diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ BESClientUI Enable Mode (440).bes b/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ BESClientUI Enable Mode (440).bes deleted file mode 100644 index 02176798c..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ BESClientUI Enable Mode (440).bes +++ /dev/null @@ -1,69 +0,0 @@ - - - - - BES Client Setting: BESClientUI Enable Mode -

This task can be used to set whether the BES Client UI is enabled for all sessions, local sessions only, or not at all.

The BES Client UI is used to show message boxes to the end-users logged into the computer (including pre-action messages, action running messages, and restart/shutdown messages). If the BES Client UI is not running in the user session, the user will not see any BigFix messages.

If the BES Client UI is enabled for all sessions, the BES Client UI will be shown in local and remote sessions.

If the BES Client UI is enabled for only local sessions, the BES Client UI will only be shown when the user is logged on at the local computer console (and will not launch for remotely connected users through Remote Desktop, Citrix, etc.)

If the BES Client UI is set to none, the BES Client UI will be disabled and will not be shown to any user sessions, including local and remote.

Note: If local or none, the BES Client won't be able to show any messages to users logged into the system (including action messages, restart messages, and custom client dashboards).

Note: Do not set the "Reapply" behavior when taking this action or you may cause the BES Client to constantly reset this setting.

-]]> - name of operating system as lowercase starts with "win" - (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) - = "5"]]> - = "5.1"]]> - = "7.1"]]> - BES Client Setting - BigFix - <Unspecified> - 2009-01-19 - <Unspecified> - - x-fixlet-domain_attributes - BES Component Client - - - x-fixlet-modification-time - Sat, 12 May 2012 00:55:27 +0000 - - - x-fixlet-first-propagation - Mon, 25 Aug 2008 21:09:21 +0000 - - BESC - - - Click - here - to set the BES Client UI to be shown for <b>all </b>sessions. - - NUL 2> NUL]]> - - - - Click - here - to set the BES Client UI to be shown for only <b>local </b>sessions. - - NUL 2> NUL]]> - - - - Click - here - to <b>disable </b>the BES Client UI. - - NUL 2> NUL]]> - - - diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ CPU Usage (524).bes b/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ CPU Usage (524).bes deleted file mode 100644 index 8363aef25..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ CPU Usage (524).bes +++ /dev/null @@ -1,103 +0,0 @@ - - - - - BES Client Setting: CPU Usage -
Note: The default CPU usage settings are optimized to avoid using too much CPU on the computers and to avoid making the BES Clients too slow to evaluate Fixlet messages and actions.

Important Note: Locked BES Clients will report back as "Failed" and will not change its CPU usage. To change the CPU usage of locked clients, you can unlock them before deploying the action, or tweak the action script and remove the "continue if" action command. -]]> - true - (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) - = "5.1"]]> - BES Client Setting - BigFix - <Unspecified> - 2026-09-17 - <Unspecified> - - x-fixlet-domain_attributes - BES Component Client - - - x-fixlet-modification-time - Sat, 12 May 2012 00:55:27 +0000 - - - x-fixlet-first-propagation - Tue, 22 Jun 2004 23:25:23 +0000 - - BESC - - - Click - here - to set the BES Client to use <b>very low </b>CPU usage (&lt; .5%). (Not Recommended) - - // low CPU usage -continue if {not locked of action lock state} -setting "_BESClient_Resource_WorkIdle"="2" on "{parameter "action issue date" of action}" for client -setting "_BESClient_Resource_SleepIdle"="500" on "{parameter "action issue date" of action}" for client - - - - Click - here - to set the BES Client to use <b>default</b> CPU usage (&lt; 1-2%). - - // default CPU usage -continue if {not locked of action lock state} -setting "_BESClient_Resource_WorkIdle"="10" on "{parameter "action issue date" of action}" for client -setting "_BESClient_Resource_SleepIdle"="480" on "{parameter "action issue date" of action}" for client - - - - Click - here - to set the BES Client to use <b>medium </b>CPU usage (&lt; 5%). (Not Recommended) - - // medium CPU usage -continue if {not locked of action lock state} -setting "_BESClient_Resource_WorkIdle"="25" on "{parameter "action issue date" of action}" for client -setting "_BESClient_Resource_SleepIdle"="460" on "{parameter "action issue date" of action}" for client - - - - Click - here - to set the BES Client to use <b>high </b>CPU usage (&lt; 10%). (Not Recommended) - - // high CPU usage -continue if {not locked of action lock state} -setting "_BESClient_Resource_WorkIdle"="50" on "{parameter "action issue date" of action}" for client -setting "_BESClient_Resource_SleepIdle"="450" on "{parameter "action issue date" of action}" for client - - - - Click - here - to set the BES Client to use <b>very high</b> CPU usage (&lt; 20%). (Not Recommended) - - // very high CPU usage -continue if {not locked of action lock state} -setting "_BESClient_Resource_WorkIdle"="100" on "{parameter "action issue date" of action}" for client -setting "_BESClient_Resource_SleepIdle"="400" on "{parameter "action issue date" of action}" for client - - - - Click - here - for more information on "_BESClient_Resource_WorkIdle", "_BESClient_Resource_SleepIdle", and other advanced BES configuration settings. - - http://support.bigfix.com/bes/misc/besconfigsettings.html - - - diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ CPU Usage - idle settings allocation adjustment for multi-core physical machines (26994).bes b/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ CPU Usage - idle settings allocation adjustment for multi-core physical machines (26994).bes deleted file mode 100644 index 4c4fcae12..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ CPU Usage - idle settings allocation adjustment for multi-core physical machines (26994).bes +++ /dev/null @@ -1,58 +0,0 @@ - - - - - BES Client Setting: CPU Usage - idle settings allocation adjustment for multi-core physical machines - The BES Client is designed to use only a small fraction of the computer's CPU (< 1-2%) on average, but the calculation used to achieve this performance ideal is based on a system with a single physical CPU core.

Note: The BigFix client will do work (evaluate relevance) for a designated amount of time then go to sleep for a designated amount of time. The WorkIdle setting controls how many milliseconds to work before going to sleep in each cycle and the SleepIdle setting controls how many milliseconds to sleep after performing work in cycle. The above settings referenced are not adjusted for systems with multiple CPU cores. The Bigfix settings affect the clients use of one CPU Core. Machines with many CPU cores can actually minimize the clients actual operating CPU well below 2%.

-

Consider the following equations to determine actual Max CPU usage:
On a single core CPU:
Max agent %CPU = workidle / (workidle + sleepidle)
Example (default settings): 10 / (10 + 480) = 2% of CPU

-

On a multi-core CPU (CPU with 4 cores)
Max agent %CPU = workidle / ((workidle + sleepidle) * (# of cores))
Example (default settings): 10 / ((10 + 480) * (4)) = 0.5% of CPU

-

This Fixlet will adjust the workidle and sleepidle settings on multi-core machines to about 2% of CPU accross all available cores. This fixlet action will set the sleepidle value to its default value (480) and set the workidle value to 10 * (number of cores). If the system has greater than 10 cores, the work idle setting will be limited to 100 (this is to prevent over allocation of 1 core). The client work/sleep settings target a single core, this fixlet adjusts the workidle settings to compensate for this.

]]> - (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) - = "5.1"]]> - windows of operating system - = "6.1")) of operating system]]> - if exists true whose (if true then( (((item 0 of it contains "VMware") or ((item 0 of it contains "Microsoft") and not (item 1 of it as lowercase contains "surface")) or (item 0 of it contains "Xen")) of ((value "manufacturer" of it as string, value "product_name" of it as string) of structure "system_information" of smbios))) else false) then False else True - 1]]> - 10) then "100" else (((sum of cores of cpupackage as floating point) * 10) as integer as string)) ) of it)of client)) OR (NOT(((if (not exists setting "_BESClient_Resource_SleepIdle" of client OR not exists value of setting "_BESClient_Resource_SleepIdle" of client) then 480 else (value of setting "_BESClient_Resource_SleepIdle" of client as integer)) as floating point as integer) = 480))]]> - BES Client Setting - 2023-01-31 - - x-fixlet-modification-time - Thu, 02 Feb 2023 03:02:55 +0000 - - BESC - - - Click - here - &nbsp;to set the BES Client to use 2% CPU usage on Multi-Core Systems. - - 10) then "100" else (((sum of cores of cpupackage as floating point) * 10) as integer as string)}" -setting "_BESClient_Resource_WorkIdle"="{parameter "worksetting"}" on "{parameter "action issue date" of action}" for client - -// Enter your action script here -setting "_BESClient_Resource_SleepIdle"="480" on "{parameter "action issue date" of action}" for client - -// Drop breadcrumb for when the action was last run -setting "_BESClient_Resource_WorkIdle_MultiCore_Adjustment"="{now}" on "{parameter "action issue date" of action}" for client]]> - - - - Click - here - to deploy this action. - - - - - diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Client UI Balloon Mode Selection (375).bes b/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Client UI Balloon Mode Selection (375).bes deleted file mode 100644 index 92a5e569a..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Client UI Balloon Mode Selection (375).bes +++ /dev/null @@ -1,96 +0,0 @@ - - - - - BES Client Setting: Client UI Balloon Mode Selection -
"HalfBalloon" Mode: If "HalfBalloon" mode is enabled, "running" messages will be displayed using the messaging dialog box while "notification" messages will be displayed using the Windows balloon notification mechanism.

"AlwaysBalloon" Mode: If "AlwaysBallon" enabled, all messages will be displayed using the Windows balloon notification mechanism.

"NoBalloon" Mode: If "NoBalloon" Mode is enabled, all messages will be displayed in the messaging dialog box.

Note: Windows 9x/ME operating systems will require the computer to be restarted to complete the task. On newer Windows operating systems, the BES Client service will be restarted. Please schedule this task to occur at a time when a service interruption is acceptable.

Note: Do not set the "Reapply" behavior when taking this action or you may cause the BES Client to constantly reset this setting. -]]> - name of operating system as lowercase starts with "win" - (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) - = "5"]]> - = "5.1"]]> - = "7.0"]]> - BES Client Setting - BigFix - <Unspecified> - 2026-09-17 - <Unspecified> - - x-fixlet-domain_attributes - BES Component Client - - - x-fixlet-modification-time - Sat, 12 May 2012 00:55:27 +0000 - - - x-fixlet-first-propagation - Wed, 25 Jul 2007 23:07:37 +0000 - - BESC - - - Click - here - to set BalloonMode to "HalfBalloon". (Default) - - setting "_BESClient_ActionManager_BalloonMode"="HalfBalloon" on "{parameter "action issue date" of action}" for client -if {name of operating system does not contain "Win9" AND name of operating system != "WinME"} -delete __appendfile -appendfile net stop BESClient -appendfile net start BESClient -delete clientRestart.bat -copy __appendfile clientRestart.bat -runhidden clientRestart.bat -else -action requires restart -endif - - - - Click - here - to set BalloonMode to "AlwaysBalloon". - - setting "_BESClient_ActionManager_BalloonMode"="AlwaysBalloon" on "{parameter "action issue date" of action}" for client -if {name of operating system does not contain "Win9" AND name of operating system != "WinME"} -delete __appendfile -appendfile net stop BESClient -appendfile net start BESClient -delete clientRestart.bat -copy __appendfile clientRestart.bat -runhidden clientRestart.bat -else -action requires restart -endif - - - - Click - here - to set BalloonMode to "NoBalloon". - - setting "_BESClient_ActionManager_BalloonMode"="NoBalloon" on "{parameter "action issue date" of action}" for client -if {name of operating system does not contain "Win9" AND name of operating system != "WinME"} -delete __appendfile -appendfile net stop BESClient -appendfile net start BESClient -delete clientRestart.bat -copy __appendfile clientRestart.bat -runhidden clientRestart.bat -else -action requires restart -endif - - - diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Client UI Enable_Disable Main Dialog (373).bes b/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Client UI Enable_Disable Main Dialog (373).bes deleted file mode 100644 index a67a48f6d..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Client UI Enable_Disable Main Dialog (373).bes +++ /dev/null @@ -1,79 +0,0 @@ - - - - - BES Client Setting: Client UI Enable/Disable Main Dialog -
Message boxes are not considered part of the BES Client UI Main Dialog and will continue to appear even if the BES Client UI Main Dialog is disabled.

Note: Tray modes of “OffersTray” and “AlwaysTray” are incompatible with the main dialog being disabled.

Note: Windows 9x/ME operating systems will require the computer to be restarted to complete the task. On newer Windows operating systems, the BES Client service will be restarted. Please schedule this task to occur at a time when a service interruption is acceptable.

Note: Do not set the "Reapply" behavior when taking this action or you may cause the BES Client to constantly reset this setting. -]]> - name of operating system as lowercase starts with "win" - (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) - = "5"]]> - = "5.1"]]> - = "7.0"]]> - BES Client Setting - BigFix - <Unspecified> - 2026-09-17 - <Unspecified> - - x-fixlet-domain_attributes - BES Component Client - - - x-fixlet-modification-time - Sat, 12 May 2012 00:55:27 +0000 - - - x-fixlet-first-propagation - Wed, 25 Jul 2007 22:44:20 +0000 - - BESC - - - Click - here - to enable the BES Client Main Dialog. (Default) - - setting "_BESClient_ActionManager_HasMainDialog"="1" on "{parameter "action issue date" of action}" for client -if {name of operating system does not contain "Win9" AND name of operating system != "WinME"} -delete __appendfile -appendfile net stop BESClient -appendfile net start BESClient -delete clientRestart.bat -copy __appendfile clientRestart.bat -runhidden clientRestart.bat -else -action requires restart -endif - - - - Click - here - to disable the BES Client Main Dialog and set Tray Mode to "ActionsTray". - - setting "_BESClient_ActionManager_HasMainDialog"="0" on "{parameter "action issue date" of action}" for client -setting "_BESClient_ActionManager_TrayMode"="ActionsTray" on "{parameter "action issue date" of action}" for client -if {name of operating system does not contain "Win9" AND name of operating system != "WinME"} -delete __appendfile -appendfile net stop BESClient -appendfile net start BESClient -delete clientRestart.bat -copy __appendfile clientRestart.bat -runhidden clientRestart.bat -else -action requires restart -endif - - - diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Client UI Enable_Disable Main Dialog on Mac OS X (454).bes b/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Client UI Enable_Disable Main Dialog on Mac OS X (454).bes deleted file mode 100644 index c0d179d4a..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Client UI Enable_Disable Main Dialog on Mac OS X (454).bes +++ /dev/null @@ -1,88 +0,0 @@ - - - - - BES Client Setting: Client UI Enable/Disable Main Dialog on Mac OS X -
Message boxes are not considered part of the BES Client UI Main Dialog and will continue to appear even if the BES Client UI Main Dialog is disabled.

Note: Tray modes of “OffersTray” and “AlwaysTray” are incompatible with the main dialog being disabled.

Note: Do not set the "Reapply" behavior when taking this action or you may cause the BES Client to constantly reset this setting. -]]> - (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) - = "5.1"]]> - = "8.0") then (mac of it) else (name of it starts with "Mac OS X")) of operating system]]> - = "7.1"]]> - = "10.2"]]> - BES Client Setting - BigFix - <Unspecified> - 2026-09-17 - <Unspecified> - - x-fixlet-domain_attributes - BES Component Client - - - x-fixlet-modification-time - Sat, 12 May 2012 00:55:27 +0000 - - - x-fixlet-first-propagation - Fri, 24 Oct 2008 21:09:59 +0000 - - BESC - - - Click - here - to enable the BES Client Main Dialog. (Default) - - "7.1") AND (exists file "/Library/LaunchDaemons/BESAgentDaemon.plist") AND (system version >= "10.4"))} - appendfile /bin/launchctl unload /Library/LaunchDaemons/BESAgentDaemon.plist - appendfile sleep 5 - appendfile /bin/launchctl load /Library/LaunchDaemons/BESAgentDaemon.plist -else - appendfile /sbin/SystemStarter stop BESAgent - appendfile sleep 5 - appendfile /sbin/SystemStarter start BESAgent -endif -wait chmod 555 "{(client folder of current site as string) & "/__appendfile"}" -run {"/bin/sh -c %22trap '' 15;'" & (client folder of current site as string) & "/__appendfile'%22"}]]> - - - - Click - here - to disable the BES Client Main Dialog and set Tray Mode to "ActionsTray". - - "7.1") AND (exists file "/Library/LaunchDaemons/BESAgentDaemon.plist") AND (system version >= "10.4"))} - appendfile /bin/launchctl unload /Library/LaunchDaemons/BESAgentDaemon.plist - appendfile sleep 5 - appendfile /bin/launchctl load /Library/LaunchDaemons/BESAgentDaemon.plist -else - appendfile /sbin/SystemStarter stop BESAgent - appendfile sleep 5 - appendfile /sbin/SystemStarter start BESAgent -endif -wait chmod 555 "{(client folder of current site as string) & "/__appendfile"}" -run {"/bin/sh -c %22trap '' 15;'" & (client folder of current site as string) & "/__appendfile'%22"}]]> - - - diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Client UI Minimum Analysis Interval (228).bes b/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Client UI Minimum Analysis Interval (228).bes deleted file mode 100644 index f7f868e7e..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Client UI Minimum Analysis Interval (228).bes +++ /dev/null @@ -1,71 +0,0 @@ - - - - - BES Client Setting: Client UI Minimum Analysis Interval -
The BES Client's Minimum Analysis Interval setting controls how frequently the BES Client evaluates action progress information and updates the BES Client UI with new information.  Raising the Minimum Analysis Interval will cause the BES Client UI progress information to update slower but will allow the BES Client to report information on Fixlets, Properties and Actions to the BES Console faster.

The BES Client UI is only displayed if their are offers available to the end user or if the BES Client UI is set to be "always on".  Action messages and pop-up windows for end users, like restart requests, are not affected by the Minimum Analysis Interval.

Note: It is strongly recommended that you increase the Minimum Analysis Interval to increase the responsiveness of BES Clients.  If you are not using the main BES Client UI features or Offers, there is no down side to raising this value. -]]> - (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) - = "5.1"]]> - = "7.0"]]> - BES Client Setting - BigFix - <Unspecified> - 2026-09-17 - <Unspecified> - - x-fixlet-domain_attributes - BES Component Client - - - x-fixlet-first-propagation - Sat, 14 Feb 2009 01:13:18 +0000 - - - x-fixlet-modification-time - Sat, 12 May 2012 00:55:27 +0000 - - BESC - - - Click - here - to increase the <b>Minimum Analysis Interval </b>if you <b>are not</b> using the Offers feature. (Recommended) - - setting "_BESClient_Report_MinimumAnalysisInterval"="300" on "{parameter "action issue date" of action}" for client - - - - Click - here - to increase the <b>Minimum Analysis Interval</b> if you<b> are</b> using the Offers feature. (Recommended) - - setting "_BESClient_Report_MinimumAnalysisInterval"="30" on "{parameter "action issue date" of action}" for client - - - - Click - here - to set the <b>Minimum Analysis Interval</b> to the default value. - - 7.2.1.357 BES Client default is 60 -delete __appendfile -delete temp.reg -appendfile REGEDIT4 -appendfile [-HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESClient_Report_MinimumAnalysisInterval] -move __appendfile temp.reg -wait regedit -s temp.reg]]> - - - diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Client UI Tray Mode Selection (374).bes b/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Client UI Tray Mode Selection (374).bes deleted file mode 100644 index a57225207..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Client UI Tray Mode Selection (374).bes +++ /dev/null @@ -1,98 +0,0 @@ - - - - - BES Client Setting: Client UI Tray Mode Selection -
"OffersTray" Mode: In this mode, the tray behaves like it is in "AlwaysTray" mode if there is at least one offer available. Otherwise it behaves like it is in "ActionsTray" mode. This mode is not compatible with the BES Client Main Dialog disabled.

"ActionsTray" Mode: In this mode, the UI only shows a tray icon if there are currently pending action requests. Clicking the tray icon will cause the Action Request Dialog to open.

"AlwaysTray" Mode: In this mode, the UI always shows a tray icon, and clicking the tray icon causes the Main Dialog to open. This mode is not compatible with the BES Client Main Dialog disabled.

Note: Windows 9x/ME operating systems will require the computer to be restarted to complete the task. On newer Windows operating systems, the BES Client service will be restarted. Please schedule this task to occur at a time when a service interruption is acceptable.

Note: Do not set the "Reapply" behavior when taking this action or you may cause the BES Client to constantly reset this setting. -]]> - name of operating system as lowercase starts with "win" - (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) - = "5"]]> - = "5.1"]]> - = "7.0"]]> - BES Client Setting - BigFix - <Unspecified> - 2026-09-17 - <Unspecified> - - x-fixlet-domain_attributes - BES Component Client - - - x-fixlet-modification-time - Sat, 12 May 2012 00:55:27 +0000 - - - x-fixlet-first-propagation - Wed, 25 Jul 2007 23:07:33 +0000 - - BESC - - - Click - here - to set TrayMode to "OffersTray" and enable the BES Client Main Dialog. (Default) - - setting "_BESClient_ActionManager_TrayMode"="OffersTray" on "{parameter "action issue date" of action}" for client -setting "_BESClient_ActionManager_HasMainDialog"="1" on "{parameter "action issue date" of action}" for client -if {name of operating system does not contain "Win9" AND name of operating system != "WinME"} -delete __appendfile -appendfile net stop BESClient -appendfile net start BESClient -delete clientRestart.bat -copy __appendfile clientRestart.bat -runhidden clientRestart.bat -else -action requires restart -endif - - - - Click - here - to set TrayMode to "ActionsTray". - - setting "_BESClient_ActionManager_TrayMode"="ActionsTray" on "{parameter "action issue date" of action}" for client -if {name of operating system does not contain "Win9" AND name of operating system != "WinME"} -delete __appendfile -appendfile net stop BESClient -appendfile net start BESClient -delete clientRestart.bat -copy __appendfile clientRestart.bat -runhidden clientRestart.bat -else -action requires restart -endif - - - - Click - here - to set TrayMode to "AlwaysTray" and enable the BES Client Main Dialog. - - setting "_BESClient_ActionManager_TrayMode"="AlwaysTray" on "{parameter "action issue date" of action}" for client -setting "_BESClient_ActionManager_HasMainDialog"="1" on "{parameter "action issue date" of action}" for client -if {name of operating system does not contain "Win9" AND name of operating system != "WinME"} -delete __appendfile -appendfile net stop BESClient -appendfile net start BESClient -delete clientRestart.bat -copy __appendfile clientRestart.bat -runhidden clientRestart.bat -else -action requires restart -endif - - - diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Client UI Tray Mode Selection on Mac OS X (455).bes b/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Client UI Tray Mode Selection on Mac OS X (455).bes deleted file mode 100644 index 94635906d..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Client UI Tray Mode Selection on Mac OS X (455).bes +++ /dev/null @@ -1,110 +0,0 @@ - - - - - BES Client Setting: Client UI Tray Mode Selection on Mac OS X -
"OffersTray" Mode: In this mode, the dock icon behaves like it is in "AlwaysTray" mode if there is at least one offer available. Otherwise it behaves like it is in "ActionsTray" mode. This mode is not compatible with the BES Client Main Dialog disabled.

