Skip to main content

Worklets

All things Worklets for Windows, macOS, and Linux

618 Topics
B
brundunRookie
posted in Find & Share Worklets
Windows - Deploy printers without a print server

Made this since I couldn’t find anything in the worklets for printers from automox that didn’t need a print server. Great for small-medium business’s that don’t use a print server. This script will allow you to install printers and there drivers without the need for a tech to manually touch and add the printers themselves. I do recommend setting this as a policy on a manual run basis to only install the printers to someone’s computer that is missing them. When creating the export files, I recommend creating them in a virtual machine with all built in printers and as many drivers that you can remove as possible. Create a checkpoint in that VM with the OS as clean as possible so you can restore this OS when you want to create a new file. Create the printers with the specific drivers, and preferences that you want and export them to a “.printerExport” file. Make sure to test your exported file to make sure the file works correctly. I’ve seen drivers not like this printer export process an

111
S
1 day ago
V
Vimi PooranmalRookie
asked in Find & Share Worklets
Uninstall GotoMeeting

Hello, I am trying to use Automox to uninstall GoToMeeting across our environment but I am failing. Has anyone successfully completed this take with a worklet? 

823
JohnG-Automox
5 days ago
M
Max NewmanRookie
asked in Find & Share Worklets
Uninstall Rapid7 Agent from Linux

Looking for a bash script to uninstall Rapid7 agent on Linux/Ubuntu … please :)

7118
jack.smith
6 days ago
jack.smith
jack.smithAll Star
posted in Find & Share Worklets
Worklet - Toast Notifications with Branding and Ignores Focus Assist

Yup. Another Toast Notification post :-) What makes this one unique is how customizable it can be with company branding and links to internal sites, interactive buttons and so on. Once you get the hang of this one you can apply this to multiple scenarios that fit your needs.Really need to read Martin Bengtsson blog before you get started. https://www.imab.dk/windows-10-toast-notification-script/  Download the scripts here https://github.com/imabdk/Toast-Notification-Script Edit config-toast.xml to your satisfaction or desired outcome. Create a new worklet and associate to the right groups Set the Evaluation Code to whatever you want exit 1 Set the Remediation Code Payload # Scheduled Task Name$schdtaskname = 'ToastNotify'# Working Directory$workdir = 'C:\ProgramData\ToastNotify'IF((Test-Path $workdir) -eq $false){mkdir $workdir -Force | Out-Null}IF((Test-Path $workdir\Images) -eq $false){mkdir $workdir\Images -Force | Out-Null}# Cleanup Prior Scheduled tasks if they existUnregister-Sc

153617
B
7 days ago
M
Maulik_BusaNovice
asked in Find & Share Worklets
Windows Autopilot Enrollment

Hi All, I was wondering if anybody tried to leverage Automox for pulling hardware hash for windows Autopilot in their company environment. i want to enroll multiple devices to autopilot but still little confused with pulling hardware hash for all devices and manually upload it to Intune which sucks.  Thanks in advance.

1188
M
15 days ago
R
RAHULNATHNovice
asked in Find & Share Worklets
Security vulnerability in OpenSSL(CVE-2024-4741)

Could you please help me implement the worklet for the security vulnerability in OpenSSL (CVE-2024-4741)?

410
R
19 days ago
A
Arunchandar NNovice
asked in Find & Share Worklets
Enforce a user login to bitlocker recovery

Hi Folks, Has anyone did this before? We have a need to enforce the windows laptop of user to bitlocker recovery screen.We have tried few scripts however when the machine has customised laptop hostname or netbios name it keeps failing. Can someone help

181
MarkH-Automox
19 days ago
A
Arunchandar NNovice
asked in Find & Share Worklets
Restrict users from wiping the laptop

Hey All, Is there a way we can restrict users from wiping their laptops? Does anyone has prevented this with worklets?

