diff --git a/Sites/Application Management/Fixlets/Fixlets/13808-Update - RES ONE Workspace File Hash Devourer - 0.8.0 - Windows (22981).bes b/Sites/Application Management/Fixlets/Fixlets/13808-Update - RES ONE Workspace File Hash Devourer - 0.8.0 - Windows (22981).bes
index fd4b4de70..c2937ce03 100644
--- a/Sites/Application Management/Fixlets/Fixlets/13808-Update - RES ONE Workspace File Hash Devourer - 0.8.0 - Windows (22981).bes
+++ b/Sites/Application Management/Fixlets/Fixlets/13808-Update - RES ONE Workspace File Hash Devourer - 0.8.0 - Windows (22981).bes
@@ -1,545 +1,545 @@
-
-
-
- The Devourer is a tool that scans the BigFix Root Server Uploads and BigFix Root Server Cache directories for installers, archives, etc searching for executables to whitelist. Once it finishes its scan it imports the generated hash list into RES ONE Workspace. -
-]]> -+ The Devourer is a tool that scans the BigFix Root Server Uploads and BigFix Root Server Cache directories for installers, archives, etc searching for executables to whitelist. Once it finishes its scan it imports the generated hash list into RES ONE Workspace. +
+]]>This fixlet uses Local Group Policy to set Chrome Policies
-The changes are made the binary file located here: C:\Windows\System32\GroupPolicy\Machine\Registry.pol
-The changes are also seen in the registry here: "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome"
-NOTE: Editing the registry directly does not work. These changes must be made using Local GPO. These policies seem to work with the per-user version of chrome, not just the enterprise MSI version.
-]]>
This fixlet uses Local Group Policy to set Chrome Policies
+The changes are made the binary file located here: C:\Windows\System32\GroupPolicy\Machine\Registry.pol
+The changes are also seen in the registry here: "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome"
+NOTE: Editing the registry directly does not work. These changes must be made using Local GPO. These policies seem to work with the per-user version of chrome, not just the enterprise MSI version.
+]]>
|
- This fixlet installs or activates .NET Framework 3.5 SP1 in order to install Powershell. -Important: Important: The activation of .NET Framework 3.5 SP1 may require Internet access on the target when performed on Windows 2008 R2, Windows 8, Windows 8.1, Windows 2012 or Windows 2012 R2. In case of fixlet errors on one of these platforms, you must activate the .NET Framework 3.5 feature manually by using the Turn Windows Features on or off function available from the Add or Remove Programs applet of the Control Panel (appwiz.cpl). The installation of .NET Framework 3.5 SP1 on other platforms does not require Internet access on the target. Note: You must accept the license for Microsoft .NET Framework 3.5 SP1 before deploying this Fixlet. By applying this Fixlet, you are implicitly accepting the license agreement. The end user will NOT be prompted to accept the new license. The license agreement can be found within the installer for the product found at the link below. |
|
+ This fixlet installs or activates .NET Framework 3.5 SP1 in order to install Powershell. +Important: Important: The activation of .NET Framework 3.5 SP1 may require Internet access on the target when performed on Windows 2008 R2, Windows 8, Windows 8.1, Windows 2012 or Windows 2012 R2. In case of fixlet errors on one of these platforms, you must activate the .NET Framework 3.5 feature manually by using the Turn Windows Features on or off function available from the Add or Remove Programs applet of the Control Panel (appwiz.cpl). The installation of .NET Framework 3.5 SP1 on other platforms does not require Internet access on the target. Note: You must accept the license for Microsoft .NET Framework 3.5 SP1 before deploying this Fixlet. By applying this Fixlet, you are implicitly accepting the license agreement. The end user will NOT be prompted to accept the new license. The license agreement can be found within the installer for the product found at the link below. |
|
- Use this fixlet to install Microsoft Windows PowerShell. -Note: .NET Framework 2.0 SP1 is required as a prerequsite. -Note: You must accept the license for Windows PowerShell before deploying this Fixlet. By applying this Fixlet, you are implicitly accepting the license agreement. The end user will NOT be prompted to accept the new license. The license agreement can be found within the installer for the product found at the link below. |
|
+ Use this fixlet to install Microsoft Windows PowerShell. +Note: .NET Framework 2.0 SP1 is required as a prerequsite. +Note: You must accept the license for Windows PowerShell before deploying this Fixlet. By applying this Fixlet, you are implicitly accepting the license agreement. The end user will NOT be prompted to accept the new license. The license agreement can be found within the installer for the product found at the link below. |
- Requires FIleMaker Pro 12
-
This task is applicable on Mac OS X 10.6, Mac OS X 10.7 and Mac OS X 10.8
- Requires FIleMaker Pro 12
+
This task is applicable on Mac OS X 10.6, Mac OS X 10.7 and Mac OS X 10.8
File Size: 43.9 MB
]]>File Size: 43.9 MB
]]>The Adobe Reader and Acrobat Cleaner Tool removes a standalone installation of Reader or Acrobat, including any preferences and settings that may be preserved during a standard program uninstall. The tool has both a user interface as well as a command line interface.
While most installs, uninstalls, updates, and repair operations happen without incident, there are cases where a user may not be able to complete such tasks due to some registry or file conflict on the machine. This is particularly problematic when permissions set on registry entries or files prevent the successful installation of new installs and/or updates. The Adobe Reader and Acrobat Cleaner Tool is designed to fix such issues by cleaning up corrupted installations, including removing or fixing corrupted files, removing or changing permissions registry entries, etc. The tool provides options for removing problematic Acrobat items only while leaving Reader untouched and vice versa.
]]>The Adobe Reader and Acrobat Cleaner Tool removes a standalone installation of Reader or Acrobat, including any preferences and settings that may be preserved during a standard program uninstall. The tool has both a user interface as well as a command line interface.
While most installs, uninstalls, updates, and repair operations happen without incident, there are cases where a user may not be able to complete such tasks due to some registry or file conflict on the machine. This is particularly problematic when permissions set on registry entries or files prevent the successful installation of new installs and/or updates. The Adobe Reader and Acrobat Cleaner Tool is designed to fix such issues by cleaning up corrupted installations, including removing or fixing corrupted files, removing or changing permissions registry entries, etc. The tool provides options for removing problematic Acrobat items only while leaving Reader untouched and vice versa.
]]>]]>
]]>
]]>
]]>
-
References:
-https://www.digicert.com/util/
-]]>
+
References:
+https://www.digicert.com/util/
+]]>
-
About Mozilla Firefox
-Firefox is a free and open source web browser managed by Mozilla Corporation.-
--Firefox Extended Support Release (ESR) is an enterprise version of Desktop Firefox for organizations requiring extended support for mass deployments of Firefox. Releases will be maintained by Mozilla for approximately one year, with point releases containing security updates coinciding with regular Firefox releases. The ESR will also have a two-cycle (12-week) overlap between the time of a new release and the end-of-life of the previous release to permit testing and certification prior to deploying a new version.
Licensing
---Firefox is open source software (Mozilla Public License).
About This Task
-This task will install/upgrade: Mozilla Firefox 10.0.12esr.-
This task is applicable on: Windows XP and up.
Action Description
---This action installs Firefox and then disables the automatic check for updates.
-
Additional Notes
--]]>This task will replace all versions of Desktop Firefox with Firefox ESR, even if the version of Desktop Firefox is more current than this version of Firefox ESR.
-Firefox Release History: http://en.wikipedia.org/wiki/Firefox_release_history
-Find the related "Firefox Configuration - Windows" analysis here: http://bigfix.me/analysis/details/2994642
-Find the latest version of this task here: http://bigfix.me/fixlet/details/3733
+
About Mozilla Firefox
+Firefox is a free and open source web browser managed by Mozilla Corporation.+
++Firefox Extended Support Release (ESR) is an enterprise version of Desktop Firefox for organizations requiring extended support for mass deployments of Firefox. Releases will be maintained by Mozilla for approximately one year, with point releases containing security updates coinciding with regular Firefox releases. The ESR will also have a two-cycle (12-week) overlap between the time of a new release and the end-of-life of the previous release to permit testing and certification prior to deploying a new version.
Licensing
+++Firefox is open source software (Mozilla Public License).
About This Task
+This task will install/upgrade: Mozilla Firefox 10.0.12esr.+
This task is applicable on: Windows XP and up.
Action Description
+++This action installs Firefox and then disables the automatic check for updates.
+
Additional Notes
++]]>This task will replace all versions of Desktop Firefox with Firefox ESR, even if the version of Desktop Firefox is more current than this version of Firefox ESR.
+Firefox Release History: http://en.wikipedia.org/wiki/Firefox_release_history
+Find the related "Firefox Configuration - Windows" analysis here: http://bigfix.me/analysis/details/2994642
+Find the latest version of this task here: http://bigfix.me/fixlet/details/3733
-
About Mozilla Firefox
-Firefox is a free and open source web browser managed by Mozilla Corporation.-
--Firefox Extended Support Release (ESR) is an enterprise version of Desktop Firefox for organizations requiring extended support for mass deployments of Firefox. Releases will be maintained by Mozilla for approximately one year, with point releases containing security updates coinciding with regular Firefox releases. The ESR will also have a two-cycle (12-week) overlap between the time of a new release and the end-of-life of the previous release to permit testing and certification prior to deploying a new version.
Licensing
---Firefox is open source software (Mozilla Public License).
About This Task
-This task will install/upgrade: Mozilla Firefox 17.0.11esr.-
This task is applicable on: Windows XP and up.
Action Description
---This action installs Firefox and then disables the automatic check for updates.
-
Additional Notes
--]]>This task will replace all versions of Desktop Firefox with Firefox ESR, even if the version of Desktop Firefox is more current than this version of Firefox ESR.
-Firefox Release History: http://en.wikipedia.org/wiki/Firefox_release_history
-Find the related "Firefox Configuration - Windows" analysis here: http://bigfix.me/analysis/details/2994642
-Find the latest version of this task here: http://bigfix.me/fixlet/details/3734
+
About Mozilla Firefox
+Firefox is a free and open source web browser managed by Mozilla Corporation.+
++Firefox Extended Support Release (ESR) is an enterprise version of Desktop Firefox for organizations requiring extended support for mass deployments of Firefox. Releases will be maintained by Mozilla for approximately one year, with point releases containing security updates coinciding with regular Firefox releases. The ESR will also have a two-cycle (12-week) overlap between the time of a new release and the end-of-life of the previous release to permit testing and certification prior to deploying a new version.
Licensing
+++Firefox is open source software (Mozilla Public License).
About This Task
+This task will install/upgrade: Mozilla Firefox 17.0.11esr.+
This task is applicable on: Windows XP and up.
Action Description
+++This action installs Firefox and then disables the automatic check for updates.
+
Additional Notes
++]]>This task will replace all versions of Desktop Firefox with Firefox ESR, even if the version of Desktop Firefox is more current than this version of Firefox ESR.