"ActionsTray" Mode: In this mode, the UI only shows a dock icon if there are currently pending action requests. Clicking the dock icon will cause the Action Request Dialog to open.

"AlwaysTray" Mode: In this mode, the UI always shows a dock icon, and clicking the dock icon causes the Main Dialog to open. This mode is not compatible with the BES Client Main Dialog disabled.

Note: Do not set the "Reapply" behavior when taking this action or you may cause the BES Client to constantly reset this setting. -]]> - (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) - = "5.1"]]> - = "7.0"]]> - = "8.0") then (mac of it) else (name of it starts with "Mac OS X")) of operating system]]> - = "10.2"]]> - BES Client Setting - BigFix - <Unspecified> - 2026-09-17 - <Unspecified> - - x-fixlet-domain_attributes - BES Component Client - - - x-fixlet-modification-time - Sat, 12 May 2012 00:55:27 +0000 - - - x-fixlet-first-propagation - Fri, 24 Oct 2008 21:10:13 +0000 - - BESC - - - Click - here - to set TrayMode to "OffersTray" and enable the BES Client Main Dialog. (Default) - - "7.1") AND (exists file "/Library/LaunchDaemons/BESAgentDaemon.plist") AND (system version >= "10.4"))} - appendfile /bin/launchctl unload /Library/LaunchDaemons/BESAgentDaemon.plist - appendfile sleep 5 - appendfile /bin/launchctl load /Library/LaunchDaemons/BESAgentDaemon.plist -else - appendfile /sbin/SystemStarter stop BESAgent - appendfile sleep 5 - appendfile /sbin/SystemStarter start BESAgent -endif -wait chmod 555 "{(client folder of current site as string) & "/__appendfile"}" -run {"/bin/sh -c %22trap '' 15;'" & (client folder of current site as string) & "/__appendfile'%22"}]]> - - - - Click - here - to set TrayMode to "ActionsTray". - - "7.1") AND (exists file "/Library/LaunchDaemons/BESAgentDaemon.plist") AND (system version >= "10.4"))} - appendfile /bin/launchctl unload /Library/LaunchDaemons/BESAgentDaemon.plist - appendfile sleep 5 - appendfile /bin/launchctl load /Library/LaunchDaemons/BESAgentDaemon.plist -else - appendfile /sbin/SystemStarter stop BESAgent - appendfile sleep 5 - appendfile /sbin/SystemStarter start BESAgent -endif -wait chmod 555 "{(client folder of current site as string) & "/__appendfile"}" -run {"/bin/sh -c %22trap '' 15;'" & (client folder of current site as string) & "/__appendfile'%22"}]]> - - - - Click - here - to set TrayMode to "AlwaysTray" and enable the BES Client Main Dialog. - - "7.1") AND (exists file "/Library/LaunchDaemons/BESAgentDaemon.plist") AND (system version >= "10.4"))} - appendfile /bin/launchctl unload /Library/LaunchDaemons/BESAgentDaemon.plist - appendfile sleep 5 - appendfile /bin/launchctl load /Library/LaunchDaemons/BESAgentDaemon.plist -else - appendfile /sbin/SystemStarter stop BESAgent - appendfile sleep 5 - appendfile /sbin/SystemStarter start BESAgent -endif -wait chmod 555 "{(client folder of current site as string) & "/__appendfile"}" -run {"/bin/sh -c %22trap '' 15;'" & (client folder of current site as string) & "/__appendfile'%22"}]]> - - - diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Communication Method (521).bes b/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Communication Method (521).bes deleted file mode 100644 index fe16cbe06..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Communication Method (521).bes +++ /dev/null @@ -1,56 +0,0 @@ - - - - - BES Client Setting: Communication Method -
The second method uses the winsock API, which is a lower-level direct socket access layer that does not use the local Internet connection settings. The BES Client uses the URL Monikers method by default to connect to the Internet. Using winsock will allow BES Gather to connect to the Internet without using the Internet connection settings.

Note: Do not set the "Reapply" behavior when taking this action or you may cause the BES Client to constantly reset this setting. -]]> - true - (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) - = "5.1"]]> - BES Client Setting - BigFix - <Unspecified> - 2026-09-17 - <Unspecified> - - x-fixlet-domain_attributes - BES Component Client - - - x-fixlet-modification-time - Sat, 12 May 2012 00:55:27 +0000 - - - x-fixlet-first-propagation - Tue, 22 Jun 2004 21:35:27 +0000 - - BESC - - - Click - here - to have the listed BES Clients use the winsock API. - - setting "_BESClient_Comm_UseUrlMoniker"="0" on "{parameter "action issue date" of action}" for client - - - - Click - here - to have the listed BES Clients use URL Monikers. - - setting "_BESClient_Comm_UseUrlMoniker"="1" on "{parameter "action issue date" of action}" for client - - - diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Designate Wake-on-LAN Forwarders (438).bes b/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Designate Wake-on-LAN Forwarders (438).bes deleted file mode 100644 index 309b6a299..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Designate Wake-on-LAN Forwarders (438).bes +++ /dev/null @@ -1,57 +0,0 @@ - - - - - BES Client Setting: Designate Wake-on-LAN Forwarders -

This Task will configure selected clients to forward the "Wake-on-LAN" packet to computers within their respective subnets.

If a subnet does not have an active Wake-on-LAN packet forwarder, BigFix will not be able to awaken machines in that subnet using Wake-on-LAN. 

In addition to the existing TEM Wake-on-LAN technology, the new BESWolMedic.exe (version 1.5.30 or above) uses a directed broadcast wake-up technology that does not require any Wake-on-LAN forwarder and Last Man Standing computers. Your TEM Server firewall may prompt a network security warning on the first time the utility is running.

If the permission to access the network is not approved at your TEM Server, no directed broadcast will be issued. Nevertheless, the existing TEM Wake-on-LAN technology will continue to work.

Without automatic relay selection, the forwarder will not be effective until the BES Client registers again, which can take up to one day.

Note: Do not set the "Reapply" behavior when taking this action or you may cause the BES Client to constantly perform auto relay selection.

Important Note: Depending on the details of your network, causing all the BES Clients to simultaneously do relay autoselection might cause a heavy load on the routers while they handle the ICMP traffic from the BES Clients. If you are worried about this, use the "temporal distribution" option in the Execution tab of the Take Action dialog when sending this action.

-]]> - (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) - = "5.1"]]> - not exists setting "_BESClient_Comm_WakeOnLanForwardingEnable" whose(value of it = "1") of client - Wake-on-LAN - BigFix - <Unspecified> - 2010-08-13 - N/A - - x-fixlet-modification-time - Wed, 01 Aug 2012 01:09:07 +0000 - - - x-fixlet-first-propagation - Tue, 05 Aug 2008 16:16:51 +0000 - - - x-fixlet-domain_attributes - Manage_WOL_Forwarders - - BESC - - - Click - here - to designate Wake-on-LAN packet forwarders without automatic relay selection. - - setting "_BESClient_Comm_WakeOnLanForwardingEnable"="1" on "{parameter "action issue date" of action}" for client - - - - Click - here - to designate Wake-on-LAN packet forwarders with automatic relay selection. - - setting "_BESClient_Comm_WakeOnLanForwardingEnable"="1" on "{parameter "action issue date" of action}" for client -relay select - - - diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Disable Debug Logging (528).bes b/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Disable Debug Logging (528).bes deleted file mode 100644 index 01855b146..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Disable Debug Logging (528).bes +++ /dev/null @@ -1,49 +0,0 @@ - - - - - BES Client Setting: Disable Debug Logging - -The listed computers have the BES Client advanced debug log enabled. This log is useful for troubleshooting issues, but if you are not using the debug log, you should probably disable it because it will continue to grow larger. - - (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) - = "5.1"]]> - exists setting "_BESClient_EMsg_Detail" of client AND value of setting "_BESClient_EMsg_Detail" of client != "0" - BES Client Setting - BigFix - <Unspecified> - 2026-09-17 - Important - - x-fixlet-first-propagation - Wed, 06 Oct 2004 23:06:53 +0000 - - - x-fixlet-domain_attributes - BES Component Client Warn Important - - - x-fixlet-modification-time - Wed, 19 Sep 2012 23:33:51 +0000 - - BESC - - - Click - here - to disable BES Client debug logging for the listed BES Clients. - - setting "_BESClient_EMsg_Detail"="0" on "{parameter "action issue date" of action}" for client -setting "_BESClient_EMsg_EvalLog"="0" on "{parameter "action issue date" of action}" for client - - - diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Download Throttling (523).bes b/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Download Throttling (523).bes deleted file mode 100644 index c06608009..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Download Throttling (523).bes +++ /dev/null @@ -1,67 +0,0 @@ - - - - - BES Client Setting: Download Throttling -
Note: The throttle value cannot be greater than 4294967296 Bytes/sec.

Note: Do not set the "Reapply" behavior when taking this action or you may cause the BES Client to constantly reset this setting. -]]> - true - (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) - = "5.1"]]> - BES Client Setting - BigFix - <Unspecified> - 2026-09-17 - <Unspecified> - - x-fixlet-domain_attributes - BES Component Client - - - x-fixlet-modification-time - Sat, 12 May 2012 00:55:27 +0000 - - - x-fixlet-first-propagation - Tue, 22 Jun 2004 22:59:40 +0000 - - BESC - - - Click - here - for more information about BES bandwidth throttling. - - http://support.bigfix.com/bes/misc/besthrottling.html - - - - Click - here - to enable download throttling on the listed BES Clients. You will be prompted for the download traffic limit in bytes/sec. - - = 1 AND parameter "_BESClient_Download_LimitBytesPerSecond" of action as integer <= 4294967296} -setting "_BESClient_Download_LimitBytesPerSecond"="{parameter "_BESClient_Download_LimitBytesPerSecond" of action}" on "{parameter "action issue date" of action}" for client]]> - - - - Click - here - to disable download throttling on the listed BES Clients. - - setting "_BESClient_Download_LimitBytesPerSecond"="0" on "{parameter "action issue date" of action}" for client - - - diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Dynamic Download Throttling (355).bes b/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Dynamic Download Throttling (355).bes deleted file mode 100644 index d3f55ec98..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Dynamic Download Throttling (355).bes +++ /dev/null @@ -1,187 +0,0 @@ - - - - - BES Client Setting: Dynamic Download Throttling -

The BES Client can dynamically throttle download traffic to use a percentage of the available bandwidth when existing network traffic is detected. When dynamic throttling is enabled, BES will monitor and analyze existing data throughput to establish a throttled rate for network communication. The maximum and minimum rates provide a hard cap on how low or high dynamic throttling will go. The throttle percentage represents the fraction of the maximum bandwidth to use when conflicting network traffic is detected. The throttle percentage will not go below the minimum or above the maximum throttle values.

For example, suppose the throttle percentage is set to 10% on a home computer connecting over a slow VPN. While the user is idle, the BES Client is able to use all of the available bandwidth. If the user starts a download, however, the BES Client will throttle itself to 10% of the VPN so the user is not affected by the BES Client downloads. Once the user download has completed, the BES Client will stop throttling as long as the user is idle.

Note: Windows 9x/ME operating systems will require the computer to be restarted to complete the task. On newer Windows operating systems, the BES Client service will be restarted. Please schedule this task to occur at a time when a service interruption is acceptable.

Note: Do not set the "Reapply" behavior when taking this action or you may cause the BES Client to constantly reset this setting.

Important Note: Dynamic throttling will only work properly if it is enabled on all BES Relays. Please use the  task to globally enable the dynamic throttling setting.

-]]> - (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) - = "5.1"]]> - = "7.0"]]> - exists setting "_BESClient_Download_DynamicThrottleEnabled" whose (value of it = "1") of client - BES Client Setting - BigFix - <Unspecified> - 2026-09-17 - <Unspecified> - - x-fixlet-domain_attributes - BES Component Client - - - x-fixlet-modification-time - Sat, 12 May 2012 00:55:27 +0000 - - - x-fixlet-first-propagation - Mon, 18 Jun 2007 19:01:33 +0000 - - BESC - - - Click - here - for more information about BES bandwidth throttling. - - http://support.bigfix.com/bes/misc/besthrottling.html - - - - Click - here - to set a dynamic limit on download traffic (bytes/sec) on the listed BES Clients. You will be prompted for the minimum total outgoing traffic, maximum total outgoing traffic, and the percentage of the maximum that will be used when throttling. - - = 0 AND parameter "MaxBPS" of action as integer < 4294967296 AND parameter "Percentage" of action as integer > 0 AND parameter "Percentage" of action as integer <= 100 AND parameter "MinBPS" of action as integer >= 0 AND parameter "MinBPS" of action as integer < 4294967296 AND (parameter "MinBPS" of action as integer <= parameter "MaxBPS" of action as integer or parameter "MaxBPS" of action as integer = 0) } -setting "_BESClient_Download_DynamicThrottleMaxBytesPerSecond"="{parameter "MaxBPS" of action}" on "{parameter "action issue date" of action}" for client -setting "_BESClient_Download_DynamicThrottleMinBytesPerSecond"="{parameter "MinBPS" of action}" on "{parameter "action issue date" of action}" for client -setting "_BESClient_Download_DynamicThrottlePercentage"="{parameter "Percentage" of action}" on "{parameter "action issue date" of action}" for client -// Restart the Client -delete "{(client folder of current site as string) & "/__appendfile"}" -if {name of operating system starts with "Win"} - if {(it does not start with "Win9" AND it != "WinME") of name of operating system} - appendfile @ECHO OFF - appendfile net stop BESClient - appendfile net start BESClient - delete restartServices.bat - move __appendfile restartServices.bat - run restartServices.bat - else - action requires restart - endif -elseif {name of operating system starts with "AIX"} - appendfile #!/bin/sh - appendfile sleep 3 - appendfile /etc/rc.d/rc2.d/KBESClientd stop - appendfile sleep 3 - appendfile /etc/rc.d/rc2.d/SBESClientd start - wait chmod 555 "{(client folder of current site as string) & "/__appendfile"}" - run "{(client folder of current site as string) & "/__appendfile"}" -elseif {name of operating system starts with "HP-UX"} - appendfile #!/bin/sh - appendfile sleep 3 - if {version of client < "8"} - appendfile /sbin/init.d/BESClient-{version of client} stop - appendfile sleep 3 - appendfile /sbin/init.d/BESClient-{version of client} start - else - appendfile /sbin/init.d/besclient restart - endif - wait chmod +x "{(client folder of current site as string) & "/__appendfile"}" - run "{(client folder of current site as string) & "/__appendfile"}" -elseif {name of operating system starts with "Mac OS X"} - appendfile #!/bin/sh - appendfile sleep 3 - appendfile /bin/launchctl unload /Library/LaunchDaemons/BESAgentDaemon.plist - appendfile sleep 3 - appendfile /bin/launchctl load /Library/LaunchDaemons/BESAgentDaemon.plist - wait chmod +x "{(client folder of current site as string) & "/__appendfile"}" - run {"/bin/sh -c %22trap '' 15;'" & (client folder of current site as string) & "/__appendfile'%22"} -elseif {(it starts with "VMWare" OR it starts with "SunOS" OR it starts with "Linux") of name of operating system} - appendfile #!/bin/sh - appendfile sleep 3 - if {version of client < "8"} - appendfile /etc/init.d/BESClient-{version of client} stop - appendfile sleep 3 - appendfile /etc/init.d/BESClient-{version of client} start - else - appendfile /etc/init.d/besclient restart - endif - wait chmod +x "{(client folder of current site as string) & "/__appendfile"}" - run "{(client folder of current site as string) & "/__appendfile"}" -endif]]> - - - - Click - here - to disable dynamic download throttling on the listed BES Clients. - - - - - - Click - here - for more information about BES dynamic download throttling. - - http://support.bigfix.com/bes/misc/besthrottling.html - - - diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Enable Auto Relay Selection (544).bes b/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Enable Auto Relay Selection (544).bes deleted file mode 100644 index 1db7cfaa1..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Enable Auto Relay Selection (544).bes +++ /dev/null @@ -1,48 +0,0 @@ - - - - - BES Client Setting: Enable Auto Relay Selection -

BES Clients can be set up to choose their BES Relays automatically or manually. The listed computers are set up to use manual Relay selection. When "Auto Relay Selection" is enabled, BES Clients will dynamically assess your network environment and select the optimal BES Relay to connect. Use the action below to enable 'Auto Relay Selection'.

More information about BES Relays can be found at http://support.bigfix.com/bes/misc/besrelays.html 

Note: 'Auto Relay Selection' can also be enabled and disabled through the 'edit computer settings' dialog. The 'edit computer settings' dialog can be accesses by right-clicking a computer entry and choosing "settings..."

-]]> - (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) - = "5.1"]]> - ((not exists setting "__RelaySelect_Automatic" of client) OR (value of it does not equal (("1") as string)) of setting "__RelaySelect_Automatic" of client) - BES Client Setting - BigFix - <Unspecified> - 2026-09-17 - <Unspecified> - - x-fixlet-domain_attributes - BES Component Client - - - x-fixlet-modification-time - Sat, 12 May 2012 00:55:27 +0000 - - - x-fixlet-first-propagation - Fri, 24 Jun 2005 17:44:24 +0000 - - BESC - - - Click - here - to turn on 'Auto Relay Selection'. - - setting "__RelaySelect_Automatic"="1" on "{parameter "action issue date" of action}" for client - - - diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Enable Command Polling (237).bes b/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Enable Command Polling (237).bes deleted file mode 100644 index f99519615..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Enable Command Polling (237).bes +++ /dev/null @@ -1,79 +0,0 @@ - - - - - BES Client Setting: Enable Command Polling -
This task configures Clients to poll their parent Relay or Server once an hour for UDP commands they may have missed (BigFix 6.0+).

Note: The minimum value for the polling interval is 1 minute and the maximum is 2 days.

Note:  Setting the polling interval to less than 20 minutes may cause performances issues and is not recommended. -]]> - = "6.0"]]> - (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) - = "5.1"]]> - BES Client Setting - BigFix - <Unspecified> - 2026-09-17 - <Unspecified> - - x-fixlet-domain_attributes - BES Component Client - - - x-fixlet-first-propagation - Wed, 19 Aug 2009 22:45:57 +0000 - - - x-fixlet-modification-time - Thu, 16 Aug 2012 21:33:38 +0000 - - BESC - - - Click - here - to <b>disable</b> command polling in Clients (default). - - setting delete "_BESClient_Comm_CommandPollEnable" on "{parameter "action issue date" of action}" for client -setting delete "_BESClient_Comm_CommandPollIntervalSeconds" on "{parameter "action issue date" of action}" for client - - - - Click - here - to <b>enable</b> command polling in Clients. - - setting "_BESClient_Comm_CommandPollEnable"="1" on "{parameter "action issue date" of action}" for client -setting "_BESClient_Comm_CommandPollIntervalSeconds"="3600" on "{parameter "action issue date" of action}" for client - - - - Click - here - to <b>enable</b> command polling in Clients for intervals of a specified number of seconds. You will be prompted for the number of seconds between polls. - - = 60 and it <= 172800) of (parameter "CommandPollIntervalSeconds" of action as integer)} -setting "_BESClient_Comm_CommandPollEnable"="1" on "{parameter "action issue date" of action}" for client -setting "_BESClient_Comm_CommandPollIntervalSeconds"="{parameter "CommandPollIntervalSeconds" of action}" on "{parameter "action issue date" of action}" for client]]> - - - - Click - here - for more information on setting the gather interval for a TEM Client to enable command polling. - - http://www-01.ibm.com/support/docview.wss?uid=swg21505846 - - - diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Enable Command Polling @ 15min for POLICY USE (2479).bes b/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Enable Command Polling @ 15min for POLICY USE (2479).bes deleted file mode 100644 index 6e3c8deb1..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Enable Command Polling @ 15min for POLICY USE (2479).bes +++ /dev/null @@ -1,64 +0,0 @@ - - - - - BES Client Setting: Enable Command Polling @ 15min for POLICY USE -
This task configures Clients to poll their parent Relay or Server once an hour for UDP commands they may have missed (BigFix 6.0+).

Note: The minimum value for the polling interval is 1 minute and the maximum is 2 days.

Note:  Setting the polling interval to less than 20 minutes may cause performances issues and is not recommended. ]]> - = "6.0"]]> - (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) - (if NOT exists setting "_BESClient_Comm_CommandPollEnable" of client then true else (value of setting "_BESClient_Comm_CommandPollEnable" of client as string != "1")) OR (if NOT exists setting "_BESClient_Comm_CommandPollIntervalSeconds" of client then true else (value of setting "_BESClient_Comm_CommandPollIntervalSeconds" of client as string != "900")) - BES Client Setting - danielheth@bigfix.me - <Unspecified> - 2013-06-06 - <Unspecified> - - x-fixlet-domain_attributes - BES Component Client - - - x-fixlet-first-propagation - Wed, 19 Aug 2009 22:45:57 +0000 - - - x-fixlet-modification-time - Thu, 06 Jun 2013 15:36:44 +0000 - - BESC - - - Click - here - to <b>disable</b> command polling in Clients (default). - - setting delete "_BESClient_Comm_CommandPollEnable" on "{parameter "action issue date" of action}" for client -setting delete "_BESClient_Comm_CommandPollIntervalSeconds" on "{parameter "action issue date" of action}" for client - - - - Click - here - for more information on setting the gather interval for a TEM Client to enable command polling. - - http://www-01.ibm.com/support/docview.wss?uid=swg21505846 - - - - Click - here - to <B>enable</B> 15min command polling in Clients. - - setting "_BESClient_Comm_CommandPollEnable"="1" on "{parameter "action issue date" of action}" for client -setting "_BESClient_Comm_CommandPollIntervalSeconds"="900" on "{parameter "action issue date" of action}" for client - - - diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Enable Debug Logging (520).bes b/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Enable Debug Logging (520).bes deleted file mode 100644 index ee566a0b7..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Enable Debug Logging (520).bes +++ /dev/null @@ -1,73 +0,0 @@ - - - - - BES Client Setting: Enable Debug Logging -
When you enable this log, you will be prompted for a level of detail. The higher the value, the greater the detail of the messages written to the log. If you do not know which level to choose, then choose 1000.

