Monitoring with PowerShell – Deploy the Microsoft Safety Scanner (MSERT)

2021-03-08T12:43:51+00:00March 8th, 2021|

After seeing that the MSERT tool by Microsoft (The Microsoft Safety Scanner) detected recent Exchange threats https://www.bleepingcomputer.com/news/security/microsofts-msert-tool-now-finds-web-shells-from-exchange-server-attacks/, I thought it would be prudent as a secondary measure to deploy the tool, scan, and make sure everything across our estate was clean. Although I didn't have that problem in my environment, I thought it acted as a good tool to [...]

Monitor Effective Alert Policy – Where are my tickets coming from?

2021-02-22T19:56:07+00:00February 22nd, 2021|

A quick one today! This report will tell you what alert template policies are set for your Internal and Remote Monitors, what groups they are set on, and it will amalgamate all the results in to a simple report ordered by Monitor Name. People often can't figure out where a ticket is coming from and this should help.Download - [...]

Pulling data from a Microsoft SQL Server or any ODBC compatible data source from inside an Automate Script

2020-12-28T15:27:18+00:00January 6th, 2021|

Did you know that it was possible to poll databases / datasets outside of the Automate database? All that is needed is a System DSN (OBDC Connection) on the agent you wish to query from, and you can then reference that in the following script function:On the agent, open the ODBC Data Source Administrator and go in to the [...]

ConnectWise Automate Advanced Scripting – Understanding variables passed from a monitor to a script

2021-01-05T13:19:59+00:00January 5th, 2021|

Have you ever been in a position where you have wanted to put together a custom script that triggers when a monitor fails, but you have no idea what variables are passed in to the script from the monitor? It's not like you can debug through this behaviour either as you can't trigger a script as monitor in debug [...]

Restrict or prevent an Automate script running during certain time frames

2020-12-28T15:12:10+00:00January 4th, 2021|

Happy new year, everybody!Today I am sharing a cool trick that you can use inside the Automate Scripting Engine to prevent scripts from running if the current time falls between a window that you set. This example can be run on any agent. This can be useful in situations where you say don't want a piece of software to [...]

The Automate script search that most people don’t know about

2020-12-16T01:02:11+00:00December 16th, 2020|

If you've ever tried to search for an Automate script with a specific bit of text, or you've wanted to use a scripting function but you have not idea how it should be implemented then this blog post is for you!Finding a real-life example of how a script function is utilisedYou can perform these searches from literally any script [...]

Running an Automate Script without an Agent – How to use Scheduled Client Scripts

2020-09-16T21:50:44+01:00September 16th, 2020|

Good evening, campers!Before I get into today's post, if you're on LinkedIn I'd love to connect with you. Please feel free to add me, I'll be posting some content on there in the future! https://www.linkedin.com/in/gavin-stone-1938146/Ever been in a situation where you need to run an Automate script, but don't particularly want to run it against a specific agent? Maybe [...]

Why I think now is a good time to start phasing out RMM specific scripts

2020-07-28T19:56:21+01:00July 28th, 2020|

It is no secret that ConnectWise has had a tough time recently. When you combine sequential critical security vulnerabilities with a seemingly uncertain future for the Automate product, it's going to start worrying some people. As a Managing Partner of MSPGeek, I have what I feel is a distinct insight into the thought processes and decision making of many [...]

Diagnosing ConnectWise Control integration being broken with ConnectWise Automate

2020-06-18T19:20:13+01:00June 18th, 2020|

This is something that I am seeing more and more often (including happening to me recently too). When you open an agent in Automate this is missing: You may get an error if you are trying to access an agent using the Control button in the main dashboard. It may even tell you the integration is broken. Step 1 [...]

Security Monitoring with Powershell – Ensuring Windows Firewall Integrity

2019-12-02T14:03:57+00:00December 2nd, 2019|

Though you can get products that replace or enhance the built-in firewall on Windows machines, there are still signficant amounts of agents that rely on the Windows Firewall as the last line of defense between the outside world and one of your workstations. Getting the state of the firewalls is not as easy as you would think as it's [...]

Important – urgent ConnectWise Control update needed by 30th October

2019-10-24T14:57:43+01:00October 24th, 2019|

Hello everyone! ConnectWise put out an important notice today that has the potential to affect your ability to remote control machines if not sorted. Their announcement as below: "Connectwise discovered an issue that will impact all versions prior to the latest version in the 19.0 release. Be aware that there is no minimum Automate Version or CWC Automate Plugin version [...]

New Report – Active Directory User Health Report

2019-08-20T22:58:12+01:00August 20th, 2019|

I am happy to bring to you a report I have been working on for a long time. This report (heavily customisable with the included instructions) helps you take ownership of all thing Active Directory by providing information on Active Directory settings, Enabled Users, Disabled Users, Newly Created Users, Domain Admin membership and Group Membership. All that you need [...]

How to enable enhanced debugging for the Report Center

2019-12-10T18:32:58+00:00July 1st, 2019|

I get asked this a lot so figured it was worth putting in to a post! Open the Dashboard, System > Configuration > Dashboard Go to the Config tab Go to the Configuration tab Go to the Properties tab Sort the properties by name, and see if one exists called plugin_reportcenter_loglevel If it does exist, make sure its value is set to 6 If it does not [...]

Free Report – Get a second opinion on your patching

2019-12-10T18:33:52+00:00April 3rd, 2019|

For a good while now I have been relatively cynical of the "100% Compliant" statistic that I see on certain servers in the Patch Manager and I have been considering how best to approach finding problems with patching that were not otherwise being highlighted. I designed this report to follow an important Automate mantra; trust, but verify. This report [...]

Scripting – Easily convert multiple Powershell variables into Automate Script Variables

2019-12-10T18:33:46+00:00February 20th, 2019|

This concept really helps when you want to get multiple, individual items outside of a Powershell script and into multiple Automate scripting variables without messing about running a script multiple times to get different outputs. Step 1 In the scripting engine add a script step that does an Execute Script > Powershell. Add the following script in Script to [...]

Remote Monitor Series: Security! Finding members of local groups that shouldn’t be there (like Remote Desktop Users)

2018-12-08T00:15:45+00:00December 8th, 2018|

A bit more of a complex monitor today! This monitor allows for the checking of all the members of any local group (domain groups will also work if done on a DC) and allow you to trigger an alert if accounts are found that shouldn't be there. The biggest usage for this in my experience is detecting for users [...]

Remote Monitor Series: Finding machines that have over 50GB OST files for Outlook

2018-11-08T22:17:15+00:00November 8th, 2018|

This is a great proactive monitor because in most cases anyone who has over 50GB of OST files normally has an Outlook that runs like a snail or constantly crashes [crayon-608011632cb8e081655713/] Remote Monitor Tips For a Powershell remote monitor, any " that is used inside the Powershell needs to be escaped with a backslash \ A Powershell remote monitor [...]

Remote Monitor Series: Finding machines where Bitlocker is not protecting drives

2018-11-08T21:01:45+00:00November 8th, 2018|

This is going to be the first in a number of blog posts that will give ideas/starting points for adding more value to your client monitoring. In this series I will not be focusing on how to create these monitors, more the code that can be used. I cover creating remote monitor creation here if you are not sure how to [...]

Load More Posts
Go to Top