+Firefox Release History: http://en.wikipedia.org/wiki/Firefox_release_history
+Find the related "Firefox Configuration - Windows" analysis here: http://bigfix.me/analysis/details/2994642
+Find the latest version of this task here: http://bigfix.me/fixlet/details/3734
Firefox is a free and open source web browser managed by Mozilla Corporation.-
--Firefox Extended Support Release (ESR) is an enterprise version of Desktop Firefox for organizations requiring extended support for mass deployments of Firefox. Releases will be maintained by Mozilla for approximately one year, with point releases containing security updates coinciding with regular Firefox releases. The ESR will also have a two-cycle (12-week) overlap between the time of a new release and the end-of-life of the previous release to permit testing and certification prior to deploying a new version.
Licensing
---Firefox is open source software (Mozilla Public License).
About This Task
-This task will install/upgrade: Mozilla Firefox 24.4.0esr-
This task is applicable on: Windows XP and up.
Action Description
---This action installs Firefox and then disables the automatic check for updates.
--This action only installs Firefox if it is not running; if it is running, the action may report back as failed. To ensure that the update is eventually applied, you may to deploy this action as a policy and and retry the installation if it fails.
--This action installs Firefox regardless of whether or not it is running. Use this action to ensure that the update is applied when the action is deployed.
-Important note: This action will close any running instance of Firefox on the client machines. Please schedule the update to occur at a time when a service interruption is acceptable.
-
Additional Notes
--]]>This task will replace all versions of Desktop Firefox with Firefox ESR, even if the version of Desktop Firefox is more current than this version of Firefox ESR.
-Related Links:
--Firefox Release History: http://en.wikipedia.org/wiki/Firefox_release_history
-Find the related "Firefox Configuration - Windows" analysis here: http://bigfix.me/analysis/details/2994642
-Find the latest version of this task here: http://bigfix.me/fixlet/details/3737
Firefox is a free and open source web browser managed by Mozilla Corporation.+
++Firefox Extended Support Release (ESR) is an enterprise version of Desktop Firefox for organizations requiring extended support for mass deployments of Firefox. Releases will be maintained by Mozilla for approximately one year, with point releases containing security updates coinciding with regular Firefox releases. The ESR will also have a two-cycle (12-week) overlap between the time of a new release and the end-of-life of the previous release to permit testing and certification prior to deploying a new version.
Licensing
+++Firefox is open source software (Mozilla Public License).
About This Task
+This task will install/upgrade: Mozilla Firefox 24.4.0esr+
This task is applicable on: Windows XP and up.
Action Description
+++This action installs Firefox and then disables the automatic check for updates.
++This action only installs Firefox if it is not running; if it is running, the action may report back as failed. To ensure that the update is eventually applied, you may to deploy this action as a policy and and retry the installation if it fails.
++This action installs Firefox regardless of whether or not it is running. Use this action to ensure that the update is applied when the action is deployed.
+Important note: This action will close any running instance of Firefox on the client machines. Please schedule the update to occur at a time when a service interruption is acceptable.
+
Additional Notes
++]]>This task will replace all versions of Desktop Firefox with Firefox ESR, even if the version of Desktop Firefox is more current than this version of Firefox ESR.
+Related Links:
++Firefox Release History: http://en.wikipedia.org/wiki/Firefox_release_history
+Find the related "Firefox Configuration - Windows" analysis here: http://bigfix.me/analysis/details/2994642
+Find the latest version of this task here: http://bigfix.me/fixlet/details/3737
-
References:
-http://wiki.mcneel.com/rhino/installingrhio/5.0/setupini
-http://wiki.mcneel.com/rhino/installingrhino/5.0#rhino_50_install_with_script_and_ini_file
-]]>
+
References:
+http://wiki.mcneel.com/rhino/installingrhio/5.0/setupini
+http://wiki.mcneel.com/rhino/installingrhino/5.0#rhino_50_install_with_script_and_ini_file
+]]>
--Adobe Reader is an application developed by Adobe Systems to view and print files in portable document format (PDF). Adobe's solution for creating and manipulating PDF files is Adobe Acrobat Professional, which requires a license.
Licensing
---Adobe Reader is freeware.
About This Task
-This task will install/upgrade: Adobe Reader XI 11.0.04.]]>
This task is applicable on: Windows XP, Windows XP x64, Windows Vista, Windows Vista x64, Windows 7, Windows 7 x64, Windows 8 and Windows 8 x64.
++Adobe Reader is an application developed by Adobe Systems to view and print files in portable document format (PDF). Adobe's solution for creating and manipulating PDF files is Adobe Acrobat Professional, which requires a license.
Licensing
+++Adobe Reader is freeware.
About This Task
+This task will install/upgrade: Adobe Reader XI 11.0.04.]]>
This task is applicable on: Windows XP, Windows XP x64, Windows Vista, Windows Vista x64, Windows 7, Windows 7 x64, Windows 8 and Windows 8 x64.
--Adobe Reader is an application developed by Adobe Systems to view and print files in portable document format (PDF). Adobe's solution for creating and manipulating PDF files is Adobe Acrobat Professional, which requires a license.
Licensing
---Adobe Reader is freeware.
About This Task
-This task will install/upgrade: Adobe Reader XI 11.0.6-
This task is applicable on: Windows XP and higher (32-bit and 64-bit)
Action Description
---This action installs Reader.
--This action installs Reader and then disables the automatic check for updates.
Action3: Install/upgrade only if Reader is not running.
--This action only installs Reader if it is not running; if it is running, the action may report back as failed. To ensure that the update is eventually applied, you may to deploy this action as a policy and and retry the installation if it fails.
--This action performs the same action as Action3 and then disables the automatic check for updates.
--This action installs Reader regardless of whether or not it is running. Use this action to ensure that the update is applied when the action is deployed.
-Important note: This action will close any running instance of Reader on the client machines. Please schedule the update to occur at a time when a service interruption is acceptable.
--This action performs the same action as Action5 and then disables the automatic check for updates.
Additional Notes
--]]>By default, Actions1-6 do not install a desktop shortcut. To perform the action with a desktop shortcut, do the following:
--
- Take the normal action you want to take (e.g., Install/upgrade, Install/upgrade if not running, etc.) -
- Select the "Action Script" tab -
- Select "Use the following action script" -
- UNCOMMENT the wait statement under the //install Adobe Reader WITH a desktop shortcut comment. -
- COMMENT the wait statement under the //install Adobe Reader WITHOUT a desktop shortcut comment.
++Adobe Reader is an application developed by Adobe Systems to view and print files in portable document format (PDF). Adobe's solution for creating and manipulating PDF files is Adobe Acrobat Professional, which requires a license.
Licensing
+++Adobe Reader is freeware.
About This Task
+This task will install/upgrade: Adobe Reader XI 11.0.6+
This task is applicable on: Windows XP and higher (32-bit and 64-bit)
Action Description
+++This action installs Reader.
++This action installs Reader and then disables the automatic check for updates.
Action3: Install/upgrade only if Reader is not running.
++This action only installs Reader if it is not running; if it is running, the action may report back as failed. To ensure that the update is eventually applied, you may to deploy this action as a policy and and retry the installation if it fails.
++This action performs the same action as Action3 and then disables the automatic check for updates.
++This action installs Reader regardless of whether or not it is running. Use this action to ensure that the update is applied when the action is deployed.
+Important note: This action will close any running instance of Reader on the client machines. Please schedule the update to occur at a time when a service interruption is acceptable.
++This action performs the same action as Action5 and then disables the automatic check for updates.
Additional Notes
++]]>By default, Actions1-6 do not install a desktop shortcut. To perform the action with a desktop shortcut, do the following:
++
- Take the normal action you want to take (e.g., Install/upgrade, Install/upgrade if not running, etc.) +
- Select the "Action Script" tab +
- Select "Use the following action script" +
- UNCOMMENT the wait statement under the //install Adobe Reader WITH a desktop shortcut comment. +
- COMMENT the wait statement under the //install Adobe Reader WITHOUT a desktop shortcut comment.
--Adobe Reader is an application developed by Adobe Systems to view and print files in portable document format (PDF). Adobe's solution for creating and manipulating PDF files is Adobe Acrobat Professional, which requires a license.
Licensing
---Adobe Reader is freeware.
About This Task
-This task will install/upgrade: Adobe Reader XI 11.0.5-
This task is applicable on: Windows XP and higher (32-bit and 64-bit)
Action Description
--]]>This action installs Reader.
++Adobe Reader is an application developed by Adobe Systems to view and print files in portable document format (PDF). Adobe's solution for creating and manipulating PDF files is Adobe Acrobat Professional, which requires a license.
Licensing
+++Adobe Reader is freeware.
About This Task
+This task will install/upgrade: Adobe Reader XI 11.0.5+
This task is applicable on: Windows XP and higher (32-bit and 64-bit)
Action Description
++]]>This action installs Reader.
--iTunes is a free multimedia player, organizer, and interface developed by Apple.
Licensing
---iTunes is freeware.
About This Task
---This task will install/upgrade: Apple iTunes 11.1.4
-This task is applicable on: Windows XP and higher (32-bit and 64-bit)
Action Description
---This action installs iTunes without Apple Software Update (see Installation Options) and also disables the ability to manually check for updates.
--This action only installs iTunes without Apple Software Update (see Installation Options) if it and QuickTime Player are not running.
-Use this action to prevent the update while a dependent application is running.
-Important Note: If either iTunes or QuickTime Player is running, the action may report back as failed. To ensure that the update is eventually applied, you may want to deploy this action as a policy and set it to retry the installation if it fails.
--This action closes all running instances of iTunes and QuickTime Player, then installs iTunes without Apple Software Update (see Installation Options).
-Use this action to ensure that the update is applied when the action is deployed.
-Important Note: This action will close any running instance of QuickTime and iTunes on the client machines. Please schedule the update to occur at a time when a service interruption is acceptable.
Additional Notes
---If the QuickTime Player plugin is running, the installer may display a dialog box with the message, "Error - 108: An unknown error has occurred," or a dialog box asking the user to close all applications running QuickTime. Users can click OK to continue the installation. To prevent this behavior, it is recommended that you run either action with the user constraint "Run only when no user is present," or display a message before action execution instructing users to shut down all applications using the QuickTime Player plugin.
-QuickTime Player is required for playing movies with iTunes. QuickTime is not included in this task. Please use the Install/Upgrade: QuickTime task to install QuickTime if it is desired.
Installation Options
-++iTunes is a free multimedia player, organizer, and interface developed by Apple.
Licensing
+++iTunes is freeware.
About This Task
+++This task will install/upgrade: Apple iTunes 11.1.4
+This task is applicable on: Windows XP and higher (32-bit and 64-bit)
Action Description
+++This action installs iTunes without Apple Software Update (see Installation Options) and also disables the ability to manually check for updates.
++This action only installs iTunes without Apple Software Update (see Installation Options) if it and QuickTime Player are not running.
+Use this action to prevent the update while a dependent application is running.
+Important Note: If either iTunes or QuickTime Player is running, the action may report back as failed. To ensure that the update is eventually applied, you may want to deploy this action as a policy and set it to retry the installation if it fails.
