Skip to main content

Worklets

All things Worklets for Windows, macOS, and Linux

640 Topics
mfaas
mfaasRookie
posted in Find & Share Worklets
Worklet: Distribute custom Word template (Normal.dotm) to all users?

Hi, all, In our environment, we use a customized MS Word Template that is updated every few months. Is it possible to use a worklet/required software to either: Create the %appdata%\Roaming\Microsoft\Templates\ directory and copy the Normal.dotm in there? If it exists, compare file hashes and, if different, copy the newer version into that appdata directory? I can certainly do this programmatically on my PC, but it requires SMB access that the agent won’t have, as it runs as system. Can I upload the Normal.dotm as the “Installer Files” then access it somehow via the c:\ProgramData\amagent folder? Or, am I going about this all wrong? I am very new to Automox and am, honestly, still in my trial! Hope this make sense!

13992
Nic-Automox
CamilleS-Automox
CamilleS-AutomoxFormer Automox Employee
posted in Find & Share Worklets
Worklet: How to Disable Remote Desktop Protocol Connection

Here’s an example of a worklet we recently created in response to managing updates for the BlueKeep vulnerability: Introducing the Automox Worklet To enable your ability to configure and update systems using the Automox platform, we’ve created an endpoint hardening worklet that disables the remote desktop protocol connection. An Automox worklet is an open extensible automation architecture that allows IT operations to create any custom task that they can imagine. Our tool consumes and contains these worklets within a policy that can be automated and maintained across all devices with the Automox sensor installed. These reusable units of work can be applied across any supported operating system (including Windows, Linux, and OSX) and are powered by PowerShell and Bash scripting. How to Disable Remote Desktop Services Worklet If a machine is unpatchable, security administrators can use this worklet as a mitigating control to protect impacted Windows systems from the BlueKeep vulnerabilit

3742
Nic-Automox
J
jesumyipPower User
posted in Find & Share Worklets
Problem with worklet that manipulates registry

Hi all. I have a worklet that runs the following code in the remediation section. It doesn’t seem to be working. It works just fine if I run it in a powershell window (that runs as admin). What gives? I’m trying to disable auto-startup of Starleaf. $registryPath = "HKLM:\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\StartupFolder" $registryProperty = "StarLeaf.lnk" $enableValue = ([byte[]](0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00)) $disableValue = ([byte[]](0x03,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00)) Set-ItemProperty -Path $registryPath -Name $registryProperty -Value $disableValue -Type Binary

1771
J
Maikel
MaikelChannel Partner
posted in Find & Share Worklets
Looking for Worklet Best Practices

Hi All, im quite new to Automox and was wondering if you experts already collected best practices for creating worklets. For instance how can i write a proper output message to the activity log based on a step in evaluation or remediation and what things did you come up with when using the worklets? At this point for me anything goes!

13211
Nic-Automox
D
DavidM-AutomoxFormer Automox Employee
posted in Find & Share Worklets
Enable and Configure Storage sense - Windows 10

Microsoft announced that it will begin depreciating the Disk Cleanup tool starting in Windows 10 v1809, and in its place they are ramping up the built-in Storage sense feature originally released with Windows 10. Storage sense will automatically run cleanups when your disk is low on space, but you can configure it further to run on a schedule. If you have a manageable version of Windows 10 (Pro, Ent, Edu), than you can configure Storage sense through GPO. If your devices are not domain joined (or you prefer not to use GPO to manage storage sense), this Worklet can help enable the feature, and set some of the most common configurations. What are we doing in the settings? Evaluation - The example here is fairly simple. It checks if the primary key exists. The key is only created when GPO settings are applied, or if you manually place them. The idea is, that if this key is already there, it will not run remediation which could change what was applied by GPO. Remediation - Uses group

