Using Automox

If you’re looking for Automox courses and additional education, Automox University is the place for you! Automox University is a new customer training portal tailored towards customers that want to brush up on all of the need-to-know Automox functionality.You’ll find courses to help onboard new customers, manage bulk deployments, and construct policies. These courses are short and you can view them on-demand whenever you have a moment. New courses are added every month and more advanced courses will be coming this year!To sign up, visit Automox University at https://university.automox.com/. Let us know what you’d like to see in future courses and share your feedback below!

Hello, Automox community!Wanted to share some enhancements we’ve made to Automox this past week!Software Page Export The Software page can now be exported! This is really helpful for when you want an inventory of all the software in your environment.Export Option on the Software Page Activity Log ImprovementsWe’ve also prettified the log output in the Activity Log so that it is easier to read and get a sense of what happened to a device:Prettified Log Output in the Activity Log Let me what you think in the comments!  Cheers!Vania 

Hi folks, I’ve noticed our instance of Automox has stopped recognising pending restarts on our Windows Servers - I’ve double-checked on the devices and remote PS to confirm.Is anyone else seeing this or know what I could do to troubleshoot on our side?Thanks heaps :)

It would seem 75% of my machines picked up the latest update in November, but then stopped communicating with the server.  Pushing a reinstall doesn’t work since the latest is already installed and most uninstalls are failing as well.  Thoughts? 

I see there are reboot notifications for Mac and Windows, but is there any support for reboot notifications on Ubuntu? If not, is this planned?

has anyone any details on how to implement single signon?

It would be really nice if I could have the option to go to the reports page and click on a date range and see what items are scheduled to patch (if it’s in the future), or what did patch (if it’s in the past).

Would it be possible to bulk ignore patches? Microsoft released a couple of seriously broken patches, and at the moment I have to manually ignore them as per: It would be useful to have a tick box like we have under a device here; to bulk ignore patchesCheers.

What are you doing for updates for your tablets?

Happy Holidays Automoxers!For some reason a majority of our mac endpoint are not receiving the Mac Big Sure updates to 11.6.1 or 11.6.2. Our user see the Automox System Update Notification, click now, and nothing seems to happen.Some of our users will eventually get the Automox Reboot notification window, but when they click on it, they are logged out instead of a restart. When we check the activity logs, we see that our mac endpoints have had all the apps as well as as Mac OS 11.6.2 update installed. However, when we go to check the OS version, we see nothing has been updated.We are using jamf pro, with filevault enabled, and jamf connect. Any advise would very much apprecaited! 

I have a couple hundred policies in Automox for patching.  If I want to make a change to all of them, there are multiple ways to do it via API.  I’m wondering what the most efficient method for doing it is. For example, if I just want to change the patch severity on all of them from, say “high” to “low” - what’s the recommended method for doing that on 100+ policies?

Anyone have examples of supporting a mix of RHEL 5,6,7 and older oracle instances with older repositories?

HiPlease can someone let me know how often the agent pulls settings from the console?I’m having a spot of bother with changing the WSUS settings, as per the screenshot.I’m setting a number of patches to ignore, but something isn't quite right and the patches are redeploying, even though Automox is set to ignore them.These are the setting I'm desperately trying to update on the agents deployed (to block those broken windows patches).Cheers.

Hi all, I’ve realised that Firefox doesn’t appear to be updating in our environment for most users and this appears to be because we’re using the British language (EN-GB) version. Is this currently unsupported in Automox? It looks like the EN-US client gets updated fine. I guess I might need to setup a worklet to patch it manually for the moment. Kind Regards, Mike

A while ago we ditched our then MDM and moved over to InTune to take on our MDM capabilities. Additionally, move our imaging solution to InTune as well. As we had Automox it was meant to be a fairly light implementation with Automox undertaking OS and 3rd party updates and InTune doing the rest. Long story short our light implementation seems to have backfired as between Automox and InTune something is causing devices to fail updates. We have engaged an external resource familiar with Intune but not Automox and at a follow-up call next week I am pretty sure we are going to here we need to make a choice between one or the other, InTune or Automox. Posting here if anyone else has found themselves using InTune and whether they encountered issues using alongside Automox. I get at a level these products overlap and compete but in others they don’t. Interested in other peoples views and experiences to help which direction and or questions, would be very much appreciated.