++This action closes all running instances of iTunes and QuickTime Player, then installs iTunes without Apple Software Update (see Installation Options).
+Use this action to ensure that the update is applied when the action is deployed.
+Important Note: This action will close any running instance of QuickTime and iTunes on the client machines. Please schedule the update to occur at a time when a service interruption is acceptable.
Additional Notes
+++If the QuickTime Player plugin is running, the installer may display a dialog box with the message, "Error - 108: An unknown error has occurred," or a dialog box asking the user to close all applications running QuickTime. Users can click OK to continue the installation. To prevent this behavior, it is recommended that you run either action with the user constraint "Run only when no user is present," or display a message before action execution instructing users to shut down all applications using the QuickTime Player plugin.
+QuickTime Player is required for playing movies with iTunes. QuickTime is not included in this task. Please use the Install/Upgrade: QuickTime task to install QuickTime if it is desired.
Installation Options
+-
References:
-https://code.google.com/p/filetype-identifier/
-http://mark0.net/soft-trid-e.html
-http://www.dotnetperls.com/7-zip-examples
-http://sevenzip.sourceforge.jp/chm/cmdline/commands/add.htm
-http://sevenzip.sourceforge.jp/chm/cmdline/switches/include.htm
-http://sevenzip.sourceforge.jp/chm/cmdline/exit_codes.htm
-]]>
+
References:
+https://code.google.com/p/filetype-identifier/
+http://mark0.net/soft-trid-e.html
+http://www.dotnetperls.com/7-zip-examples
+http://sevenzip.sourceforge.jp/chm/cmdline/commands/add.htm
+http://sevenzip.sourceforge.jp/chm/cmdline/switches/include.htm
+http://sevenzip.sourceforge.jp/chm/cmdline/exit_codes.htm
+]]>
NOTE: If you have UAC enabled, the target system will prompt you for authorization. I would recommend you download the "Disable UAC" fixlet, run it against your HomeSeer computer and restart before using this fixlet.
]]>NOTE: If you have UAC enabled, the target system will prompt you for authorization. I would recommend you download the "Disable UAC" fixlet, run it against your HomeSeer computer and restart before using this fixlet.
]]>|
- - - -- - - |
|
+ + + ++ + + |
Update 15.19.1 was released on February 16, 2016
-]]>Update 15.19.1 was released on February 16, 2016
+]]>Update 15.19.1 was released on February 16, 2016
-]]>Update 15.19.1 was released on February 16, 2016
+]]>File Size: 47.2 MB
]]>File Size: 47.2 MB
]]>Please see the Community Solution Testing Statement
-This Task performs a filesystem scan on Windows systems to attempt detecting Spring Framework versions that may be vulnerable to one of the following vulnerabilties reported in March 2022:
--
https://tanzu.vmware.com/security/cve-2022-22965
https://tanzu.vmware.com/security/cve-2022-22963
https://tanzu.vmware.com/security/cve-2022-22950
https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement
-
This Task performs a filesystem search across all fixed disks on Windows platforms, to locate Spring Framework JAR files, either directly on the filesystem or embedded in a .WAR archive file. In the case any .WAR file is found on the system, the 'unzip.exe' utility is used to perform a listing of files inside the archive to locate Spring-related .JAR files. Specifically, this Task searches for any versions of spring-beans-*.jar, spring-core-*.jar, spring-webmvc-*.jar, or spring-webflux-*.jar. Information on the Spring vulnerabilities is still evolving, but each of these has been cited as potential problem vectors.
-Scan results are stored in a "Scans" subdirectory beneath the "BES Client" folder. 'Spring-scan-output.txt' contains the full script output for potential debugging or diagnosis, and 'Spring-scan.txt' contains a listing of detected files in one of the forms
---C:\temp\spring\spring-framework-5.3.7\libs\spring-webmvc-5.3.7.jar
C:\temp\spring\test\spring-5.2.20.RELEASE-dist.war||spring-framework-5.2.20.RELEASE/libs/spring-beans-5.2.20.RELEASE.jar
The first sample entry indicates a detected Spring .jar file directly in the filesystem, while the second entry indicates a Spring .jar file embedded within a .WAR archive.
-This Task has several known limitations:
-This detection method uses Windows batch scripts with no external utility aside from 'unzip.exe'. Results of the scan may be retrieved using the related Analysis.
]]>Please see the Community Solution Testing Statement
+This Task performs a filesystem scan on Windows systems to attempt detecting Spring Framework versions that may be vulnerable to one of the following vulnerabilties reported in March 2022:
++
https://tanzu.vmware.com/security/cve-2022-22965
https://tanzu.vmware.com/security/cve-2022-22963
https://tanzu.vmware.com/security/cve-2022-22950
https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement
+
This Task performs a filesystem search across all fixed disks on Windows platforms, to locate Spring Framework JAR files, either directly on the filesystem or embedded in a .WAR archive file. In the case any .WAR file is found on the system, the 'unzip.exe' utility is used to perform a listing of files inside the archive to locate Spring-related .JAR files. Specifically, this Task searches for any versions of spring-beans-*.jar, spring-core-*.jar, spring-webmvc-*.jar, or spring-webflux-*.jar. Information on the Spring vulnerabilities is still evolving, but each of these has been cited as potential problem vectors.
+Scan results are stored in a "Scans" subdirectory beneath the "BES Client" folder. 'Spring-scan-output.txt' contains the full script output for potential debugging or diagnosis, and 'Spring-scan.txt' contains a listing of detected files in one of the forms
+++C:\temp\spring\spring-framework-5.3.7\libs\spring-webmvc-5.3.7.jar
C:\temp\spring\test\spring-5.2.20.RELEASE-dist.war||spring-framework-5.2.20.RELEASE/libs/spring-beans-5.2.20.RELEASE.jar
The first sample entry indicates a detected Spring .jar file directly in the filesystem, while the second entry indicates a Spring .jar file embedded within a .WAR archive.
+This Task has several known limitations:
+This detection method uses Windows batch scripts with no external utility aside from 'unzip.exe'. Results of the scan may be retrieved using the related Analysis.
]]>File Size: 44.1 MB
]]>File Size: 44.1 MB
]]>iTunes 12.1 comes with several new features and improvements. -This update is available via the IBM Endpoint Manager server, which is the default action, and Apple Software Update on the endpoint. These actions do not close any running instances of iTunes on the endpoints. -The default action does not require internet connection on the endpoints. This action downloads the installer to the IBM Endpoint Manager server and then installs the update to the endpoints. -Note: If you want to use Apple Software Update, ensure that the endpoints have continuous internet connection to install the update successfully. -Note: To avoid any service interruptions on the endpoints, use the first two actions only when the endpoints do not have any running instances of iTunes. If this application is running on the endpoints, the first two actions might fail. Schedule the update to occur at a time when the client machine is not using these applications. -Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted. |
iTunes 12.1 comes with several new features and improvements. +This update is available via the IBM Endpoint Manager server, which is the default action, and Apple Software Update on the endpoint. These actions do not close any running instances of iTunes on the endpoints. +The default action does not require internet connection on the endpoints. This action downloads the installer to the IBM Endpoint Manager server and then installs the update to the endpoints. +Note: If you want to use Apple Software Update, ensure that the endpoints have continuous internet connection to install the update successfully. +Note: To avoid any service interruptions on the endpoints, use the first two actions only when the endpoints do not have any running instances of iTunes. If this application is running on the endpoints, the first two actions might fail. Schedule the update to occur at a time when the client machine is not using these applications. +Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted. |
Version 8.2 of Tiny Core Linux Operating System is now available!
This Fixlet can upgrade the operating system of all the instances of the Tiny Core Virtual Relays on the targeted computers to Version 8.2.
To learn more about using Tiny Core Linux with BigFix, see:
https://www.ibm.com/support/knowledgecenter/SS6MER_9.5.0/com.ibm.bigfix.doc/Platform/Installation/c_tiny_core_introduction.html
WARNING: This fixlet is not meant to be run as-is. There is no way to predict when the Tiny Core Linux team will change the "*.tcz" files used by this fixlet, so actions started with this fixlet *will* encounter download problems in the future. The recommended work-around is to create a custom copy of this action, where the prefectch lines in the action script are edited for the current files served by Tiny Core; then manually cache those files on the BigFix Server.
How do I manually cache a file on the BigFix Server?
https://www-01.ibm.com/support/docview.wss?uid=swg21506037
make-prefetch, a tool to generate prefetch statements for downloads in BigFix Action Script
https://github.com/bigfix/make-prefetch
Tested on Tiny Core Linux versions: 7.0, 7.1, 8.0, 8.1, & 8.1.1
Note: If VMware Tools are already installed on the target computer, they will be upgraded automatically.
Version 8.2 of Tiny Core Linux Operating System is now available!
This Fixlet can upgrade the operating system of all the instances of the Tiny Core Virtual Relays on the targeted computers to Version 8.2.
To learn more about using Tiny Core Linux with BigFix, see:
https://www.ibm.com/support/knowledgecenter/SS6MER_9.5.0/com.ibm.bigfix.doc/Platform/Installation/c_tiny_core_introduction.html
WARNING: This fixlet is not meant to be run as-is. There is no way to predict when the Tiny Core Linux team will change the "*.tcz" files used by this fixlet, so actions started with this fixlet *will* encounter download problems in the future. The recommended work-around is to create a custom copy of this action, where the prefectch lines in the action script are edited for the current files served by Tiny Core; then manually cache those files on the BigFix Server.
How do I manually cache a file on the BigFix Server?
https://www-01.ibm.com/support/docview.wss?uid=swg21506037
make-prefetch, a tool to generate prefetch statements for downloads in BigFix Action Script
https://github.com/bigfix/make-prefetch
Tested on Tiny Core Linux versions: 7.0, 7.1, 8.0, 8.1, & 8.1.1
Note: If VMware Tools are already installed on the target computer, they will be upgraded automatically.
File Size: 29.9 MB
]]>File Size: 29.9 MB
]]>| VideoLAN has released a new version of VLC. Use the action below to update VLC to the latest version (2.1.0). |
| VideoLAN has released a new version of VLC. Use the action below to update VLC to the latest version (2.1.0). |
AD Explorer also includes the ability to save snapshots of an AD database for off-line viewing and comparisons. When you load a saved snapshot, you can navigate and explorer it as you would a live database. If you have two snapshots of an AD database you can use AD Explorer's comparison functionality to see what objects, attributes and security permissions changed between them.
]]>AD Explorer also includes the ability to save snapshots of an AD database for off-line viewing and comparisons. When you load a saved snapshot, you can navigate and explorer it as you would a live database. If you have two snapshots of an AD database you can use AD Explorer's comparison functionality to see what objects, attributes and security permissions changed between them.
