutomoxAgent to macOS via Microsoft Endpoint Manager (intune)

I have created a deployment configuration via the Microsoft Intune dashboard. Before I deployed the app I had to convert it to an intunemac using IntuneAppUtil. In my Intune dashboard, it says the app has been installed on the macOS (Big Sur) device. Using the terminal I can indeed see the agent installed in /usr/local/bin/amagent. But when I checked my Automox devices dashboard I don’t see the device registered. Has anyone done this before successfully what additional steps have you done? Screen Shot 2021-09-02 at 3.55.18 PM1118×623 47.8 KB Thanks.

danrubinsRookie

posted in Using Automox

Feature request: Crowdstrike deploy via tags

We’ve been making good use of the Automox Agent Deployer and it really has helped us get started quickly. As we enter the next phase of our rollout, we want to target deployments with a given Automox Key to a subset of machines that share a Crowdstrike Host Group with machines we don’t want to target - so we’d really like to be able to deploy using FalconGroupingTag and SensorGroupingTag.I think our workarounds would be move machines into different Crowdstrike Host Groups, which would be challenging due to our other integrations, or manually run the script against each host via Crowdstrike RTR, which would require other development work and doesn’t make use of the excellent Automox Agent Deployer that is already built.

asked in Using Automox

Scan without patching for a baseline report

Is it possible to create a policy to scan a group of devices for missing critical patches then create a report the breaks out which critical patches are missing. We do not want to patch those devices with this policy, only scan.

sparrowhawkNovice

asked in Using Automox

Automatically disable patch after specified number of failed attempts

This doesn’t happen too frequently, thankfully, but when it does it can be very frustrating for end users.A patch that requires a reboot fails to install so Automox tries again on the next scheduled run. As I find I have to run schedules often to keep up with the number of patches, this can mean that a user has to reboot every day.What I’d like is the ability to disable a patch after a number of failed attempts so that this doesn’t happen. I’d also like to be notified about this so that we can investigate the cause.As we get too many failure notifications we’ve actually turned these off for now anyway.Does anyone have any thoughts or suggestions on this?Thanks

asked in Using Automox

Patching and Completion Notification

Hello, I would like to notify end users once their patching is completed so that they know if it is okay to shut down their device.If a device is shut down, logged out, or put in sleep mode, the patching will fail. I’ve noticed this multiple times with testing on different devices. There is no real way for an end user to know when their patches have been updated. Furthermore, on Automox I am able to see each “Device Status” as “Refreshing” when updates are being conducted, and “Ready” once they are complete.I would like confirmation that Refreshing = Patching. With that wording it is a little confusing.I have ran manual patches on certain devices that will begin “refreshing” and after completion, they will turn to the “ready” state. Although I will still see the same patches needing an update in the “Software” section of the device. Does anyone know why this is happening? It is as if the patch runs and after completion nothing actually happened with those items that needed to be patche

asked in Using Automox

Group Parameter in MSI Installer

Good Afternoon,I’m planning on deploying via GPO using MSI. I’ve gotten the ACCESSKEY entry added to the MSI using Orca. I was hoping to assign device group membership as well. Could someone please provide the syntax for this? I haven’t had any luck, and am not finding any documentation. I tried the following with no success:Property: GROUPValue: “Default/Parent Group/Device Group”Thanks!

asked in Using Automox

Incorrect Machine Restart States

Hi there,I’ve been experiencing an issue on certain clients where the Automox device section states “Reboot Required” even when a reboot has been administered, in some cases multiple times. I’ve tried manually restarting, restarting from the Automox client, CLI restarts, etc. The message is persistent. This seems to only apply to macOS devices. Any ideas?Best,Dane

asked in Using Automox

How to enforce Macos reboot after Macos patching

Hi I would need some adviceI use policy “Patch recently released macOS updates”. It shows a pop-up window and if user click on “patch”, e.g. MacOS 14.3.1 is upgraded to 14.4. But I see it has two IFIf user does not click on “patch” button, MacOS is not updated If he does it, MacOS is not restarted. There is just notification in Settings icon, but my users ignore it. Is not there any way to enforce patching even if user does not click “Patch” button? Is not there any way how to significantly show to user he should reboot? And if he does not reboot, reboot is forced e.g in 48 hours? Thank you for you helpAldomoro

jfranciscoRookie

asked in Using Automox

Microsoft Teams failing to apply patch because it is currently running.

Any solutions to the output below? We have such low compliance because everyone uses Teams. Failed to apply patches ("Teams Machine-Wide Installer..."): Error: Microsoft Teams is unable to patch because it is currently running.