302
A
19 days ago
jack.smith
jack.smithAll Star
posted in Find & Share Worklets
Detecting Windows Update Reboot

I’ve been running a worklet to detect reboots based onWindows Update Pending Uptime exceeds 28 daysStarted noticing many workstations pending a reboot were not triggering on the evaluation code. $sysInfo = New-Object -ComObject "Microsoft.Update.SystemInfo" While there is a way to likely tune above, I’ve opted to add another strategy. This includes a registry lookup using 32-bit Powershell as this key will need it.# Query WMI for LastBootUpTIme$uptime = (get-date) - (gcim Win32_OperatingSystem).LastBootUpTime# Check Registry for Windows Update Pending Update$scriptblock = { function Get-WUAURebootReq { ## Making registry connection to the local/remote computer $HKLM = [UInt32] "0x80000002" $WMI_Reg = [WMIClass] "\\$ENV:COMPUTERNAME\root\default:StdRegProv" ## Query WUAU from the registry $RegWUAURebootReq = $WMI_Reg.EnumKey($HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\") $WUAURebootReq = $RegWUAURebootReq.sNames

431
MarkH-Automox
27 days ago
S
SophiaAXCommunity Manager
published in Find & Share Worklets
Monthly Worklet Challenge with a Lego Otto Set!

To make it easier for Automox users to learn about Worklet™ automation scripts and how they can make your life easier – we’ve constructed another fun challenge! It’s an easy way to get started with Worklets and win a fantastic, limited-edition Lego Otto set! So, what is a Worklet? A Worklet is an automation script, written in Bash or PowerShell, designed for seamless execution on endpoints – at scale – within the Automox platform. Worklet automation scripts perform configuration, remediation, and the installation or removal of applications and settings across Windows, macOS, and Linux.Now, what’s the challenge? ⭐️ Step 1: Click through this Worklet demo to discover how easy it is to run and verify a Worklet (it only takes a few minutes).⭐️ Step 2: Execute your own Worklet automation script. It can be as simple as getting the reboot history for a remote computer or installing the SentinelOne agent on all your Mac devices. Explore the Worklet catalog to choose from hundreds of Worklet au

3579
R
1 month ago
jasonehand
jasonehandNovice
asked in Find & Share Worklets
Dell Command Update Worklet needed

All Windows 10 WorkstationsI tried 1 of the Dell Command Update Worklets and get this error on some workstations:Start-Process : This command cannot be run due to the error: The system cannot find the file specified.At C:\Program Files (x86)\Automox\execDir2926109883\execcmd3901365964.ps1:59 char:16+ ...      [void](Start-Process -FilePath $exe -ArgumentList "/s /l='$log'" ...+                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~    + CategoryInfo          : InvalidOperation: (:) [Start-Process], InvalidOperationException    + FullyQualifiedErrorId : InvalidOperationException,Microsoft.PowerShell.Commands.StartProcessCommand COMMAND TIMED OUT. I’m looking to either find out why this error is happening or get a worklet with evaluation and  remediation code that can be used to successfully check which patches are needed and then install them and let me know which ones get installed. thanks.

1168
jack.smith
1 month ago
jack.smith
jack.smithAll Star
posted in Find & Share Worklets
Windows Unquoted Search Path Remediation

This worklet will search for Windows Unquoted Search Path under uninstall and services in registry and add quotes. This addresses a vulnerability detected by some tools like Rapid7 or Nessus. All changes made by the script are logged under C:\windows\temp\unquoted-search-path-changes.csv. #Evaluation Code $i = 0 $BaseKeys = "HKLM:\System\CurrentControlSet\Services", #Services "HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall", #32bit Uninstalls "HKLM:\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall" #64bit Uninstalls #Blacklist for keys to ignore $BlackList = $Null #Create an ArrayList to store results in $Values = New-Object System.Collections.ArrayList #Discovers all registry keys under the base keys $DiscKeys = Get-ChildItem -Recurse -Directory $BaseKeys -Exclude $BlackList -ErrorAction SilentlyContinue | Select-Object -ExpandProperty Name | %{($_.ToString().Split('\') |

9694
E
1 month ago
S
SlapcodesRookie
asked in Find & Share Worklets
Set Dell Command Update to download, install and verify in update settings

I have been working on a script that will set DCU to download, install and verify no matter  what the current setting is. In the update settings, a few behaviors are observed:Notify: Deletes AutomationMode if present Download updates: Creates AutomationMode with a value of ScanDownloadNotify Download and install updates: Creates AutomationMode with a value of ScanDownloadApplyNotifyLocation of the key:HKLM:\SOFTWARE\DELL\UpdateService\Clients\CommandUpdate\Preferences\Settings\Schedule\AutomationModeThe remediation code works perfect in Visual Studio Code. However, the evaluation code will only show the write-output and not push to the remediation code. Could someone shine some light on this?  Evaluation Code$regPath = 'HKLM:\SOFTWARE\DELL\UpdateService\Clients\CommandUpdate\Preferences\Settings\Schedule'$automationMode = $nullTry { $automationMode = Get-ItemPropertyValue -Path $regPath -Name "AutomationMode"} Catch { Write-Output "Error retrieving AutomationMode property: $_"}F

1194
S
1 month ago
M
Mika TRookie
asked in Find & Share Worklets
Is there a way to duplicate worklet from zone to another zone ?