]]>|
- This patches in the classic track. Important Note: Choosing the "Upgrade Adobe Acrobat regardless of whether or not Adobe Acrobat is running" action will close any running instance of Adobe Acrobat on the client machines. Please schedule the update to occur at a time when a service interruption is acceptable. |
|
+ This patches in the classic track. Important Note: Choosing the "Upgrade Adobe Acrobat regardless of whether or not Adobe Acrobat is running" action will close any running instance of Adobe Acrobat on the client machines. Please schedule the update to occur at a time when a service interruption is acceptable. |
Please see the Community Solution Testing Statement
-This Task performs a filesystem scan on Windows systems to attempt detecting Apache Commons Text versions vulnerable to CVE-2022-42889.
--
This Task performs a filesystem search across all fixed disks on Windows platforms, to locate Apache Commons Text JAR files, either directly on the filesystem or embedded in a .WAR archive file. In the case any .WAR file is found on the system, the 'unzip.exe' utility is used to perform a listing of files inside the archive to locate Apache Commons Text-related .JAR files. Specifically, this Task searches for any versions of commons-text-1.10.0.jar.
-Scan results are stored in a "Scans" subdirectory beneath the "BES Client" folder. 'apache-commons-text.log' contains the full script output for potential debugging or diagnosis, and 'apache-commons-text.txt' contains a listing of detected files in one of the forms
-The first sample entry indicates a detected jar file directly in the filesystem, while the second entry indicates a detected .jar file embedded within a .WAR archive.
-This Task has several known limitations:
-This detection method uses Windows batch scripts with no external utility aside from 'unzip.exe'. Results of the scan may be retrieved using the related Analysis.
]]>Please see the Community Solution Testing Statement
+This Task performs a filesystem scan on Windows systems to attempt detecting Apache Commons Text versions vulnerable to CVE-2022-42889.
++
This Task performs a filesystem search across all fixed disks on Windows platforms, to locate Apache Commons Text JAR files, either directly on the filesystem or embedded in a .WAR archive file. In the case any .WAR file is found on the system, the 'unzip.exe' utility is used to perform a listing of files inside the archive to locate Apache Commons Text-related .JAR files. Specifically, this Task searches for any versions of commons-text-1.10.0.jar.
+Scan results are stored in a "Scans" subdirectory beneath the "BES Client" folder. 'apache-commons-text.log' contains the full script output for potential debugging or diagnosis, and 'apache-commons-text.txt' contains a listing of detected files in one of the forms
+The first sample entry indicates a detected jar file directly in the filesystem, while the second entry indicates a detected .jar file embedded within a .WAR archive.
+This Task has several known limitations:
+This detection method uses Windows batch scripts with no external utility aside from 'unzip.exe'. Results of the scan may be retrieved using the related Analysis.
]]>Please see the Community Solution Testing Statement
-This Task performs a filesystem scan on Windows systems to attempt detecting grails-databinding versions that may be vulnerable to the following vulnerabilty reported in July 2022:
--
https://nvd.nist.gov/vuln/detail/CVE-2022-35912
-https://github.com/grails/grails-core/security/advisories/GHSA-6rh6-x8ww-9h97
--
This Task performs a filesystem search across all fixed disks on Windows platforms, to locate JAR files, either directly on the filesystem or embedded in a .WAR or .EAR archive file. In the case any .WAR/.EAR file is found on the system, the 'unzip.exe' utility is used to perform a listing of files inside the archive to locate Spring-related .JAR files. Specifically, this Task searches for any versions of grails-databinding-*.jar. Information on the Grails vulnerability is still evolving and the list of vulnerable versions is still subject to change.
-Scan results are stored in a "Scans" subdirectory beneath the "BES Client" folder. 'grails-databinding-scan-output.txt' contains the full script output for potential debugging or diagnosis, and 'grails-databinding-scan.txt' contains a listing of detected files in one of the forms
---C:\temp\grails\grails\libs\grails-databinding-5.1.9.jar
-C:\temp\grails\test\grails-dist.war||grails.RELEASE/libs/grails-databinding-5.1.9.jar
The first sample entry indicates a detected grails-databinding.jar file directly in the filesystem, while the second entry indicates a Grails .jar file embedded within a .WAR archive.
-This Task has several known limitations:
-At time of writing, the specific known-vulnerable versions are
-More details and FAQ from the product developer are available at https://github.com/grails/grails-core/issues/12626
-This detection method uses Windows batch scripts with no external utility aside from 'unzip.exe'. Results of the scan may be retrieved using the related Analysis.
]]>Please see the Community Solution Testing Statement
+This Task performs a filesystem scan on Windows systems to attempt detecting grails-databinding versions that may be vulnerable to the following vulnerabilty reported in July 2022:
++
https://nvd.nist.gov/vuln/detail/CVE-2022-35912
+https://github.com/grails/grails-core/security/advisories/GHSA-6rh6-x8ww-9h97
++
This Task performs a filesystem search across all fixed disks on Windows platforms, to locate JAR files, either directly on the filesystem or embedded in a .WAR or .EAR archive file. In the case any .WAR/.EAR file is found on the system, the 'unzip.exe' utility is used to perform a listing of files inside the archive to locate Spring-related .JAR files. Specifically, this Task searches for any versions of grails-databinding-*.jar. Information on the Grails vulnerability is still evolving and the list of vulnerable versions is still subject to change.
+Scan results are stored in a "Scans" subdirectory beneath the "BES Client" folder. 'grails-databinding-scan-output.txt' contains the full script output for potential debugging or diagnosis, and 'grails-databinding-scan.txt' contains a listing of detected files in one of the forms
+++C:\temp\grails\grails\libs\grails-databinding-5.1.9.jar
+C:\temp\grails\test\grails-dist.war||grails.RELEASE/libs/grails-databinding-5.1.9.jar
The first sample entry indicates a detected grails-databinding.jar file directly in the filesystem, while the second entry indicates a Grails .jar file embedded within a .WAR archive.
+This Task has several known limitations:
+At time of writing, the specific known-vulnerable versions are
+More details and FAQ from the product developer are available at https://github.com/grails/grails-core/issues/12626
+This detection method uses Windows batch scripts with no external utility aside from 'unzip.exe'. Results of the scan may be retrieved using the related Analysis.
]]>For more information about this vulnerability, please review the following documentation.
* INTEL-SA-00075 Security Advisory
* INTEL-SA-00075 Detection Guide
Note: The task is released in https://bigfix.me/, which is not an official release channel of IBM BigFix. We highly suggest testing the content before deploying to production. Use of the content is done at the user's own risk and the user will be solely responsible for any damage to any computer system or loss of data that results from use of the content.
]]>For more information about this vulnerability, please review the following documentation.
* INTEL-SA-00075 Security Advisory
* INTEL-SA-00075 Detection Guide
Note: The task is released in https://bigfix.me/, which is not an official release channel of IBM BigFix. We highly suggest testing the content before deploying to production. Use of the content is done at the user's own risk and the user will be solely responsible for any damage to any computer system or loss of data that results from use of the content.
]]>There is an escalation of privilege vulnerability in Intel® Active Management Technology (AMT), Intel® Standard Manageability (ISM), and Intel® Small Business Technology versions firmware versions 6.x, 7.x, 8.x 9.x, 10.x, 11.0, 11.5, and 11.6 that can allow an unprivileged attacker to gain control of the manageability features provided by these products. This vulnerability does not exist on Intel-based consumer PCs.
-For more information about this vulnerability, please review the following documentation.
* INTEL-SA-00075 Security Advisory
* INTEL-SA-00075 Mitigation Guide
Note: The task is released in https://bigfix.me/, which is not an official release channel of IBM BigFix. We highly suggest testing the content before deploying to production. Use of the content is done at the user's own risk and the user will be solely responsible for any damage to any computer system or loss of data that results from use of the content.
]]>There is an escalation of privilege vulnerability in Intel® Active Management Technology (AMT), Intel® Standard Manageability (ISM), and Intel® Small Business Technology versions firmware versions 6.x, 7.x, 8.x 9.x, 10.x, 11.0, 11.5, and 11.6 that can allow an unprivileged attacker to gain control of the manageability features provided by these products. This vulnerability does not exist on Intel-based consumer PCs.
+For more information about this vulnerability, please review the following documentation.
* INTEL-SA-00075 Security Advisory
* INTEL-SA-00075 Mitigation Guide
Note: The task is released in https://bigfix.me/, which is not an official release channel of IBM BigFix. We highly suggest testing the content before deploying to production. Use of the content is done at the user's own risk and the user will be solely responsible for any damage to any computer system or loss of data that results from use of the content.
]]>]]>
]]>
-
This task uses Local Group Policy to set Chrome Policies
-The changes are made the binary file located here: C:\Windows\System32\GroupPolicy\Machine\Registry.pol
-The changes are also seen in the registry here: "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome"
-NOTE: Editing the registry directly does not work. These changes must be made using Local GPO. These policies seem to work with the per-user version of chrome, not just the enterprise MSI version.
--
References:
-http://www.chromium.org/administrators/policy-list-3
-http://caspan.com/2014/01/chrome-force-incognito-mode-using-registry-policy/
-http://www.chromium.org/administrators/windows-quick-start
-]]>
+
This task uses Local Group Policy to set Chrome Policies
+The changes are made the binary file located here: C:\Windows\System32\GroupPolicy\Machine\Registry.pol
+The changes are also seen in the registry here: "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome"
+NOTE: Editing the registry directly does not work. These changes must be made using Local GPO. These policies seem to work with the per-user version of chrome, not just the enterprise MSI version.
++
References:
+http://www.chromium.org/administrators/policy-list-3
+http://caspan.com/2014/01/chrome-force-incognito-mode-using-registry-policy/
+http://www.chromium.org/administrators/windows-quick-start
+]]>
The Devourer is a tool that scans the BigFix Root Server Uploads and BigFix Root Server Cache directories for installers, archives, etc searching for executables to whitelist. Once it finishes its scan it imports the generated hash list into RES ONE Workspace.
-The Devourer runs once per day but can be invoked to run additional times per day using the Fixlet: Invoke - RES ONE Workspace File Hash Devourer Scan - Windows
]]>The Devourer is a tool that scans the BigFix Root Server Uploads and BigFix Root Server Cache directories for installers, archives, etc searching for executables to whitelist. Once it finishes its scan it imports the generated hash list into RES ONE Workspace.
+The Devourer runs once per day but can be invoked to run additional times per day using the Fixlet: Invoke - RES ONE Workspace File Hash Devourer Scan - Windows
]]>The Devourer is a tool that scans the BigFix Root Server Uploads and BigFix Root Server Cache directories for installers, archives, etc searching for executables to whitelist. Once it finishes its scan it imports the generated hash list into RES ONE Workspace.
-The Devourer runs once per day but can be invoked to run additional times per day using the Fixlet: Invoke - RES ONE Workspace File Hash Devourer Scan - Windows
]]>The Devourer is a tool that scans the BigFix Root Server Uploads and BigFix Root Server Cache directories for installers, archives, etc searching for executables to whitelist. Once it finishes its scan it imports the generated hash list into RES ONE Workspace.
+The Devourer runs once per day but can be invoked to run additional times per day using the Fixlet: Invoke - RES ONE Workspace File Hash Devourer Scan - Windows
]]>This policy
-Verification:
-In the current policy, the URL https://www.adobe.com/software/flash/about/ should display Flash content in Chrome, while the url https://helpx.adobe.com/flash-player.html should fail to display the Flash content.