Note: Do not set the "Reapply" behavior when taking this action or you may cause the BES Client to constantly reset this setting. -]]> - (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) - = "5.1"]]> - not exists setting "_BESClient_EMsg_Detail" of client OR value of setting "_BESClient_EMsg_Detail" of client = "0" - BES Client Setting - BigFix - <Unspecified> - 2026-09-17 - <Unspecified> - - x-fixlet-domain_attributes - BES Component Client - - - x-fixlet-modification-time - Fri, 29 Jun 2012 22:02:45 +0000 - - - x-fixlet-first-propagation - Tue, 22 Jun 2004 21:26:49 +0000 - - BESC - - - Click - here - to enable the debug logging. - - = 1 AND parameter "_BESClient_EMsg_Detail" of action as integer <= 10000} -setting "_BESClient_EMsg_Detail"="{parameter "_BESClient_EMsg_Detail" of action}" on "{parameter "action issue date" of action}" for client -if {name of operating system contains "Android"} -setting "_BESClient_EMsg_File"="/mnt/sdcard/besclientdebug.log" on "{parameter "action issue date" of action}" for client -else -setting "_BESClient_EMsg_File"="{if (name of operating system as lowercase starts with "win") then (pathname of parent folder of regapp "BESClient.exe" & "\") else (pathname of (parent folder of parent folder of (client folder of current site)) & "/")}besclientdebug.log" on "{parameter "action issue date" of action}" for client -endif -setting "_BESClient_EMsg_EvalLog"="1" on "{parameter "action issue date" of action}" for client]]> - - - - Click - here - for more information about logging on Windows clients. - - http://www-01.ibm.com/support/docview.wss?uid=swg21505962 - - - - Click - here - for more information about logging on non-Windows clients. - - http://www-01.ibm.com/support/docview.wss?uid=swg21506110 - - - diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Enable_Disable Dynamic Throttling (460).bes b/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Enable_Disable Dynamic Throttling (460).bes deleted file mode 100644 index 67ac341ff..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Enable_Disable Dynamic Throttling (460).bes +++ /dev/null @@ -1,173 +0,0 @@ - - - - - BES Client Setting: Enable/Disable Dynamic Throttling -

The BES Platform can dynamically throttle network traffic to use a percentage of the available bandwidth when existing network traffic is detected. When dynamic throttling is enabled, BES will monitor and analyze existing data throughput to establish a throttled rate for network communication.

Dynamic throttling will only work correctly on endpoints when their parent has the same setting enabled. For example, client dynamic throttling will not function unless the client machine's parent relay also has dynamic throttling enabled, and likewise with a relay and server.

In order to use this feature, please first deploy this task to all systems to globally enable the dynamic throttling setting. Once the task has completed, please use the following task to set actual throttling rates:

Note: Do not set the "Reapply" behavior when taking this action or you may cause the BES Client to constantly reset this setting.

-]]> - (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) - = "5.1"]]> - = "7.0"]]> - ((it starts with "Win") OR (it starts with "AIX") OR (it starts with "HP-UX") OR (it starts with "Mac OS X") OR (it starts with "VMWare") OR (it starts with "SunOS") OR (it starts with "Linux")) of name of operating system - BES Client Setting - BigFix - <Unspecified> - 2026-09-17 - <Unspecified> - - x-fixlet-domain_attributes - BES Component Client - - - x-fixlet-modification-time - Sat, 12 May 2012 00:55:27 +0000 - - - x-fixlet-first-propagation - Fri, 09 Jan 2009 02:05:22 +0000 - - BESC - - - Click - here - for more information about BES bandwidth throttling. - - http://support.bigfix.com/bes/misc/besthrottling.html - - - - Click - here - to disable dynamic download throttling on the listed BES Clients. - - - - - - Click - here - to enable Dynamic Throttling. - - - - - diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Encrypted Reports (413).bes b/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Encrypted Reports (413).bes deleted file mode 100644 index 195a3d4f8..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Encrypted Reports (413).bes +++ /dev/null @@ -1,67 +0,0 @@ - - - - - BES Client Setting: Encrypted Reports -

This task can be used to control whether the BES Client encrypts its reports back to the BES Server. It also requires the BES Clients to run the relay selection algorithm immediately.

If the BES Client is set to require encryption to send reports, the BES Client will not send any reports if no encryption certificate could be found, or if the parent relay does not support receipt of encrypted documents.

If the BES Client is set to use encryption if possible, the BES Client will attempt to use encryption but will send its reports in cleartext if encryption is impossible.

If the BES Client is set to disable encryption, the BES Client will not encrypt its reports to the BES Server even if encryption is possible.

Note: Do not set the "Reapply" behavior when taking this action or you may cause the BES Client to constantly perform auto relay selection.

Important Note: Depending on the details of your network, causing all the BES Clients to simultaneously do relay autoselection might cause a heavy load on the routers while they handle the ICMP traffic from the BES Clients. If you are worried about this, use the "temporal distribution" option in the Execution tab of the Take Action dialog when sending this action.

-]]> - (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) - = "5.1"]]> - = "7.1"]]> - BES Client Setting - BigFix - <Unspecified> - 2026-09-17 - <Unspecified> - - x-fixlet-domain_attributes - BES Component Client - - - x-fixlet-modification-time - Sat, 12 May 2012 00:55:27 +0000 - - - x-fixlet-first-propagation - Wed, 09 Jul 2008 09:24:47 +0000 - - BESC - - - Click - here - to set the BES Client to use encryption for reports <b>if possible</b>. (Recommended for most deployments) - - setting "_BESClient_Report_Encryption"="Optional" on "{parameter "action issue date" of action}" for client -relay select - - - - Click - here - to set the BES Client to <b>require</b> encryption to send reports. (Use for highest security - Please use with caution and read all information above) - - setting "_BESClient_Report_Encryption"="Required" on "{parameter "action issue date" of action}" for client -relay select - - - - Click - here - to set the BES Client to <b>disable</b> encryption for reports. (Default behavior) - - setting "_BESClient_Report_Encryption"="None" on "{parameter "action issue date" of action}" for client -relay select - - - diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Fix Service Recovery Actions (457).bes b/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Fix Service Recovery Actions (457).bes deleted file mode 100644 index badf4ae2d..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Fix Service Recovery Actions (457).bes +++ /dev/null @@ -1,77 +0,0 @@ - - - - - BES Client Setting: Fix Service Recovery Actions - This task will identify machines where the BES Client Service is not configured to recover automatically in the event that the service crashes.  It will configure the service to restart automatically on the first and second failure, but to take no action on subsequent failures. -]]> - (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) - = "5.1"]]> - = 5]]> - (not exists value "FailureActions" of key "HKLM\System\CurrentControlSet\Services\BESClient" of registry) OR (preceding text of position 2 of following text of position 40 of it != "01" OR preceding text of position 2 of following text of position 56 of it != "01" OR preceding text of position 2 of following text of position 72 of it != "00") of (value "FailureActions" of key "HKLM\System\CurrentControlSet\Services\BESClient" of registry as string) - BES Client Setting - Internal - <Unspecified> - 2008-11-24 - <Unspecified> - - x-fixlet-modification-time - Sat, 12 May 2012 00:55:27 +0000 - - - x-fixlet-first-propagation - Fri, 21 Nov 2008 00:30:50 +0000 - - - x-fixlet-domain_attributes - BES Potential - - BESC - - - Click - here - to deploy this action. - - - - - - Click - here - for more information from Microsoft about Service Recovery Actions. - - http://technet.microsoft.com/en-us/library/cc738230.aspx - - - diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Hold Mode For Missing Client UI (236).bes b/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Hold Mode For Missing Client UI (236).bes deleted file mode 100644 index f3afbd12b..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Hold Mode For Missing Client UI (236).bes +++ /dev/null @@ -1,310 +0,0 @@ - - - - - BES Client Setting: Hold Mode For Missing Client UI -

When the Client UI is missing because it failed to launch or is configured to not be available, the BES Client can be configured to prevent actions from running until the Client UI is available.  This task can be used to set the BES Client behavior in these circumstances.

If the BES Client hold mode is set to all, then no actions will be run unless the Client UI can be displayed, regardless of whether the Client UI failed to launch or was configured to be unavailable.

If the BES Client hold mode is set to none, then the BES Client will run all actions, regardless of the availability of the Client UI.

If the BES Client hold mode is set to failed, then the BES Client will hold actions only if the Client UI is missing because it failed to launch.  In the event that the Client UI is missing because it was configured to be unavailable, actions will still be run.

Note: Do not set the "Reapply" behavior when taking this action or you may cause the BES Client to constantly restart itself.

Note: Applying this setting may cause the BES Client to restart.

Note: Affected computers may report back as 'Pending Restart' once the task has run successfully, but will not report back their final status until the computer has been restarted.

-]]> - (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) - = "5.1"]]> - = "7.2.4.60"]]> - BES Client Setting - BigFix - <Unspecified> - 2026-09-17 - <Unspecified> - - x-fixlet-domain_attributes - BES Component Client - - - x-fixlet-modification-time - Sat, 12 May 2012 00:55:27 +0000 - - - x-fixlet-first-propagation - Wed, 05 Aug 2009 16:59:10 +0000 - - BESC - - - Click - here - to set the BES Client hold mode to <b>all</b>. (Holds actions if Client UI is missing for any reason) - - = "10.4"))} - appendfile /bin/launchctl unload /Library/LaunchDaemons/BESAgentDaemon.plist - appendfile sleep 5 - appendfile /bin/launchctl load /Library/LaunchDaemons/BESAgentDaemon.plist - else - appendfile /sbin/SystemStarter stop BESAgent - appendfile sleep 5 - appendfile /sbin/SystemStarter start BESAgent - endif - wait chmod 555 "{(client folder of current site as string) & "/__appendfile"}" - run {"/bin/sh -c %22trap '' 15;'" & (client folder of current site as string) & "/__appendfile'%22"} -// Solaris -elseif {(name of operating system = "SunOS 5.8" OR name of operating system = "SunOS 5.9" OR name of operating system = "SunOS 5.10") AND (exists file "/etc/init.d/BESClient")} - delete "{(client folder of current site as string) & "/__appendfile"}" - appendfile #!/bin/sh - appendfile sleep 5 - appendfile /etc/init.d/BESClient stop - appendfile sleep 5 - appendfile /etc/init.d/BESClient start - wait chmod 555 "{(client folder of current site as string) & "/__appendfile"}" - run "{(client folder of current site as string) & "/__appendfile"}" -// HP-UX -elseif {(name of operating system contains "HP-UX") AND (exists file "/sbin/init.d/BESClient")} - delete "{(client folder of current site as string) & "/__appendfile"}" - appendfile #!/bin/sh - appendfile sleep 5 - appendfile /sbin/init.d/BESClient-{version of client} stop - appendfile sleep 5 - appendfile /sbin/init.d/BESClient-{version of client} start - wait chmod 555 "{(client folder of current site as string) & "/__appendfile"}" - run "{(client folder of current site as string) & "/__appendfile"}" -// ESX 3 -elseif {(name of operating system starts with "VMware ESX Server 3") AND (exists file ("/etc/init.d/BESClient-" & version of client as string)) } - delete "{(client folder of current site as string) & "/__appendfile"}" - appendfile #!/bin/sh - appendfile sleep 5 - appendfile /etc/init.d/BESClient-{version of client} stop - appendfile sleep 5 - appendfile /etc/init.d/BESClient-{version of client} start - wait chmod 555 "{(client folder of current site as string) & "/__appendfile"}" - run "{(client folder of current site as string) & "/__appendfile"}" -// Win98 and other unhandled OS's -else - action requires restart -endif -]]> - - - - Click - here - to set the BES Client hold mode to <b>none</b>. (Does not hold actions if Client UI is missing for any reason) - - = "10.4"))} - appendfile /bin/launchctl unload /Library/LaunchDaemons/BESAgentDaemon.plist - appendfile sleep 5 - appendfile /bin/launchctl load /Library/LaunchDaemons/BESAgentDaemon.plist - else - appendfile /sbin/SystemStarter stop BESAgent - appendfile sleep 5 - appendfile /sbin/SystemStarter start BESAgent - endif - wait chmod 555 "{(client folder of current site as string) & "/__appendfile"}" - run {"/bin/sh -c %22trap '' 15;'" & (client folder of current site as string) & "/__appendfile'%22"} -// Solaris -elseif {(name of operating system = "SunOS 5.8" OR name of operating system = "SunOS 5.9" OR name of operating system = "SunOS 5.10") AND (exists file "/etc/init.d/BESClient")} - delete "{(client folder of current site as string) & "/__appendfile"}" - appendfile #!/bin/sh - appendfile sleep 5 - appendfile /etc/init.d/BESClient stop - appendfile sleep 5 - appendfile /etc/init.d/BESClient start - wait chmod 555 "{(client folder of current site as string) & "/__appendfile"}" - run "{(client folder of current site as string) & "/__appendfile"}" -// HP-UX -elseif {(name of operating system contains "HP-UX") AND (exists file "/sbin/init.d/BESClient")} - delete "{(client folder of current site as string) & "/__appendfile"}" - appendfile #!/bin/sh - appendfile sleep 5 - appendfile /sbin/init.d/BESClient-{version of client} stop - appendfile sleep 5 - appendfile /sbin/init.d/BESClient-{version of client} start - wait chmod 555 "{(client folder of current site as string) & "/__appendfile"}" - run "{(client folder of current site as string) & "/__appendfile"}" -// ESX 3 -elseif {(name of operating system starts with "VMware ESX Server 3") AND (exists file ("/etc/init.d/BESClient-" & version of client as string)) } - delete "{(client folder of current site as string) & "/__appendfile"}" - appendfile #!/bin/sh - appendfile sleep 5 - appendfile /etc/init.d/BESClient-{version of client} stop - appendfile sleep 5 - appendfile /etc/init.d/BESClient-{version of client} start - wait chmod 555 "{(client folder of current site as string) & "/__appendfile"}" - run "{(client folder of current site as string) & "/__appendfile"}" -// Win98 and other unhandled OS's -else - action requires restart -endif -]]> - - - - Click - here - to set the BES Client hold mode to <b>failed</b>. (Default behavior. Holds actions if Client UI is missing due to a failure) - - = "10.4"))} - appendfile /bin/launchctl unload /Library/LaunchDaemons/BESAgentDaemon.plist - appendfile sleep 5 - appendfile /bin/launchctl load /Library/LaunchDaemons/BESAgentDaemon.plist - else - appendfile /sbin/SystemStarter stop BESAgent - appendfile sleep 5 - appendfile /sbin/SystemStarter start BESAgent - endif - wait chmod 555 "{(client folder of current site as string) & "/__appendfile"}" - run {"/bin/sh -c %22trap '' 15;'" & (client folder of current site as string) & "/__appendfile'%22"} -// Solaris -elseif {(name of operating system = "SunOS 5.8" OR name of operating system = "SunOS 5.9" OR name of operating system = "SunOS 5.10") AND (exists file "/etc/init.d/BESClient")} - delete "{(client folder of current site as string) & "/__appendfile"}" - appendfile #!/bin/sh - appendfile sleep 5 - appendfile /etc/init.d/BESClient stop - appendfile sleep 5 - appendfile /etc/init.d/BESClient start - wait chmod 555 "{(client folder of current site as string) & "/__appendfile"}" - run "{(client folder of current site as string) & "/__appendfile"}" -// HP-UX -elseif {(name of operating system contains "HP-UX") AND (exists file "/sbin/init.d/BESClient")} - delete "{(client folder of current site as string) & "/__appendfile"}" - appendfile #!/bin/sh - appendfile sleep 5 - appendfile /sbin/init.d/BESClient-{version of client} stop - appendfile sleep 5 - appendfile /sbin/init.d/BESClient-{version of client} start - wait chmod 555 "{(client folder of current site as string) & "/__appendfile"}" - run "{(client folder of current site as string) & "/__appendfile"}" -// ESX 3 -elseif {(name of operating system starts with "VMware ESX Server 3") AND (exists file ("/etc/init.d/BESClient-" & version of client as string)) } - delete "{(client folder of current site as string) & "/__appendfile"}" - appendfile #!/bin/sh - appendfile sleep 5 - appendfile /etc/init.d/BESClient-{version of client} stop - appendfile sleep 5 - appendfile /etc/init.d/BESClient-{version of client} start - wait chmod 555 "{(client folder of current site as string) & "/__appendfile"}" - run "{(client folder of current site as string) & "/__appendfile"}" -// Win98 and other unhandled OS's -else - action requires restart -endif -]]> - - - diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Lock Computer (546).bes b/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Lock Computer (546).bes deleted file mode 100644 index 20b9de425..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Lock Computer (546).bes +++ /dev/null @@ -1,48 +0,0 @@ - - - - - BES Client Setting: Lock Computer - This task will changed the lock status of the selected computer in your network. This lets you exclude specific computers or groups of computers from the effects of Fixlet actions. This could be useful if you want to insulate certain development computers from any changes or updates. Client computers can be locked forever until explicitly unlocked.
-]]> - (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) - = "5.1"]]> - (lock string of action lock state != "Yes") - BES Client Setting - BigFix - <Unspecified> - 2026-09-17 - <Unspecified> - - x-fixlet-domain_attributes - BES Component Client - - - x-fixlet-modification-time - Sat, 12 May 2012 00:55:27 +0000 - - - x-fixlet-first-propagation - Wed, 30 Jun 2004 20:47:37 +0000 - - BESC - - - Click - here - to lock listed BES Clients. - - action lock indefinite "{parameter "action issue date" of action}" - - - diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Relay Affiliation SeekList (3916).bes b/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Relay Affiliation SeekList (3916).bes deleted file mode 100644 index e50dc5204..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Relay Affiliation SeekList (3916).bes +++ /dev/null @@ -1,45 +0,0 @@ - - - - - BES Client Setting: Relay Affiliation SeekList - This task will set the Relay SeekList on an endpoint to be a relay on the local subnet, failing that it will use the BESServer.

-

This should help vastly reduce the number of endpoints that are connecting to relays on other sites.

]]> - NOT exists relay service - NOT exists main gather service - = "6.0.0.0"]]> - ((if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) AND (if exists property "android" of type "operating system" then (not android of operating system) else true)) - (exists setting "__RelaySelect_Automatic" of client) AND (value of it is (("1") as string)) of setting "__RelaySelect_Automatic" of client - if (exists setting "_BESClient_Register_Affiliation_SeekList" of client) then ((value of settings "_BESClient_Register_Affiliation_SeekList" of client) does not contain (registration subnet address of client as string)) else true - BES Client Setting - Internal - 2014-02-03 - - x-fixlet-modification-time - Thu, 06 Nov 2014 04:21:20 +0000 - - BES - - - Click - here - &nbsp;to deploy this action. - - // set the seeklist using the registration subnet, with the BES Root Server as a fallback -setting "_BESClient_Register_Affiliation_SeekList"="{registration subnet address of client as string};PrimarySite;*" on "{now}" for client - -// force a relay selection -relay select - - - - diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Relay Selection Controls (518).bes b/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Relay Selection Controls (518).bes deleted file mode 100644 index b33331648..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Relay Selection Controls (518).bes +++ /dev/null @@ -1,122 +0,0 @@ - - - - - BES Client Setting: Relay Selection Controls -

This task can be used to set and modify different parameters that control the relay selection behavior of your BES Clients.

After failing to find a BES Relay, the BES Client will continue to try after first waiting for the minimum retry interval. Each time it fails, the BES Client will double the time it spends waiting until the maximum retry interval is exceeded. Then the BES Client will try with the maximum retry interval until it successfully selects a BES Relay.

After a BES Client has successfully found a BES Relay, it will wait for the duration of the relay selection interval before running the relay selection algorithm again to find a closer BES Relay.

Once a BES Relay has been selected and the BES Client has successfully registered, the client will ignore errors when it attempts to post its results to the BES Relay or BES Server for the duration of the reporting failure interval before deciding to choose another BES Relay. On the first post report error, it sets a timer. After performing another round of relevance evaluation, if the BES Client is still unable to report, it checks to see if the reporting failure interval has elapsed, and if so will cause the BES Client to reselect its BES Relay.

When running the relay selection algorithm, the BES Client will generate ICMP traffic with a Time To Live (TTL) up to the maximum TTL.  If no BES Relays are found within the maximum TTL the relay selection attempt will be considered a failure.

Note: Do not set the "Reapply" behavior when taking this action or you may cause the BES Client to constantly reset this setting.

