Using Automox

I have set up a daily Defender Definition Update Policy and often experience that these fail, It seems like Defender updates itself, and thus this policy failes because the update is already superseded. Is there any point in having this policy then or could I just remove it? Kind Regards Tom Aril Virak

In Automox for an hour, this computer has bee saying rebooting for the device status. I know this is not the case because I at the physical machine for testing and it is not rebooting. I rebooted the machine multiple times manually and the status is not updating on Automox. Anyone else ran into this issue?

In response to the recent bug in MS KBs causing BSOD when printing, I see they’ve added KBs to remediate the issue per: https://www.bleepingcomputer.com/news/microsoft/windows-10-emergency-updates-released-to-fix-printing-crashes/ [KB5001567 for Win10 v2004/20H2] [KB5001566 for Win10 v1909] [KB5001568 for Win10 v1809 enterprise/education/LTSC 2019] [KB5001565 for Win10 v1803 enterprise/education] Curious when AMX adds out of band updates to the platform as I don’t see them in the system yet.

In the IT world, where buzzwords and acronyms are used to market the latest trends or cool new technologies, there’s often a blur between what is real and what is fake. Nothing exemplifies this more than the “fake cloud.” But before we take a look into what the “fake cloud” is, here are some essential characteristics of the native cloud according to the National Institute of Standards and Technology (NIST): On-demand self-service: A consumer can unilaterally provision consuming capabilities such as server time and network storage, as needed automatically without requiring human interaction with each service provider. Broad network access: Capabilities are available over the network and accessed through standard mechanisms that promote use by heterogeneous thin or thick client platforms (mobile phones, tablets, laptops, and workstations). Resource pooling: The provider’s computing resources are pooled to serve multiple consumers using a multi-tenant model, with different physical an

Hi Team, When I edit a group and add a device to it, I get the green notification saying it successfully occurred but the window wont close using the X top right, or the cancel button. To leave I have to change the URL. This is the dialog box to which I refer: On MS Edge Version 89.0.774.54 (Official build) (64-bit) Anyone else seeing this issue?

Thanks to @Mrichards we how have an Automox community slack: Slack Join Automox-Community on Slack Slack is a new way to communicate with your team. It’s faster, better organized, and more secure than email. This is a community-run chatroom, so not an official support channel, but I and other Automox folks will be in there to answer quick questions. Hope to see you in there!

Automox Support, Can we have someone on your group able to answer in Chat instead of your automated Otto?? Otto is not an expert. Please help do your thing. Thanks! U

https://support.automox.com/help/release-notes-for-week-ending-03122021 Bug Fixes Resolved an issue with the Device ID sorting on the new Devices page.

I am not sure if anyone has this need (or if this has been posted before), but here’s a little Powershell script you can run with a scheduled task to delete hosts that have not reported back to Automox after xxx days. I have this configured on a server and it helps me manage the Automox licenses automatically. #Define API Key and URL to get initial Machine list $apiKey = "<insert your API key here>" $headers = @{"Authorization" = "Bearer $apiKey"} $lengthPerPage = 100 $pageCounter = 0 $maxItems = 0 $maxDays = 30 do { $apiUrl = "https://console.automox.com/api/servers?l=$lengthPerPage&p=$pageCounter" $response = Invoke-RestMethod $apiUrl -Method 'GET' -Headers $headers -Body $body $a = $response | ConvertTo-Json $maxItems = $response.results.count $currentItem = 0 foreach($server in $response.results) { $lastCheckin = Get-Date if ($server.last_disconnect_time) { $lastCheckin = [datetime]$server.last_disconnect_time }

Can a worklet update DNS entries under network setting on machines?

I am unable to get this to run as a worklet against all our Windows systems. The linux version runs fine. Am I missing something here: Evaluation: SelfScan.exe apiKey=************ Remediation : SelfScan.exe apiKey=************* Upload: Selfscan.exe file.

I am new to Automox. I am trying to get a worklet working that will reboot computers but will ask for user input. Example if the user clicks “Okay” the computer will reboot but if the user clicks “Cancel” the tasks ends. The reboot works without a problem but the users is never asked for there input. Is this possible to do with Automox?

Hello, I am wondering if it’s possible to deploy the Automox Agent to an EC2 Linux instance in AWS? I know the agent works with normal Linux, but I’m not sure about the EC2 instance. Any suggestions? Thanks!

We’ve collected all our documentation, tutorials and videos related to worklets and API scripts in one place: https://support.automox.com/help/developer-resources Please let me know if there’s anything else you’d like to see on that page!

