Using Automox

I created a fun and friendly API script to run multiple policies on a device by using device name and policy names. You can customize it so that $Policylist is a parameter if you like and execute different policies as needed. Even though I am only executing on one device, I scripted it to pull all device names and ID’s so that I can customize it to run on a list of devices if we need to. Pieces of this script were used from many different posts here as well as the KB. Thanks to all that posted and shared with the group. I think this brings a lot of it together and gives some flexibility to automate just about whatever needs automating. Enjoy. ####Process Params #### Example .\baseimage.ps1 -DeviceName "tec006" -apiKey "xxxxx-xxxxx-xxxxxxx" param ([String]$DeviceName, [String]$apiKey) #### List of software to install as base image $Policylist = "Apply Dell Driver Updates","Install Sophos", "Install Mozilla Firefox", "Install Google Chrome", "Install Adobe Reader", "Install EgnyteWebE

Happy Friday, again! Sharing a quick update that Automox now supports automated third-party patching support for Tunnelblick (Mac) and Snagit 2022 (Windows and Mac). This Snagit 2022 support is in addition to existing support for Snagit 2018, 2019, 2020, and 2021.As always, you can find a full list of supported third-party software here.

Happy Friday, again! Sharing a quick update that Automox now supports automated third-party patching support for Tunnelblick (Mac) and Snagit 2022 (Windows and Mac). This Snagit 2022 support is in addition to existing support for Snagit 2018, 2019, and 2020.As always, you can find a full list of supported third-party software here.

I’’m thinking worklet might be the only way to run the security audit tool scans at scale. I’m looking at Lynis - https://cisofy.com/lynis/Long term- I’d like to ship the Lynis scan report to one central location and create alerting/monitoring from that.  Any suggestions ?

Hi,I try script (worklet) for remove apps windows 10 (Spotify and WindowsStores.But dont work, anyone idea? thx.Script:Start-Transcript -Path C:\SetupLog.txt -NoClobberWrite-Output "Uninstalling default apps"$apps = @( "Microsoft.WindowsStore" "SpotifyAB.SpotifyMusic")foreach ($app in $apps) { Write-Output "Trying to remove $app" # Get the app version $appVersion = (Get-AppxPackage -Name $app).Version If ($appVersion){ # If the apps is found, remove it Get-AppxPackage -Name $app -AllUsers | Remove-AppxPackage -AllUsers } # Remove the app from the local Windows Image to prevent re-install on new user accounts Get-AppXProvisionedPackage -Online | Where-Object DisplayName -EQ $app | Remove-AppxProvisionedPackage -Online # Cleanup Local App Data $appPath="$Env:LOCALAPPDATA\Packages\$app*" Remove-Item $appPath -Recurse -Force -ErrorAction 0}  

We install our apps through MEM/Intune and trying to update the 3rd party apps through Automox. When we request for update of an app, it shows as a new install of app! does anyone has similar issue. do we have a fix for this? for example I tried to update 7-zip from version 19 to version 21.07. it shows as 2 apps in programs and features. 

It seems like this should be simple, but I’m having trouble figuring out the remediation code to simply copy a file I’ve uploaded to the worklet to a local directory on remote PC’s. I can see the file hitting in the amagent folder of the remote device, but once it’s transferred over, it just deletes and doesn’t copy to the directory. I’ve used all kinds of variations for the script, but no luck. Here’s the remediation code I’m using , which at least gets the file to the remote PC. copy-item -FilePath ‘.\StopUPH_EWL.bat’ -Destination c:\temp Any suggestions? Jeff

As we are patching our customer’s environment, it becomes more important to get to know each host individually. Sometimes we need to run some worklets manually on some hosts, and for this we need to know when they are online.Since some devices are turned on more often than others, it would be good to be able to set up some kind of notification (throught Slack or email) when a specific host or a host in a group of hosts is connected. 

Happy Friday! We’re excited to announce that Automox now supports automated patching for KeePassXC for Intel and M1 Macs. If you’d like more information on which third-parties we support, we have a comprehensive list of software here.

Hello Im somewhat new to Automox, ive been tasksed with creating a policy to remove Microsoft KB5009543 security update and Microsoft KB5008876 - Windows update. these are causing major issues at my organization breaking our VPN. i found this script, but not sure on how to create the worklet ( ive never done this before) Get-WindowsPackage -Online | ?{$_.ReleaseType -like "*Update*"} | ` ForEach-Object {Get-WindowsPackage -Online -PackageName $_.PackageName} | ` Where-Object {$_.Description -like "*KB5009543*"} | Remove-WindowsPackage -Online -NoRestartthe tickets keep rolling in for remote employees! please help! 

I am looking for a script to run that will give me the specs of all the machines we have in our site and export it into an excel format. Or be able to sort by certain factors.