Hello,I have deployed and create some (personal) worklets on one zone, and I am searching a way to easily duplicate them to anoter zone we have on our account.I see it’s possible for policy, but I don’t find the same “clone” function for worklet. Maybe there is another way to allow worklets to be applied on several zones ? Thanks in advance 

662
M
1 month ago
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Find & Share Worklets
Deploy CrowdStrike on Windows

This is to deploy the CrowdStrike Windows agent in your environment. You’ll need the CrowdStrike installer, WindowsSensor.exe, which you can download from your CrowdStrike console. You’ll also need your Customer ID from the console. Remediation code: .\WindowsSensor.exe /install /quiet /norestart CID=<checksummed customer ID> Upload the WindowsSensor.exe file to the worklet, and put your CID in the CID flag section. If you have any issues getting the installer to work, you can add the flag ProvNoWait=1 which skips the requirement for the agent to make contact with the CrowdStrike console within 10 minutes, after which time the agent removes itself if it fails to make contact. Note that installing CrowdStrike over the top of another AV requires some extra steps as detailed in this article: crowdstrike.com – 22 Aug 19 How to Replace Symantec with CrowdStrike Learn how how quick and easy it is to replace Symantec with CrowdStrike to get better prote

328112
M
1 month ago
B
billb660Rookie
asked in Find & Share Worklets
Basic Dell Command Update Worklet

 Automox newbie here and I’m trying to create a very basic worklet that would check if a computer is a Dell and if so, run Dell Command Update. I’ve cut and pasted commands from examples posted here, but it’s not working. Below is what I’ve created. Can someone tell me what I’m doing wrong? Thank you!  

110812
B
1 month ago
M
MFlingRookie
asked in Find & Share Worklets
Workstation Lacerte updates

We are a tax firm that uses Lacerte Tax software.  During tax season, there can be 2 or 3 updates in a week.  Doing updates across 5 workstations is tedious and can only be done in off hours for the user.The software is on-prem server install.  When an update is pushed to the server, the workstations will not allow login to Lacerte until the update is completed.I need a way to automate this.  I have played with the MSI update worklet to re-run the install each time, but that does not work.  Has anyone else done something similar?

221
jack.smith
1 month ago
F
Fabio BrigoniNovice
asked in Find & Share Worklets
Worklet .zip

HelloDoes anyone know if it is possible to upload a file .zip as a payload and download it via worklet?I need to create an installation worklet, but instead of uploading an executable file, I need to put a .zip file, download it to the machine, unzip this file and then run the .exe that is inside this uncompressed folder.

705
MarkH-Automox
1 month ago
F
Fabio BrigoniNovice
asked in Find & Share Worklets
Worklet Install/uninstall agent Magma3 From Linux

HelloWe are deploying an asset management tool called magma3 in our environment.With that, I needed a worklet that would install the agent on Linux machines.The agent is a .sh fileany worklet? Thank you very much

514
F
2 months ago
D
dwseckman12Rookie
asked in Find & Share Worklets
Worklet to Remove User Profiles

My Helpdesk team is encountering an issue in our Warehouse where multiple users will sign into a PC and fill up the disk space seemlingly overnight.I need a worklet that will evaluate the disk space on a shared PC and then delete user profiles that haven’t been modified or used in over 30 days if that disk exceeds 50%. I would also like it to also run disk cleanup every night.

