Using Automox

Hi Guys, I was curious, are any of you guys deploying certificate signed PS scripts with Automox? Are Worklets with code inside treated as ‘ad-hoc commands’? Or do we need to upload the signed .ps1 and reference it in the remediation of the worklet? I haven’t found a ton of information in the knowledge base or on the forums. My security team is pushing me to stop running unsigned scripts in our environment (for obvious reasons). I’d love some feedback on this, Thanks.

Now Live!! I am happy to announce we have released a new email template for the Automox emails. Please refer to this thread for more details: Coming Soon: Updated Email Design Reply to this post should you have any questions.

I am running into an issue with a cleanup worklet I am writing. If I try to do anything in a users Downloads folder (/Users/username/Downloads) the commands return nothing, as if the directory is empty. The same behavior exists whether its a find command, or just a simple ls. I can do an ls on /Users/username, but not /Users/username/Downloads, and both directories are world readable. running the same bash script from the command line both as root and as a non admin user show the script working fine. I must be missing something obvious, but is there a reason automox wouldn’t be able to do this? or do I have some permission messed up?

The AX engineers have been working on a couple of exciting updates. Within the coming weeks we are hoping to offer Single Sign On between the Automox application and AX Alive. What this means is you will be able to login to the community site with your console login. Existing logins will continue to be supported. Additionally, we will be releasing updated designs and improved usability on the Policy pages - starting with the Worklets. Screenshots will be posted closer to the release. Please reply if you have any questions or feedback.

Hello all, Is there a way to trigger a scan after a worklet or policy has been run? For example using the worklet to update to the latest version of windows 10 is great, but you manually (or wait patiently for the scheduled scan) have to scan a device to get Automox to recognize the change. Cheers, Chris.

Does anyone have any experience creating a worklet to check for a specific file and alert if the file is present in the directory? We are looking to create a worklet that will check for a specific file every hour, and if the file is there, send an alert to the necessary individuals.

blog.automox.com Patch Now: Remediate the Zerologon Vulnerability | Automox Zerologon, or CVE-2020-1472, is a critical CVSS10 vulnerability that allows malicious actors to impersonate the identity of any network computer trying to authenticate against a domain controller. Our advice, patch now... Key portion here: A vulnerability dubbed “Zerologon,” first seen in Microsoft’s August Patch Tuesday security updates, is getting renewed attention due to additional context released by the security organization, Secura. CVE-2020-1472, is a critical CVSS10 vulnerability that allows a malicious threat actor on a corporate network to impersonate the identity of any network computer trying to authenticate against a domain controller, disable related Netlogon security features, and change password credentials on network domain controllers. TL;DR - if they’re on your corp network, then they can impersonate another machine to the DC and wreak h

We get this question regularly, so I thought I’d put it on here to help people find the info. Certain of our supported 3rd party titles require that the app not be running for patches to be applied. We could terminate the application automatically but doing so would risk data loss. For example, Notepad++ is not set to auto-save by default. If we were to close Notepad++ when we detect it running, in order to patch, an end-user could have unsaved work which would be lost. Because of this, you will see failed patches for Notepad++ anytime the patch schedule coincides with the Notepad++ application being open. One tip for ensuring that Notepad++ gets patched is to put a reminder in the patch notification text that users should close out of Notepad++ before allowing the patching to proceed. Here’s the documentation for custom notifications: https://support.automox.com/help/end-user-notifications And here’s the list of third party titles that we support, and which ones require the softw

Good people know good people, so we wanted to share all our open positions with the community. All our active positions can be found on our careers’ page at https://www.automox.com/company#careers. We have a number of positions in Engineering, Product, Marketing, and Support. Please share with anyone you think might be excited about working on tough problems with a fun team!

https://support.automox.com/help/release-notes-for-week-ending-09182020 Enhancements: Additional sorting enhancements to make navigating the product better (e.g. Groups). (9/17) Bug Fixes: Resolved an issue with the KeepassXC feed importer. (9/18) Prevented 500s from being returned on a device that imported a blank SerialNumber. (9/18) Misc. internal bug fixes and infrastructure enhancements