8480
D
D
DavidM-AutomoxFormer Automox Employee
posted in Find & Share Worklets
KACE Uninstall Script for Windows

Here is a worklet to assist with KACE agent uninstallation. The agent installation presents a few challenges, as it is a 32 bit installer, so it can be installed either in program files, or in program files (x86) depending on the OS architecture. In addition based on the Quest installation instructions, it will be created in one of two different sub-directories based on OS version and client version. This worklet is designed to work on either 32-bit or 64-bit Windows devices, and will work as long as the AMPTools.exe file exists in one of the default locations. We have an awesome customer giving this a shot, and I will update the code here if we find anything needs to be changed. Evaluation code borrowed from the Worklet: Enforced Application Uninstall for Windows Evaluation Code: <# .SYNOPSIS Check for presence of specified application on the target device .DESCRIPTION Read 32-bit and 64-bit registry to find matching applications Exits with 0 for compliance, 1 for Non-Com

29340
D
D
danursulineNovice
posted in Find & Share Worklets
Deployment of Google Remote Desktop

I threw this together for my org to get some easy remote support tools in place. Just wanted to post it here if someone else found it useful or could do a better job 😉 Evaluation Code: #REQUIRES -Version 2.0 <# .SYNOPSIS This Test script checks to see if Chrome is installed .DESCRIPTION This script queries the installed files for 32 and 64bit software and returns 0 if product is installed or 1 if not .Notes File Name :ChromeRemoteDesktop_Install_Test.ps1 Author :Automox Prerequisite :PowerShell V2 over win7 and upper #> #Handle Exit Codes: trap { $host.ui.WriteErrorLine($_.Exception); exit 90 } function ChromeRemoteDesktop_Install_Test { [array]$key = Get-UninstallRegistryKey -SoftwareName "Chrome Remote Desktop Host" $alreadyInstalled = $false $version = '80.0.3987.18' if ($key.Count -ne 0) { $key | ForEach-Object { if ($_.DisplayVersion -eq $version) { $alreadyInstalled = $true } } } $packageArgs = @{ pa

3828
D
D
dcadmin
posted in Find & Share Worklets
Using a worklet to remove Skype Appx

Attempting to check for the presence of the Microsoft Store App version of Skype. If present, run the Remediation (remove). The Worklet displays an Error status in the Activity Log, but I do not know why, nor how to check the logs/console. Using a modified version of the Skype install script - it does the same 32/64 bit checks, but remediates if Skype was found, rather than not found. At least I think. Eval: #REQUIRES -Version 2.0 <# .SYNOPSIS This Test script checks to see if Skype is installed .DESCRIPTION This script queries the installed files for 32 and 64bit software and returns a 1 if product is installed or 0 if not .Notes File Name :Skype_Uninstall_Test.ps1 Author : Prerequisite :PowerShell V2 over win7 and upper #> #Handle Exit Codes: trap { $host.ui.WriteErrorLine($_.Exception); exit 90 } function Skype_Uninstall_Test { <# .SYNOPSIS This function Checks a Skype installation. .DESCRIPTION After c

1331
A
Z
zglaserRookie
posted in Find & Share Worklets
Using worklet to deploy files

I am wondering if anyone has tried using Automox to deploy files to users. We have many remote users and every once in a while we need to deploy a batch file or RDP to their desktop. In the past it was reliant on them connecting with VPN to our site and downloading the appropriate file. I would like to remove the shared folder dependency and upload the file to Automox and deploy directly from there. What i was looking to do was something like Copy-Item -Path ".\file.rdp" -Destination "C:\Users\Public\Desktop" which does work when run in PowerShell from the folder containing the file. It doesn’t need a remediation script just the ability to execute and deploy/overwrite any existing files. Thanks in advance!

14028
JasonG-Automox
T
twadleNovice
posted in Find & Share Worklets
Worklet: Execute .exe file

I have tested variations of required software policy and worklets, but I can not get a .exe agent installer to execute. I have tested with powershell code and can run the .exe locally, but the same script will not work through automox. I have uploaded the file to the worklet, then put the remediation code as: .\filename.exe the worklet status will then display as a checkmark and the agent will not be installed. how can I troubleshoot this?