33211
J
2 months ago
T
threeitguysinatrenchcoatRookie
posted in Find & Share Worklets
Outdated Microsoft Teams - Clients Installed by Admin

Hi everyone,I found and modified this PowerShell script online, we were running into an issue where our process of installing Teams had an admin touch the computer, and it’d create an outdated version on the Admin account, then leave it. For the following Worklet, simply put in your target version (the version you’re currently using) and what users should be targeted (whoever installed the version) then run on the necessary machines. Evalution Code:$TargetVersion = "PUT DESIRED VERSION HERE"$OutdatedUsers = @(PUT OUTDATED USER HERE)# Get all Users$Users = Get-ChildItem -Path "$($ENV:SystemDrive)\Users"# Process all Users$Users | ForEach-Object {    #Locate installation folder    $localAppData = "$($ENV:SystemDrive)\Users\$($_.Name)\AppData\Local\Microsoft\Teams"        # If teams exists for user > check version and add to array if outdated.    If (Test-Path "$($localAppData)\Current\Teams.exe")     {      $InstalledVersion = (Get-ChildItem "$($localAppData)\current\Teams.exe").Versi

2091
A
2 months ago
J
JWillmsRookie
asked in Find & Share Worklets
Set Login Screen Background - Change image path

Good morning! I am attempting to use the worklet to set a login screen for Windows but was wondering if anyone had successfully changed the image source from a URL to an image uploaded into the worklet. If they have, could you please share the syntax used to replace this line? # define the path to download the background image$ImageURL = 'https://www.automox.com/static/images/default-og-image.png'

536
JohnG-Automox
2 months ago
TJ_Coppola
TJ_CoppolaPro
posted in Find & Share Worklets
Remove Unwanted Profiles From Device

  In our security audits we’ve identified a vulnerability in the use of privileged accounts for desktop support. While it’s necessary to use privileged accounts to deliver support, profiles with cached credentials left on windows computers can be extracted and used to gain control of the domain. Here is a script to remove the cached profiles of your admin accounts.Evaluation:<#.SYNOPSIS This script evaluates if certain profiles are present on a windows device..DESCRIPTION This test script sets a list of unwanted accounts and checks if they are present on a device. It returns a failure if any account in the list is present. .Notes File Name :Remove_Cached_Admins_Eval.ps1 Author :TJ Coppola Prerequisite :PowerShell V2 over win7 and upper#>#ADD UNWANTED PROFILES THIS ARRAY$AccountList = @()$eval = 0Foreach ($Account in $AccountList){ $instance = Get-CimInstance -ClassName Win32_UserProfile | ?{$_.LocalPath -like ('*'+$Account)} if ($instance){ W

431
S
2 months ago
Tony-Automox
Tony-AutomoxAutomox Employee
posted in Find & Share Worklets
Audit Your Windows Endpoints for Local Administrator Accounts

This simple worklet will audit your Windows endpoints and report any local administrator accounts to the Automox activity log. This will only report on endpoints running at least Windows 10 v1607, Server 2016, or having at least PowerShell v5.1 installed. Evaluation: # If Windows OS isn't at least Win10 v1607 or Server 2016 or PowerShell < v5.1, then exit if ($PSVersionTable.PSVersion -lt [version]'5.1') { Exit 0 } $scriptBlock = { $adminNames = Get-LocalGroupMember -Group Administrators If ($adminNames) { Return 1 } else { Return 0 } } $exitCode = & "$env:SystemRoot\sysnative\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -NonInteractive -Command $scriptblock Exit $exitCode Remediation: $scriptBlock = { $adminNames = (Get-LocalGroupMember -Group Administrators).Name Return $adminNames } $exitCode = & "$env:SystemRoot\sysnative\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass -WindowStyle H

4147
TJ_Coppola
2 months ago
Maikel
MaikelChannel Partner
posted in Find & Share Worklets
Deploy LAPS agent and create local administrator (Local Administrator Password Solution)

I created this simple worklet to deploy the Local Administrator Password Solution client to machines and create the local administrative user we are going to use. Please disable the default local administrator account with a GPO. Worklet is maintained on our github page. evaluation code Exit 1 Remedation code ### Variables ### $username = "" #### Enter username you want to create ### $password = "" ### Enter initial password ### ### Variables ### $User=gwmi -class Win32_UserAccount | Where {$_.Name -eq $username} if (-Not $User) { [void](net user /add $username $password) [void](net localgroup administrators $username /add) if ($? -eq "True") { Write-Output "User successfully created." } else {Write-Output "Failed to create user!" } } Else {Write-Output "User already exists." } $Installed = (Get-ItemProperty HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\* | Where-Object { $_.DisplayName -Match "Local Administrator Password Solution" }) If(-Not $Install

4864
TJ_Coppola
2 months ago
Terms & ConditionsCookie settings