Hey guys, I have reached out to support in the past about these kind of issues with devices becoming stuck in specific states. I understand that your team can clear these statuses however for those playing at home; do we have any other means of troubleshooting when devices become stuck in this state? So far I have performed a clean install of a device with the latest Automox MSI available along with removing the device from the console however this doesn’t seem to resolve it. Any other suggestions? Cheers! Westyy

Ubiquiti Community – 15 Sep 20 Broadcast storm after Unifi controller upgrade to 6.0.20 | Ubiquiti Community Hi,according to comments under 6.0.20 release notes, I'm not the only one with this problem. After the upgrade, UAP devices started flooding our network with broadcasts, until I disconnected them all except one (any one). I had to downgrade to... Might want to postpone updating until they get this fixed.

We are going to be making some changes to the console navigation soon. We’d appreciate your help by taking this quick user test (less than 2 minutes) to help us! https://app.usabilityhub.com/do/a9d05fba0c83/20b7

https://support.automox.com/help/week-in-review-release-notes-for-week-ending-09112020

Over the last few weeks we have been validating performance improvements for the Pre-Patch and Overview reports. The results have been positive, so I am happy to announce these two console reports are now running more efficiently and consistently - especially for organizations with many endpoints and/or many patches. Please reply here if you have any questions or feedback.

After we run out of the 14oz size we’re jumping up to the 20oz for the next swag order: image (14)2796×1476 228 KB We’re looking at some different color options so wanted to get community input. Which color(s) do you like best? A B C 0 voters

https://support.automox.com/help/week-in-review-release-notes-for-week-ending-9042020

Saw this on /r/sysadmin and thought it was pretty cool. The person who made the list was looking for a comprehensive one. He couldn’t find a full list so he researched it and made his own: reddit r/sysadmin - End-of-Life OS List 287 votes and 85 comments so far on Reddit

Hey friends - We have just released a brand new KB to help you globally trust list Automox in your EPP if you run into issues of it being blocked or prevented from installing. https://support.automox.com/help/globally-trust-listing-automox-through-epp-application-control

The Cloudflare Blog – 30 Aug 20 Analysis of Today's CenturyLink/Level(3) Outage Today CenturyLink/Level(3), a major ISP and Internet bandwidth provider, experienced a significant outage that impacted some of Cloudflare’s customers as well as a significant number of other services and providers across the Internet. TL:DR - it was probably a faulty BGP command

Hi Guys, So first let me lay out my environment, we have some internal programs that require Java JDK8 and the standlone JRE to co-exist on one machine. It seems that Automox will find one of the JRE’s and correctly report it / remediate it. However, if the standalone + embedded both exist on one machine, it won’t correctly find both out of date JRE’s and patch. It will pick seemingly one random one and patch that, and call it good. This causes our vuln scanner to correctly find an out of JRE and alert on it. TL;DR: Two instances of JRE live on one machine, AM will find and patch one of them, but not the other. Paths: C:\Program Files\Java\jre1.8.0_201 C:\Program Files\Java\jdk1.8.0_201\jre Not sure a way around this, or if this is even supported to have multiple “patchable” apps with the same name? Trying to see if anyone else has this issue or any workarounds. Thanks!

Afternoon, folks. There are no direct bug fixes or enhancements to speak of this week that affect you yet. This week’s work was all in preparation for new features, UI work, and infrastructure improvements that are releasing over the next few weeks. The team released code nearly every day this week, they closed a good deal of tasks, and they’re still kicking butt. Have a great weekend, everyone!

We’re excited to be included with other innovators and game-changing technology firms in this year’s annual report on the Top 2020 Cyber Defenders from analyst firm, CB Insights. Check out our blog here: https://blog.automox.com/cb-insights-top-2020-cyber-defender