Jump to content
[[Template core/front/profile/profileHeader is throwing an error. This theme may be out of date. Run the support tool in the AdminCP to restore the default theme.]]

Rafe Spaulding last won the day on April 15

Rafe Spaulding had the most liked content!

Community Reputation

3 Neutral

My Information

  • Location
    Redding, Ca.
  • Agent Count
    500 - 750 Agents

Recent Profile Visitors

The recent visitors block is disabled and is not being shown to other users.

  1. Ok, I found my own answer to my question. imurphy sent me in the right direction. I do have my own patching groups, however many of the clients/locations/computers were found in the "Default approvals" group, but not within my own patching groups. I think it was stuff leftover from initial onboarding. Or perhaps a mixture of my own groups WITH the standard patching config... Nonetheless. What I did to resolve was I found the "approvals search" to determine what the auto-join was looking for, and it was "disable all patch approval" - This is the secret button I was looking for. So, I created a simple script which sets the extra data field of "disable all patch approval" to True and added this to the default "No Contract" group to run each night. Now, in patch manager, the clients that are in no contract are all showing as N/A. as I wish to occur.
  2. Ok, I give up. What is the secret button? Ignite button? EDF? (I have them set to "No contract, Disabled all Patch Approval, Disabled Automated Patch Install, Exclude Daytime Patch Install Window, Exclude Patch Reboot Window, and for locations I have not checked Enable Workstation or Enable Server patching... I have went so far as to uncheck "Under Microsoft Patch Contract"... Nothing I seem to do is doing what I want to do. I have tried update config/update inventory and this makes no difference. I have several clients/locations/computers that for one reason or another (No contract, break-fix, wishes to perform updates themselves, etc...) and I wish these computers to not show up in Patch manager (I wish only the computers that are "managed" or "Monitored" to show in there). The ones that are fully managed are at 99-100% patch compliance. I believe I have set all of the Ignite settings correctly, yet I cannot find a way to exclude them from Patch Manager reporting. Of course, some of them I wish to keep which is why I want to know how to selectively choose the ones I do not wish to report on (You know the ones, the ONSITE IT or ONSITE CLIENT is one of those "If it ain't broke, don't fix it" kind of people and it messes with the global compliance score. I have one single client that is reporting N/A in Patch manager, but cannot figure out the difference between that client and the rest. Maybe something is just broke? I was under the assumption that "no contract" did not add them to patch manager?
  3. Notes: This was not as easy as it looked. I ran into many issues I had to solve. I did take several snippets from multiple scripts I found including the feature update scripts and added my own solutions to the problems I encountered to come up with a working script which I have used many times recently with no problems. This will need moderate customization and moderate knowledge of scripting to debug these scripts for YOUR environment. Examples of problems? #1. Windows 7 does not have powershell scripting to mount an ISO image, so I had to use zip files and unzip them for the script #2. Unzip has an apparent 2gb limitation? Regardless, I used 7za.exe (7zip) and by the way, 7 zip has so many switches that change depending upon if it’s “After Labor Day, Summer, etc…” with each version. I personally downloaded the 7zip (32 bit and 64 bit) and copied the 32bit 7za.exe from my program files into the Labtech transfer folder to use. I used the correct switches for this version. #3. I added a Disable UAC script and Reboot script prior to installation due to some inconsistencies I encountered. (Lines 46-48 I added Run Script disable uac, run script reboot computer, sleep 180 seconds) #4. Hosted Automate server doesn’t give much room for huge ISO files, so I used dropbox (And also created an internal server share script) Another Note: In order to get the correct/current ISO I had to use Microsoft media creation tool and create the ISO’s for 32bit and 64bit (Needed for correct detection) and furthermore had to use PowerISO to save the ISO’s into zip format (See above about windows 7 and powershell) Anyway, I realize these scripts could be cleaner and more robust (You should see my desk). However, they are functional and work with no user intervention. But please, test test test within your environment before going into critical production environments. If nothing else, I am hoping I have provided a building block to build on and to have solved the problems many have had. And by all means, if anyone wants to make them better, please do! I take no responsibility for any damage, so please test test test in your environment prior to implementing into production. My contribution and input was to assist the community with a solution I created that worked for us. https://www.7-zip.org/download.html - 7zip https://go.microsoft.com/fwlink/?LinkId=691209 - Windows 10 Media Creation Tool https://www.dropbox.com/ - dropbox https://www.poweriso.com/ - Poweriso to convert iso to zip https://blogs.technet.microsoft.com/home_is_where_i_lay_my_head/2015/09/14/windows-10-setup-command-line-switches/ - Windows 10 setup switches for the curious (Sanitized)Upgrade Windows 7 to Windows 10 using dropbox Line 30/31: Set your dropbox link locations for 32/64 bit ZIP files (Must be zip converted from the isos created by Media Creation Tool) (note the dl=1 switch, it is important). Also, I only used and tested Win7pro and Win10Pro 32bit and 64bit. You may have to modify this to do other versions. Line 36: Once you have imported the script and saved it within your script folder, modify this line to point to YOUR location. Line 45: Here you can see the switches I used with 7za.exe (7zip) I would test this at a command prompt to verify switches work for you. 7zip has different switches for different versions. Google is your friend. I used basic “x” extract and “-o” for output directory Line 59: You can adjust these switches if you want, more specifically many people turn off updates /dynamicupdate disable… I prefer current updates. Lines 70-72: Ticket creation, modify for yourself. (Sanitized)Upgrade Windows 7 to Windows 10 using windows share Same steps as above, except line 30/31 will be Server\share locations. Disable UAC.xml Reboot computer.xml(Sanitized)Upgrade Windows 7 to Windows 10 from Server Share.xml(Sanitized)Upgrade Windows 7 to Windows 10 from Dropbox.xml
