4 Dec 18

Remote Monitor Series: Finding machines/agents with a non-default host file

2021-11-03T21:53:30+00:00December 4th, 2018|

The idea for this monitor was triggered by a problem someone posted about in the LabTechGeek Slack. This monitor will find any modifications that have been made to a standard windows host file, and return them. The test should be setup to do a condition contains "Standard host file" minus the ". "%windir%\System32\WindowsPowerShell\v1.0\powershell.exe" -noprofile -command "& {$Pattern = '^(?<IP>\d{1,3}(\.\d{1,3}){3})\s+(?<Host>.+)$';$File [...]

8 Nov 18

Remote Monitor Series: Finding machines that have over 50GB OST files for Outlook

2021-11-03T21:54:37+00:00November 8th, 2018|

This is a great proactive monitor because in most cases anyone who has over 50GB of OST files normally has an Outlook that runs like a snail or constantly crashes "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -command "& {$ErrorActionPreference = 'SilentlyContinue';$emptyOutput = \"\";[email protected]();$thresholdInGB = \"50\";dir c:\users | foreach -begin {} -process{$size=(dir $_.FullName *.ost -recurse -force -ea silentlycontinue | Measure-Object ‘length’ -sum -Maximum).sum;If (($size/1GB) [...]

8 Nov 18

Remote Monitor Series: Finding machines where Bitlocker is not protecting drives

2021-11-03T21:56:03+00:00November 8th, 2018|

This is going to be the first in a number of blog posts that will give ideas/starting points for adding more value to your client monitoring. In this series I will not be focusing on how to create these monitors, more the code that can be used. I cover creating remote monitor creation here if you are not sure how to [...]

3 Oct 18

SOGU File Searcher – ConnectWise Automate Script

2018-10-03T23:23:46+01:00October 3rd, 2018|

Following the release today by the United States Computer Emergency Readiness Team (https://www.us-cert.gov/APTs-Targeting-IT-Service-Provider-Customers), one of the steps they recommend is to use tools to detect intrusions and identify compromised systems and that these tool reports on APT (advanced persistent threat) actors using Sogu (also called PlugX) to compromise MSP systems. NCCIC recommends that network defenders use these tools to help [...]

28 Aug 18

Free Report – Export all EDFs (Even Custom Ones!)

2018-08-28T23:57:00+01:00August 28th, 2018|

Hello everyone! It's been a few months since I released a free report, and figured this one may go down well. This report will export all populated EDFs, including checkboxes and dropdowns and format all the data for you in a, hopefully, easy to consume report. Perfect if you are storing things like Bitlocker encryption keys, Local Admin passwords [...]

3 Jul 18

Remote Monitor – Trigger an alert when a profile goes above a certain size, including setup tips for Remote Monitors!

2021-11-03T21:58:05+00:00July 3rd, 2018|

This is a Remote Monitor that can function in Automate, that will trigger certain keywords that can be detected upon if the profile sizes go above a certain size. I have two monitors here, pick whichever you need depending on your requirements. The first will output all profiles and sizes, the second will only output profiles that are over [...]

29 Jun 18

Patch Compliance Report Grouped by Location

2018-06-29T00:08:19+01:00June 29th, 2018|

This again is a report that a number of people have asked for. Unfortunately, to allow the the filtering of a location at the point of report run would require a full rebuild of the report from scratch. I don't have the time to do that, unless someone wants to pay me for it ;) This is the middle [...]

10 May 18

Agent response slow? Tired of waiting to interact with agents? Offline Server alerts flaky? Your heartbeat may be broken!

2021-11-03T22:00:13+00:00May 10th, 2018|

Following a discussion in the LabTechGeek channel, I was surprised to find that a number of people had systems that were not checking in to the Automate server properly. Some of you may know, but there are two types of check-in done by your remote agents: A normal check-in, done over Port 443, numerous things are sent during this [...]

2 Mar 18

Why you should almost never need to run anything as Admin in Automate

2018-03-02T23:30:43+00:00March 2nd, 2018|

By far the biggest trap that people fall into when they start leveraging the capabilities of Automate scripting, commands and all other sorts of goodies, is they choose to run those features as Admin. There are a significant amount of functions that allow you to run as Admin. Most people try these functions and they don't work as they [...]

