Skip to main content

Worklets

All things Worklets for Windows, macOS, and Linux

608 Topics
S
SophiaAXCommunity Manager
published in Find & Share Worklets
Monthly Worklet Challenge with a Lego Otto Set!

To make it easier for Automox users to learn about Worklet™ automation scripts and how they can make your life easier – we’ve constructed another fun challenge! It’s an easy way to get started with Worklets and win a fantastic, limited-edition Lego Otto set! So, what is a Worklet? A Worklet is an automation script, written in Bash or PowerShell, designed for seamless execution on endpoints – at scale – within the Automox platform. Worklet automation scripts perform configuration, remediation, and the installation or removal of applications and settings across Windows, macOS, and Linux.Now, what’s the challenge? ⭐️ Step 1: Click through this Worklet demo to discover how easy it is to run and verify a Worklet (it only takes a few minutes).⭐️ Step 2: Execute your own Worklet automation script. It can be as simple as getting the reboot history for a remote computer or installing the SentinelOne agent on all your Mac devices. Explore the Worklet catalog to choose from hundreds of Worklet au

2255
J
3 days ago
D
dwseckman12Rookie
asked in Find & Share Worklets
Worklet to Remove User Profiles

My Helpdesk team is encountering an issue in our Warehouse where multiple users will sign into a PC and fill up the disk space seemlingly overnight.I need a worklet that will evaluate the disk space on a shared PC and then delete user profiles that haven’t been modified or used in over 30 days if that disk exceeds 50%. I would also like it to also run disk cleanup every night.

11
J
3 days ago
T
threeitguysinatrenchcoatRookie
posted in Find & Share Worklets
Outdated Microsoft Teams - Clients Installed by Admin

Hi everyone,I found and modified this PowerShell script online, we were running into an issue where our process of installing Teams had an admin touch the computer, and it’d create an outdated version on the Admin account, then leave it. For the following Worklet, simply put in your target version (the version you’re currently using) and what users should be targeted (whoever installed the version) then run on the necessary machines. Evalution Code:$TargetVersion = "PUT DESIRED VERSION HERE"$OutdatedUsers = @(PUT OUTDATED USER HERE)# Get all Users$Users = Get-ChildItem -Path "$($ENV:SystemDrive)\Users"# Process all Users$Users | ForEach-Object {    #Locate installation folder    $localAppData = "$($ENV:SystemDrive)\Users\$($_.Name)\AppData\Local\Microsoft\Teams"        # If teams exists for user > check version and add to array if outdated.    If (Test-Path "$($localAppData)\Current\Teams.exe")     {      $InstalledVersion = (Get-ChildItem "$($localAppData)\current\Teams.exe").Versi

1
A
4 days ago
J
JWillmsRookie
asked in Find & Share Worklets
Set Login Screen Background - Change image path

Good morning! I am attempting to use the worklet to set a login screen for Windows but was wondering if anyone had successfully changed the image source from a URL to an image uploaded into the worklet. If they have, could you please share the syntax used to replace this line? # define the path to download the background image$ImageURL = 'https://www.automox.com/static/images/default-og-image.png'

6
JohnG-Automox
11 days ago
TJ_Coppola
TJ_CoppolaPro
posted in Find & Share Worklets
Remove Unwanted Profiles From Device

  In our security audits we’ve identified a vulnerability in the use of privileged accounts for desktop support. While it’s necessary to use privileged accounts to deliver support, profiles with cached credentials left on windows computers can be extracted and used to gain control of the domain. Here is a script to remove the cached profiles of your admin accounts.Evaluation:<#.SYNOPSIS This script evaluates if certain profiles are present on a windows device..DESCRIPTION This test script sets a list of unwanted accounts and checks if they are present on a device. It returns a failure if any account in the list is present. .Notes File Name :Remove_Cached_Admins_Eval.ps1 Author :TJ Coppola Prerequisite :PowerShell V2 over win7 and upper#>#ADD UNWANTED PROFILES THIS ARRAY$AccountList = @()$eval = 0Foreach ($Account in $AccountList){ $instance = Get-CimInstance -ClassName Win32_UserProfile | ?{$_.LocalPath -like ('*'+$Account)} if ($instance){ W

1
S
12 days ago
Tony-Automox
Tony-AutomoxAutomox Employee
posted in Find & Share Worklets
Audit Your Windows Endpoints for Local Administrator Accounts