Release notes: https://support.automox.com/help/release-notes-for-week-ending-03052021 Enhancements A new or existing user invited to an organization is no longer automatically logged in on acceptance, they must log into an organization first. (03/05) Bug Fixes Worklets run with the Execute Now feature will only execute on the corresponding OS associated with policy. (03/05) For those who keep up on our release notes, you’ll have definitely seen that the last few weeks have been quiet. It isn’t for lack of doing, but for a lack of saying. Going forward we will be making a stronger effort to keep you all informed of all the great bug fixes, features, and workflow enhancements that come out. Catch you next week!

i am trying to patch guest VMs before I patch the hosts and would like to shut the guest down before patching the host once its done patching to avoid corruption. I dont see a way to do this natively, or am I missing it? If its not a feature, whats the best way to do this?

Hello, Any suggestions as to how you are answering this Audit question using Automox data? I believe the dashboard pie chart is more so geared towards upcoming patch policies vs the overall current patch health for instance. Metric data like this would be very beneficial for cybersecurity Board updates. Orgs year to date compliance for deploying critical patches timely based as determined by the internal standards when they must be applied (percentage) Perhaps the Automox data needs to be dumped into PowerBI to break it down a bit… Critical patched / total machines patched within x?

Hello, I am investigating a case where amagent service has been stopped. In that process, I went through logs prior to service got stopped. I find hourly hearbeater a lot which is considered normal but prior to service got stopped MQCLIENT got stopped which I believe is the reason it service got stopped. If that’s the case, what are the reasons mqclient can get stopped. 2020/12/09 23:39:02 cmd.go:158: Received nop command 2020/12/09 23:39:02 asclient.go:241: POST https://api.automox.com/checkin?uptime=2080479&ver=1.0-29&tz=UTC-0500&diag=1 2020/12/09 23:39:02 asclient.go:583: No proxy found. Using direct connection 2020/12/09 23:39:58 main.go:436: Backing off on NOP 2020/12/10 00:18:04 main_windows.go:87: Service shutting down. 2020/12/10 00:18:04 mqclient.go:209: MQ Client Stopping 2020/12/10 00:18:04 stompclient.go:318: Stopping heartbeater 2020/12/10 00:18:05 stompclient.go:378: Stopping consumer 2020/12/10 00:18:05 mqclient.go:220: MQ waiting for mq workers to terminate.

For those of you who are using this Worklet: Worklet: Predictable Reboot Notifications for Windows Worklets Hey Y’all! Automox offers a fully customizable end-user notification feature that clearly indicates to users when Automox will be patching and potentially rebooting their systems. This feature also allows you to set custom deferral options empowering users to control when their device should be patched. This gives peace of mind to system admins that their environment will be patched without interfering with their users everyday use. Although this is a great feature, Automox recognizes that it … Is it working well for you as a workaround for reboot notification issues? We’re trying to determine how well this is working for people so that we can prioritize a complete fix for the problem.

Hello fellow automox! Does someone here able to install MS Teams in MacOS environment? Since automox confirmed that they are not able to update the current install, i was trying to just push a new setup and install it. Any help and feedback are appreciate! Thanks! U

Is it just me or is the “percentage of up to date” machines on the main dashboard seem really low lately? I feel like we used to be in the 60-70%ish depending on the week, now we hover much lower than that. Maybe I have a rogue worklet flagging no compliance that I cant find? I’m interested to see if anyone else is getting this. Cheers! EDIT: It seems like a large majority of them are “scheduled updates” because we have a catch-all patch-all policy in the middle of the month. Is this intended behavior?

Hi Everyone, Are there any Automox integration documents for Crowdstrike, how it works when Crowdstrike passes information to Automox through the API? I have Crowdstrike integrated, but the lack of documentation after the announcement is a bit disheartening. It also means I have no way to validate whether or not it is working, or how to implement the Automox side. You can see what I’m after, with the documentation Mimecast has about their integration with Crowdstrike here: https://www.mimecast.com/tech-connect/tech-partners/crowdstrike/ https://community.mimecast.com/s/article/Crowdstrike-Falcon-Integration?_ga=2.71085334.728719514.1605113856-425226020.1580383279 Thank you, Chris.

Hey, Any ideas when the roadmap will be shared? Would be good to know what you’re working on, ETAs and other stuff. Thanks!

Would it be possible to create a worklet that would target a group of machines that are not on the domain and inject a username and password for all of the machines. I would then want to run a second worklet that would disable the local admin account on all of these machines.