-]]> - true - (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) - = "5.1"]]> - BES Client Setting - BigFix - <Unspecified> - 2026-09-17 - <Unspecified> - - x-fixlet-domain_attributes - BES Component Client - - - x-fixlet-modification-time - Sat, 12 May 2012 00:55:27 +0000 - - - x-fixlet-first-propagation - Tue, 22 Jun 2004 18:47:02 +0000 - - BESC - - - Click - here - to set the <b>minimum retry interval</b> for the listed BES Clients. You will be prompted for the minimum retry interval in seconds. - - = 1 AND parameter "_BESClient_RelaySelect_MinRetryIntervalSeconds" of action as integer <= 4294967296} -setting "_BESClient_RelaySelect_MinRetryIntervalSeconds"="{parameter "_BESClient_RelaySelect_MinRetryIntervalSeconds" of action}" on "{parameter "action issue date" of action}" for client]]> - - - - Click - here - to set the <b>maximum retry interval</b> for the listed BES Clients. You will be prompted for the maximum retry interval in seconds. - - = 1 AND parameter "_BESClient_RelaySelect_MaxRetryIntervalSeconds" of action as integer <= 4294967296} -setting "_BESClient_RelaySelect_MaxRetryIntervalSeconds"="{parameter "_BESClient_RelaySelect_MaxRetryIntervalSeconds" of action}" on "{parameter "action issue date" of action}" for client]]> - - - - Click - here - to set the <b>relay selection interval</b> for the listed BES Clients. You will be prompted for the selection interval in seconds. - - = 1 AND parameter "_BESClient_RelaySelect_IntervalSeconds" of action as integer <= 4294967296} -setting "_BESClient_RelaySelect_IntervalSeconds"="{parameter "_BESClient_RelaySelect_IntervalSeconds" of action}" on "{parameter "action issue date" of action}" for client]]> - - - - Click - here - to set the <b>reporting failure interval</b> for the listed BES Clients.&nbsp; You will be prompted for the failure interval in seconds. - - = 1 AND parameter "_BESClient_RelaySelect_ResistFailureIntervalSeconds" of action as integer <= 4294967296} -setting "_BESClient_RelaySelect_ResistFailureIntervalSeconds"="{parameter "_BESClient_RelaySelect_ResistFailureIntervalSeconds" of action}" on "{parameter "action issue date" of action}" for client]]> - - - - Click - here - to set the <b>maximum TTL </b>for the listed BES Clients. You will be prompted for the maximum TTL in hops. - - = 1 AND parameter "_BESClient_RelaySelect_MaximumTTLToPing" of action as integer <= 255} -setting "_BESClient_RelaySelect_MaximumTTLToPing"="{parameter "_BESClient_RelaySelect_MaximumTTLToPing" of action}" on "{parameter "action issue date" of action}" for client]]> - - - - Click - here - to set all the relay selection settings above for the listed BES Clients. You will be prompted for all the above settings. - - = 1 AND parameter "_BESClient_RelaySelect_MinRetryIntervalSeconds" of action as integer <= 4294967296} -action parameter query "_BESClient_RelaySelect_MaxRetryIntervalSeconds" with description "Please enter the maximum retry interval (sec):" with default value "7200" -// Fail if value is not between 1 and 4,294,967,296 -continue if {parameter "_BESClient_RelaySelect_MaxRetryIntervalSeconds" of action as integer >= 1 AND parameter "_BESClient_RelaySelect_MaxRetryIntervalSeconds" of action as integer <= 4294967296} -action parameter query "_BESClient_RelaySelect_IntervalSeconds" with description "Please enter the relay selection interval (sec):" with default value "21600" -// Fail if value is not between 1 and 4,294,967,296 -continue if {parameter "_BESClient_RelaySelect_IntervalSeconds" of action as integer >= 1 AND parameter "_BESClient_RelaySelect_IntervalSeconds" of action as integer <= 4294967296} -action parameter query "_BESClient_RelaySelect_ResistFailureIntervalSeconds" with description "Please enter the reporting failure interval (sec):" with default value "600" -// Fail if value is not between 1 and 4,294,967,296 -continue if {parameter "_BESClient_RelaySelect_ResistFailureIntervalSeconds" of action as integer >= 1 AND parameter "_BESClient_RelaySelect_ResistFailureIntervalSeconds" of action as integer <= 4294967296} -action parameter query "_BESClient_RelaySelect_MaximumTTLToPing" with description "Please enter the maximum TTL:" with default value "255" -// Fail if value is not between 1 and 255 -continue if {parameter "_BESClient_RelaySelect_MaximumTTLToPing" of action as integer >= 1 AND parameter "_BESClient_RelaySelect_MaximumTTLToPing" of action as integer <= 255} -setting "_BESClient_RelaySelect_MinRetryIntervalSeconds"="{parameter "_BESClient_RelaySelect_MinRetryIntervalSeconds" of action}" on "{parameter "action issue date" of action}" for client -setting "_BESClient_RelaySelect_MaxRetryIntervalSeconds"="{parameter "_BESClient_RelaySelect_MaxRetryIntervalSeconds" of action}" on "{parameter "action issue date" of action}" for client -setting "_BESClient_RelaySelect_IntervalSeconds"="{parameter "_BESClient_RelaySelect_IntervalSeconds" of action}" on "{parameter "action issue date" of action}" for client -setting "_BESClient_RelaySelect_ResistFailureIntervalSeconds"="{parameter "_BESClient_RelaySelect_ResistFailureIntervalSeconds" of action}" on "{parameter "action issue date" of action}" for client -setting "_BESClient_RelaySelect_MaximumTTLToPing"="{parameter "_BESClient_RelaySelect_MaximumTTLToPing" of action}" on "{parameter "action issue date" of action}" for client]]> - - - diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Remove Arbitrary Client Setting (552).bes b/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Remove Arbitrary Client Setting (552).bes deleted file mode 100644 index c0f1b9c38..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Remove Arbitrary Client Setting (552).bes +++ /dev/null @@ -1,69 +0,0 @@ - - - - - BES Client Setting: Remove Arbitrary Client Setting -
Note: If the client setting you specify does not exist for the client, the action will not have an effect. However, the action results will either be "failed" or "completed" depending on which action you choose to deploy from below.

Note: Do not set the "Reapply" behavior when taking this action or you may cause the BES Client to constantly attempt to delete the specified client setting. -]]> - name of operating system as lowercase starts with "win" - (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) - = "5.1"]]> - BES Client Setting - BigFix - <Unspecified> - 2026-09-17 - <Unspecified> - - x-fixlet-domain_attributes - BES Component Client - - - x-fixlet-modification-time - Sat, 12 May 2012 00:55:27 +0000 - - - x-fixlet-first-propagation - Thu, 21 Jul 2005 21:12:39 +0000 - - BESC - - - Click - here - to remove an arbitrary client setting. If the given setting does not exist on the client, the client will report back as "<b>failed</b>." - - " -continue if {exists key ("HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\" & parameter "ClientSetting" of action) of registry} -delete __appendfile -delete temp.reg -appendfile REGEDIT4 -appendfile [-HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\{parameter "ClientSetting" of action}] -move __appendfile temp.reg -wait regedit -s temp.reg]]> - - - - Click - here - to remove an arbitrary client setting. If the given setting does not exist on the client, the client will report back as "<b>completed</b>." - - " -delete __appendfile -delete temp.reg -appendfile REGEDIT4 -appendfile [-HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\{parameter "ClientSetting" of action}] -move __appendfile temp.reg -wait regedit -s temp.reg]]> - - - diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Remove Wake-on-LAN Forwarders (314).bes b/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Remove Wake-on-LAN Forwarders (314).bes deleted file mode 100644 index 5b235473d..000000000 --- a/Sites/BigFix Management/Fixlets/Fixlets/BES Client Setting_ Remove Wake-on-LAN Forwarders (314).bes +++ /dev/null @@ -1,50 +0,0 @@ - - - - - BES Client Setting: Remove Wake-on-LAN Forwarders -

This Task will remove the ability for the selected clients to serve as Wake-on-LAN forwarders within their respective subnets.

Note: This Task is not applicable on computers designated as Last Man Standing.

-]]> - (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) - = "5.1"]]> - not exists settings whose(name of it contains "PowerManagement_LastManStanding" AND value of it = "1") of client - exists setting "_BESClient_Comm_WakeOnLanForwardingEnable" whose(value of it = "1") of client - = "7.1" as version]]> - Wake-on-LAN - BigFix - <Unspecified> - 2010-08-13 - N/A - - x-fixlet-modification-time - Sat, 12 May 2012 00:55:27 +0000 - - - x-fixlet-first-propagation - Thu, 17 Nov 2011 19:28:18 +0000 - - - x-fixlet-domain_attributes - Manage_WOL_Forwarders - - BESC - - - Click - here - to remove Wake-on-LAN packet forwarders. - - setting "_BESClient_Comm_WakeOnLanForwardingEnable"="0" on "{parameter "action issue date" of action}" for client - - - diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BES Web Reports_ Allow Custom Web Reports (26656).bes b/Sites/BigFix Management/Fixlets/Fixlets/BES Web Reports_ Allow Custom Web Reports (26656).bes new file mode 100644 index 000000000..5911b9190 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/BES Web Reports_ Allow Custom Web Reports (26656).bes @@ -0,0 +1,38 @@ + + + + + BES Web Reports: Allow Custom Web Reports + This fixlet sets the "AllowCustomReportCreation" value on a BigFix server, which enables the creation of custom reports in Web Reports. + exists service "BESWebReportsServer" + windows of operating system + not exists value "AllowCustomReportCreation" whose (it = "1") of key "HKLM\Software\BigFix\Enterprise Server\BESReports" of x32 registry + Internal + 2019-11-01 + + x-fixlet-modification-time + Fri, 01 Nov 2019 14:00:18 +0000 + + BESC + + + Click + here + to deploy this action. + + regset "[HKEY_LOCAL_MACHINE\Software\BigFix\Enterprise Server\BESReports]" "AllowCustomReportCreation"="1" + +wait net stop BESWebReportsServer +wait net start BESWebReportsServer + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BESClient - SeekList Setting - AD Site - Net Change (23802).bes b/Sites/BigFix Management/Fixlets/Fixlets/BESClient - SeekList Setting - AD Site - Net Change (23802).bes new file mode 100644 index 000000000..53219dc90 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/BESClient - SeekList Setting - AD Site - Net Change (23802).bes @@ -0,0 +1,84 @@ + + + + + BESClient - SeekList Setting - AD Site - Net Change + Update group policy when the network changes (if windows) This will help maintain the AD site proptery

+
    +
  • makes sure AD site is up to date (windows only) +
  • sets relay afiliation
+

Setting "_BESClient_RelaySelect_Manual" = "true" will remove this fixlet from being relevant.

]]> + not exists relay service AND not exists main gather service + 0 */ number of ((addresses of ip interfaces of network as string) whose(it != "127.0.0.1" and it does not start with "169.")) > 0 )]]> + /* set value to remove cleint from automatic relay selection script */ not exists setting "_BESClient_RelaySelect_Manual" whose (value of it equals "true") of client + Internal + 2016-01-26 + + x-fixlet-modification-time + Sun, 12 Mar 2017 23:40:09 +0000 + + BESC + + + Click + here + to deploy this action. + + parameter "_FailOver"="FailOver" + +if {operating system as string as lowercase contains "win"} + //only run gpupdate IF a windows desktop + if {(exists ("win7";"win8";"win10") whose (operating system as string as lowercase contains it))} + waithidden cmd /c gpupdate + endif + parameter "_ADSite" = "{value "Site-Name" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\State\Machine" of registry}" + setting "AD Site"="{parameter "_ADSite"}" on "{now}" for client +endif + +// Check for valid AD-Site property value +if {exists setting "AD Site" of client} + parameter "_AD_SiteSet" = "{value of setting "AD Site" of client as string | "N/A"}" + if {parameter "_AD_SiteSet" = "N/A"} + parameter "_set" = "" + else + parameter "_set" = "{parameter "_AD_SiteSet"}" + endif +else + parameter "_set" = "" +endif + +// Determine if AD Site is blank +if {parameter "_set" != ""} + parameter "_set_this" = "{parameter "_set"}" +else + parameter "_set_this" = "{parameter "_FailOver"}" +endif + +//set relay seek list +setting "_BESClient_Register_Affiliation_SeekList"="{parameter "_set_this"}" on "{now}" for client + +// Set agents to use automatic relay selection +setting "__RelaySelect_Automatic"="1" on "{now}" for client + +// Force client to send update to relay +relay select + +// *************************************************************************** +// tattoo the settings with the Network Signature +// *************************************************************************** +setting "_NetSignature"="{unique value of concatenations ";" of (it as string) whose(it != "127.0.0.1" and it does not start with "169.") of addresses of ip interfaces of network as string}" on "{now}" for client + +Notify Client ForceRefresh + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BESClient - Set AD Site - Unix - DataCenter (23804).bes b/Sites/BigFix Management/Fixlets/Fixlets/BESClient - Set AD Site - Unix - DataCenter (23804).bes new file mode 100644 index 000000000..cc00bc561 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/BESClient - Set AD Site - Unix - DataCenter (23804).bes @@ -0,0 +1,34 @@ + + + + + BESClient - Set AD Site - Unix - DataCenter + Set the "AD Site" for DataCenter for IP addresses between "10.1.1.1" and "10.1.5.254"

]]> + true + Internal + 2015-09-17 + + x-fixlet-modification-time + Mon, 13 Mar 2017 18:06:04 +0000 + + BESC + + + Click + here + to deploy this action. + + setting "AD Site"="DataCenter" on "{parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BESClient - Set AD Site - Win (23805).bes b/Sites/BigFix Management/Fixlets/Fixlets/BESClient - Set AD Site - Win (23805).bes new file mode 100644 index 000000000..490818ea4 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/BESClient - Set AD Site - Win (23805).bes @@ -0,0 +1,38 @@ + + + + + BESClient - Set AD Site - Win + + /* Applicable to Windows endpoint ONLY */ exists (operating system) whose (it as string as lowercase contains "win") + /* AD site of WIN client */ not exists setting "AD Site" whose (value of it = (value "Site-Name" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\State\Machine" of registry)) of client + ALL, Active Directory Site, Client, Setting + 2015-06-11 + + x-fixlet-modification-time + Mon, 13 Mar 2017 18:47:11 +0000 + + BESC + + + Click + here + to deploy this action. + + // *************************************************************************** +// Set or update the AD Site client property +// *************************************************************************** +setting "AD Site"="{value "Site-Name" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\State\Machine" of registry}" on "{parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BIGMIME (6255).bes b/Sites/BigFix Management/Fixlets/Fixlets/BIGMIME (6255).bes new file mode 100644 index 000000000..d6b03fb6d --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/BIGMIME (6255).bes @@ -0,0 +1,89 @@ + + + + + BIGMIME + Action Parameters:

+

  <<  Enter the IEM Server Operator Name
    <<  Enter the IEM Server Operator Password 

+

This task will inject a custom MIME field into the specified fixlet without altering the fixlet ID and which can then be queried by relevance such as:

+

(name of it, values of it) of headers whose (name of it = "x-fixlet-<CUSTOM NAME>") of relevant fixlets of sites

+

Deploy it against the Bigfix Root Server.

+

NOTE: This will only work on fixlets in CUSTOM sites.

]]> + exists main gather service + = "9.0"]]> + (name of operating system starts with "Win") + IEM Maintenance + mike.english@us.ibm.com + 2015-10-03 + + x-fixlet-modification-time + Tue, 20 Oct 2015 14:35:45 +0000 + + BES + + + Click + here + to deploy this action. + + > c:\export\{parameter "fixletid" of action}.bes +appendfile DEL "%~f0" +delete fetchfixlet.bat +copy __appendfile fetchfixlet.bat +wait __Download\RunAsCurrentUser.exe --w --q cmd.exe /C fetchfixlet.bat + +//update fixlet with new mime value +delete __appendfile +appendfile {(concatenation "" of (substrings separated by "::" of (concatenation ("::%09%09::%09%09%09x-fixlet-" & (parameter "mimename" of action) & "::%09%09%09" & (parameter "mimevalue" of action) & "::%09%09") of (substrings separated by "" of (concatenation "::" of (lines of file ("c:\export\" & (parameter "fixletid" of action) & ".bes")))))))} +copy __appendfile "c:\export\{parameter "fixletid" of action}.xml" + +//replace fixlet +delete __appendfile +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\IEM CLI\iem.exe%22"} login -q --server=localhost --user={parameter "RemoteOP" of action} --password={parameter "RemoteOPPass" of action} +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\IEM CLI\iem.exe%22"} put "c:\export\{parameter "fixletid" of action}.xml" "/fixlet/custom/{parameter "sitename" of action}/{parameter "fixletid" of action}" +appendfile DEL "%~f0" +delete mimeinject.bat +copy __appendfile mimeinject.bat +wait __Download\RunAsCurrentUser.exe --w --q cmd.exe /C mimeinject.bat + +//Cleanup +delete "c:\export\{parameter "fixletid" of action}.bes" +delete "c:\export\{parameter "fixletid" of action}.xml"]]> + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BigFix Console_Uninstall (26993).bes b/Sites/BigFix Management/Fixlets/Fixlets/BigFix Console_Uninstall (26993).bes new file mode 100644 index 000000000..6e3d95992 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/BigFix Console_Uninstall (26993).bes @@ -0,0 +1,42 @@ + + + + + BigFix Console_Uninstall + + true + exists file "C:\Program Files (x86)\BigFix Enterprise\BES Console\BESConsole.exe" + Internal + 2023-01-30 + + x-fixlet-modification-time + Mon, 30 Jan 2023 17:06:00 +0000 + + BESC + + + Click + here + to deploy this action. + + if {windows of operating system} + if {exists location of client} + delete "{location of console}\udtinstall.log" + endif + parameter "ProductID" = "{substring after "/X" of((value "UninstallString" of key whose((value "DisplayName" of it = "BigFix Console") and name of it starts with "{") of key "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall" of registry)as string)}" + wait msiexec /quiet /uninstall { parameter "ProductID" } + +endif + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BigFix Platform Health Check -- Enable FillDB Performance Logging (4.0.1) (27397).bes b/Sites/BigFix Management/Fixlets/Fixlets/BigFix Platform Health Check -- Enable FillDB Performance Logging (4.0.1) (27397).bes new file mode 100644 index 000000000..980f27b97 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/BigFix Platform Health Check -- Enable FillDB Performance Logging (4.0.1) (27397).bes @@ -0,0 +1,507 @@ + + + + + BigFix Platform Health Check -- Enable FillDB Performance Logging (4.0.1) + .header { font-size: 14px; background-color: #990000; color: white; padding: 6px 40px 6px 10px; white-space: nowrap; } .row { font-size: 14px; padding: 6px 40px 6px 10px; border: 1px solid black; border-top: none; } .nowrap { white-space: nowrap; } + +
+
+
+
Description

+
This task will enable FillDB Performance logging.  Log files sizes and logging duration options are presented in the User Input and Parameters section.
+
 
+
Deployment Notes

+
    +
  • +
    This task can only be run by Master Operators.
    +
  • +
    This will only be relevant on BigFix root servers that do not already have FillDB Performance logging enabled.
    +
  • +
    Creates the Health Check folder structure on the same drive that the BigFix root server is installed on. Edit the actionscript parameters if you want something different.
    +
  • +
    Run this as a one time action.
    +
  • +
    +
    The FillDB service must be restarted to enable/disable logging. This task will restart the FillDB service.
    +
  • +
    +
    +
    More information about BigFix logging can be found here.
+
User Input and Parameters

+
+ + + + + + + + + + + + + + + + + + + + + + +
+

Log Size

FillDB Performance logging will rotate log files automatically at a default file size of 100 MB and a cap of 10 files - giving us a total of 1 GB of logs. This is the recommended starting point for the total amount of log files needed for analysis. For situations where you want a different  maximum total for the FillDB Performance log files, use the field below.  The minimum total size being 500 MB (so enter "500") and the maximum total size being 4 GB (enter "4000"). 

+

Note: The maximum total size can be greater than 4 GB but for this automation we are using 4 GB as a guardrail.  A set of logs that size can take a while to analyze later on.

+


FillDB Performance Log Maximum Total Size (MB):

.

+

Do Not Modify the Default Maximum Total Log File Size

+


Log Duration

+

FillDB Performance logging adds some overhead and should not be enabled without a clear plan to disable it when logging is no longer needed. This task can generate a sub-task to disable FillDB Performance logging after a specified number of hours. 

+

Enter in the maxiumum duration for FillDB Performance logging to be run in the field below. 

+


FillDB Performance Logging Duration (Hours):

+

To run open ended logging, select the checkbox below. There is a companion task named "WARNING: BigFix Platform Health Check -- Disable FillDB Performance Logging" to disable logging at any time.

+


+

Credentials

+

Enter in the credentials for a master operator (MO) so this task can generate the action to disable FillDB Performance logging using the BigFix REST API after the duration specified above. These credentials will be protected by using the secure parameters feature.

+

Note: If SAML is enabled then please enter in a local BigFix MO account.