This simple worklet will audit your Windows endpoints and report any local administrator accounts to the Automox activity log. This will only report on endpoints running at least Windows 10 v1607, Server 2016, or having at least PowerShell v5.1 installed. Evaluation: # If Windows OS isn't at least Win10 v1607 or Server 2016 or PowerShell < v5.1, then exit if ($PSVersionTable.PSVersion -lt [version]'5.1') { Exit 0 } $scriptBlock = { $adminNames = Get-LocalGroupMember -Group Administrators If ($adminNames) { Return 1 } else { Return 0 } } $exitCode = & "$env:SystemRoot\sysnative\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -NonInteractive -Command $scriptblock Exit $exitCode Remediation: $scriptBlock = { $adminNames = (Get-LocalGroupMember -Group Administrators).Name Return $adminNames } $exitCode = & "$env:SystemRoot\sysnative\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass -WindowStyle H

7
TJ_Coppola
17 days ago
Maikel
MaikelChannel Partner
posted in Find & Share Worklets
Deploy LAPS agent and create local administrator (Local Administrator Password Solution)

I created this simple worklet to deploy the Local Administrator Password Solution client to machines and create the local administrative user we are going to use. Please disable the default local administrator account with a GPO. Worklet is maintained on our github page. evaluation code Exit 1 Remedation code ### Variables ### $username = "" #### Enter username you want to create ### $password = "" ### Enter initial password ### ### Variables ### $User=gwmi -class Win32_UserAccount | Where {$_.Name -eq $username} if (-Not $User) { [void](net user /add $username $password) [void](net localgroup administrators $username /add) if ($? -eq "True") { Write-Output "User successfully created." } else {Write-Output "Failed to create user!" } } Else {Write-Output "User already exists." } $Installed = (Get-ItemProperty HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\* | Where-Object { $_.DisplayName -Match "Local Administrator Password Solution" }) If(-Not $Install

4
TJ_Coppola
17 days ago
A
AntosTrineSysRookie
asked in Find & Share Worklets
Uninstall Microsoft Access Runtime

Anyone tried to use worklet to uninstall Microsoft Access Runtime?  I’ve attempted with adding ODT setup.exe and custom .xml as payload files and doing setup.exe /configure sample.xml - no luck.I also went straight with uninstall from HKLM Uninstall key for registry - no luck.

2
A
19 days ago
F
Fabio BrigoniRookie
asked in Find & Share Worklets
Worklet Install/uninstall agent Magma3 From Linux

HelloWe are deploying an asset management tool called magma3 in our environment.With that, I needed a worklet that would install the agent on Linux machines.The agent is a .sh fileany worklet? Thank you very much

3
R
20 days ago
S
Steven.EashRookie
asked in Find & Share Worklets
Custom Powershell Script as Worklets

Hello, I am new to Automox and trying to figure out how custom worklets work.  We are working on deploying a new print solution and wanting to remove printers that were installed via our print servers via powershell.    Below is my worklet: Evaluation Script: <#.SYNOPSIS    This Evaluation code throws and exit as 1 so the script will run no matter what.  This is needed as Automox remediation code will run on any exit code greather than 0.  If the exit code is 0, then the evaulation code will be skipped#>Exit 1 Remediation Script:start-transcript C:\windows\temp\worklet-transcript.txt$scriptBlock = { Get-Printer | Where-Object {$_.ComputerName -eq "ServerName01"} | Remove-PrinterGet-Printer | Where-Object {$_.ComputerName -eq "ServerName02"} | Remove-PrinterGet-Printer | Where-Object {$_.ComputerName -eq "ServerName03"} | Remove-Printer }$exitCode = & "$env:SystemRoot\sysnative\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -NonIn

2
JohnG-Automox
26 days ago
M
MFlingRookie
asked in Find & Share Worklets
Workstation Lacerte updates

We are a tax firm that uses Lacerte Tax software.  During tax season, there can be 2 or 3 updates in a week.  Doing updates across 5 workstations is tedious and can only be done in off hours for the user.The software is on-prem server install.  When an update is pushed to the server, the workstations will not allow login to Lacerte until the update is completed.I need a way to automate this.  I have played with the MSI update worklet to re-run the install each time, but that does not work.  Has anyone else done something similar?