-HOWTO:
-See http://blogs.technet.com/b/fdcc/default.aspx, http://blogs.technet.com/b/fdcc/archive/2008/05/07/lgpo-utilities.aspx, and download utilities at http://blogs.technet.com/cfs-filesystemfile.ashx/__key/telligent-evolution-components-attachments/01-5808-00-00-03-05-16-48/LGPO_2D00_Utilities.zip
-]]>
This policy
+Verification:
+In the current policy, the URL https://www.adobe.com/software/flash/about/ should display Flash content in Chrome, while the url https://helpx.adobe.com/flash-player.html should fail to display the Flash content.
+HOWTO:
+See http://blogs.technet.com/b/fdcc/default.aspx, http://blogs.technet.com/b/fdcc/archive/2008/05/07/lgpo-utilities.aspx, and download utilities at http://blogs.technet.com/cfs-filesystemfile.ashx/__key/telligent-evolution-components-attachments/01-5808-00-00-03-05-16-48/LGPO_2D00_Utilities.zip
+]]>
Installs the Trend Micro Endpoint Security Platform Console 8.1.634.0 on the selected Windows computers. |
Installs the Trend Micro Endpoint Security Platform Console 8.1.634.0 on the selected Windows computers. |
Installs the Trend Micro Endpoint Security Platform Console 8.2.1312.0 on the selected Windows computers. |
Installs the Trend Micro Endpoint Security Platform Console 8.2.1312.0 on the selected Windows computers. |
Installs the Trend Micro Endpoint Security Platform Relay 8.1.634.0 on the selected Windows computers.
|
Installs the Trend Micro Endpoint Security Platform Relay 8.1.634.0 on the selected Windows computers.
|
Installs the Trend Micro Endpoint Security Platform Relay 8.2.1310.0 on the selected Windows computers.
|
Installs the Trend Micro Endpoint Security Platform Relay 8.2.1310.0 on the selected Windows computers.
|
-
-
References:
-http://en.community.dell.com/techcenter/systems-management/w/wiki/1773
-http://en.community.dell.com/techcenter/enterprise-client/w/wiki/7531.dell-command-monitor
- --
]]>
+
+
References:
+http://en.community.dell.com/techcenter/systems-management/w/wiki/1773
+http://en.community.dell.com/techcenter/enterprise-client/w/wiki/7531.dell-command-monitor
+ ++
]]>
This installs the Visual Studio 2010 Tools for Office Runtime, which is required to run Microsoft Office based solutions built using Microsoft Visual Studio 2010, 2012, and 2013.
--
References:
-http://www.microsoft.com/en-us/download/details.aspx?id=42513
-]]>
This installs the Visual Studio 2010 Tools for Office Runtime, which is required to run Microsoft Office based solutions built using Microsoft Visual Studio 2010, 2012, and 2013.
++
References:
+http://www.microsoft.com/en-us/download/details.aspx?id=42513
+]]>
-
NOTE: Minor edits of this Task are required for this to work!
-Edit1: You must download the Acrobat installer and place on either your own webserver, or the root server cache manually, and then replace the URL with your custom URL. Adobe does not allow anonymous downloads directly from: http://trials3.adobe.com/AdobeProducts/APRO/11/win32/AcrobatPro_11_Web_WWMUI.exe
-Edit2: You must use APTEE to generate an prov.xml file and then copy and paste the "EnigmaData" from that file into the correct location in the createfile command in this task. See the comments in the ActionScript inside this task for more information. Using APTEE this way requires that you have a Volume License from Adobe.
-Latest version of this task is found here: http://bigfix.me/fixlet/details/3659
--
References:
-http://prodesigntools.com/adobe-acrobat-xi-pro-standard-reader-direct-download-links.html
- -http://www.adobe.com/devnet/creativesuite/enterprisedeployment/licensing-identifiers.html
-http://www.adobe.com/devnet-docs/acrobatetk/tools/AdminGuide/index.html
]]>+
NOTE: Minor edits of this Task are required for this to work!
+Edit1: You must download the Acrobat installer and place on either your own webserver, or the root server cache manually, and then replace the URL with your custom URL. Adobe does not allow anonymous downloads directly from: http://trials3.adobe.com/AdobeProducts/APRO/11/win32/AcrobatPro_11_Web_WWMUI.exe
+Edit2: You must use APTEE to generate an prov.xml file and then copy and paste the "EnigmaData" from that file into the correct location in the createfile command in this task. See the comments in the ActionScript inside this task for more information. Using APTEE this way requires that you have a Volume License from Adobe.
+Latest version of this task is found here: http://bigfix.me/fixlet/details/3659
++
References:
+http://prodesigntools.com/adobe-acrobat-xi-pro-standard-reader-direct-download-links.html
+ +http://www.adobe.com/devnet/creativesuite/enterprisedeployment/licensing-identifiers.html
+http://www.adobe.com/devnet-docs/acrobatetk/tools/AdminGuide/index.html
]]>--The Adobe Connect Meeting Add-In is required to share your screen in an Adobe Connect meeting.
Licensing
---The Adobe Connect Meeting Add-In is freeware.
About This Task
---This task will install/upgrade: Adobe Connect 9.1 Add-In version 11.9.972.8
-This task should be deployed as an open action so that it can have a chance to affect all users of a system, which will require multiple runs.
-This task is applicable on: Windows XP, Windows XP x64, Windows Vista, Windows Vista x64, Windows 7, Windows 7 x64, Windows 8 and Windows 8 x64.
Action Description
---This action installs Adobe Connect Meeting Add-In.
--This action only installs Adobe Connect Meeting Add-In if it is not running; if it is running, the action may report back as failed. To ensure that the update is eventually applied, you may to deploy this action as a policy and and retry the installation if it fails.
-
Additional Notes
-Adobe Flash Player must be installed on the client machines.
-Adobe Connect 9 Meeting Add-ins are not backwards compatible with prior versions of Adobe Connect; however, the Adobe Connect 9 Add-In can co-exist with previous Add-In versions.
--
References
-http://www.adobe.com/products/adobeconnect/tech-specs.html
-http://blogs.adobe.com/connectsupport/installing-add-in-for-all-user-profiles/
-http://helpx.adobe.com/adobe-connect/kb/latest-connect-91-addin.html
- - -]]>++The Adobe Connect Meeting Add-In is required to share your screen in an Adobe Connect meeting.
Licensing
+++The Adobe Connect Meeting Add-In is freeware.
About This Task
+++This task will install/upgrade: Adobe Connect 9.1 Add-In version 11.9.972.8
+This task should be deployed as an open action so that it can have a chance to affect all users of a system, which will require multiple runs.
+This task is applicable on: Windows XP, Windows XP x64, Windows Vista, Windows Vista x64, Windows 7, Windows 7 x64, Windows 8 and Windows 8 x64.
Action Description
+++This action installs Adobe Connect Meeting Add-In.
++This action only installs Adobe Connect Meeting Add-In if it is not running; if it is running, the action may report back as failed. To ensure that the update is eventually applied, you may to deploy this action as a policy and and retry the installation if it fails.
+
Additional Notes
+Adobe Flash Player must be installed on the client machines.
+Adobe Connect 9 Meeting Add-ins are not backwards compatible with prior versions of Adobe Connect; however, the Adobe Connect 9 Add-In can co-exist with previous Add-In versions.
++
References
+http://www.adobe.com/products/adobeconnect/tech-specs.html
+http://blogs.adobe.com/connectsupport/installing-add-in-for-all-user-profiles/
+http://helpx.adobe.com/adobe-connect/kb/latest-connect-91-addin.html
+ + +]]>This should only need to run on a computer once even though it is per-user policy because it uses Local GPO to affect all users that login from that point forward.
-This task is only relevant on computers with at least 1 user logged in. This is only for the sake of faster relevance and validating that the user settings are changed, but a user being logged in is not actually required.
-]]>
This should only need to run on a computer once even though it is per-user policy because it uses Local GPO to affect all users that login from that point forward.
+This task is only relevant on computers with at least 1 user logged in. This is only for the sake of faster relevance and validating that the user settings are changed, but a user being logged in is not actually required.
+]]>
|
-
- Microsoft Office for Mac 2016 - Excel (15.23.1 build 160617). - -Use the action below to update Microsoft Office for Mac 2016 Microsoft Excel to the latest version. - -Note: To avoid any service interruptions on the endpoints, use the default action only when the endpoints do not have running instances of related applications such as Microsoft Office Excel. If any of the related application is running on the endpoints, the default action might fail. Schedule the update to occur at a time when the client machine is not using these applications. - -Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted. |
|
+
+ Microsoft Office for Mac 2016 - Excel (15.23.1 build 160617). + +Use the action below to update Microsoft Office for Mac 2016 Microsoft Excel to the latest version. + +Note: To avoid any service interruptions on the endpoints, use the default action only when the endpoints do not have running instances of related applications such as Microsoft Office Excel. If any of the related application is running on the endpoints, the default action might fail. Schedule the update to occur at a time when the client machine is not using these applications. + +Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted. |
|
- Microsoft Office for Mac 2016 - Excel (15.23.2) -Use the action below to update Microsoft Office for Mac 2016 Excel to the latest version. -Note: To avoid any service interruptions on the endpoints, use the default action only when the endpoints do not have running instances of related applications such as Microsoft Office Excel. If any of the related application is running on the endpoints, the default action might fail. Schedule the update to occur at a time when the client machine is not using these applications. -Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted. - |
|
+ Microsoft Office for Mac 2016 - Excel (15.23.2) +Use the action below to update Microsoft Office for Mac 2016 Excel to the latest version. +Note: To avoid any service interruptions on the endpoints, use the default action only when the endpoints do not have running instances of related applications such as Microsoft Office Excel. If any of the related application is running on the endpoints, the default action might fail. Schedule the update to occur at a time when the client machine is not using these applications. +Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted. + |
|
- Microsoft Office for Mac 2016 - PowerPoint (15.23.2) -Use the action below to update Microsoft Office for Mac 2016 PowerPoint to the latest version. -Note: To avoid any service interruptions on the endpoints, use the default action only when the endpoints do not have running instances of related applications such as Microsoft Office PowerPoint. If any of the related application is running on the endpoints, the default action might fail. Schedule the update to occur at a time when the client machine is not using these applications. -Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted. - |
|
+ Microsoft Office for Mac 2016 - PowerPoint (15.23.2) +Use the action below to update Microsoft Office for Mac 2016 PowerPoint to the latest version. +Note: To avoid any service interruptions on the endpoints, use the default action only when the endpoints do not have running instances of related applications such as Microsoft Office PowerPoint. If any of the related application is running on the endpoints, the default action might fail. Schedule the update to occur at a time when the client machine is not using these applications. +Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted. + |
|
-
- Microsoft Office for Mac 2016 - Word (15.23.1 build 160617). - -Use the action below to update Microsoft Office for Mac 2016 Microsoft Word to the latest version. - -Note: To avoid any service interruptions on the endpoints, use the default action only when the endpoints do not have running instances of related applications such as Microsoft Office Word. If any of the related application is running on the endpoints, the default action might fail. Schedule the update to occur at a time when the client machine is not using these applications. - -Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted. |
|
+
+ Microsoft Office for Mac 2016 - Word (15.23.1 build 160617). + +Use the action below to update Microsoft Office for Mac 2016 Microsoft Word to the latest version. + +Note: To avoid any service interruptions on the endpoints, use the default action only when the endpoints do not have running instances of related applications such as Microsoft Office Word. If any of the related application is running on the endpoints, the default action might fail. Schedule the update to occur at a time when the client machine is not using these applications. + +Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted. |
|
- Microsoft Office for Mac 2016 - Word (15.23.2) -Use the action below to update Microsoft Office for Mac 2016 Word to the latest version. -Note: To avoid any service interruptions on the endpoints, use the default action only when the endpoints do not have running instances of related applications such as Microsoft Office Word. If any of the related application is running on the endpoints, the default action might fail. Schedule the update to occur at a time when the client machine is not using these applications. -Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted. - |
|
+ Microsoft Office for Mac 2016 - Word (15.23.2) +Use the action below to update Microsoft Office for Mac 2016 Word to the latest version. +Note: To avoid any service interruptions on the endpoints, use the default action only when the endpoints do not have running instances of related applications such as Microsoft Office Word. If any of the related application is running on the endpoints, the default action might fail. Schedule the update to occur at a time when the client machine is not using these applications. +Note: Affected computers may report back as 'Pending Restart' once the patch has run successfully, but will not report back their final status until the computer has been restarted. + |
Update 15.19.1 was released on February 16, 2016
-]]>Update 15.19.1 was released on February 16, 2016
+]]>Update 15.19.1 was released on February 16, 2016
-]]>Update 15.19.1 was released on February 16, 2016
+]]>This fixlet installs the Splunk Universal Forwarder on most Linux flavors.