114520
Nic-Automox
AdamW-Automox
AdamW-AutomoxAutomox Employee
posted in Find & Share Worklets
Worklet: Disabling SMBv1 across Windows Devices

Server Message Block (SMB) is a network communication protocol used share access to files, printers, etc across devices in a network. SMBv1 was first designed and used 30 years ago and in no longer adequate in providing security in today’s modern network infrastructure, where the complexity is only rivaled by that of the malicious code looking to exploit it. Frankly, using, or having SMB1 enabled is unacceptable in today’s world as you lose key protections offered by later SMB protocol versions Pre-authentication Integrity Secure Dialect Negotiation Encryption Insecure guest auth blocking, Protects against MiTM attacks. Better message signing Additionally, if your clients use SMB1, then a man-in-the-middle can tell your client to ignore all the above . All they need to do is block SMB2+ on themselves and answer to your server’s name or IP Automox recommends that you disable SMB1 across all of your Windows devices. Below is the Worklet code needed to evaluate against if SMB1 is enab

1160
AdamW-Automox
JasonG-Automox
JasonG-AutomoxNovice
posted in Find & Share Worklets
Worklet: Automatic OS Upgrade to Windows 10 2004

Note: the new version of the Windows 10 upgrade code is now here: Worklet: Automox OS Upgrade to Latest Windows10 OS version Worklets The following Worklet will ensure all of your devices are always on the most current release of Windows 10. Since the current version is 2004, that is the version this Worklet will upgrade you. This Worklet supports multiple languages: DISCLAIMER: THIS WILL AUTOMATICALLY REBOOT THE DEVICE WHEN THE UPGRADE IS COMPLETE Evaluation: $iso = "C:\programdata\amagent\Windows1909OSUpgrade.iso" if ((Test-Path $iso) -eq $true) {Remove-Item $iso } $osversion = (Get-Item "HKLM:SOFTWARE\Microsoft\Wi… It’s a general purpose version that will always take you to the latest version of Windows 10.

30718
Nic-Automox
MinnesotaJoe
MinnesotaJoeNovice
posted in Find & Share Worklets
Issue with a worklet

I am working on a worklet to report back in the Activity log and then take after if the firewall is enabled on some CentOS boxes. But for some reason I cannot get the echos to appear in the activity log. Below is what I have. #!/bin/bash if [[ `firewall-cmd --state` = running ]] then firewall_state=active else firewall_state=inactive fi echo "Firewall State: $firewall_state" 1>&2 if [[ `systemctl is-enabled firewalld` = enabled ]] then firewall_status=enabled elif [[ `systemctl is-enabled firewalld` = masked ]] then firewall_status=masked elif [[ `systemctl is-enabled firewalld` = disabled ]] then firewall_status=disabled else firewall_status=unknown fi echo "Firewall Status: $firewall_status" 1>&2 if [ "$firewall_state" = "active" ] || [ "firewall_status" = "enabled" ] then exit 1 else exit 0

6111
Nic-Automox
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Find & Share Worklets
Worklet: open website on end user's computer

I wrote this worklet at the request of one of our customers. They want to pop open a browser window to a survey site every morning for their users. To edit this for your use case, all you need to do is replace the URL in the $command variable, and to make sure that Powershell is allowed to run scripts on the endpoint as a user. This is because it’s making use of the scheduled task feature to run the worklet as the logged in user instead of System. To do that, you can run this command (as admin) on the endpoint: `Set-ExecutionPolicy RemoteSigned’ Evaluation code: Exit 1 Remediation code: $time = (Get-Date).AddSeconds(5) $triggerAt = New-ScheduledTaskTrigger -At $time -Once $currentusr = (Get-WmiObject -class win32_process -ComputerName 'localhost' | Where-Object name -Match explorer).getowner().user $command = "start https://www.google.com" New-Item -Path "c:\ProgramData\Amagent" -Name "message.ps1" -ItemType "file" -Value $command $action = New-ScheduledTaskAction -Execute Powe

650
Nic-Automox
Ariel-Automox
Ariel-AutomoxNovice
posted in Find & Share Worklets
Enhanced worklet ideas! Tell us yours!

What would improve your experience with worklets in Automox? It can be worklets you’d like created, ways of making them easier to work with, how you view the results in the console or …??

182
Nic-Automox
T
taranbir.singhNovice
posted in Find & Share Worklets
is there Worklet to uninstall MS office from Windows??

i want to uninstall MS office 2016 using Automox.