Specify API Username:

Specify API Password:

Confirm API Password:

+
Supported Platforms

+
Windows

+
Version and Release Notes
+
 
+
4.0.1 - Addressed scenario where log max size settings were already in place which caused unexpected log sizes. Clarified log rotation is enabled by default but can be changed to a higher value to produce more logs. Fixed typo with max log file size setting.
+
4.0 - Version sync. Service restart warning. 
+
3.0 - Added MO restriction. Dated backup folders. Moved FillDB Performance logs up 1 level and out of the main Logs folder to avoid back up issues/conflicts with other logging tasks. Version sync with other HC content.
+
2.0.1 - Changed file names.
+
2.0.0 - Re-branded.
+
1.0 - Initial version.
]]> + (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) + /* IS A WINDOWS ROOT SERVER */ ((exists main gather service AND windows of operating system) AND /* LOGGING NOT SET */ (not exists value "EnablePerformanceLogging" whose (it as string = "1") of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB" of x32 registry)) + BigFix Platform Health Check + HCL BigFix AVP and Professional Services + Data Collection - Day 1 + 2025-11-19 + Required + + x-fixlet-modification-time + Thu, 20 Nov 2025 15:45:27 +0000 + + BES + + + Click + here + to deploy this action. + + +//* +//* DESCRIPTION AND NOTES +//* +//* - This task will enable FillDB Performance logging and, if chosen, spawn a +//* BigFix action to disable FillDB Performance logging after a specified duration (hours). +//* +//* ====================================================================================================> + +//* ====================================================================================================> +//* +//* SET SOME PARAMETERS +//* +//* - These parameters can be used to control the location and naming of the various health check files +//* and folders. +//* +//* - Ideally, the only thing that would be changed here would be the driveLetter. Be careful about +//* adjusting anything else. +//* +//* ====================================================================================================> + + +action parameter query "restart" with description "To enable these changes you need to restart the FillDB Service. Enter 'Y' to confirm you are aware of the serivce restart for both the enablement of logging and the disabling of logging later, if chosen. Click Cancel to exit the task if you wish to do this at another time." with default "N" +parameter "res" = "{parameter "restart" of action as string as lowercase}" + +if {(parameter "res") is "y"} + +parameter "driveLetter" = "{preceding texts of firsts "\" of (value "EnterpriseServerFolder" of key "HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\BigFix\Enterprise Server" of native registry as string)}" +parameter "checkType" = "Platform" +parameter "rootFolder" = "{parameter "driveLetter" & "\BigFix_Health_Check\" & parameter "checkType"}" +parameter "cliFolder" = "{value "EnterpriseServerFolder" of key "HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\BigFix\Enterprise Server" of native registry as string & "IEM CLI"}" +parameter "apiPort" = "{value "Port" of key "HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\BigFix\Enterprise Server" of x32 registry}" +parameter "resultsFolder" = "{parameter "rootFolder" & "\Results"}" +parameter "backupFolder" = "{parameter "rootFolder" & "\Backup"}" +parameter "resultsBackupFolder" = "{parameter "backupFolder" & "\Results"}" +parameter "xmlFilesFolder" = "{parameter "rootFolder" & "\XML_Files"}" +parameter "logsFolder" = "{parameter "resultsFolder" & "\Logs"}" +parameter "fillDBPerfLogsFolder"="{parameter "logsFolder" & "\FillDB_Performance"}" +parameter "fillDBPerfLogsBackupFolder" = "{parameter "resultsBackupFolder" & "\Logs\FillDB_Performance" & "\" & (((month of it as two digits & "-" & day_of_month of it as two digits & "-" & year of it as string) of date(local time zone) of it & "_" & (two digit hour of it as string & two digit minute of it as string) of time (local time zone) of it) of now)}" +parameter "fillDBPerfLogsName"="{"FillDBperf.log"}" +parameter "fillDBPerfLogsFullName"="{parameter "fillDBPerfLogsFolder" & "\" & parameter "fillDBPerfLogsName"}" + +//* ====================================================================================================> +//* +//* BACKUP EXISTING FILES, IF PRESENT. THIS IS MORE FOR TROUBLESHOOTING. +//* +//* ====================================================================================================> + +if {if (exists folder (parameter "fillDBPerfLogsFolder")) then (exists files of folder (parameter "fillDBPerfLogsFolder")) else (false)} +folder create "{parameter "fillDBPerfLogsBackupFolder"}" +waithidden cmd.exe /C xcopy "{parameter "fillDBPerfLogsFolder" & "\*.log"}" "{parameter "fillDBPerfLogsBackupFolder" & "\*.log"}" /E /Y +waithidden cmd.exe /C del /F /Q "{parameter "fillDBPerfLogsFolder" & "\*.*"}" +endif + +//* ====================================================================================================> +//* +//* DELETE ANY EXISTING FOLDERS, SCRIPTS, ETC. SO WE CAN CREATE FRESH CONTENT +//* +//* ====================================================================================================> + +// Nothing to delete here... + +//* ====================================================================================================> +//* +//* BUILD OUT THE FOLDER STRUCTURE TO SUPPORT THE GLOBAL TASK +//* +//* ====================================================================================================> + +folder create "{parameter "xmlFilesFolder"}" +folder create "{parameter "rootFolder"}" +folder create "{parameter "fillDBPerfLogsFolder"}" + +//* ====================================================================================================> +//* +//* ENABLE FILLDB PERFORMANCE LOGGING AND RESTART THE SERVICE +//* +//* ====================================================================================================> + +//* +//* Save the existing log file setting value so we can set it back later to the original using the +//* disable debug logging task. +//* + +setting "__FillDB_Perf_Logs_Backup_Value"="{if (exists value "PerformanceDataPath" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB" of x32 registry) then (value "PerformanceDataPath" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB" of x32 registry as string) else ("was not set")}" on "{parameter "action issue date" of action}" for client + +waithidden cmd.exe /C net stop filldb +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB]" "PerformanceDataPath"="{escape of (parameter "fillDBPerfLogsFullName")}" +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB]" "EnablePerformanceLogging"="1" +//* +//* 4.0.1 +//* Log max size might be present already so we need to remove it to avoid unexpected behavior. +//* +regdelete "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB]" "PerfLogFileSizeLimit" + +//* +//* If a log file size limit was chosen then set the log sizes limit +//* + +if {parameter "fillDBPerfLogsSizeNoLimit" as integer != -1} +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB]" "PerfLogFileSizeLimit"=dword:{parameter "fillDBPerfLogsSizeByte" as integer as hexadecimal} +endif + +//* +//* Sleep 5 secs and start back up +//* + +waithidden cmd.exe /C ping 127.0.0.1 -n 10 -w 500> nul +waithidden cmd.exe /C net start filldb + +//* +//* If the log rotation and size limit is not selected (or not) then add a note about that to the readme file. +//* false = -1 +//* + +if {parameter "fillDBPerfLogsSizeNoLimit" as integer = -1} +waithidden cmd.exe /C echo The FillDB Performance log in this folder is *active* but it is not being capped at a maximum size. > "{parameter "fillDBPerfLogsFolder" & "\HEALTHCHECK_FILLDB_PERF_README.txt"}" +waithidden cmd.exe /C echo See the action 'BigFix Platform Health Check -- Enable FillDB Performance Logging' for details. >> "{parameter "fillDBPerfLogsFolder" & "\HEALTHCHECK_FILLDB_PERF_README.txt"}" +elseif {parameter "fillDBPerfLogsSizeNoLimit" as integer != -1} +waithidden cmd.exe /C echo The FillDB Performance log in this folder is *active* and will be capped at a total file size of {parameter "fillDBPerfLogsSizeMB"} MB. > "{parameter "fillDBPerfLogsFolder" & "\HEALTHCHECK_FILLDB_PERF_README.txt"}" +waithidden cmd.exe /C echo See the action 'BigFix Platform Health Check -- Enable FillDB Performance Logging' for details. >> "{parameter "fillDBPerfLogsFolder" & "\HEALTHCHECK_FILLDB_PERF_README.txt"}" +endif + +//* +//* If the logging duration is not open (or not) ended then add a note about that to the readme file. +//* false = -1 +//* + +if {parameter "fillDBPerfLogsNoDisable" as integer = -1} +waithidden cmd.exe /C echo Automatic disabling of logging was not chosen when logging was initiated. It is *highly* recommended that you disable FillDB Performance logging once your health check is completed. >> "{parameter "fillDBPerfLogsFolder" & "\HEALTHCHECK_FILLDB_PERF_README.txt"}" +waithidden cmd.exe /C echo The companion task named 'WARNING: BigFix Platform Health Check - FillDB Performance Logging is Enabled' can be used to disable logging at any time. >> "{parameter "fillDBPerfLogsFolder" & "\HEALTHCHECK_FILLDB_PERF_README.txt"}" +elseif {parameter "fillDBPerfLogsNoDisable" as integer != -1} +waithidden cmd.exe /C echo Automatic disabling of logging was chosen when logging was initiated. See the auto-generated action titled "BigFix Platform Health Check -- Disable FillDB Performance Logging on {((( month of it as two digits & "/" & day_of_month of it as two digits & "/" & year of it as string) of date(local time zone) of it) & " at " & ((two digit hour of it as string & ":" & two digit minute of it as string) of time (local time zone) of it )) of (now + (parameter "fillDBPerfLogsDuration" as integer * hour))}" >> "{parameter "fillDBPerfLogsFolder" & "\HEALTHCHECK_FILLDB_PERF_README.txt"}" + +//* +//* Drop a breadcrumb for the disable action to key off of. +//* + +setting "__FillDB_Perf_Logs_Expiration" = "{now + (parameter "fillDBPerfLogsDuration" as integer * hour)}" on "{parameter "action issue date" of action}" for client + + +//* ====================================================================================================> +//* +//* CREATE AND POST THE "DISABLE FILLDB PERFORMANCE LOGGING" TASK +//* +//* ====================================================================================================> + +delete "{parameter "xmlFilesFolder" & "\disable_filldb_performance_logging.xml"}" +delete __createfile + +createfile until _END_ + + + + BigFix Platform Health Check -- Disable FillDB Performance Logging (WILL RESTART FILLDB SERVICE) on {((( month of it as two digits & "/" & day_of_month of it as two digits & "/" & year of it as string) of date(local time zone) of it) & " at " & ((two digit hour of it as string & ":" & two digit minute of it as string) of time (local time zone) of it )) of (now + (parameter "fillDBPerfLogsDuration" as integer * hour))} + /* IS A WINDOWS ROOT SERVER */ (exists main gather service and not exists relay service AND windows of operating system) AND /* FILLDB PERF LOGGING IS ENABLED */ ( exists value "EnablePerformanceLogging" whose (it as string = "1") of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB" of x32 registry) AND (exists setting "__FillDB_Perf_Logs_Expiration" whose (now > value of it as time) of client) + +//* ====================================================================================================> +//* +//* DESCRIPTION AND NOTES +//* +//* - This task will disable filldb performance logging and set the log file info back to whatever +//* it was before it was ebabled by the "BigFix Platform Health Check -- Enable FillDB Performance +//* Logging" action. +//* +//* ====================================================================================================> + +waithidden cmd.exe /C net stop "filldb" + +//* +//* Disable logging and set the log info back to whatever it was before we made the change to +//* centralized HC logging +//* + +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB]" "PerformanceDataPath"="{if (exists setting "__FillDB_Perf_Logs_Backup_Value" of client) then (value of setting "__FillDB_Perf_Logs_Backup_Value" of client) else ("needs to be set")}" +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB]" "EnablePerformanceLogging"="0" +regdelete "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB]" "PerfLogFileSizeLimit" + +//* +//* Sleep 5 secs - without this sometimes the service does not come back up +//* + +waithidden cmd.exe /C ping 127.0.0.1 -n 10 -w 500> nul +waithidden cmd.exe /C net start filldb + +//* +//* Delete the expiration breadcrumb +//* + +setting delete "__FillDB_Performance_Logs_Backup_Value" on "{parameter "action issue date"}" for client + +//* +//* Write out / update a readme file. +//* + +waithidden cmd.exe /C echo The FillDB Performance log in this folder is no longer active and is ready for analysis. > "{parameter "fillDBPerfLogsFolder" & "\HEALTHCHECK_FILLDB_PERF_README.txt"}" +waithidden cmd.exe /C echo Logging was automatically disabled by the auto-generated action titled "BigFix Platform Health Check -- Disable FillDB Performance Logging on {((( month of it as two digits & "/" & day_of_month of it as two digits & "/" & year of it as string) of date(local time zone) of it) & " at " & ((two digit hour of it as string & ":" & two digit minute of it as string) of time (local time zone) of it )) of (now + (parameter "fillDBPerfLogsDuration" as integer * hour))}". >> "{parameter "fillDBPerfLogsFolder" & "\HEALTHCHECK_FILLDB_PERF_README.txt"}" + + + + false + false + false + false + true + P2D + false + false + NoRequirement + AllUsers + false + false + false + false + 0 + false + false + false + true + + false + + + false + false + + false + false + false + false + false + false + + false + + false + + false + false + false + false + false + false + false + false + false + false + false + false + false + false + + false + false + false + false + false + + false + false + false + false + + false + + +_END_ + +move __createfile "{parameter "xmlFilesFolder" & "\disable_filldb_performance_logging.xml"}" + +//* +//* Login to the API and post the XML file to generate the action. +//* + +waithidden cmd.exe /C ""{parameter "cliFolder" & "\iem"}" login -q --server=https://{host name of root server}:{parameter "apiPort"} --user={parameter "apiUsername"} --password={parameter "apiPassword"} --masthead="{preceding text of last "\" of pathname of data folder of client & "\actionsite.afxm"}"" +waithidden cmd.exe /C "{parameter "cliFolder" & "\iem"}" POST {parameter "xmlFilesFolder" & "\disable_filldb_performance_logging.xml"} https://localhost:{parameter "apiPort"}/api/actions +endif + +elseif {(parameter "res") is "n"} + exit -1 +endif]]> + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BigFix Platform Health Check -- Run FillDB Performance Log Analyzer (4.0.1) (27399).bes b/Sites/BigFix Management/Fixlets/Fixlets/BigFix Platform Health Check -- Run FillDB Performance Log Analyzer (4.0.1) (27399).bes new file mode 100644 index 000000000..b6bdfde0b --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/BigFix Platform Health Check -- Run FillDB Performance Log Analyzer (4.0.1) (27399).bes @@ -0,0 +1,319 @@ + + + + + BigFix Platform Health Check -- Run FillDB Performance Log Analyzer (4.0.1) + .header { font-size: 14px; background-color: #990000; color: white; padding: 6px 40px 6px 10px; white-space: nowrap; } .row { font-size: 14px; padding: 6px 40px 6px 10px; border: 1px solid black; border-top: none; } .nowrap { white-space: nowrap; } + +
+
+
+
Description

+
+

This task is for automating portions of a standard BigFix platform health check.  Specifically, this task will perform the following steps:

+
    +
  • Backup any existing perfmon log analyzer results. +
  • Create the BigFix Platform Health Check folder structure to support running the perfmon analyzer on the same drive that the BigFix client is installed to (configurable in the actionscript). +
  • Run the analyzer against the log file specfied in the user input fields below.  You can enter in a custom file path or use the default location, which is pre-populated.  The filename is self explanatory. +
      +
    • If log rotation produced multiple log files, which is normal, place them all in the folder specified and the task will automatically combine the log files into a single log for analysis.
    +
  • The analyzer output will be a .csv file by default, but it is possible to export as table or json by selecting an option in the dropdown below. 
+
Deployment Notes

+
    +
  • +
    This task can only be run my Master Operators.
    +
  • +
    This will only be relevant on BigFix root servers.
    +
  • +
    Make sure the file that is being analyzed is not a live log file or the analyzer cannot access it.
    +
  • +
    Run it as a one time action only.
    +
  • +
    The FillDB Performance log analyzer is currently hosted at https://bigfix-mark.github.io/Tools/MXToolkit.zip. This task will download and unzip this file in order to access the FillDB Performance analyzer executable. If the download fails it might be due to network restrictions.  For AirGap installations, manually download and then copy the file into the ".\BES Server\wwwrootbes\bfmirror\downloads\sha1" folder on your root server.
    • +
      +
    • +
      Download failures can also happen when the tools are updated.  You will have to update the prefetch statement file size and file hashes to work with the updated file.
    +
  • +
    Depending on the total size of the log file(s), this process may take a few minutes. A typical 1 GB total file size across 10 files takes about 5 minutes. The logs must first be combined and then analyzed.
+
User Input and Parameters

+
If you need to analyze a log file that is not using the default location (C:\BigFix_Health_Check\Platform\Results\Logs\FillDB_Performance) or default file name (FillDBperf.log) and/or need to change the output from the default of CSV, update the fields below.
+
 
+
FillDB Performance Log File Location:
+


+
 
+
Base FillDB Performance Log File Name
+
Note: File must have a .log extension. If there are multiple log files they should have the default log rotation extension format like .log_1:
+

+

+
 
+



+
Supported Platforms

+
Windows

+
Version and Release Notes
+
 
+
4.0.1 - Added a note about "stitching" up multiple FillDB performance logs into a single log.
+
4.0 - Version sync.  Updated prefetch to reflect new version of MXToolkit.
+
3.0.0 - Added MO restriction. Version sync with other HC content.
+
2.0.0 - Re-branded.
+
1.0.0 - Initial version.
]]> + /* IS A WINDOWS ROOT SERVER */ (exists main gather service and not exists relay service) AND (windows of operating system) + BigFix Platform Health Check + HCL BigFix AVP and Professional Services + Experimental + 2025-10-18 + + x-fixlet-modification-time + Fri, 21 Nov 2025 20:09:13 +0000 + + BES + + + Click + here + to deploy this action. + + "{parameter "fillDBPerfLogsAnalysisFolder" & "\" & (((month of it as two digits & "-" & day_of_month of it as two digits & "-" & year of it as string) of date(local time zone) of it & "_" & (two digit hour of it as string & two digit minute of it as string) of time (local time zone) of it) of now) & "_Analyzer_Log.txt"}" + + // --- Create combine script --- + delete __createfile + delete bfCombineFiles.bat + delete "{parameter "fillDBPerfLogsAnalysisScriptsFolder" & "\bfCombineFiles.bat"}" + + createfile until _END_ +@echo off +setlocal enabledelayedexpansion + +set "inputFolder={parameter "fillDBPerfLogsFolder"}" +set "outputFile={parameter "fillDBPerfLogsFullNameCombined"}" + +cd /d "%inputFolder%" + +if exist "%outputFile%" del "%outputFile%" + +:: Build a list of sorted files by numeric name +for /f "tokens=* delims=" %%F in ('dir /b /a:-d ^| sort') do ( + echo Adding %%F + type "%%F" >> "%outputFile%" + echo. >> "%outputFile%" +) + +endlocal +_END_ + + move __createfile "{parameter "fillDBPerfLogsAnalysisScriptsFolder" & "\bfCombineFiles.bat"}" + + // Run combine script + waithidden cmd.exe /C "{parameter "fillDBPerfLogsAnalysisScriptsFolder" & "\bfCombineFiles.bat"}" + + // Create analyzer script (combined) + delete __createfile + delete bfRunFillDBPerfLogAnalyzer.bat + + createfile until _END_ +cd "{parameter "fillDBPerfLogsAnalysisFolder"}" +"{parameter "fillDBPerfLogsAnalysisToolsFolder" & "\MXFillDBPerf.exe"}" --input "{parameter "fillDBPerfLogsFullNameCombined"}" --format "{parameter "filldbPerfOutputType" of action}" --stats --healthcheck > "{parameter "fillDBPerfLogsAnalysisFullName"}" +_END_ + + move __createfile "{parameter "fillDBPerfLogsAnalysisScriptsFolder" & "\bfRunFillDBPerfLogAnalyzer.bat"}" + + // Run analyzer script (combined) + waithidden cmd.exe /C "{parameter "fillDBPerfLogsAnalysisScriptsFolder" & "\bfRunFillDBPerfLogAnalyzer.bat"}" + + else + +// ---------------------------------------------------------------------------------------------------- +// SINGLE LOG FILE - ANALYZE +// ---------------------------------------------------------------------------------------------------- + + delete __createfile + delete bfRunFillDBPerfLogAnalyzer.bat + + createfile until _END_ +cd "{parameter "fillDBPerfLogsAnalysisFolder"}" +"{parameter "fillDBPerfLogsAnalysisToolsFolder" & "\MXFillDBPerf.exe"}" --input "{parameter "fillDBPerfLogsFullName"}" --format "{parameter "filldbPerfOutputType" of action}" --stats --healthcheck > "{parameter "fillDBPerfLogsAnalysisFullName"}" +_END_ + + move __createfile "{parameter "fillDBPerfLogsAnalysisScriptsFolder" & "\bfRunFillDBPerfLogAnalyzer.bat"}" + + waithidden cmd.exe /C "{parameter "fillDBPerfLogsAnalysisScriptsFolder" & "\bfRunFillDBPerfLogAnalyzer.bat"}" + + endif + +else + +// ---------------------------------------------------------------------------------------------------- +// NO LOG FILE FOUND +// ---------------------------------------------------------------------------------------------------- + + waithidden cmd.exe /C echo Exit Code 1 --> No matching FillDB performance log was present. The file was "{parameter "fillDBPerfLogsFullName"}". > "{parameter "fillDBPerfLogsAnalysisFolder" & "\_ANALYZER_ERROR_1.txt"}" + +endif]]> + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/BigFix Tuning_ Configure TCP_IP_ Exclude BES WebUI API Port from Ephemeral Port Ranges (27007).bes b/Sites/BigFix Management/Fixlets/Fixlets/BigFix Tuning_ Configure TCP_IP_ Exclude BES WebUI API Port from Ephemeral Port Ranges (27007).bes new file mode 100644 index 000000000..b0e09429b --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/BigFix Tuning_ Configure TCP_IP_ Exclude BES WebUI API Port from Ephemeral Port Ranges (27007).bes @@ -0,0 +1,95 @@ + + + + + BigFix Tuning: Configure TCP/IP: Exclude BES WebUI API Port from Ephemeral Port Ranges + Excludes the BigFix WebUI API Port 52315 from being used by Ephemeral Port Ranges

+

https://forum.bigfix.com/t/problem-fix-with-bes-support-765-reserve-port-for-bes-client-for-dns-servers-windows-2008-2008-r2-windows-2012-2012-r2-windows-2016/23004

+

https://support.microsoft.com/en-us/topic/you-cannot-exclude-ports-by-using-the-reservedports-registry-key-in-windows-server-2008-or-in-windows-server-2008-r2-a68373fd-9f64-4bde-9d68-c5eded74ea35

+

Windows stores Port Range Exclusions depending upon protocol:

+

IPv4/IPv6 TCP: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Nsi\{eb004a03-9b1a-11d4-9123-0050047759bc}\29

+

IPv4/IPv6 UDP: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Nsi\{eb004a02-9b1a-11d4-9123-0050047759bc}\5

+

Interestingly, there are separate netsh commands for ipv4 and ipv6, but the same keys are updated - a given tcp or udp exclusion apply to both ipv4 and to ipv6.

+

WIthin each Key, range exclusions are stored in REG_BINARY values.

+

The Name of the value indicates the starting port (first four bytes of name) and the number of excluded ports (next four bytes of the name, in byte-swapped order).

+

For example, the value named "cc570100" first 4 bytes is cc57, hexadecimal for integer 52311.  The next four bytes are in byte-swapped order and should be read as 0001, or 1 port reserved.

+

The value of the value, "1200ffff" indicates this is a "range" exclusion type.

+

Useful sample queries:

+

TCP exclusions in Registry:

+

q: ((hexadecimal integer (first 4 of it), (hexadecimal integer (it)) of concatenation of characters (6;7;4;5) of it) of names of it, it) of values of keys "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Nsi\{eb004a03-9b1a-11d4-9123-0050047759bc}\29" of registry

+

UDP exclusions in Registry:

+

q: ((hexadecimal integer (first 4 of it), (hexadecimal integer (it)) of concatenation of characters (6;7;4;5) of it) of names of it, it) of values of keys "HKLM\System\CurrentControlSet\Control\Nsi\{eb004a02-9b1a-11d4-9123-0050047759bc}\5" of registry

+

 

+

Sample Validation (command-line):

+
+

C:\>netsh int ipv4 show excludedportrange tcp

+

Protocol tcp Port Exclusion Ranges

+

Start Port    End Port
----------    --------
     52315       52315     *

+

* - Administered port exclusions.