-The fixlet will ask three questions when deploying:
---1. What is the user account that will run the application?
It is recommended by Splunk that the software does not run as root because it could provide a foot-hold in an environment inadvertently. The default user is "splunk" and the account will be created with the fixlet.
---2. What is the desired destination for installation?
The default it "/opt".
---3. What is the address and port of the deployment server in your environment?
Please request this information from your Splunk administrator before installing or else the forwarder will only be managed locally. If a deployment server is not defined, the value is not configured.
]]>This fixlet installs the Splunk Universal Forwarder on most Linux flavors.
+The fixlet will ask three questions when deploying:
+++1. What is the user account that will run the application?
It is recommended by Splunk that the software does not run as root because it could provide a foot-hold in an environment inadvertently. The default user is "splunk" and the account will be created with the fixlet.
+++2. What is the desired destination for installation?
The default it "/opt".
+++3. What is the address and port of the deployment server in your environment?
Please request this information from your Splunk administrator before installing or else the forwarder will only be managed locally. If a deployment server is not defined, the value is not configured.
]]>This fixlet installs the Splunk Universal Forwarder on Windows x64 operating systems.
-The fixlet will ask for the address and mangement port of the deployment server in your environment. Please request this information from your Splunk administrator before installing or else the forwarder will only be managed locally. If a deployment server is not defined, the value is not configured.
]]>This fixlet installs the Splunk Universal Forwarder on Windows x64 operating systems.
+The fixlet will ask for the address and mangement port of the deployment server in your environment. Please request this information from your Splunk administrator before installing or else the forwarder will only be managed locally. If a deployment server is not defined, the value is not configured.
]]>The latest version of the IBM TSM client can be downloaded from here: http://www-01.ibm.com/support/docview.wss?uid=swg21239415
--
References:
-http://bigfix.me/cdb/fixlet/684
http://pic.dhe.ibm.com/infocenter/tsmfbinf/v6/index.jsp?topic=%2Fcom.ibm.itsm.fbws.doc%2Fhelp%2Fref%2Fcdp_ref_InstallCmdSyntax.html?
http://pic.dhe.ibm.com/infocenter/tsminfo/v6r2/index.jsp?topic=%2Fcom.ibm.itsm.client.doc%2Fc_cfg_dsmcutil_cmdwin.html?
http://www.itninja.com/software/tivoli/tivoli-storage-manager/3-383
http://support.bigfix.com/fixlet/documents/WinActions_81_110817.pdf
]]>The latest version of the IBM TSM client can be downloaded from here: http://www-01.ibm.com/support/docview.wss?uid=swg21239415
++
References:
+http://bigfix.me/cdb/fixlet/684
http://pic.dhe.ibm.com/infocenter/tsmfbinf/v6/index.jsp?topic=%2Fcom.ibm.itsm.fbws.doc%2Fhelp%2Fref%2Fcdp_ref_InstallCmdSyntax.html?
http://pic.dhe.ibm.com/infocenter/tsminfo/v6r2/index.jsp?topic=%2Fcom.ibm.itsm.client.doc%2Fc_cfg_dsmcutil_cmdwin.html?
http://www.itninja.com/software/tivoli/tivoli-storage-manager/3-383
http://support.bigfix.com/fixlet/documents/WinActions_81_110817.pdf
]]>Note: The Carbon Black Response Sensor Windows MSI for GPO Installation package for the desired profile will have to be placed in the Root Server's Uploads folder (..\BES Server\wwwrootbes\Uploads or /var/opt/BESServer/wwwrootbes/Uploads), and the actionscript of this Fixlet will have to be modified accordingly. It can be downloaded via the Carbon Black Response Server interface under Administration -> Sensors -> Download Sensor Installer -> Windows MSI for GPO Installation.
]]>Note: The Carbon Black Response Sensor Windows MSI for GPO Installation package for the desired profile will have to be placed in the Root Server's Uploads folder (..\BES Server\wwwrootbes\Uploads or /var/opt/BESServer/wwwrootbes/Uploads), and the actionscript of this Fixlet will have to be modified accordingly. It can be downloaded via the Carbon Black Response Server interface under Administration -> Sensors -> Download Sensor Installer -> Windows MSI for GPO Installation.
]]>This task will install additional functionality for the BES Console that will allow you to right-click on a computer in your BES Console and perform common tasks directly on that computer. The new options will appear in the drop-down list when you right-click on a computer in the BES Console.
-The following BES Console right-click options will only be available on Windows computer, the options will be grayed-out for non-Windows systems. These options are designed to help perform direct management of computers quickly. You must to be logged into Windows with an NT Authenticated account with permissions to computers for these options to work.
-The following BES Console right-click options are designed to make using the BES Console and diagnosing issues easier.
-The following right-click options will appear in the drop-down list when you right-click a file in Windows Explorer (they do not appear in the BES Console). The options are designed to assist custom authoring of Fixlets in the BES Console.
-Note: The installed right-click options will only be available for existing users on a computer. If a new user logs onto the computer, you will need to reinstall the right-click options before they will appear in the BES Console.
-Note: Right-click options will be immediately available after installation, or uninstall, even if your BES Console is currently open.
This task will install additional functionality for the BES Console that will allow you to right-click on a computer in your BES Console and perform common tasks directly on that computer. The new options will appear in the drop-down list when you right-click on a computer in the BES Console.
+The following BES Console right-click options will only be available on Windows computer, the options will be grayed-out for non-Windows systems. These options are designed to help perform direct management of computers quickly. You must to be logged into Windows with an NT Authenticated account with permissions to computers for these options to work.
+The following BES Console right-click options are designed to make using the BES Console and diagnosing issues easier.
+The following right-click options will appear in the drop-down list when you right-click a file in Windows Explorer (they do not appear in the BES Console). The options are designed to assist custom authoring of Fixlets in the BES Console.
+Note: The installed right-click options will only be available for existing users on a computer. If a new user logs onto the computer, you will need to reinstall the right-click options before they will appear in the BES Console.
+Note: Right-click options will be immediately available after installation, or uninstall, even if your BES Console is currently open.
This task is for automating portions of a standard BigFix platform health check. Specifically, this task will perform the following steps:
-This task is for automating portions of a standard BigFix platform health check. Specifically, this task will perform the following steps:
+| One or more of the following installed BigFix Extensions requires the BES Client Logging Service for real-time logging, but it is not installed. Use the below action to reinstall the BES Client Logging Service.
|
| One or more of the following installed BigFix Extensions requires the BES Client Logging Service for real-time logging, but it is not installed. Use the below action to reinstall the BES Client Logging Service.