0
M
27 days ago
M
Max NewmanRookie
asked in Find & Share Worklets
Uninstall Rapid7 Agent from Linux

Looking for a bash script to uninstall Rapid7 agent on Linux/Ubuntu … please :)

6
jack.smith
27 days ago
M
mikesidNovice
asked in Find & Share Worklets
Block software installs

Can Automox block the installation of software in realtime, or would it need to be a policy that runs X times a day? Thank you.

3
M
1 month ago
D
drichardRookie
asked in Find & Share Worklets
worklet to uninstall citrix Virtual app and desktop

Need to mass uninstall Citrix Virtual Apps and Desktops 7 2206 - Virtual Delivery Agent

1
R
1 month ago
V
victor.tremeaRookie
asked in Find & Share Worklets
Automox Service account permission on Mac - CrowdStrike uninstall worklet

Hi, I’m running a simple command from the worklet:/Applications/Falcon.app/Contents/Resources/falconctl uninstall --maintenance-token $TokenI also tried:sudo /Applications/Falcon.app/Contents/Resources/falconctl uninstall --maintenance-token $TokenWith both commands, I’m getting the following error:“Error: Failed to read password”Which seems to me that it is prompting for an “admin” password. I’m running the worklet in a M1 Mac, automox account has a secure token enabled (checked by running: sysadminctl -secureTokenStatus _automoxserviceaccount). Is it a permissions issue? If I run a “whoami” from the worklet, it returns: root. So, I would say it is not a permissions issue.But then why it seems to be prompting for a password? Thank you for your help.  

1
S
1 month ago
T
tommockRookie
asked in Find & Share Worklets
How to specify a username variable in the path for a file copy worklet

For example, the file I am copying is a Word letterhead template that needs to go to: C:\Users\tjm\AppData\Roaming\Microsoft\Templates but I need to replace “tjm” with the logged in users’ username

3
R
1 month ago
J
JHagstromPro
posted in Find & Share Worklets
Worklet: Install BitLocker and store keys in device tag

Hello everyone, This is just a script that will store bitlocker recovery keys in the device tags for whatever device the script is run on. Thought this would be an easier way to manage any bitlocker keys for those who will want to install it through automox rather than manually exporting keys or storing them via AD. Only thing that needs changing is the API Key. Currently there is a placeholder of just “INSERT API KEY HERE” and you must add in your own for it to work. Remediation Code: $apiKey = "INSERT API KEY HERE" $apiUrl = "https://console.automox.com/api/servers/" $headers = New-Object "System.Collections.Generic.Dictionary[[String],[String]]" $headers.Add("Authorization", "Bearer $apiKey") #$headers.Add("Cookie", "ax_session=eyJpdiI6IlpqM3NxdU03Mk81dHg0RjBkOGZRQmc9PSIsInZhbHVlIjoiL0Z2QVljTVF3SkV2L0Jod0lKMUFHQ0dMalMxQVNNdkswNWRRb2hkN1NiTHBFcWk4S2pXempXU2hpQzhybHE4b3loREhXRUxKSHZPMDBmMHVHNERzVlU2enphQm1sTTA3U2FCSmNlU0lJSjdEKzdDRHRqZXBlNXFSUThWb01zNk5UdXZheXpUNlExeDJKRXdONlZBbFZsV0t

38
B
1 month ago
T
tommockRookie
asked in Find & Share Worklets
Need help to modify "Copy File from Payload" worklet to overwrite file if it exists

I need to push an updated Word letterhead template to all users because an attorney joined the firm, but the template already exists on all machines, The existing worklet Copy File from Payload checks to see if the file already exists and skips it if it does. I don’t code, can anyone help with a worklet that would copy the file to the directory I specify and overwrite it if it already exists?Thanks!

1
T
1 month ago
J
justlookingRookie
asked in Find & Share Worklets
Office 365 Worklet not working

Hello. I wanted to get assistance on correcting a office 365 installation worklet. This was previously working and now it is receiving the following error. You cannot call a method on a null-valued expression.At C:\Program Files (x86)\Automox\execDir519974115\execcmd211621094.ps1:225 char:5+     $postVer = $64Config.getvalue("VersionToReport")+     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~    + CategoryInfo          : InvalidOperation: (:) [], RuntimeException    + FullyQualifiedErrorId : InvokeMethodOnNull COMMAND TIMED OUT. The script <# .SYNOPSIS     Install M365 Apps - Evaluation Script     OS Support: Windows 8.1 and above     Powershell: 3.0 and above     Run Type: Evaluation or OnDemand .DESCRIPTION     This Worklet is designed to grant an Admin the ability to install Microsoft 365 Apps (Office) on devices that do not     currently have them installed.     While it is possible to remove legacy MSI installations (Office 2016/etc) as part of the ODT,