  4. Hey guys, I have a consistent irritation with the Antivirus Tile. Typically, we use Webroot as our anti-virus solution for many clients. But some agents report MSE or Windows Defender as their Anti-virus solution as opposed to Webroot which we wish to display in our reports (Customers purchased it, we wanna see it). I have verified all paths, software installed, Webroot installation is correct. Is there any way to prioritize which solution is displayed in the Antivirus Tile? Is there a manual way to modify the Tile data to reflect the solution we wish to be displayed? How are each of you dealing with the Antivirus Tile irritation?
  5. I believe this is the script he was referring to. I use it as well. In my opinion, it works great! However, I would like to figure out how to set a monitor to notify me when IP's have been blocked. Also, I can't figure out how to exclude LOCAL IP's from being blocked... Regardless, MY IP Blocklist is quite large, but rarely but it does happen I get a local IP in there and computer cannot logon until I remove it from the firewall rule. https://blog.watchpointdata.com/rdp-brute-force-attack-detection-and-blacklisting-with-powershell
  6. I appreciate the time you put into this. I am curious how and if we could add a condition which looks for "IP ADDRESSES" that have attempted to login more than 10 times within a 24 hour period? For those trying to brute force a logon?
  7. Update: Makes no sense, but I went back and re-did all the steps using Microsoft Edge (Especially the copy/paste into query) And also including the "Importing reports".... worked. Using Chrome, I was getting "plugin errors", and below error. I suspect wysiwyg is not exactly true when copying/pasting and there was some dirty stuff in there. Anyways, hoping this wasn't a fluke and actually helps somebody... "Try the steps with a different browser". Also, I ended up having to republish the Subreport and republish each of the reports with the New GUID created with the Subreport. Everything works now. Thanks to each of you. I am getting this same error when importing reports
  8. My personal opinion "of" the ones you mentioned, would be Storagecraft. I like it's integration and notifications. But, my personal preference (No integration which totally sucks) are Barracuda backup appliances. Still waiting and hoping for Barracuda integration. Acronis is too bloaty, and my experience with Datto was disastrous, didn't do anything it claimed it was able to do.
  9. I am seeing this with Webroot myself. I have many agents reporting the install/software path as C:\temppath, D:\Temppath, z:\temppath, etc... yet the physical location is within c:\program files.... Is there a fix for this? Automate is reporting Webroot is not installed, and it is in fact installed. Within the registry of these machines, I do see an installer listed in those temppath folders. I'm not sure where to go for direction. Webroot support? Automate support?
  10. I have been dealing with this for a while.. The only fix I have found (And we are currently scripting this) is: #1. Open client, go to software tab. (Note: The script "Actions, Webroot, uninstall" never seems to work for me.) #2. Find Webroot, right click and uninstall. #3. Run script, "Actions, Webroot, Install" #4 Go to Commands, Inventory,Update config #5 Go to Commands, Inventory, Resend all inventory. Wait a few minutes and refresh, it will report correctly now.
  11. I used a bit from many parts of this forum, and a little of my own batch file knowledge to create this. This BATCH script will create a loop from x to x (1-254 for example) and apply the variable to the end of an ip address to cycle through each IP on your network to rip and replace Labtech. for /L %%a in (1,1,254) do c:\windows\ltsvc\PsExec.exe \\192.168.1.%%a -n 8 "%windir%\system32\WindowsPowerShell\v1.0\powershell.exe" "(new-object Net.WebClient).DownloadString('http://bit.ly/LTPoSh') | iex; Reinstall-LTService -server https://fqdnofLabtech.com -LocationID xxx" Definition: for /L %%a in (1,1,254) = create a loop from 1-254 and store in value %%a (To be run from a batch file) 5-250 would look like (5,1,250) Definition: 192.168.1.%%A = (You can use any internal network IP's you wish) RipAndReplaceLabtech - Sanitized.bat
  12. Please delete this question, human error
  13. Thank you, Darren. I was afraid of that. I have a script which reads information from a technician created CSV file to add bulk users to Active directory in a loop. Fields include (Firstname, Lastname, username, OU, Homedrive, Homedirectory, Department, email, etc...) The script calls for the csv file from a location of c:\scripts\newusers.csv on the Agent. It works perfectly, however I am having to MANUALLY copy the newusers.csv created file to the Agent in order for the script to run as an automate script. I was looking for a way to have the script to copy the newusers.csv file from the technicians workstation to the AGENT, but apparently that is not possible. Not a huge deal, just use Teamviewer, Bomgar, or Screenconnect to manually transfer file and it works fine... Was just hoping for complete automation. My plan is to create scripts to export all users from a pre-existing server into a csv file, and run the script onto a NEW server to rebuild users/gpo's/etc.... I wonder if Screenconnect or Teamviewer have command line options to transfer files... Will look into that.
  14. I am writing a script to add users to active directory using a powershell script and a CSV file. I am creating the file on my local computer at c:\scripts\newusers.csv and need to copy this same file to the c:\scripts\newusers.csv on the destination domain controller for powershell script to run. (This works correctly when I manually move the file to the server, and powershell works). I have tried: File copy, File copy as admin, File copy as user, File copy to /labtech/transfer/uploads... I can't seem to get it to work. Script log always says "File Copy appeared to fail"... Is this something that can be done? source = MY local workstation c:\scripts\newusers.csv destination = Agent domain controller c:\scripts\newusers.csv
  • Create New...