|
]]>
]]>
| An update to the BES Server Plugin Service is available. The BES Server Plugin Service is required by several BigFix Applications to facilitate automation of processes that require communication with the BES Server and Webreports. |
| An update to the BES Server Plugin Service is available. The BES Server Plugin Service is required by several BigFix Applications to facilitate automation of processes that require communication with the BES Server and Webreports. |
| BigFix has released an upgrade to the BES Client Logging Service. This upgrade contains several bug fixes and BigFix highly recommends that all customers apply the upgrade. This upgrade is required to upgrade the BES Client to version 7.0.9 or greater if any BigFix Extensions are installed. Use the action below to upgrade to the latest version of the BES Client Logging Service. Note: This action will temporarily stop the BES Client Logging Service. Please schedule the upgrade to occur at a time when a service interruption is acceptable. The following BigFix Extensions require the BES Client Logging Service:
|
| BigFix has released an upgrade to the BES Client Logging Service. This upgrade contains several bug fixes and BigFix highly recommends that all customers apply the upgrade. This upgrade is required to upgrade the BES Client to version 7.0.9 or greater if any BigFix Extensions are installed. Use the action below to upgrade to the latest version of the BES Client Logging Service. Note: This action will temporarily stop the BES Client Logging Service. Please schedule the upgrade to occur at a time when a service interruption is acceptable. The following BigFix Extensions require the BES Client Logging Service:
|
PID: USB\VID_04B8&PID_0147
--
References:
-http://technet.microsoft.com/en-us/library/cc749104(v=ws.10).aspx
- -http://info-zip.org/UnZip.html
-]]>
PID: USB\VID_04B8&PID_0147
++
References:
+http://technet.microsoft.com/en-us/library/cc749104(v=ws.10).aspx
+ +http://info-zip.org/UnZip.html
+]]>
PID: USB\VID_04B8&PID_0145
--
References:
-http://technet.microsoft.com/en-us/library/cc749104(v=ws.10).aspx
-http://technet.microsoft.com/en-us/library/cc732443.aspx
- -http://info-zip.org/UnZip.html
-]]>
PID: USB\VID_04B8&PID_0145
++
References:
+http://technet.microsoft.com/en-us/library/cc749104(v=ws.10).aspx
+http://technet.microsoft.com/en-us/library/cc732443.aspx
+ +http://info-zip.org/UnZip.html
+]]>
PID: USB\VID_04B8&PID_014D
--
References:
-http://technet.microsoft.com/en-us/library/cc749104(v=ws.10).aspx
-http://technet.microsoft.com/en-us/library/cc732443.aspx
- -http://info-zip.org/UnZip.html
-]]>
PID: USB\VID_04B8&PID_014D
++
References:
+http://technet.microsoft.com/en-us/library/cc749104(v=ws.10).aspx
+http://technet.microsoft.com/en-us/library/cc732443.aspx
+ +http://info-zip.org/UnZip.html
+]]>
PID: USB\VID_04B8&PID_0129
--
References:
-http://technet.microsoft.com/en-us/library/cc749104(v=ws.10).aspx
-http://technet.microsoft.com/en-us/library/cc732443.aspx
- -http://info-zip.org/UnZip.html
-]]>
PID: USB\VID_04B8&PID_0129
++
References:
+http://technet.microsoft.com/en-us/library/cc749104(v=ws.10).aspx
+http://technet.microsoft.com/en-us/library/cc732443.aspx
+ +http://info-zip.org/UnZip.html
+]]>
PID: USB\VID_04B8&PID_014B
--
References:
-http://technet.microsoft.com/en-us/library/cc749104(v=ws.10).aspx
-http://technet.microsoft.com/en-us/library/cc732443.aspx
- -http://info-zip.org/UnZip.html
-]]>
PID: USB\VID_04B8&PID_014B
++
References:
+http://technet.microsoft.com/en-us/library/cc749104(v=ws.10).aspx
+http://technet.microsoft.com/en-us/library/cc732443.aspx
+ +http://info-zip.org/UnZip.html
+]]>
PID: USB\VID_04B8&PID_0136
--
References:
-http://technet.microsoft.com/en-us/library/cc749104(v=ws.10).aspx
-http://technet.microsoft.com/en-us/library/cc732443.aspx
- -http://info-zip.org/UnZip.html
-]]>
PID: USB\VID_04B8&PID_0136
++
References:
+http://technet.microsoft.com/en-us/library/cc749104(v=ws.10).aspx
+http://technet.microsoft.com/en-us/library/cc732443.aspx
+ +http://info-zip.org/UnZip.html
+]]>
PID: USB\VID_04B8&PID_0142
--
References:
-http://technet.microsoft.com/en-us/library/cc749104(v=ws.10).aspx
- -http://info-zip.org/UnZip.html
-]]>
PID: USB\VID_04B8&PID_0142
++
References:
+http://technet.microsoft.com/en-us/library/cc749104(v=ws.10).aspx
+ +http://info-zip.org/UnZip.html
+]]>
PID: USB\VID_04B8&PID_013A
--
References:
-http://technet.microsoft.com/en-us/library/cc749104(v=ws.10).aspx
- -http://info-zip.org/UnZip.html
-]]>
PID: USB\VID_04B8&PID_013A
++
References:
+http://technet.microsoft.com/en-us/library/cc749104(v=ws.10).aspx
+ +http://info-zip.org/UnZip.html
+]]>
PID: USB\VID_04B8&PID_0130
--
References:
-http://technet.microsoft.com/en-us/library/cc749104(v=ws.10).aspx
-http://technet.microsoft.com/en-us/library/cc732443.aspx
- -http://info-zip.org/UnZip.html
-]]>
PID: USB\VID_04B8&PID_0130
++
References:
+http://technet.microsoft.com/en-us/library/cc749104(v=ws.10).aspx
+http://technet.microsoft.com/en-us/library/cc732443.aspx
+ +http://info-zip.org/UnZip.html
+]]>
PID: USB\VID_04B8&PID_012C
--
References:
-http://technet.microsoft.com/en-us/library/cc749104(v=ws.10).aspx
-http://technet.microsoft.com/en-us/library/cc732443.aspx
- -http://info-zip.org/UnZip.html
-]]>
PID: USB\VID_04B8&PID_012C
++
References:
+http://technet.microsoft.com/en-us/library/cc749104(v=ws.10).aspx
+http://technet.microsoft.com/en-us/library/cc732443.aspx
+ +http://info-zip.org/UnZip.html
+]]>
PID: USB\VID_04B8&PID_014C
--
References:
-http://technet.microsoft.com/en-us/library/cc749104(v=ws.10).aspx
- -http://info-zip.org/UnZip.html
-]]>
PID: USB\VID_04B8&PID_014C
++
References:
+http://technet.microsoft.com/en-us/library/cc749104(v=ws.10).aspx
+ +http://info-zip.org/UnZip.html
+]]>
PID: USB\VID_04B8&PID_0133
--
References:
-http://technet.microsoft.com/en-us/library/cc749104(v=ws.10).aspx
- -http://info-zip.org/UnZip.html
-]]>
PID: USB\VID_04B8&PID_0133
++
References:
+http://technet.microsoft.com/en-us/library/cc749104(v=ws.10).aspx
+ +http://info-zip.org/UnZip.html
+]]>
http://www.graphteccorp.com/support/software/scanners.html
-]]>
http://www.graphteccorp.com/support/software/scanners.html
+]]>
Installs the Tivoli Endpoint Manager Console 8.1.634.0 on the selected Windows computers. |
Installs the Tivoli Endpoint Manager Console 8.1.634.0 on the selected Windows computers. |
Installs the Tivoli Endpoint Manager Console 8.2.1312.0 on the selected Windows computers. |
Installs the Tivoli Endpoint Manager Console 8.2.1312.0 on the selected Windows computers. |
Installs the Tivoli Endpoint Manager Relay 8.1.634.0 on the selected Windows computers.
|
Installs the Tivoli Endpoint Manager Relay 8.1.634.0 on the selected Windows computers.
|
Installs the Tivoli Endpoint Manager Relay 8.2.1310.0 on the selected Windows computers.
|
Installs the Tivoli Endpoint Manager Relay 8.2.1310.0 on the selected Windows computers.
|
Installs the Tivoli Endpoint Manager Relay 8.1.634.0 on the selected Linux or UNIX computers.
|
Installs the Tivoli Endpoint Manager Relay 8.1.634.0 on the selected Linux or UNIX computers.
|
Installs the Tivoli Endpoint Manager Relay 8.2.1310.0 on the selected Linux or UNIX computers.
|
Installs the Tivoli Endpoint Manager Relay 8.2.1310.0 on the selected Linux or UNIX computers.
|
Installs the BES Relay 8.0.627.0 on the selected Windows computers.
|
Installs the BES Relay 8.0.627.0 on the selected Windows computers.
|
-
References:
-http://www.dotnetperls.com/7-zip-examples
-http://sevenzip.sourceforge.jp/chm/cmdline/commands/add.htm
-http://sevenzip.sourceforge.jp/chm/cmdline/switches/include.htm
-http://sevenzip.sourceforge.jp/chm/cmdline/exit_codes.htm
-http://www.kyoceradocumentsolutions.com.au/SUPPORT/Pages/LegacyUtilities.aspx
-]]>
+
References:
+http://www.dotnetperls.com/7-zip-examples
+http://sevenzip.sourceforge.jp/chm/cmdline/commands/add.htm
+http://sevenzip.sourceforge.jp/chm/cmdline/switches/include.htm
+http://sevenzip.sourceforge.jp/chm/cmdline/exit_codes.htm
+http://www.kyoceradocumentsolutions.com.au/SUPPORT/Pages/LegacyUtilities.aspx
+]]>
TPM Version 2.0 is incompatible with BIOS systems and must be downgraded to version 1.2 if you would like to use the TPM on a non-UEFI system. This fixlet downgrades the TPM to version 1.2 on non-UEFI systems.
-The fixlet will fail if ownership of the TPM has been taken on the system. For more information about this utility see: http://en.community.dell.com/techcenter/enterprise-client/w/wiki/11850.how-to-change-tpm-modes-1-2-2-0
-For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory
]]>TPM Version 2.0 is incompatible with BIOS systems and must be downgraded to version 1.2 if you would like to use the TPM on a non-UEFI system. This fixlet downgrades the TPM to version 1.2 on non-UEFI systems.
+The fixlet will fail if ownership of the TPM has been taken on the system. For more information about this utility see: http://en.community.dell.com/techcenter/enterprise-client/w/wiki/11850.how-to-change-tpm-modes-1-2-2-0
+For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory
]]>TPM Version 2.0 is incompatible with BIOS systems and must be downgraded to version 1.2 if you would like to use the TPM on a non-UEFI system. This fixlet downgrades the TPM to version 1.2 on non-UEFI systems.
-The fixlet will fail if ownership of the TPM has been taken on the system. For more information about this utility see: http://en.community.dell.com/techcenter/enterprise-client/w/wiki/11850.how-to-change-tpm-modes-1-2-2-0
-For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory
]]>TPM Version 2.0 is incompatible with BIOS systems and must be downgraded to version 1.2 if you would like to use the TPM on a non-UEFI system. This fixlet downgrades the TPM to version 1.2 on non-UEFI systems.
+The fixlet will fail if ownership of the TPM has been taken on the system. For more information about this utility see: http://en.community.dell.com/techcenter/enterprise-client/w/wiki/11850.how-to-change-tpm-modes-1-2-2-0
+For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory
]]>This Fixlet will always be relevant -- take care when choosing reapplication criteria.
-Per the Unprovisioning Guide, if the Fixlet: Invoke - Intel SA 00075 Unprovision Active Management Technology - Windows has been run and a reboot has not occurred, this Fixlet will not be relevant. The Fixlet is also not relevant for one minute after system reboot.
-More information on this vulnerability is available here: https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr
-For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory
]]>This Fixlet will always be relevant -- take care when choosing reapplication criteria.
+Per the Unprovisioning Guide, if the Fixlet: Invoke - Intel SA 00075 Unprovision Active Management Technology - Windows has been run and a reboot has not occurred, this Fixlet will not be relevant. The Fixlet is also not relevant for one minute after system reboot.
+More information on this vulnerability is available here: https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr
+For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory
]]>More information on this vulnerability is available here: https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr
-For this Fixlet to be relevant you must first run the Fixlet: Invoke - Intel SA 00075 Probe - Windows running the Detection Tool through any other method will not work.
-In addition, for this Fixlet to be relevant your system must meet the following requirements:
-For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory
]]>More information on this vulnerability is available here: https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr
+For this Fixlet to be relevant you must first run the Fixlet: Invoke - Intel SA 00075 Probe - Windows running the Detection Tool through any other method will not work.
+In addition, for this Fixlet to be relevant your system must meet the following requirements:
+For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory
]]>This task will add a new network printer connection of your choosing.
-For a full listing of available CLAS network printers, see \\PrintServerDNSHostname.
-Example:
-This task will add a new network printer connection of your choosing.
+For a full listing of available CLAS network printers, see \\PrintServerDNSHostname.
+Example:
+Please test this task carefully and do not target a large set of machines at once in case there is a problem. While unlikely, BIOS updates could cause permanent hardware failure that would require mothboard replacement. Use at your own risk.
-NOTE: This task will often report "Failed", but will then report "Completed" after the next reboot. This is normal and does not indicate a problem.
]]>Please test this task carefully and do not target a large set of machines at once in case there is a problem. While unlikely, BIOS updates could cause permanent hardware failure that would require mothboard replacement. Use at your own risk.