7
JohnG-Automox
1 month ago
M
mdevlinRookie
asked in Find & Share Worklets
slack worklet keeps hanging on install

I was originally using the slack installer worklet mentioned here:https://community.automox.com/topic/show?tid=1566&fid=12 But have been running into issues where when the worklet runs, it downloads the installer fine, but when it runs msiexec.exe, it just hangs indefinitely. If I run this from a powershell command line, it runs fine and installs slack, but hangs in automox. Any ideas what might be going on?    Start-Process -FilePath 'msiexec.exe' -ArgumentList ('/qn', '/i', $saveFilePath, '/l*v c:\slack.log', '/norestart') -Wait -Passthru 

1
N
1 month ago
A
Anonymous
published in Find & Share Worklets
Worklet: Install SentinelOne Agent (MacOS)Worklet

Hi, everybody! Since announcing our strategic alliance that pairs our two platforms, Automox has developed customized Worklets for SentinelOne that includes pre-built scripts for automatic deployment of the SentinelOne agent across Windows, Linux and macOS devices - without manual intervention or wasted IT cycles. Below you’ll find the worklet for MacOS.Big thanks to @Zac-Automox  for getting these written.  Worklet Details: Install SentinelOne Agent (MacOS) Evaluation Code#!/bin/bash#================================================================# HEADER#================================================================#  SYNOPSIS#    Installs the SentinelOne agent on the endpoint.##  DESCRIPTION#    This worklet will check to see if the SentinelOne agent is#    installed on the target device.##  USAGE#    ./evaluation.sh##================================================================#  IMPLEMENTATION#    version         STRAT-1_install_sentinelone_agent (www.automox.com) 1.0#    aut

22641
SRC
1 month ago
C
cbranumRookie
asked in Find & Share Worklets
Windows - Scheduled Reboot to apply updates

Hello folks, I am looking for a worklet that will reboot servers if a reboot is required. I’m using one from the Worklet catalog at the moment, but it doesn’t give any details after it has ran, and 90% of the time it gives a “COMMAND TIMEOUT” error.  Could anyone provide some insight on what they do, or if they know what may be wrong with the worklet that is causing it to timeout? This is what i’m currently using: evaluation script: Evaluation script:# Checks whether or not the system requires a reboot, and remediates accordingly.$sysInfo = New-Object -ComObject "Microsoft.Update.SystemInfo"if($sysInfo.RebootRequired){     exit 1}else{    exit 0}  Remediation: ####### EDIT WITHIN THIS BLOCK ############################################## These parameters control the time of day window within which automatic reboot will be initiated (ie. 11am, 2:30pm)[string]$rebootStartTime = "11pm"[string]$rebootEndTime = "11:15pm"# If there is no user input detected for $minIdleTime minutes within $re

4
JohnG-Automox
1 month ago
M
MRayboneNovice
asked in Find & Share Worklets
Worklet that interacts with GPO on a Domain Controller?

Hello,We’re encountering a problem where we are running a worklet to import a Group Policy object on a domain controller - the Automox worklet runs as System so has no domain permissions to be able to interact with Group Policy.  Has anyone found a way to run a set of PowerShell commands within a worklet as a domain user with elevated privileges, eg. Domain Admin?Cheers,Mark.

2
M
1 month ago
A
anuj.johriRookie
asked in Find & Share Worklets
uninstall Adobe Shockwave Player

Hi all, I’m looking for a script to uninstall Adobe Shockwave Player (regardless of the version) from Windows. 

1
JohnG-Automox
1 month ago
B
bwrightRookie
asked in Find & Share Worklets
Suspend Bitlocker Encryption or Decrypt Drives

I was able to successfully use the “Enforce Bitlocker Encryption” worklet on a few test machines.However, I am curious if anyone knows a way to use Automox to suspend encryption in order to run updates or how to simply decrypt drives with a worklet.The idea of encrypting drives with a worklet is helpful, but manually suspending the encryption and decrypting the devices takes a lot of work.

1
MarkH-Automox
1 month ago
Terms & ConditionsCookie settings