18814
B
E
ews
posted in Find & Share Worklets
Worklet: Install Powershell 5.1 on Windows 7 via Chocolatey

Noticed that Windows 7 devices (with the extended support update) weren’t showing software inventory in Automox. After working with Automox support, they discovered that Windows 7 devices need Powershell 5 (supposedly they’ll have a fix for Windows 7 devices soon). I attempted to use the Microsoft provided powershell script to install Windows Management Framework 5.1 (KB3191566) (which installs powershell 5 on Windows 7), but couldn’t get it to run consistently. Tried installing chocolatey and then running ‘choco install powershell’ and it worked consistently. So that’s what this script does: installs chocolatey offline and then runs ‘choco install powershell’ on Windows 7 machines. It isn’t pretty, but it works. Would appreciate someone with actual Powershell experience/skills to clean up. Evaluation [string]$ThisPackagePSHVersion = '5.1.14409.1005' if ($PSVersionTable -and ($PSVersionTable.PSVersion -ge [Version]$ThisPackagePSHVersion)) { Write-Warning "PowerShell version, $($PS

3971
E
L
L4d1kNovice
posted in Find & Share Worklets
Splashtop Streamer MAC install

I am trying to push the installation using the instructions found on the splashtop help page: Splashtop Business - Support Command-line parameters to silently install your deployable Splashtop Streamer Note: Deployable Streamer is a feature available only to Splashtop Business Access and Splashtop Remote Support users. Download your deployable Streamer by logging into my.splashtop.com and clickin... should be simple: two files: deploy_splashtop_streamer.sh Splashtop_Streamer.dmg and execute command: sudo ./deploy_splashtop_streamer.sh -i Splashtop_Streamer.dmg -d REG-CODE -w 0 -s 0 -v 0 Initially I was receiving errors. changed it to: sh ./deploy_splashtop_streamer.sh -i Splashtop_Streamer.dmg -d REG-CODE -w 0 -s 0 -v 0 using sh to execute the command fixed it. Just in case someone else needs help to deploy it.

75816
Nic-Automox
AdamW-Automox
AdamW-AutomoxAutomox Employee
posted in Find & Share Worklets
Worklet: Ensuring Firefox is installed on Mac devices

This worklet will evaluate Mac devices to ensure the latest version of Firefox is installed. If the worklet finds the Firefox applications is not installed, the remediation code will install it on the device. Evaluation: #!/bin/bash #example script for installing Firefox on Mac devices #evaluate the device to see if Firefox is currently installed. if [ -d "/Applications/firefox.app" ]; then exit 0 else exit 1 fi Remediation: #!/bin/bash #example script for installing Firefox on Mac devices #create a temporary directory to download Firefox install file set -e tempfile=$(mktemp) #download the latest version of Firefox to the temp file echo "Downloading Firefox..." curl -L "https://download.mozilla.org/?product=firefox-latest&os=osx&lang=en-US" -o "$tempfile" echo "Installing Firefox..." #mount the firefox dmg file to a volume hdiutil attach /tmp/Firefox.dmg #copy the firefox app to the devices applications cp -R /Volumes/Firefox/Firefox.app/ /Applicatio

38923
Nic-Automox
AdamW-Automox
AdamW-AutomoxAutomox Employee
posted in Find & Share Worklets
Worklet: Automatic OS Upgrade to Windows 10 1903

Big shoutout to @aescolastico and @Gen123 for contributing to my previous 1903 OS Upgrade Worklet that made this new automatic 1903 feature update possible! Automox has the functionality to upgrade Windows OS versions natively through any patch policy. Due to some recent changes made by Microsoft, Automox is unable to discover the Windows 10 version 1903 OS upgrade advertised through Windows Update. Automox engineering is working directly with Microsoft to rectify this issue and expect to support this upgrade natively soon. It is a one-click automatic upgrade without needing to pre-deploy the 1903 .iso image to your devices. This Worklet will automatically build out the download link for 1903 based on your OS’s architecture, download the .iso image to you local system, mount the .iso to a disk drive, and then automatically run the download setup all silently without any user interaction. The Evaluation and Remediation code for the Worklet is as follows: Evaluation: $iso = "C:\programda