 +

 

]]> + windows of operating system AND (if exists property "in proxy agent context" then not in proxy agent context else true) + exists main gather service /* applicable only to bes root server */ + = 52315)]]> + HCL Lab Services + 2019-02-02 + + x-bfsync-source-actionsite + http://BES-Dev-Root:52311/cgi-bin/bfgather.exe/actionsite + + + x-bfsync-source-modification-time + Tue, 15 Nov 2022 16:17:04 +0000 + + + x-bfsync-source-id + 87 + + + x-fixlet-modification-time + Fri, 04 Aug 2023 15:31:10 +0000 + + BESC + + + Click + here + to deploy this action. + + = (parameter "portnumber_int" as integer) )} + // Name of the value that should be applied in the Registry - "cc5b0100" for the default port 52315 and range of 1 port to exclude + regset "[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Nsi\{{eb004a03-9b1a-11d4-9123-0050047759bc}\29]" "{parameter "valuename"}"=hex:12,00,ff,ff + action requires restart "bes_webui_tcp_port_exclusion" +endif + +]]> + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/CentOS Firewall is Blocking BES Traffic - BES Client (3984).bes b/Sites/BigFix Management/Fixlets/Fixlets/CentOS Firewall is Blocking BES Traffic - BES Client (3984).bes new file mode 100644 index 000000000..1fdfea4f2 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/CentOS Firewall is Blocking BES Traffic - BES Client (3984).bes @@ -0,0 +1,96 @@ + + + + + CentOS Firewall is Blocking BES Traffic - BES Client + + + + +

The listed computers have iptables enabled and are not configured to allow inbound UDP traffic on the port used by BES (BES uses port 52311 by default).

+

The BES Server and BES Relays send UDP packets to the BES Clients to notify them that there is new information available such as new Fixlet messages, actions, and computer refreshes. BES Clients on relevant computers will not receive UDP notification packets and therefore will not see new actions or new Fixlet messages until they gather the new actionsite, which is by default, once a day. After configuring iptables to allow inbound UDP traffic on the BES Listen Port, BES Clients will resume normal communication with the BES Server and BES Relays.

+

Note: After this action is applied, affected BES Clients will not report until they have performed their standard once-per-day gather or until the BES Client is restarted.

+

Note: The iptables firewall configuration is modified by inserting a new rule into the first position in the chain. Rules added after this fixlet is applied which try to take the first position in the firewall rules chain can override the rule added by this fixlet.

+

Important Note: IPTables on systems running SELinux may fail to restart after running this fixlet.

]]> + (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) + = "6"]]> + = "8.0") then (unix of it) else ((it does not start with "Win" AND it does not start with "Mac OS X") of name of it)) of operating system]]> + exists file "/var/lock/subsys/iptables" AND exists file "/proc/net/ip_tables_names" + = "7.2"]]> + exists match (regex "Linux CentOS (3|4|5|6)") of name of operating system + + Support + BigFix + <Unspecified> + 2009-06-16 + Important + + x-fixlet-first-propagation + Wed, 17 Jun 2009 18:18:35 +0000 + + + x-fixlet-domain_attributes + BES Warn Important + + + x-fixlet-modification-time + Wed, 25 Feb 2015 15:06:51 +0000 + + BESC + + + Click + here + to leave iptables enabled, but also allow incoming traffic on the port reserved for BES. + + + + + + Click + here + to disable iptables firewall. + + + + + + Click + here + for information on how to make this action a "policy" action that will automatically open the BES port on any computer that has this Fixlet message relevant. + + http://support.bigfix.com/cgi-bin/kbdirect.pl?id=113 + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Change Tiny Core Linux Relay Password (26986).bes b/Sites/BigFix Management/Fixlets/Fixlets/Change Tiny Core Linux Relay Password (26986).bes new file mode 100644 index 000000000..92b094146 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Change Tiny Core Linux Relay Password (26986).bes @@ -0,0 +1,59 @@ + + + + + Change Tiny Core Linux Relay Password +

Important Notes

  • You must enter a password in order to take an action
  • Because of the way secure parameters work, you cannot use this task in a baseline, target an action dynamically by property (e.g., automatic groups), use add additional actions.

 

]]> + (exists relay service) + (name of operating system contains "Linux TinyCore") + + Internal + 2022-04-07 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + delete __createfile + +createfile until endofscript + +#!/bin/sh +echo 'tc:{parameter "secret" of action}' | chpasswd -c sha512 + +sudo filetool.sh -b + +endofscript + +delete /var/opt/BESClient/chpasswdtc.sh +move __createfile /var/opt/BESClient/chpasswdtc.sh +wait chmod 750 /var/opt/BESClient/chpasswdtc.sh +wait /bin/sh /var/opt/BESClient/chpasswdtc.sh + +delete "/var/opt/BESClient/chpasswdtc.sh" + +if {not exists (lines whose (it starts with "tc:$6") of files "/etc/shadow")} + +exit 1 + +endif + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Cleanup Outdated SHA1 Files (25525).bes b/Sites/BigFix Management/Fixlets/Fixlets/Cleanup Outdated SHA1 Files (25525).bes new file mode 100644 index 000000000..edfec679e --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Cleanup Outdated SHA1 Files (25525).bes @@ -0,0 +1,40 @@ + + + + + Cleanup Outdated SHA1 Files + This fixlet will remove sha1 files (older than 10 days) to free up disk space. + windows of operating system + 1024]]> + + ronfrades@gmail.com + 2018-02-23 + + x-fixlet-modification-time + Thu, 14 Jun 2018 10:28:41 +0000 + + BESC + + + Click + here + to deploy this action. + + 10 * day) of folder (parameter "sha1folder")} +move __appendfile delsha1.cmd +waithidden cmd /c delsha1.cmd]]> + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Cleanup Relay ActiveDownloads folder (26937).bes b/Sites/BigFix Management/Fixlets/Fixlets/Cleanup Relay ActiveDownloads folder (26937).bes new file mode 100644 index 000000000..0ca4cb59a --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Cleanup Relay ActiveDownloads folder (26937).bes @@ -0,0 +1,40 @@ + + + + + Cleanup Relay ActiveDownloads folder + bfmirror\downloads\ActiveDownloads of the relay client. ]]> + exists relay service + 15 * day) of maxima of (creation times of it; modification times of it) of it) of folder "C:\Program Files (x86)\BigFix Enterprise\BES Relay\wwwrootbes\bfmirror\downloads\ActiveDownloads"]]> + Internal + 2021-08-11 + + x-fixlet-modification-time + Fri, 10 Jun 2022 19:25:55 +0000 + + BESC + + + Click + here + to deploy this action. + + 15 * day) of maxima of (creation times of it; modification times of it) of it) of folder "C:\Program Files (x86)\BigFix Enterprise\BES Relay\wwwrootbes\bfmirror\downloads\ActiveDownloads"} +EOF + +delete delfiles.cmd +copy __createfile delfiles.cmd +waithidden delfiles.cmd]]> + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Cleanup old console caches - Windows (24871).bes b/Sites/BigFix Management/Fixlets/Fixlets/Cleanup old console caches - Windows (24871).bes new file mode 100644 index 000000000..5d7c6a087 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Cleanup old console caches - Windows (24871).bes @@ -0,0 +1,44 @@ + + + + + Cleanup old console caches - Windows + + windows of operating system + 15*day) of modification times of folders of folders "AppData\Local\BigFix\Enterprise Console" of folders of folders "C:\Users"]]> + Internal + jgstew + 2018-01-02 + + x-fixlet-modification-time + Wed, 03 Jan 2018 05:44:27 +0000 + + BESC + + + Click + here + to deploy this action. + + 30*day) of modification times of folders of folders "AppData\Local\BigFix\Enterprise Console" of folders of folders "C:\Users" }" + +// This will delete only 1 old folder even though there could be many. It is designed to run over and over until all folders have been deleted. +folder delete "{ (preceding text of first ";;GetOnlyOne;;" of it | it) of concatenations ";;GetOnlyOne;;" of pathnames of folders whose(exists (now - it) whose(it > 30*day) of modification times of it) of folders "AppData\Local\BigFix\Enterprise Console" of folders of folders "C:\Users" }" + +// 1 is a success, 0 is a failure +exit { (it - number of (now - it) whose(it > 30*day) of modification times of folders of folders "AppData\Local\BigFix\Enterprise Console" of folders of folders "C:\Users") of (it as integer) of parameter "numToDelete" } +]]> + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Clear BES Local Download Caches (234).bes b/Sites/BigFix Management/Fixlets/Fixlets/Clear BES Local Download Caches (234).bes new file mode 100644 index 000000000..2c6fe14b7 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Clear BES Local Download Caches (234).bes @@ -0,0 +1,55 @@ + + + + + Clear BES Local Download Caches +

When a client's download cache directory becomes too large, it prevents other actions from being run. Clearing these directories will allow actions to run correctly.

This task will clear files in these two directories:

__BESData\__Global\__Cache\Downloads
__BESData\__Global\__Cache\Utilities

Note: Do not keep reapplying this task or the download cache will keep on clearing, preventing other actions that require the download cache from actually running.

+]]> + (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) + = "5.1"]]> + (exists files of folder "__BESData\__Global\__Cache\Downloads" of parent folder of regapp "Besclient.exe") or (exists files of folder "__BESData\__Global\__Cache\Utilities" of parent folder of regapp "Besclient.exe") + BES Client Setting + BigFix + <Unspecified> + 2026-09-17 + <Unspecified> + + x-fixlet-domain_attributes + BES Component Client + + + x-fixlet-modification-time + Sat, 12 May 2012 00:55:27 +0000 + + + x-fixlet-first-propagation + Fri, 17 Jul 2009 18:59:46 +0000 + + BESC + + + Click + here + to clear BES Local download caches on clients. + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - BigFix Power Tracking - Enable Inspectors - Windows (23440).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - BigFix Power Tracking - Enable Inspectors - Windows (23440).bes new file mode 100644 index 000000000..21199a241 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - BigFix Power Tracking - Enable Inspectors - Windows (23440).bes @@ -0,0 +1,35 @@ + + + + + Config - BigFix Power Tracking - Enable Inspectors - Windows + Enables the built-in power tracking inspectors for the BigFix client.

+

For general information or to report issues with C3 Power Management content please visit GitHub here: https://github.com/strawgate/C3-Power-Management

]]> + not exists values whose (it = "1") of settings "_BESClient_PowerHistory_EnablePowerHistory" of client + Internal + 2017-02-01 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + setting "_BESClient_PowerHistory_EnablePowerHistory"="1" on "{now}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Active Directory Refresh - 20 Minutes (20542).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Active Directory Refresh - 20 Minutes (20542).bes new file mode 100644 index 000000000..5ceef50f6 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Active Directory Refresh - 20 Minutes (20542).bes @@ -0,0 +1,36 @@ + + + + + Config - Client Setting - Active Directory Refresh - 20 Minutes + This fixlet will change the frequency by which the client queries active directory for new information.

+

For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + (not exists setting "_BESClient_Inspector_ActiveDirectory_Refresh_Seconds" of client) or ((exists setting "_BESClient_Inspector_ActiveDirectory_Refresh_Seconds" of client) and not (value of setting "_BESClient_Inspector_ActiveDirectory_Refresh_Seconds" of client = "1200")) + Internal + 2014-04-12 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + +setting "_BESClient_Inspector_ActiveDirectory_Refresh_Seconds"="1200" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Active Directory Refresh - 240 Minutes (21061).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Active Directory Refresh - 240 Minutes (21061).bes new file mode 100644 index 000000000..c68ae1d57 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Active Directory Refresh - 240 Minutes (21061).bes @@ -0,0 +1,36 @@ + + + + + Config - Client Setting - Active Directory Refresh - 240 Minutes + This fixlet will change the frequency by which the client queries active directory for new information.

+

For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + (not exists setting "_BESClient_Inspector_ActiveDirectory_Refresh_Seconds" of client) or ((exists setting "_BESClient_Inspector_ActiveDirectory_Refresh_Seconds" of client) and not (value of setting "_BESClient_Inspector_ActiveDirectory_Refresh_Seconds" of client = "14400")) + Internal + 2014-04-12 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + +setting "_BESClient_Inspector_ActiveDirectory_Refresh_Seconds"="14400" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Active Directory Refresh - 60 Minutes (20543).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Active Directory Refresh - 60 Minutes (20543).bes new file mode 100644 index 000000000..422474910 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Active Directory Refresh - 60 Minutes (20543).bes @@ -0,0 +1,36 @@ + + + + + Config - Client Setting - Active Directory Refresh - 60 Minutes + This fixlet will change the frequency by which the client queries active directory for new information.

+

For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + (not exists setting "_BESClient_Inspector_ActiveDirectory_Refresh_Seconds" of client) or ((exists setting "_BESClient_Inspector_ActiveDirectory_Refresh_Seconds" of client) and not (value of setting "_BESClient_Inspector_ActiveDirectory_Refresh_Seconds" of client = "3600")) + Internal + 2014-04-12 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + +setting "_BESClient_Inspector_ActiveDirectory_Refresh_Seconds"="3600" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - CPU Usage - 1% (20742).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - CPU Usage - 1% (20742).bes new file mode 100644 index 000000000..c6d8a3ef2 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - CPU Usage - 1% (20742).bes @@ -0,0 +1,38 @@ + + + + + Config - Client Setting - CPU Usage - 1% + This fixlet will set the client workidle to 5/500 setting the CPU usage to about 1% of one CPU core

+

For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + (value of setting "_BESClient_Resource_WorkIdle" of client != "5") | true or (value of setting "_BESClient_Resource_SleepIdle" of client != "495") | true + Internal + 2016-05-30 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + +setting "_BESClient_Resource_WorkIdle"="5" on "{parameter "action issue date" of action}" for client + +setting "_BESClient_Resource_SleepIdle"="495" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - CPU Usage - 10% (20743).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - CPU Usage - 10% (20743).bes new file mode 100644 index 000000000..f2fd0330b --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - CPU Usage - 10% (20743).bes @@ -0,0 +1,38 @@ + + + + + Config - Client Setting - CPU Usage - 10% + This fixlet will set the client workidle to 50/500 setting the CPU usage to about 10% of one CPU core

+

For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + (value of setting "_BESClient_Resource_WorkIdle" of client != "50") | true or (value of setting "_BESClient_Resource_SleepIdle" of client != "450") | true + Internal + 2016-05-30 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + +setting "_BESClient_Resource_WorkIdle"="50" on "{parameter "action issue date" of action}" for client + +setting "_BESClient_Resource_SleepIdle"="450" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - CPU Usage - 2% (20744).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - CPU Usage - 2% (20744).bes new file mode 100644 index 000000000..4a9fed842 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - CPU Usage - 2% (20744).bes @@ -0,0 +1,38 @@ + + + + + Config - Client Setting - CPU Usage - 2% + This fixlet will set the client workidle to 10/500 setting the CPU usage to about % of one CPU core

+

For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + (value of setting "_BESClient_Resource_WorkIdle" of client != "10") | true or (value of setting "_BESClient_Resource_SleepIdle" of client != "490") | true + Internal + 2016-05-30 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + +setting "_BESClient_Resource_WorkIdle"="10" on "{parameter "action issue date" of action}" for client + +setting "_BESClient_Resource_SleepIdle"="490" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - CPU Usage - 25% (21718).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - CPU Usage - 25% (21718).bes new file mode 100644 index 000000000..2ba5dd563 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - CPU Usage - 25% (21718).bes @@ -0,0 +1,38 @@ + + + + + Config - Client Setting - CPU Usage - 25% + This fixlet will set the client workidle to 125/500 setting the CPU usage to about 25% of one CPU core

+

For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + (value of setting "_BESClient_Resource_WorkIdle" of client != "125") | true or (value of setting "_BESClient_Resource_SleepIdle" of client != "375") | true + Internal + 2016-05-30 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + +setting "_BESClient_Resource_WorkIdle"="125" on "{parameter "action issue date" of action}" for client + +setting "_BESClient_Resource_SleepIdle"="375" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - CPU Usage - 25% for 12 Hours then 2% (21708).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - CPU Usage - 25% for 12 Hours then 2% (21708).bes new file mode 100644 index 000000000..cb08213f6 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - CPU Usage - 25% for 12 Hours then 2% (21708).bes @@ -0,0 +1,42 @@ + + + + + Config - Client Setting - CPU Usage - 25% for 12 Hours then 2% + This fixlet will set the client workidle to 125/500 setting the CPU usage to about 25% of one CPU core for 12 hours. After twelve hours it will become relevant again and switch the CPU to the default 2% of one CPU core.

+

This Fixlet is Action Settings Locked to only apply three times.

+

For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + now - 12*hour) then ((value of setting "_BESClient_Resource_WorkIdle" of client != "125") | true or (value of setting "_BESClient_Resource_SleepIdle" of client != "375") | true) else ((value of setting "_BESClient_Resource_WorkIdle" of client = "125") | true or (value of setting "_BESClient_Resource_SleepIdle" of client = "375") | true)]]> + Internal + 2016-05-30 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + now - 12*hour} + setting "_BESClient_Resource_WorkIdle"="125" on "{parameter "action issue date" of action}" for client + setting "_BESClient_Resource_SleepIdle"="375" on "{parameter "action issue date" of action}" for client +else + setting "_BESClient_Resource_WorkIdle"="10" on "{parameter "action issue date" of action}" for client + setting "_BESClient_Resource_SleepIdle"="490" on "{parameter "action issue date" of action}" for client +endif]]> + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - CPU Usage - 25% for 12 Hours then 5% (21717).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - CPU Usage - 25% for 12 Hours then 5% (21717).bes new file mode 100644 index 000000000..6b68cc9bc --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - CPU Usage - 25% for 12 Hours then 5% (21717).bes @@ -0,0 +1,42 @@ + + + + + Config - Client Setting - CPU Usage - 25% for 12 Hours then 5% + This fixlet will set the client workidle to 125/500 setting the CPU usage to about 25% of one CPU core for 12 hours. After twelve hours it will become relevant again and switch the CPU to the default 5% of one CPU core.

+

This Fixlet is Action Settings Locked to only apply three times.

+

For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + now - 12*hour) then ((value of setting "_BESClient_Resource_WorkIdle" of client != "125") | true or (value of setting "_BESClient_Resource_SleepIdle" of client != "375") | true) else ((value of setting "_BESClient_Resource_WorkIdle" of client = "125") | true or (value of setting "_BESClient_Resource_SleepIdle" of client = "375") | true)]]> + Internal + 2016-05-30 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + now - 12*hour} + setting "_BESClient_Resource_WorkIdle"="125" on "{parameter "action issue date" of action}" for client + setting "_BESClient_Resource_SleepIdle"="375" on "{parameter "action issue date" of action}" for client +else + setting "_BESClient_Resource_WorkIdle"="25" on "{parameter "action issue date" of action}" for client + setting "_BESClient_Resource_SleepIdle"="475" on "{parameter "action issue date" of action}" for client +endif]]> + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - CPU Usage - 5% (20745).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - CPU Usage - 5% (20745).bes new file mode 100644 index 000000000..08b3cec1e --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - CPU Usage - 5% (20745).bes @@ -0,0 +1,38 @@ + + + + + Config - Client Setting - CPU Usage - 5% + This fixlet will set the client workidle to 25/500 setting the CPU usage to about 5% of one CPU core

+

For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + (value of setting "_BESClient_Resource_WorkIdle" of client != "25") | true or (value of setting "_BESClient_Resource_SleepIdle" of client != "475") | true + Internal + 2016-05-30 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + +setting "_BESClient_Resource_WorkIdle"="25" on "{parameter "action issue date" of action}" for client + +setting "_BESClient_Resource_SleepIdle"="475" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Command Polling - 12 Hours (21062).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Command Polling - 12 Hours (21062).bes new file mode 100644 index 000000000..bca88053b --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Command Polling - 12 Hours (21062).bes @@ -0,0 +1,35 @@ + + + + + Config - Client Setting - Command Polling - 12 Hours +
This task configures Clients to poll their parent Relay or Server once an hour for UDP commands they may have missed (BigFix 6.0+).

Note: The minimum value for the polling interval is 1 minute and the maximum is 2 days.

Note:  Setting the polling interval to less than 20 minutes may cause performances issues and is not recommended. ]]> + not exists (settings "_BESClient_Comm_CommandPollIntervalSeconds" of client) whose (value of it as integer = 43200) + Internal + 2016-07-19 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + +setting "_BESClient_Comm_CommandPollIntervalSeconds"="43200" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Command Polling - 15 Minutes (21709).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Command Polling - 15 Minutes (21709).bes new file mode 100644 index 000000000..915dd5205 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Command Polling - 15 Minutes (21709).bes @@ -0,0 +1,35 @@ + + + + + Config - Client Setting - Command Polling - 15 Minutes +
This task configures Clients to poll their parent Relay or Server once an hour for UDP commands they may have missed (BigFix 6.0+).

Note: The minimum value for the polling interval is 1 minute and the maximum is 2 days.

Note:  Setting the polling interval to less than 20 minutes may cause performances issues and is not recommended. ]]> + not exists (settings "_BESClient_Comm_CommandPollIntervalSeconds" of client) whose (value of it as integer = 900) + Internal + 2016-07-19 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + +setting "_BESClient_Comm_CommandPollIntervalSeconds"="900" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Command Polling - 30 Minutes (21063).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Command Polling - 30 Minutes (21063).bes new file mode 100644 index 000000000..0683070b1 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Command Polling - 30 Minutes (21063).bes @@ -0,0 +1,35 @@ + + + + + Config - Client Setting - Command Polling - 30 Minutes +
This task configures Clients to poll their parent Relay or Server once an hour for UDP commands they may have missed (BigFix 6.0+).

Note: The minimum value for the polling interval is 1 minute and the maximum is 2 days.