Can anyone describe how amagent autoupdates on linux, such as it doesn’t use apt.  I need technical details of the process to satisfy a very technically savy user - developer/programmer.  ThanksJames

I just had my first proper go at adapting some stock worklet code to install some different software and noticed that testing evaluation code in Automox isnt terribly practical. According to the docs “Manual Execution… triggers the remediation script regardless of the compliance status of the device.” So when using manual execution (which is the easiest way to test new worklets) the evaluation code is completely ignored. I think the solution I would like to see would be a manual execution “Debug” mode that you could run to test both evaluation and remediation code, and would preferably also return the full output from both scripts (feedback from the scripts themselves seems a bit thin atm, so it would be nice if the activity log or something was more verbose). Am I just doing things wrong atm or is this actually a worthwhile suggestion? How does everyone else go about testing their scripts before running them in production?

Are there any release notes yet for this agent or is this due to security vulnerabilities not yet available?

Hello everyone,  I'm new on here and also a new IT student aspiring to become a cybersecurity expert.. I'll be so happy to make new friends in my new career to help me walk through.. I have been watching a lot of tutorials on automox and I believe I'll meet the right people in this community to help me drive through Best regards 

Happy Holidays Automoxers!For some reason a majority of our mac endpoint are not receiving the Mac Big Sure updates to 11.6.1 or 11.6.2. Our user see the Automox System Update Notification, click now, and nothing seems to happen.Some of our users will eventually get the Automox Reboot notification window, but when they click on it, they are logged out instead of a restart. When we check the activity logs, we see that our mac endpoints have had all the apps as well as as Mac OS 11.6.2 update installed. However, when we go to check the OS version, we see nothing has been updated.We are using jamf pro, with filevault enabled, and jamf connect. Any advise would very much apprecaited!

Hello Community! Agent 35 is now available to download in the Automox Console. This release is for Mac devices only.Here’s what’s new:Fix: users experience unexpected reboots on macOS devices after deferring a reboot. Fix: agent does not always reconnect after the device wakes from sleep (Mac devices only). Fix: an M1 Mac user might be mistakenly prompted by the agent when they do not have the appropriate permissions to grant secure token access. Fix: notifications displaying “Terminal” on macOS 12 (Monterey). Change: agent log files will be written to /var/log/amagent.log instead of /var/log/system.log. Change: the Apple Silicon (M1) user prompt is now disabled by default. New: macOS 12 Monterey support. New: IT Admins can run a command against the Automox Agent, on each Apple Silicon (M1) Mac device, to grant secure token access to the Automox service account. These permissions are needed to install macOS updates (e.g. patching from 12.0 to 12.1) on Apple Silicon devices using the ag

We have >1K servers that are distributed among ~50 different groups and policies that patch according to specific maintenance windows based on the application they run.Our policies allow the server to reboot if the patch being applied requires it, but I’d like ALL the servers to reboot at the end of the monthly maintenance window regardless of installing any patches.What’s the recommended way to implement this?

Hey folks, quick AXAgent update: Automox Security and third-party security researchers have discovered two high severity vulnerabilities in the Automox Agent: CVE-2021-43326 and CVE-2021-43325. These vulnerabilities impact Windows devices only. A non-administrative user can leverage these vulnerabilities to read and write content to the Automox execution directory, which can then execute commands with elevated privileges. CVE-2021-43325, The Automox Agent Version 33 incorrectly sets permissions on a temporary directory while running in Windows environments. CVE-2021-43325 has a CVSS score of 7.8 (High). Automox has fixed the directory permissions.CVE-2021-43326, The Automox Agent prior to Version 32 incorrectly sets permissions on a temporary directory while running in Windows environments. CVE-2021-43326 has a CVSS score of 7.8 (High). Automox has fixed the directory permissions.Starting on Thursday, November 12th we began a phased rollout of the Automox Agent 34 release for all Windo

Hi Team,Please could anyone let me know if there is a way to have the new community site use a dark theme, the old one was perfect.Cheers.