6 Feb 18

Free Report – Anti-Virus Health including Compliant Devices

2018-02-06T20:38:05+00:00February 6th, 2018|

This is one that I have been asked for for a while. I have designed the Compliant Assets section to look similar to the original At-Risk Assets design. This has been tested in Automate 11 and 12. You can download it here: Antivirus Health including Compliant Devices It looks like this, I hope you find it useful:

16 Jan 18

Spectre/Meltdown Vulnerability Detection – Free Detection Solution

2018-11-06T02:48:45+00:00January 16th, 2018|

I started working on this as soon as there was a reasonably easy way to detect vulnerable machines on Windows. It includes: A script that you run against agents, which sets EDFs and highlights numerous things (BIOS/Firmware update, notes, whether certain mitigations are enabled and whether you are secure) A Dataview that you can import to have a good [...]

16 Jan 18

Running programs/scripts as a logged in user in a LabTech/Automate Script

2018-11-06T02:41:36+00:00January 16th, 2018|

Two of the questions that we get asked often in the LabTech Geek Slack are usually phrased like this: I am trying to map a drive/delete a desktop icon/edit the registry for a user in a script and it is not working How do I run things on the user desktop? The reason number 1 doesn't work is because [...]

6 Dec 17

Remote Monitor – Use LabTech/ConnectWise Automate to monitor latency/response time on a network

2021-11-03T22:03:22+00:00December 6th, 2017|

Though Automate/LabTech has built-in tests for website latency and simple ping up/down checks, there is nothing in place for monitoring latency/response time on a network. This can be achieved by doing the following: Right click the agent you want to install the monitor on, Monitors > Add New Monitor Choose Yes to create using the Wizard Choose Monitor the results of an Executable [...]

10 Nov 17

Internal Monitor – RAWSQL – Machine’s running Office 2007 (V12) or Earlier

2021-11-03T22:05:31+00:00November 10th, 2017|

I thought this one of mine was worth sharing, especially helpful if you need a method of mass generating alerts/tickets/warnings for clients running Office 2007 or earlier. Internal Monitor - SOFTWARE - Office 2007 or Below Installed - Zipped SQL Download Install Instructions: Extract the .SQL file out of the zip download above In the LabTech CC, go to [...]

20 Oct 17

Report Center – DLL Error – There was an error loading the report data

2017-11-08T01:50:57+00:00October 20th, 2017|

Something that has plagued the Report Center for a while, tonight I got chance to sit down and have a look at what was causing the problem. If you have exported the repx files previously for this report, it may be a better idea to just import it instead of doing the below. This is meant for situations [...]

13 Oct 17

Remove a Probe from an Offline Agent

2017-10-13T10:53:40+01:00October 13th, 2017|

I see this question raised a lot - and there is a simple way to resolve it. On the agent run the script in Maintenance > Agent > Probe - Remove from an Offline Agent. That's all that is needed!

13 Sep 17

Free Report – Patches installed in the last 30 days on all agents

2017-11-08T02:34:19+00:00September 13th, 2017|

This report was requested in the LTG forums and I can definitely see the benefit in it. The report will display any hotfix that has a finished date in the last 30 days. The report should not ignore empty agents, meaning that if you have an agent in this report and it is blank it means it hasn't done [...]

6 Sep 17

RAWSQL Help and Tutorial – A how to, plus an internal monitor example to Detect Hung Servers and run Custom SQL in LabTech

2021-11-03T22:08:32+00:00September 6th, 2017|

The internal monitor referenced in this post can be downloaded here: LT - Offline Servers Custom - Hung Server I've been meaning to do a blog on RAWSQL monitors for a while - so here it is! The initial request is here https://www.labtechgeek.com/topic/4012-internal-monitor-for-over-x-amount-of-failed-logins-in-a-time-period The first request there is attached as a RAWSQL Internal monitor. Extract the .SQL from this and [...]

Go to Top