Use the Worklet™ option to perform any scriptable action on devices, including disabling a vulnerable process, managing native OS controls, mass rollback of patches, and moving unwanted applications. You can include variables to securely retrieve secrets. You can also configure restart notifications and deferral settings for worklets.
Note: Before you create a worklet from scratch, browse the Worklet Catalog for available and customizable worklets.
You must have zone administrator or zone operator permissions to create a worklet.
Creating a Worklet
To create a worklet, follow these steps:
From the main console, click Manage → Policies.
Click Create Policy.
Click Worklet → Next.
Click the OS for the worklet you are creating.
Note: The worklet you create should be run on a device of the same OS.
In the Policy Info area, configure the following:
In the Policy Name field, enter a name for the worklet. The field is required.
In the Notes field, enter any notes, if required.
(Optional) Set filters under Device Targeting, as needed. See Device Targeting with Filters for more information.
(Optional) Configure Inputs. Use the Inputs section to add environment variables to the worklet code. See Secrets Management for more information.
(Optional) Configure Payload. Select a file to deploy with the worklet. Note: The current file size limit is 1 GB.
In the Evaluation Code area, enter a script for the worklet you are creating.
In the Remediation Code area, enter remediation logic to execute when the evaluation code above returns non-compliance.
In the Schedule area, set the patching schedule that will run on the device. The Schedule Preview provides a calendar view of the patching schedule. See Setting a Patching Schedule.
After you set the schedule, you can configure Restart Notifications. Refer to Managing End-User Notifications.
Associate Groups to associate this policy with the desired group(s). When the policy is saved, the group is then assigned to the policy.
Click Create Policy.
Disabling a Worklet
To disable a worklet, follow these steps:
From the Policy page, click the worklet you want to disable.
From the Edit Worklet page, go to Groups and remove any associated groups.
Click Save Policy.
Browse the Worklet Catalog
The catalog of worklets allows you to immediately use a verified worklet for your purposes. You can also create a new policy based on an existing worklet. Refer to Worklet Catalog for details.
Contact Automox Support (Submit a request) for further assistance.