26711
S
T
TimL-AutomoxAutomox Employee
posted in Find & Share Worklets
Worklet: Suppress macOS Catalina Upgrade Notifications

macOS Catalina has arrived and as you may know, Apple sends upgrade notifications to all macOS devices soon after release. While Automox will be compatible with macOS Catalina shortly after it’s public release, you may not be. Apple installs this upgrade notifier via Apple Software Update. If you are using an internal Software Update Server, you can remove the update macOSInstallerNotification_GM and ‘macOS Catalina’ from scope, if not you can tell your macOS devices to ignore this update. If you’re reading this too late and the update has already installed, this script will still remove the notifier bundle. Check script: #!/bin/bash set -e ############################################################################ # suppress_macOS_upgrade_notifications_check # # exit 0 = upgrade notifier is not installed AND is not pending installation # exit 1 = upgrade notifier is installed OR pending installation ############################################################################ #

1032
Nic-Automox
AdamW-Automox
AdamW-AutomoxAutomox Employee
posted in Find & Share Worklets
Worklet: Windows 10 Hotfix - Patches a bug that kills internet connections on Windows 10 devices

Microsoft has released an update for a bug which disrupted Internet connections on certain Windows 10 devices. This bug prevents many Microsoft products, such as Office365, Internet Explorer/Edge, and Outlook from being able to communicate out to the internet when using a VPN. Coming at the absolute wrong time for remote users to lose connectivity to enterprise applications, Microsoft has reacted quickly with this patch. You can find more information about this bug by clicking here. The patch is currently only available as an out-of-band update on the Microsoft Update Catalog and not within Windows Update itself. With that said, this will not be supported by traditional patching methods. I have created a Worklet that will check to see if the hotfix is installed for all of your Windows devices. If the hotfix is not installed, it will download and install it. This will ensure all of your Windows devices have this patch applied no matter what OS version, or architecture your device is ru

1061
T
jermicide
jermicideNovice
posted in Find & Share Worklets
WORKLET :: Evaluate and install multiple apps using one worklet

as i am learning this platform, i have a few items in my environment to fix. today, i wanna knock out getting CylancePROTECT installed globally and rollout CylanceOPTICS. i have looked at the required app policy (in fact, i am using this to push a few other apps). i think this would work for most required apps. three small items prove challenging for me: i would like to install multiple apps under one policy (prolly just over complicating things??). this would be a nifty concept for PC Imaging or Day 1 Patching kinda workflows. i am not sure i understand how to best leverage the version field. in my small mind, if i insert a version number in the required app versioning field, the policy would run if the version number of the installed app is lower than the defined version number - OR if the application is not installed, at all. what if i i want to install an app ONLY if it is not present, could i set this value to 0.001? would the value of 0.001 fundamentally function as an “i

3294
RichardM-Automox
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Find & Share Worklets
Worklet: Turn off SMBv3 compression to remediate CVE-2020-0796

There’s a buffer overflow vulnerability in SMBv3. Currently no patch exists, so Microsoft recommends turning off SMBv3 compression on your Windows 2019 servers. There’s not yet a known exploit in the wild for this vulnerability. The following code will turn off compression on Windows Server 2019. Evaluation code: Exit 1 Remediation code: Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" DisableCompression -Type DWORD -Value 1 -Force This will protect servers from being exploited, but does not protect Windows 10 SMBv3 clients. To stop any Windows 10 clients in your environment being exploited, Microsoft recommends blocking port 445 on your external firewalls. However, if an attacker has already infiltrated your network then they’ll still be able to exploit Windows 10 clients if they can trick a user into connecting to an SMBv3 share. References: Ars Technica Windows has a new wormable vulnerability, and there’s n

481
Nic-Automox
J
jesumyipPower User
posted in Find & Share Worklets
Worklet: Place Shortcut on Current User's Desktop

Hi there. I would like to deploy icons on the current user’s desktop. This is currently being done using group policy as part of the user’s logon. Is there a way to achieve this using Worklets? Is there an evaluation script I can run to figureout the currently logged on user? Then a remediation script to run that will create the icons on the current logged on user’s desktop?

4045
Nic-Automox
Terms & ConditionsCookie settings