Note:  Setting the polling interval to less than 20 minutes may cause performances issues and is not recommended. ]]> + not exists (settings "_BESClient_Comm_CommandPollIntervalSeconds" of client) whose (value of it as integer = 1800) + Internal + 2016-07-19 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + +setting "_BESClient_Comm_CommandPollIntervalSeconds"="1800" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Command Polling - 4 Hours (21064).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Command Polling - 4 Hours (21064).bes new file mode 100644 index 000000000..9d58aa1ed --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Command Polling - 4 Hours (21064).bes @@ -0,0 +1,35 @@ + + + + + Config - Client Setting - Command Polling - 4 Hours +
This task configures Clients to poll their parent Relay or Server once an hour for UDP commands they may have missed (BigFix 6.0+).

Note: The minimum value for the polling interval is 1 minute and the maximum is 2 days.

Note:  Setting the polling interval to less than 20 minutes may cause performances issues and is not recommended. ]]> + not exists (settings "_BESClient_Comm_CommandPollIntervalSeconds" of client) whose (value of it as integer = 14400) + Internal + 2016-07-19 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + +setting "_BESClient_Comm_CommandPollIntervalSeconds"="14400" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Command Polling - 90 Minutes (21065).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Command Polling - 90 Minutes (21065).bes new file mode 100644 index 000000000..df25eaad1 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Command Polling - 90 Minutes (21065).bes @@ -0,0 +1,35 @@ + + + + + Config - Client Setting - Command Polling - 90 Minutes +
This task configures Clients to poll their parent Relay or Server once an hour for UDP commands they may have missed (BigFix 6.0+).

Note: The minimum value for the polling interval is 1 minute and the maximum is 2 days.

Note:  Setting the polling interval to less than 20 minutes may cause performances issues and is not recommended. ]]> + not exists (settings "_BESClient_Comm_CommandPollIntervalSeconds" of client) whose (value of it as integer = 5400) + Internal + 2016-07-19 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + +setting "_BESClient_Comm_CommandPollIntervalSeconds"="5400" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Command Polling - Enable (21066).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Command Polling - Enable (21066).bes new file mode 100644 index 000000000..89932e320 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Command Polling - Enable (21066).bes @@ -0,0 +1,35 @@ + + + + + Config - Client Setting - Command Polling - Enable +
This task configures Clients to poll their parent Relay or Server once an hour for UDP commands they may have missed (BigFix 6.0+).

Note: The minimum value for the polling interval is 1 minute and the maximum is 2 days.

Note:  Setting the polling interval to less than 20 minutes may cause performances issues and is not recommended. ]]> + not exists (settings "_BESClient_Comm_CommandPollEnable" of client) whose (value of it as integer = 1) + Internal + 2016-07-19 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + +setting "_BESClient_Comm_CommandPollEnable"="1" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Download Retention Limit - 10GB (20544).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Download Retention Limit - 10GB (20544).bes new file mode 100644 index 000000000..eb4514ddd --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Download Retention Limit - 10GB (20544).bes @@ -0,0 +1,36 @@ + + + + + Config - Client Setting - Download Retention Limit - 10GB + This fixlet will change the client download retention limit

+

For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + not exists (setting "_BESClient_Download_DownloadsCacheLimitMB" of client) whose (value of it as integer = 10000) + Configuration + Internal + jgs194 + 2015-01-12 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + setting "_BESClient_Download_DownloadsCacheLimitMB"="10000" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Download Retention Limit - 16GB (20261).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Download Retention Limit - 16GB (20261).bes new file mode 100644 index 000000000..2cbb2428a --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Download Retention Limit - 16GB (20261).bes @@ -0,0 +1,47 @@ + + + + + Config - Client Setting - Download Retention Limit - 16GB + This fixlet will change the client download retention limit

]]> + not exists (setting "_BESClient_Download_DownloadsCacheLimitMB" of client) whose (value of it as integer = 16000) + Configuration + Internal + jgs194 + 2015-01-12 + + bigfixme-added-time + Mon, 12 Jan 2015 09:59:25 GMT + + + bigfixme-modification-time + Mon, 12 Jan 2015 09:59:25 GMT + + + bigfixme-keywords + + + + x-fixlet-modification-time + Sun, 24 Apr 2016 00:44:14 +0000 + + BESC + + + Click + here + to deploy this action. + + setting "_BESClient_Download_DownloadsCacheLimitMB"="16000" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Download Retry - 1 Minute (20262).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Download Retry - 1 Minute (20262).bes new file mode 100644 index 000000000..6dc2a5ce8 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Download Retry - 1 Minute (20262).bes @@ -0,0 +1,47 @@ + + + + + Config - Client Setting - Download Retry - 1 Minute + This fixlet will change the retry timer for downloads on the client + not exists (setting "_BESClient_Download_RetryMinutes" of client) whose (value of it as integer = 1) + Configuration + Internal + jgs194 + 2015-01-12 + + bigfixme-added-time + Mon, 12 Jan 2015 09:59:25 GMT + + + bigfixme-modification-time + Mon, 12 Jan 2015 09:59:25 GMT + + + bigfixme-keywords + + + + x-fixlet-modification-time + Sun, 24 Apr 2016 00:43:20 +0000 + + BESC + + + Click + here + to deploy this action. + + setting "_BESClient_Download_RetryMinutes"="1" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Download Retry - 5 Minutes (20545).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Download Retry - 5 Minutes (20545).bes new file mode 100644 index 000000000..415bd82b5 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Download Retry - 5 Minutes (20545).bes @@ -0,0 +1,36 @@ + + + + + Config - Client Setting - Download Retry - 5 Minutes + This fixlet will change the retry timer for downloads on the client

+

For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + not exists (setting "_BESClient_Download_RetryMinutes" of client) whose (value of it as integer = 5) + Configuration + Internal + jgs194 + 2015-01-12 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + setting "_BESClient_Download_RetryMinutes"="5" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Failover Relay - relay.domain.tld (22661).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Failover Relay - relay.domain.tld (22661).bes new file mode 100644 index 000000000..32f9cd162 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Failover Relay - relay.domain.tld (22661).bes @@ -0,0 +1,36 @@ + + + + + Config - Client Setting - Failover Relay - relay.domain.tld + For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + not exists (setting "_BESClient_RelaySelect_FailoverRelay" of client) whose (value of it = "http://relay.domain.tld:52311/bfmirror/downloads/") + Internal + 2016-03-30 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + +setting "_BESClient_RelaySelect_FailoverRelay"="http://relay.domain.tld:52311/bfmirror/downloads/" on "{now}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Log Retention - 10 Days (21710).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Log Retention - 10 Days (21710).bes new file mode 100644 index 000000000..003e990ee --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Log Retention - 10 Days (21710).bes @@ -0,0 +1,36 @@ + + + + + Config - Client Setting - Log Retention - 10 Days + This fixlet will change the log retention of the client to 10 days

+

For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + not exists (settings "_BESClient_Log_Days" of client) whose (value of it as integer = 10) + Configuration + Internal + jgs194 + 2015-01-12 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + setting "_BESClient_Log_Days"="10" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Log Retention - 14 Days (20546).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Log Retention - 14 Days (20546).bes new file mode 100644 index 000000000..7a0038fef --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Log Retention - 14 Days (20546).bes @@ -0,0 +1,36 @@ + + + + + Config - Client Setting - Log Retention - 14 Days + This fixlet will change the log retention of the client to 14 days

+

For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + not exists (settings "_BESClient_Log_Days" of client) whose (value of it as integer = 14) + Configuration + Internal + jgs194 + 2015-01-12 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + setting "_BESClient_Log_Days"="14" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Log Retention - 30 Days (20547).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Log Retention - 30 Days (20547).bes new file mode 100644 index 000000000..c2210f314 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Log Retention - 30 Days (20547).bes @@ -0,0 +1,36 @@ + + + + + Config - Client Setting - Log Retention - 30 Days + This fixlet will change the log retention of the client to 30 days

+

For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + not exists (settings "_BESClient_Log_Days" of client) whose (value of it as integer = 30) + Configuration + Internal + jgs194 + 2015-01-12 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + setting "_BESClient_Log_Days"="30" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Minimum Free Disk Space - 20MB (20548).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Minimum Free Disk Space - 20MB (20548).bes new file mode 100644 index 000000000..6eefad310 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Minimum Free Disk Space - 20MB (20548).bes @@ -0,0 +1,44 @@ + + + + + Config - Client Setting - Minimum Free Disk Space - 20MB + This fixlet will change the client minimum free disk space setting

+

For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + not exists (setting "_BESClient_Download_MinimumDiskFreeMB" of client) whose (value of it as integer = 20) + Configuration + Internal + jgs194 + 2015-01-12 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + setting "_BESClient_Download_MinimumDiskFreeMB"="20" on "{parameter "action issue date" of action}" for client + + + + Click + here + to review this task in the bigfix.me Content Database. + + http://bigfix.me/cdb/fixlet/3942 + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Minimum Free Disk Space - 2GB (20267).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Minimum Free Disk Space - 2GB (20267).bes new file mode 100644 index 000000000..7719330b7 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Minimum Free Disk Space - 2GB (20267).bes @@ -0,0 +1,47 @@ + + + + + Config - Client Setting - Minimum Free Disk Space - 2GB + This fixlet will change the default BigFix Client setttings.

]]> + not exists (setting "_BESClient_Download_MinimumDiskFreeMB" of client) whose (value of it as integer = 2000) + Configuration + Internal + jgs194 + 2015-01-12 + + bigfixme-added-time + Mon, 12 Jan 2015 09:59:25 GMT + + + bigfixme-modification-time + Mon, 12 Jan 2015 09:59:25 GMT + + + bigfixme-keywords + + + + x-fixlet-modification-time + Sun, 24 Apr 2016 00:41:39 +0000 + + BESC + + + Click + here + to deploy this action. + + setting "_BESClient_Download_MinimumDiskFreeMB"="2000" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Minimum Report Interval - 15 Seconds (21711).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Minimum Report Interval - 15 Seconds (21711).bes new file mode 100644 index 000000000..669eecef9 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Minimum Report Interval - 15 Seconds (21711).bes @@ -0,0 +1,36 @@ + + + + + Config - Client Setting - Minimum Report Interval - 15 Seconds + This fixlet will change the Minimum Report Interval of the client to 15 seconds

+

For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + not exists (settings "_BESClient_Report_MinimumInterval" of client) whose (value of it as integer = 15) + Configuration + Internal + jgs194 + 2015-01-12 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + setting "_BESClient_Report_MinimumInterval"="15" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Minimum Report Interval - 150 Seconds (21070).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Minimum Report Interval - 150 Seconds (21070).bes new file mode 100644 index 000000000..83c18f376 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Minimum Report Interval - 150 Seconds (21070).bes @@ -0,0 +1,36 @@ + + + + + Config - Client Setting - Minimum Report Interval - 150 Seconds + This fixlet will change the Minimum Report Interval of the client to 150 seconds

+

For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + not exists (settings "_BESClient_Report_MinimumInterval" of client) whose (value of it as integer = 150) + Configuration + Internal + jgs194 + 2015-01-12 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + setting "_BESClient_Report_MinimumInterval"="150" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Minimum Report Interval - 60 Seconds (21071).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Minimum Report Interval - 60 Seconds (21071).bes new file mode 100644 index 000000000..6af1511e3 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Minimum Report Interval - 60 Seconds (21071).bes @@ -0,0 +1,36 @@ + + + + + Config - Client Setting - Minimum Report Interval - 60 Seconds + This fixlet will change the Minimum Report Interval of the client to 60 seconds

+

For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + not exists (settings "_BESClient_Report_MinimumInterval" of client) whose (value of it as integer = 60) + Configuration + Internal + jgs194 + 2015-01-12 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + setting "_BESClient_Report_MinimumInterval"="60" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Normal Download Disk Limit - 16GB (20549).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Normal Download Disk Limit - 16GB (20549).bes new file mode 100644 index 000000000..793d8df9c --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Normal Download Disk Limit - 16GB (20549).bes @@ -0,0 +1,36 @@ + + + + + Config - Client Setting - Normal Download Disk Limit - 16GB + This fixlet will change the client disk limit setting

+

For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + not exists (setting "_BESClient_Download_NormalStageDiskLimitMB" of client) whose (value of it as integer = 16000) + Configuration + Internal + jgs194 + 2015-01-12 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + setting "_BESClient_Download_NormalStageDiskLimitMB"="16000" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Normal Download Disk Limit - 8GB (20550).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Normal Download Disk Limit - 8GB (20550).bes new file mode 100644 index 000000000..e01b2901f --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Normal Download Disk Limit - 8GB (20550).bes @@ -0,0 +1,36 @@ + + + + + Config - Client Setting - Normal Download Disk Limit - 8GB + This fixlet will change the client disk limit setting

+

For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + not exists (setting "_BESClient_Download_NormalStageDiskLimitMB" of client) whose (value of it as integer = 8000) + Configuration + Internal + jgs194 + 2015-01-12 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + setting "_BESClient_Download_NormalStageDiskLimitMB"="8000" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Power History - Enable (23581).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Power History - Enable (23581).bes new file mode 100644 index 000000000..ae935cf17 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Power History - Enable (23581).bes @@ -0,0 +1,35 @@ + + + + + Config - Client Setting - Power History - Enable + Enables the built-in power tracking inspectors for the BigFix client.

+

For general information or to report issues with C3 Power Management content please visit GitHub here: https://github.com/strawgate/C3-Power-Management

]]> + not exists values whose (it = "1") of settings "_BESClient_PowerHistory_EnablePowerHistory" of client + Internal + 2017-02-01 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + setting "_BESClient_PowerHistory_EnablePowerHistory"="1" on "{now}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Precache Download Disk Limit - 8GB (21069).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Precache Download Disk Limit - 8GB (21069).bes new file mode 100644 index 000000000..e01af9e05 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Precache Download Disk Limit - 8GB (21069).bes @@ -0,0 +1,36 @@ + + + + + Config - Client Setting - Precache Download Disk Limit - 8GB + This fixlet will change the client disk limit setting

+

For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + not exists (setting "_BESClient_Download_PreCacheStageDiskLimitMB" of client) whose (value of it as integer = 8000) + Configuration + Internal + jgs194 + 2015-01-12 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + setting "_BESClient_Download_PreCacheStageDiskLimitMB"="8000" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Primary Relay - relay.domain.tld (20551).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Primary Relay - relay.domain.tld (20551).bes new file mode 100644 index 000000000..bc40e1ddf --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Primary Relay - relay.domain.tld (20551).bes @@ -0,0 +1,36 @@ + + + + + Config - Client Setting - Primary Relay - relay.domain.tld + For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + not exists (setting "__RelayServer1" of client) whose (value of it = "http://relay.domain.tld:52311/bfmirror/downloads/") + Internal + 2016-03-30 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + +setting "__RelayServer1"="http://relay.domain.tld:52311/bfmirror/downloads/" on "{now}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Secondary Relay - relay.domain.tld (20552).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Secondary Relay - relay.domain.tld (20552).bes new file mode 100644 index 000000000..6ff9c52bb --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Secondary Relay - relay.domain.tld (20552).bes @@ -0,0 +1,36 @@ + + + + + Config - Client Setting - Secondary Relay - relay.domain.tld + For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + not exists (setting "__RelayServer2" of client) whose (value of it = "http://relay.domain.tld:52311/bfmirror/downloads/") + Internal + 2016-03-30 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + +setting "__RelayServer2"="http://relay.domain.tld:52311/bfmirror/downloads/" on "{now}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Track Fixlet Count - 10 (21739).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Track Fixlet Count - 10 (21739).bes new file mode 100644 index 000000000..9934fde64 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Track Fixlet Count - 10 (21739).bes @@ -0,0 +1,34 @@ + + + + + Config - Client Setting - Track Fixlet Count - 10 + This Fixlet changes the tracking settings on the client to track the 10 slowest fixlet evaluations on the client.

+

For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + exists settings "_BESClient_Resource_TrackingCount" of client + Internal + 2016-09-28 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + setting delete "_BESClient_Resource_TrackingCount" on "{now}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Track Fixlet Count - 100 (22269).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Track Fixlet Count - 100 (22269).bes new file mode 100644 index 000000000..01ab367d6 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Track Fixlet Count - 100 (22269).bes @@ -0,0 +1,34 @@ + + + + + Config - Client Setting - Track Fixlet Count - 100 + This Fixlet changes the tracking settings on the client to track the 100 slowest fixlet evaluations on the client.

+

 For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + not exists settings "_BESClient_Resource_TrackingCount" whose (value of it as string = "100") of client + Internal + 2016-09-28 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + setting "_BESClient_Resource_TrackingCount"="100" on "{now}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Track Fixlet Count - 50 (21759).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Track Fixlet Count - 50 (21759).bes new file mode 100644 index 000000000..d702813a6 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Track Fixlet Count - 50 (21759).bes @@ -0,0 +1,34 @@ + + + + + Config - Client Setting - Track Fixlet Count - 50 + This Fixlet changes the tracking settings on the client to track the 50 slowest fixlet evaluations on the client.

+

 For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + not exists settings "_BESClient_Resource_TrackingCount" whose (value of it as string = "50") of client + Internal + 2016-09-28 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + setting "_BESClient_Resource_TrackingCount"="50" on "{now}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Track Fixlet Time Span - 1 Day (21760).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Track Fixlet Time Span - 1 Day (21760).bes new file mode 100644 index 000000000..895bc13b0 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Track Fixlet Time Span - 1 Day (21760).bes @@ -0,0 +1,34 @@ + + + + + Config - Client Setting - Track Fixlet Time Span - 1 Day + This Fixlet changes the tracking settings on the client to track fixlet evaluations on the client for one day.

+

For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + not exists settings "_BESClient_Resource_TrackingCycleSeconds" whose (value of it as string = "86400") of client + Internal + 2016-09-28 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + setting "_BESClient_Resource_TrackingCycleSeconds"="86400" on "{now}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Track Fixlet Time Span - Since Client Start (21743).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Track Fixlet Time Span - Since Client Start (21743).bes new file mode 100644 index 000000000..d70d3dc81 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Client Setting - Track Fixlet Time Span - Since Client Start (21743).bes @@ -0,0 +1,34 @@ + + + + + Config - Client Setting - Track Fixlet Time Span - Since Client Start + This Fixlet changes the tracking settings on the client to track fixlet evaluations on the client since startup.

+

For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + exists settings "_BESClient_Resource_TrackingCycleSeconds" of client + Internal + 2016-09-28 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + setting delete "_BESClient_Resource_TrackingCycleSeconds" on "{now}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Relay Setting - Cache Download Disk Limit - 120GB (20553).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Relay Setting - Cache Download Disk Limit - 120GB (20553).bes new file mode 100644 index 000000000..82688aa28 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Relay Setting - Cache Download Disk Limit - 120GB (20553).bes @@ -0,0 +1,37 @@ + + + + + Config - Relay Setting - Cache Download Disk Limit - 120GB + For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + (not exists setting "_BESGather_Download_CacheLimitMB" of client) or ((exists setting "_BESGather_Download_CacheLimitMB" of client) and not (value of setting "_BESGather_Download_CacheLimitMB" of client = "122880")) + = "6.0.0.0") AND (exists true whose (if true then (exists (if exists relay service then "Yes - " & state of service "BESRelay" else if exists main gather service then "BES Root Server" else "") whose (it as string as lowercase contains "Yes" as lowercase)) else false)))]]> + Internal + 2014-04-12 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + +setting "_BESGather_Download_CacheLimitMB"="122880" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Config - Relay Setting - Cache Download Disk Limit - 60GB (20554).bes b/Sites/BigFix Management/Fixlets/Fixlets/Config - Relay Setting - Cache Download Disk Limit - 60GB (20554).bes new file mode 100644 index 000000000..fffffd074 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Config - Relay Setting - Cache Download Disk Limit - 60GB (20554).bes @@ -0,0 +1,37 @@ + + + + + Config - Relay Setting - Cache Download Disk Limit - 60GB + For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + (not exists setting "_BESGather_Download_CacheLimitMB" of client) or ((exists setting "_BESGather_Download_CacheLimitMB" of client) and not (value of setting "_BESGather_Download_CacheLimitMB" of client = "61680")) + exists main gather service or exists relay service + Internal + 2014-04-12 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + +setting "_BESGather_Download_CacheLimitMB"="61680" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Configuration_ BES Client - Automatically enable Command Polling - Universal (3798).bes b/Sites/BigFix Management/Fixlets/Fixlets/Configuration_ BES Client - Automatically enable Command Polling - Universal (3798).bes new file mode 100644 index 000000000..ca41ae05d --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Configuration_ BES Client - Automatically enable Command Polling - Universal (3798).bes @@ -0,0 +1,43 @@ + + + + + Configuration: BES Client - Automatically enable Command Polling - Universal + Enable command polling on clients that are not recieving UDP commands.

+

 

]]> + = "8.2"]]> + = value of it as integer) of client))]]> + (now - it)) of client]]> + + Software Sharing + Internal + jgstew + 2014-06-27 + + x-fixlet-modification-time + Fri, 27 Jun 2014 20:39:26 +0000 + + BESC + + + Click + here + to deploy this action. + + +setting "_BESClient_Comm_CommandPollEnable"="1" on "{parameter "action issue date" of action}" for client +setting "_BESClient_Comm_CommandPollIntervalSeconds"="3600" on "{parameter "action issue date" of action}" for client + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Configuration_ BES Client - Enable Command Polling every 12 hours - Universal (3799).bes b/Sites/BigFix Management/Fixlets/Fixlets/Configuration_ BES Client - Enable Command Polling every 12 hours - Universal (3799).bes new file mode 100644 index 000000000..b0749cc29 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Configuration_ BES Client - Enable Command Polling every 12 hours - Universal (3799).bes @@ -0,0 +1,42 @@ + + + + + Configuration: BES Client - Enable Command Polling every 12 hours - Universal + Enable command polling on clients to be at least once every 12 hours.

+

This should be safe to deploy to all clients.