+NOTE: This task will often report "Failed", but will then report "Completed" after the next reboot. This is normal and does not indicate a problem.
]]>This task will upgrade a Dell OptiPlex 760 BIOS to version: A16
-Please test this task carefully and do not target a large set of machines at once in case there is a problem. While unlikely, BIOS updates could cause permanent hardware failure that would require mothboard replacement. Use at your own risk.
-NOTE: This task will often report "Failed", but will then report "Completed" after the next reboot. This is normal and does not indicate a problem.
]]>This task will upgrade a Dell OptiPlex 760 BIOS to version: A16
+Please test this task carefully and do not target a large set of machines at once in case there is a problem. While unlikely, BIOS updates could cause permanent hardware failure that would require mothboard replacement. Use at your own risk.
+NOTE: This task will often report "Failed", but will then report "Completed" after the next reboot. This is normal and does not indicate a problem.
]]>Please test this task carefully and do not target a large set of machines at once in case there is a problem. While unlikely, BIOS updates could cause permanent hardware failure that would require mothboard replacement. Use at your own risk.
-NOTE: This task will often report "Failed", but will then report "Completed" after the next reboot. This is normal and does not indicate a problem.
]]>Please test this task carefully and do not target a large set of machines at once in case there is a problem. While unlikely, BIOS updates could cause permanent hardware failure that would require mothboard replacement. Use at your own risk.
+NOTE: This task will often report "Failed", but will then report "Completed" after the next reboot. This is normal and does not indicate a problem.
]]>Please test this task carefully and do not target a large set of machines at once in case there is a problem. While unlikely, BIOS updates could cause permanent hardware failure that would require mothboard replacement. Use at your own risk.
-NOTE: This task will often report "Failed", but will then report "Completed" after the next reboot. This is normal and does not indicate a problem.
]]>Please test this task carefully and do not target a large set of machines at once in case there is a problem. While unlikely, BIOS updates could cause permanent hardware failure that would require mothboard replacement. Use at your own risk.
+NOTE: This task will often report "Failed", but will then report "Completed" after the next reboot. This is normal and does not indicate a problem.
]]>Please test this task carefully and do not target a large set of machines at once in case there is a problem. While unlikely, BIOS updates could cause permanent hardware failure that would require mothboard replacement. Use at your own risk.
-NOTE: This task will often report "Failed", but will then report "Completed" after the next reboot. This is normal and does not indicate a problem.
]]>Please test this task carefully and do not target a large set of machines at once in case there is a problem. While unlikely, BIOS updates could cause permanent hardware failure that would require mothboard replacement. Use at your own risk.
+NOTE: This task will often report "Failed", but will then report "Completed" after the next reboot. This is normal and does not indicate a problem.
]]>Please test this task carefully and do not target a large set of machines at once in case there is a problem. While unlikely, BIOS updates could cause permanent hardware failure that would require mothboard replacement. Use at your own risk.
-NOTE: This task will often report "Failed", but will then report "Completed" after the next reboot. This is normal and does not indicate a problem.
]]>Please test this task carefully and do not target a large set of machines at once in case there is a problem. While unlikely, BIOS updates could cause permanent hardware failure that would require mothboard replacement. Use at your own risk.
+NOTE: This task will often report "Failed", but will then report "Completed" after the next reboot. This is normal and does not indicate a problem.
]]>Please test this task carefully and do not target a large set of machines at once in case there is a problem. While unlikely, BIOS updates could cause permanent hardware failure that would require mothboard replacement. Use at your own risk.
-NOTE: This task will often report "Failed", but will then report "Completed" after the next reboot. This is normal and does not indicate a problem.
]]>Please test this task carefully and do not target a large set of machines at once in case there is a problem. While unlikely, BIOS updates could cause permanent hardware failure that would require mothboard replacement. Use at your own risk.
+NOTE: This task will often report "Failed", but will then report "Completed" after the next reboot. This is normal and does not indicate a problem.
]]>Official support for version 9.0 of Tiny Core Linux is coming soon to BigFix. For now, 9.0 seems to work even in 9.5.9 BigFix environments. This fixlet can aid in your testing of it.
This Fixlet can upgrade the operating system of all the instances of the Tiny Core Virtual Relays on the targeted computers to Version 9.0. It has been tested on Tiny Core Linux 7.X and 8.X.
WARNING: This fixlet is not meant to be run as-is. There is no way to predict when the Tiny Core Linux team will change the "*.tcz" files used by this fixlet, so actions started with this fixlet will likley encounter download problems in the future. The recommended way to handle this is to create a custom copy of this action where the prefectch lines in the action script are edited for the current files served by Tiny Core, then manually pre-cache those files on the bigfix server.
-How do I manually cache a file on the BigFix Server?
https://www-01.ibm.com/support/docview.wss?uid=swg21506037
make-prefetch, a Python tool to generate prefetch statements for downloads in BigFix Action Script:
https://github.com/bigfix/make-prefetch
Note: If VMware Tools are already installed on the target computer, they will be upgraded automatically.
Official support for version 9.0 of Tiny Core Linux is coming soon to BigFix. For now, 9.0 seems to work even in 9.5.9 BigFix environments. This fixlet can aid in your testing of it.
This Fixlet can upgrade the operating system of all the instances of the Tiny Core Virtual Relays on the targeted computers to Version 9.0. It has been tested on Tiny Core Linux 7.X and 8.X.
WARNING: This fixlet is not meant to be run as-is. There is no way to predict when the Tiny Core Linux team will change the "*.tcz" files used by this fixlet, so actions started with this fixlet will likley encounter download problems in the future. The recommended way to handle this is to create a custom copy of this action where the prefectch lines in the action script are edited for the current files served by Tiny Core, then manually pre-cache those files on the bigfix server.
+How do I manually cache a file on the BigFix Server?
https://www-01.ibm.com/support/docview.wss?uid=swg21506037
make-prefetch, a Python tool to generate prefetch statements for downloads in BigFix Action Script:
https://github.com/bigfix/make-prefetch
Note: If VMware Tools are already installed on the target computer, they will be upgraded automatically.
Please see the Community Solution Testing Statement
-This Task performs a filesystem scan on Windows systems to attempt detecting Apache Commons Text versions vulnerable to CVE-2022-42889.
--
This Task performs a filesystem search across all fixed disks on Windows platforms, to locate Apache Commons Text JAR files, either directly on the filesystem or embedded in a .WAR archive file. In the case any .WAR file is found on the system, the 'unzip.exe' utility is used to perform a listing of files inside the archive to locate Apache Commons Text-related .JAR files. Specifically, this Task searches for any versions of commons-text-1.10.0.jar.
-Scan results are stored in a "Scans" subdirectory beneath the "BES Client" folder. 'apache-commons-text.log' contains the full script output for potential debugging or diagnosis, and 'apache-commons-text.txt' contains a listing of detected files in one of the forms
-The first sample entry indicates a detected jar file directly in the filesystem, while the second entry indicates a detected .jar file embedded within a .WAR archive.
-This Task has several known limitations:
-This detection method uses Windows batch scripts with no external utility aside from 'unzip.exe'. Results of the scan may be retrieved using the related Analysis.
]]>Please see the Community Solution Testing Statement
+This Task performs a filesystem scan on Windows systems to attempt detecting Apache Commons Text versions vulnerable to CVE-2022-42889.
++
This Task performs a filesystem search across all fixed disks on Windows platforms, to locate Apache Commons Text JAR files, either directly on the filesystem or embedded in a .WAR archive file. In the case any .WAR file is found on the system, the 'unzip.exe' utility is used to perform a listing of files inside the archive to locate Apache Commons Text-related .JAR files. Specifically, this Task searches for any versions of commons-text-1.10.0.jar.
+Scan results are stored in a "Scans" subdirectory beneath the "BES Client" folder. 'apache-commons-text.log' contains the full script output for potential debugging or diagnosis, and 'apache-commons-text.txt' contains a listing of detected files in one of the forms
+The first sample entry indicates a detected jar file directly in the filesystem, while the second entry indicates a detected .jar file embedded within a .WAR archive.
+This Task has several known limitations:
+This detection method uses Windows batch scripts with no external utility aside from 'unzip.exe'. Results of the scan may be retrieved using the related Analysis.
]]>Configure Autologon!
-For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory
Configure Autologon!
+For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory
DelProf2 is free for Non-Profit and Higher Education. For instructions on licensing it for private organizations please visit their homepage: https://helgeklein.com/free-tools/delprof2-user-profile-deletion-tool/
-For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory
]]>DelProf2 is free for Non-Profit and Higher Education. For instructions on licensing it for private organizations please visit their homepage: https://helgeklein.com/free-tools/delprof2-user-profile-deletion-tool/
+For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory
]]>DelProf2 is free for Non-Profit and Higher Education. For instructions on licensing it for private organizations please visit their homepage: https://helgeklein.com/free-tools/delprof2-user-profile-deletion-tool/
-For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory
]]>DelProf2 is free for Non-Profit and Higher Education. For instructions on licensing it for private organizations please visit their homepage: https://helgeklein.com/free-tools/delprof2-user-profile-deletion-tool/
+For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory
]]>DelProf2 is free for Non-Profit and Higher Education. For instructions on licensing it for private organizations please visit their homepage: https://helgeklein.com/free-tools/delprof2-user-profile-deletion-tool/
-For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory
]]>DelProf2 is free for Non-Profit and Higher Education. For instructions on licensing it for private organizations please visit their homepage: https://helgeklein.com/free-tools/delprof2-user-profile-deletion-tool/
+For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory
]]>This fixlet uses Local Group Policy to set per-user registry entries. These entries disable RTF processing in MS Word. See the MS KB2953095.
-NOTE: This may report back as "failed" but actually succeed due to difficulties with writing relevance to detect the local GPO change.
-The changes are made the binary file located here: C:\Windows\System32\GroupPolicy\User\Registry.pol
-]]>
This fixlet uses Local Group Policy to set per-user registry entries. These entries disable RTF processing in MS Word. See the MS KB2953095.
+NOTE: This may report back as "failed" but actually succeed due to difficulties with writing relevance to detect the local GPO change.
+The changes are made the binary file located here: C:\Windows\System32\GroupPolicy\User\Registry.pol
+]]>
LGPO can configure Registry policies, apply Secedit templates, and configure Advanced Audit Policies. Existing policy settings can be exported or imported from text.
-This example fixlet demonstrates the use of LGPO by configuring the Security Event Log maximum size to 80 MB.
-The LGPO zip file includes a PDF explaining its use.
]]>LGPO can configure Registry policies, apply Secedit templates, and configure Advanced Audit Policies. Existing policy settings can be exported or imported from text.
+This example fixlet demonstrates the use of LGPO by configuring the Security Event Log maximum size to 80 MB.
+The LGPO zip file includes a PDF explaining its use.
]]>More info here: https://www.microsoft.com/en-us/WindowsForBusiness/upgrade-analytics
-]]>
More info here: https://www.microsoft.com/en-us/WindowsForBusiness/upgrade-analytics
+]]>