Looking to find a way to uninstall our Sophos Endpoint agent across our Windows client

Hi, Jack! Hi, everybody - Chad here, and welcome to our [somewhat] monthly worklet-focused series of interviews, where we get to chat with developers of worklets about their process, resources, and more. This month’s guest is community member and worklet creator @jack.smith from Spreetail. He’ll be discussing his “temporarily elevate to local admin” worklet and how it came to be. Check out the Q&A below! AX: What prompted the creation of this particular worklet?Jack Smith: An EDR tool had a custom IOC built to detect when any endpoint saw the command net localgroup Administrators /add. This would trigger an alert for the Security team to review. Most investigations resulted in local admin permissions being granted by help desk so an end user could perform a manual task that required elevation. The follow-through on removing those permissions was hit or miss. Now there is a deeper discussion here as to why not just remote in, perform the task and call it a day. The issue there came

Hello Automox community! My name is Eric Huber and I’m the new Agent Product Manager here at Automox. I am excited to announce that Agent 36 is now available to download in the Automox Console! This release is for Mac devices only.  Here’s what’s new: New: Enhanced patching capabilities for all supported macOS operating systems (Intel & Apple Silicon). To reiterate, the below operating systems are supported: macOS 10.15 “Catalina” (Intel) macOS 11.x “Big Sur” (Intel & Apple Silicon) macOS 12.x “Monterey” (Intel & Apple Silicon)   Change: The commands to enable the Automox Service Account for patching Apple Silicon devices have changed. IMPORTANT: the old flags will no longer work on Agent 36. Please review our updated documentation here. New Flags--automox-service-account <enable|disable>--automox-user-prompt <enable|disable> Change: The user prompt will appear immediately for entering a password after running the --automox-user-prompt ena

We’re currently evaluating implementing LAPS, and I was curious as to who has done it recently and your experiences in undertaking it.   

Serverless. Cloud-computing. Agent. All this IT lingo, but what does it really mean?  It seems like each term has a million different definitions. And I don’t know about you, but when I hear agent I’m thinking, Bond, James Bond. But I don't think 007 is fighting crime on our computers, so who is this Agent? What is an Agent? Let’s do the boring thing first and see what official definitions there are out there. One definition is “a computer program that performs various actions continuously and autonomously on behalf of an individual or an organization”. Another definition specifically for software agents is “pieces of software running on the exhibit device, assisting with, or responsible for, the physical data acquisition. These agents run on the normal operating system of the device and use Application Programming Interface (API) calls for low-level memory access, or they use a dedicated operating system for data acquisition.” In layman's terms, it’s a lightweight computer program th

Is there any update on macOS Monterey 12.0.1 being available within Automox? I would like to be able to disable this in my patching policies until it is supported within our other products. I don’t see it when I search for “macOS”, check the mac OS checkbox, or search for “Monterey”. Would it be safe to add these exemption keywords in without it being present in the software library?

In this video, we’ll get you more familiar with the “Software” menu in the AX console.  This is a handy tool that features a search bar to find any software installed on your endpoints. In the screenshot below, I searched for “firefox” and got these results, across multiple operating systems:   In the video, we also mention our list of supported third-party software, which you can find right here. In addition, you can subscribe to our Community channel: Software Patching Catalog Updates.If you’re not yet an Automox customer and would like to try it for yourself, you can sign up for a free trial!

We’re happy to announce that we now have automated patching support for Atom.io and Google Drive. As a reminder, you can always find a full list of our third-party software support here.Thanks!

Initiating a policy programmatically can be a power tool to help you automate your patching program with Automox APIs.  If this is something that you’re currently doing or would like to start, please see our updated documentation in our developer portal below:  https://developer.automox.com/openapi/axconsole/operation/executePolicy/ Please take special care to ensure that you are using the request body schema to identify the required action parameter of “remediateAll” “remediateServer”.  These commands will make use of all the configurations made by the administrator that created the policy including patching notifications, reboot notifications and deferrals.  As always, let us know if you have any questions!

If you’re looking for Automox courses and additional education, Automox University is the place for you! Automox University is a new customer training portal tailored towards customers that want to brush up on all of the need-to-know Automox functionality.You’ll find courses to help onboard new customers, manage bulk deployments, and construct policies. These courses are short and you can view them on-demand whenever you have a moment. New courses are added every month and more advanced courses will be coming this year!To sign up, visit Automox University at https://university.automox.com/. Let us know what you’d like to see in future courses and share your feedback below!

Hello, Automox community!Wanted to share some enhancements we’ve made to Automox this past week!Software Page Export The Software page can now be exported! This is really helpful for when you want an inventory of all the software in your environment.Export Option on the Software Page Activity Log ImprovementsWe’ve also prettified the log output in the Activity Log so that it is easier to read and get a sense of what happened to a device:Prettified Log Output in the Activity Log Let me what you think in the comments!  Cheers!Vania 

Hi folks, I’ve noticed our instance of Automox has stopped recognising pending restarts on our Windows Servers - I’ve double-checked on the devices and remote PS to confirm.Is anyone else seeing this or know what I could do to troubleshoot on our side?Thanks heaps :)

It would seem 75% of my machines picked up the latest update in November, but then stopped communicating with the server.  Pushing a reinstall doesn’t work since the latest is already installed and most uninstalls are failing as well.  Thoughts? 

I see there are reboot notifications for Mac and Windows, but is there any support for reboot notifications on Ubuntu? If not, is this planned?