+

 

]]> + = value of it as integer) of client))]]> + Software Sharing + Internal + jgstew + 2014-06-27 + + x-fixlet-modification-time + Mon, 30 Jun 2014 22:09:50 +0000 + + BESC + + + Click + here + to deploy this action. + + +setting "_BESClient_Comm_CommandPollEnable"="1" on "{parameter "action issue date" of action}" for client +// 43200 is the number of seconds in 12 hours +setting "_BESClient_Comm_CommandPollIntervalSeconds"="43200" on "{parameter "action issue date" of action}" for client + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Configuration_ BES Client - Lower BESClient Max Disk Usage if less than 20gb free - Universal (3943).bes b/Sites/BigFix Management/Fixlets/Fixlets/Configuration_ BES Client - Lower BESClient Max Disk Usage if less than 20gb free - Universal (3943).bes new file mode 100644 index 000000000..e32160d26 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Configuration_ BES Client - Lower BESClient Max Disk Usage if less than 20gb free - Universal (3943).bes @@ -0,0 +1,58 @@ + + + + + Configuration: BES Client - Lower BESClient Max Disk Usage if less than 20gb free - Universal + This task will lower the BES Client cache storage settings for machines with low disk space or small hard drives.

+

This may cause very large software installation tasks to fail.

+

SSDs for the computer's Operating System should be at least 250gb in size for optimal use, particularly when deploying large software packages. 500gb or higher recommended for new systems, but BigFix can work with any size hard drive.

+

 

]]> + = 2000) of (it as string as integer) of values of it ) of client)]]> + + Software Sharing + Internal + jgstew + 2015-01-12 + + x-fixlet-modification-time + Mon, 12 Jan 2015 16:56:24 +0000 + + BESC + + + Click + here + to deploy this action. + + = 2000) of (it as string as integer) of values of it ) of client } + setting "_BESClient_Download_MinimumDiskFreeMB"="2000" on "{parameter "action issue date" of action}" for client +endif + +notify client ForceRefresh +]]> + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Configuration_ BES Client - Recommended Client Settings - Universal (6117).bes b/Sites/BigFix Management/Fixlets/Fixlets/Configuration_ BES Client - Recommended Client Settings - Universal (6117).bes new file mode 100644 index 000000000..ad54e6186 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Configuration_ BES Client - Recommended Client Settings - Universal (6117).bes @@ -0,0 +1,117 @@ + + + + + Configuration: BES Client - Recommended Client Settings - Universal + This fixlet will change the default BigFix Client setttings.

+

 

]]> + = 5000) of (it as string as integer) of values of it ) of client ) OR ( not exists settings "_BESClient_Download_NormalStageDiskLimitMB" whose( (it >= 20000) of (it as string as integer) of values of it ) of client ) OR ( not exists settings "_BESClient_Download_DownloadsCacheLimitMB" whose( (it >= 10000) of (it as string as integer) of values of it ) of client ) OR ( not exists settings "_BESClient_Download_UtilitiesCacheLimitMB" whose( (it >= 200) of (it as string as integer) of values of it ) of client ) OR ( not exists settings "_BESClient_Download_MinimumDiskFreeMB" whose( (it >= 2000) of (it as string as integer) of values of it ) of client ) OR ( not exists settings "_BESClient_Download_RetryMinutes" whose( (it <= 5) of (it as string as integer) of values of it ) of client ) OR ( not exists settings "_BESClient_Report_MinimumInterval" whose( (it >= 30) of (it as string as integer) of values of it ) of client ) OR ( not exists settings "_BESClient_Log_Days" whose( (it >= 30) of (it as string as integer) of values of it ) of client ) OR ( not exists settings "_BESClient_Comm_CommandPollIntervalSeconds" whose( (it <= 43200) of (it as string as integer) of values of it ) of client ) OR ( not exists settings "_BESClient_Comm_CommandPollEnable" whose( (it = 1) of (it as string as integer) of values of it ) of client )]]> + Configuration + Internal + jgs194 + 2015-01-12 + + bigfixme-added-time + Mon, 12 Jan 2015 09:59:25 GMT + + + bigfixme-modification-time + Mon, 12 Jan 2015 09:59:25 GMT + + + bigfixme-keywords + + + + x-fixlet-modification-time + Thu, 02 Jul 2015 15:14:45 +0000 + + BESC + + + Click + here + to deploy this action. + + = 30) of (it as string as integer) of values of it ) of client } + setting "_BESClient_Log_Days"="30" on "{parameter "action issue date" of action}" for client +endif + +// By default, the client will send reports no more often than once every 15 seconds, but this is more often than needed. +// This should be increased to at least 30 seconds, but 30-90 seconds is reasonable. +// This will reduce the load on the Relays and Root Server. This could slow reporting in the console somewhat. +if { not exists settings "_BESClient_Report_MinimumInterval" whose( (it >= 30) of (it as string as integer) of values of it ) of client } + setting "_BESClient_Report_MinimumInterval"="30" on "{parameter "action issue date" of action}" for client +endif + +// Download_RetryMinutes should be lower than 5 min, otherwise baselines could be held up. +if { not exists settings "_BESClient_Download_RetryMinutes" whose( (it <= 5) of (it as string as integer) of values of it ) of client } + setting "_BESClient_Download_RetryMinutes"="1" on "{parameter "action issue date" of action}" for client +endif + + +if{ not exists settings "_BESClient_Download_MinimumDiskFreeMB" whose( (it >= 2000) of (it as string as integer) of values of it ) of client } + setting "_BESClient_Download_MinimumDiskFreeMB"="2000" on "{parameter "action issue date" of action}" for client +endif + +if {not exists settings "_BESClient_Download_UtilitiesCacheLimitMB" whose( (it >= 200) of (it as string as integer) of values of it ) of client} + setting "_BESClient_Download_UtilitiesCacheLimitMB"="200" on "{parameter "action issue date" of action}" for client +endif + + +if {not exists settings "_BESClient_Download_DownloadsCacheLimitMB" whose( (it >= 10000) of (it as string as integer) of values of it ) of client} + setting "_BESClient_Download_DownloadsCacheLimitMB"="10000" on "{parameter "action issue date" of action}" for client +endif + +if {not exists settings "_BESClient_Download_NormalStageDiskLimitMB" whose( (it >= 20000) of (it as string as integer) of values of it ) of client} + setting "_BESClient_Download_NormalStageDiskLimitMB"="20000" on "{parameter "action issue date" of action}" for client +endif + +if {not exists settings "_BESClient_Download_PreCacheStageDiskLimitMB" whose( (it >= 5000) of (it as string as integer) of values of it ) of client} + setting "_BESClient_Download_PreCacheStageDiskLimitMB"="5000" on "{parameter "action issue date" of action}" for client +endif + +//END: Set recommended client settings + +notify client ForceRefresh +]]> + + + + Click + here + to review this task in the bigfix.me Content Database. + + http://bigfix.me/cdb/fixlet/3942 + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Configuration_ BES Client - Slow down overly aggressive Command Polling - Universal (3801).bes b/Sites/BigFix Management/Fixlets/Fixlets/Configuration_ BES Client - Slow down overly aggressive Command Polling - Universal (3801).bes new file mode 100644 index 000000000..8f76d65de --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Configuration_ BES Client - Slow down overly aggressive Command Polling - Universal (3801).bes @@ -0,0 +1,56 @@ + + + + + Configuration: BES Client - Slow down overly aggressive Command Polling - Universal + This task is relevant on clients whose command polling is too aggressive and may cause issues both with the relay and the client.

+

This task will reduce the frequency of command polling.

+

 

]]> + /* Command Polling is enabled */ (exists settings whose("_BESClient_Comm_CommandPollEnable" = name of it AND 1 = value of it as integer) of client) + value of it as integer) of client)]]> + Software Sharing + Internal + jgstew + 2014-06-27 + + x-fixlet-modification-time + Mon, 30 Jun 2014 22:20:26 +0000 + + BESC + + + Click + here + to reduce polling to 60 min. + + +setting "_BESClient_Comm_CommandPollEnable"="1" on "{parameter "action issue date" of action}" for client +// 3600 is the number of seconds in 60 min. +setting "_BESClient_Comm_CommandPollIntervalSeconds"="3600" on "{parameter "action issue date" of action}" for client + + + + + + Click + here + to reduce polling to 30 min. + + +setting "_BESClient_Comm_CommandPollEnable"="1" on "{parameter "action issue date" of action}" for client +// 1800 is the number of seconds in 30 min. +setting "_BESClient_Comm_CommandPollIntervalSeconds"="1800" on "{parameter "action issue date" of action}" for client + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Configuration_ BESClient - Enable optional Client_Report_Encryption - Universal (5018).bes b/Sites/BigFix Management/Fixlets/Fixlets/Configuration_ BESClient - Enable optional Client_Report_Encryption - Universal (5018).bes new file mode 100644 index 000000000..03a587485 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Configuration_ BESClient - Enable optional Client_Report_Encryption - Universal (5018).bes @@ -0,0 +1,40 @@ + + + + + Configuration: BESClient - Enable optional Client_Report_Encryption - Universal + Tells the Client to encrypt if it can, otherwise it sends its reports in clear-text.

 +

 

+

References:

+

http://www-01.ibm.com/support/knowledgecenter/SS63NW_9.1.0/com.ibm.tem.doc_9.1/Platform/Adm/c_enabling_encryption_on_clients.html

+

 

]]> + not exists values whose(it = "optional") of settings "_BESClient_Report_Encryption" of client + Internal + 2015-04-08 + + x-fixlet-modification-time + Wed, 08 Apr 2015 18:55:53 +0000 + + BESC + + + Click + here + to deploy this action. + + +setting "_BESClient_Report_Encryption"="optional" on "{parameter "action issue date" of action}" for client + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Configure Automatic Relay Selection (84).bes b/Sites/BigFix Management/Fixlets/Fixlets/Configure Automatic Relay Selection (84).bes new file mode 100644 index 000000000..ca5e7ed0e --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Configure Automatic Relay Selection (84).bes @@ -0,0 +1,40 @@ + + + + + Configure Automatic Relay Selection + Detects if an endpoint is not configured for automatic relay selection and configures it. + NOT (exists setting "__RelaySelect_Automatic" of client and value of setting "__RelaySelect_Automatic" of client is "1") + NOT exists relay service + NOT exists main gather service + Configuration + danielheth@bigfix.me + <Unspecified> + 2011-07-05 + <Unspecified> + + x-fixlet-modification-time + Mon, 01 Oct 2012 21:30:49 +0000 + + BES + + + Click + here + to deploy this action. + + setting "__RelaySelect_Automatic"="1" on "{parameter "action issue date" of action}" for client + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Configure BES Relay to Use Different Drive - Version _= 6.0 (612).bes b/Sites/BigFix Management/Fixlets/Fixlets/Configure BES Relay to Use Different Drive - Version _= 6.0 (612).bes new file mode 100644 index 000000000..239a087e4 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Configure BES Relay to Use Different Drive - Version _= 6.0 (612).bes @@ -0,0 +1,179 @@ + + + + + Configure BES Relay to Use Different Drive - Version >= 6.0 +
Note: Several DOS windows will appear while the BES Relay is configured. These DOS windows may remain in place for a short period of time while all the files in the relay cache are moved to their new location.

Note: Only the "wwwroot" BES Relay data folder will be moved, the BES Relay executable and other program files will remain at its current location.

Important Note: The first action will fail if the drive entered does not exist. The second action will fail if the new location of the BES Relay wwwroot folder is a subfolder of the current location. Both actions will fail if the new location of the BES Relay wwwroot folder already exists. Pathnames should not contain trailing backslashes or spaces. +]]> + = "6.0"]]> + NOT exists main gather service + exists (values "value" of keys "HKLM\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath" of registry as folder) + exists relay service OR exists main gather service + Optional + BigFix + <Unspecified> + 2026-09-17 + <Unspecified> + + x-fixlet-modification-time + Sat, 12 May 2012 00:55:27 +0000 + + + x-fixlet-first-propagation + Mon, 02 Oct 2006 16:24:04 +0000 + + + x-fixlet-domain_attributes + BES Component Relay + + BESC + + + Click + here + to configure the BES Relay to use a different drive. (The new location will be 'drive:\wwwroot') + + "{value "InboxLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry as string & "\GatherState.xml"}" +parameter "ServerRootDir"="{value "value" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath" of registry}" +// if BES Relay v8.0 and above +if {exists relay service AND ((it >= "8.0") of (if (version of client >= "8.0") then (version of relay service) else (version of regapp "besrelay.exe")))} +appendfile rmdir /S /Q "{parameter "ServerRootDir"}bfmirror\bfsites" +appendfile mkdir "{parameter "ServerRootDir"}bfmirror\bfsites" +appendfile xcopy /E /Y /I /Q "{parameter "ServerRootDir"}*.*" "{parameter "RelayDrive" of action}\wwwrootbes" +appendfile rmdir /s /q "{parameter "ServerRootDir"}" +Createfile until end-reg-edit-commands +REGEDIT4 +[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath] +"value"="{escape of (parameter "RelayDrive" of action & "\wwwrootbes\")}" +[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server] +"wwwRootFolder"="{escape of (parameter "RelayDrive" of action & "\wwwrootbes\")}" +end-reg-edit-commands +// else if older than BES Relay v8.0 +else +appendfile rmdir /S /Q "{parameter "ServerRootDir"}\bfmirror\bfsites" +appendfile mkdir "{parameter "ServerRootDir"}\bfmirror\bfsites" +appendfile xcopy /E /Y /I /Q "{parameter "ServerRootDir"}\*.*" "{parameter "RelayDrive" of action}\wwwroot" +appendfile xcopy /E /Y /I /Q "{value "ContentLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry}\*.*" "{parameter "RelayDrive" of action}\wwwroot\bfmirror\bfsites" +appendfile xcopy /E /Y /I /Q "{value "DownloadContentLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry}\*.*" "{parameter "RelayDrive" of action}\wwwroot\bfmirror\downloads" +appendfile rmdir /s /q "{parameter "ServerRootDir"}" +appendfile rmdir /s /q "{value "ContentLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry}" +appendfile rmdir /s /q "{value "DownloadContentLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry}" +Createfile until end-reg-edit-commands +REGEDIT4 +[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath] +"value"="{escape of (parameter "RelayDrive" of action & "\wwwroot")}" +[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService] +"ContentLocation"="{escape of (parameter "RelayDrive" of action & "\wwwroot\bfmirror\bfsites")}" +[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService] +"DownloadContentLocation"="{escape of (parameter "RelayDrive" of action & "\wwwroot\bfmirror\downloads")}" +end-reg-edit-commands +endif +move __createfile changedrive.reg +appendfile regedit /s changedrive.reg +appendfile net start BESRelay +move __appendfile changedrive.bat +waithidden changedrive.bat +//wait 5 seconds +parameter "waitTime" = "{apparent registration server time}" +pause while {((apparent registration server time) - time (parameter "waitTime")) < 5*second} +// if for some reason the BES Relay hasn't started yet, fail here +continue if {exists running service "BESRelay"} +relay select +delete changedrive.reg +delete changedrive.bat]]> + + + + Click + here + to configure the BES Relay to use a custom location. + + "{value "InboxLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry as string & "\GatherState.xml"}" +parameter "ServerRootDir"="{value "value" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath" of registry}" +// if BES Relay v8.0 and above +if {exists relay service AND ((it >= "8.0") of (if (version of client >= "8.0") then (version of relay service) else (version of regapp "besrelay.exe")))} +appendfile rmdir /S /Q "{parameter "ServerRootDir"}bfmirror\bfsites" +appendfile mkdir "{parameter "ServerRootDir"}bfmirror\bfsites" +appendfile xcopy /E /Y /I /Q "{parameter "ServerRootDir"}*.*" "{parameter "RelayLocation" of action}" +appendfile rmdir /s /q "{parameter "ServerRootDir"}" +Createfile until end-reg-edit-commands +REGEDIT4 +[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath] +"value"="{escapes of (parameter "RelayLocation" of action & "\")}" +[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server] +"wwwRootFolder"="{escapes of (parameter "RelayLocation" of action & "\")}" +end-reg-edit-commands +// else if older than BES Relay v8.0 +else +appendfile rmdir /S /Q "{parameter "ServerRootDir"}\bfmirror\bfsites" +appendfile mkdir "{parameter "ServerRootDir"}\bfmirror\bfsites" +appendfile xcopy /E /Y /I /Q "{parameter "ServerRootDir"}\*.*" "{parameter "RelayLocation" of action}" +appendfile xcopy /E /Y /I /Q "{value "ContentLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry}\*.*" "{parameter "RelayLocation" of action}\bfmirror\bfsites" +appendfile xcopy /E /Y /I /Q "{value "DownloadContentLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry}\*.*" "{parameter "RelayLocation" of action}\bfmirror\downloads" +appendfile rmdir /s /q "{parameter "ServerRootDir"}" +appendfile rmdir /s /q "{value "ContentLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry}" +appendfile rmdir /s /q "{value "DownloadContentLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry}" +Createfile until end-reg-edit-commands +REGEDIT4 +[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath] +"value"="{escapes of (parameter "RelayLocation" of action)}" +[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService] +"ContentLocation"="{escapes of (parameter "RelayLocation" of action & "\bfmirror\bfsites")}" +[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService] +"DownloadContentLocation"="{escapes of (parameter "RelayLocation" of action & "\bfmirror\downloads")}" +end-reg-edit-commands +endif +move __createfile changedrive.reg +appendfile regedit /s changedrive.reg +appendfile net start BESRelay +move __appendfile changedrive.bat +waithidden changedrive.bat +//wait 5 seconds +parameter "waitTime" = "{apparent registration server time}" +pause while {((apparent registration server time) - time (parameter "waitTime")) < 5*second} +// if for some reason the BES Relay hasn't started yet, fail here +continue if {exists running service "BESRelay"} +relay select +delete changedrive.reg +delete changedrive.bat]]> + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Configure BES Relay to Use Drive with Largest Free Disk Space - Version _= 6.0 (585).bes b/Sites/BigFix Management/Fixlets/Fixlets/Configure BES Relay to Use Drive with Largest Free Disk Space - Version _= 6.0 (585).bes new file mode 100644 index 000000000..4eb440167 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Configure BES Relay to Use Drive with Largest Free Disk Space - Version _= 6.0 (585).bes @@ -0,0 +1,95 @@ + + + + + Configure BES Relay to Use Drive with Largest Free Disk Space - Version >= 6.0 +
Note: Several DOS windows will appear while the BES Relay is configured. These DOS windows may remain in place for a short period of time while all the files in the relay cache are moved to their new location.

Note: To see which drive the BES Client has determined is the drive with the largest free disk space, please create a new retrieved property with the following relevance clause:

name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED")))

Note: Only the "wwwroot" BES Relay data folder will be moved, the BES Relay executable and other program files will remain at its current location. +]]> + NOT exists main gather service + exists relay service OR exists main gather service + = "5.1"]]> + exists setting "ChangeRelayCacheDrive" whose (value of it as lowercase = "yes") of client + + Optional + BigFix + <Unspecified> + 2026-09-17 + <Unspecified> + + x-fixlet-modification-time + Sat, 12 May 2012 00:55:27 +0000 + + + x-fixlet-first-propagation + Mon, 01 May 2006 16:30:49 +0000 + + + x-fixlet-domain_attributes + BES Component Relay + + BESC + + + Click + here + to configure the BES Relay to use the drive with the largest free disk space. (Use the default location 'drive:\wwwroot') + + = "8.0") of (if (version of client >= "8.0") then (version of relay service) else (version of regapp "besrelay.exe")))} +dos xcopy /E /Y /I /Q "{value "value" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath" of registry}*.*" "{name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED")))}\wwwrootbes" +dos rmdir /s /q "{value "value" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath" of registry}" +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath]" "value"="{escapes of (name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED"))) & "\wwwrootbes\")}" +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server]" "wwwRootFolder"="{escapes of (name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED"))) & "\wwwrootbes\")}" +else +dos xcopy /E /Y /I /Q "{value "value" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath" of registry}\*.*" "{name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED")))}\wwwroot" +dos xcopy /E /Y /I /Q "{value "ContentLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry}\*.*" "{name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED")))}\wwwroot\bfmirror\bfsites" +dos xcopy /E /Y /I /Q "{value of setting "_BESRelay_HTTPServer_ServerRootPath" of client & "\bfmirror\downloads"}\*.*" "{name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED")))}\wwwroot\bfmirror\downloads" +dos rmdir /s /q "{value "value" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath" of registry}" +dos rmdir /s /q "{value "ContentLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry}" +dos rmdir /s /q "{value of setting "_BESRelay_HTTPServer_ServerRootPath" of client & "\bfmirror\downloads"}" +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath]" "value"="{escapes of (name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED"))) & "\wwwroot")}" +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService]" "ContentLocation"="{escapes of (name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED"))) & "\wwwroot\bfmirror\bfsites")}" +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService]" "DownloadContentLocation"="{escapes of (name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED"))) & "\wwwroot\bfmirror\downloads")}" +endif +dos net start BESRelay]]> + + + + Click + here + to configure the BES Relay to use the drive with the largest free disk space. (Specify a custom location for the Relay files) + + = "8.0") of (if (version of client >= "8.0") then (version of relay service) else (version of regapp "besrelay.exe")))} +dos xcopy /E /Y /I /Q "{value "value" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath" of registry}*.*" "{name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED")))}{parameter "RelayLocation" of action}" +dos rmdir /s /q "{value "value" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath" of registry}" +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath]" "value"="{escapes of (name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED"))) & (parameter "RelayLocation" of action) & "\")}" +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server]" "wwwRootFolder"="{escapes of (name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED"))) & (parameter "RelayLocation" of action) & "\")}" +else +dos xcopy /E /Y /I /Q "{value "value" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath" of registry}\*.*" "{name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED")))}{parameter "RelayLocation" of action}" +dos xcopy /E /Y /I /Q "{value "ContentLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry}\*.*" "{name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED")))}{parameter "RelayLocation" of action}\bfmirror\bfsites" +dos xcopy /E /Y /I /Q "{value "DownloadContentLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry}\*.*" "{name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED")))}{parameter "RelayLocation" of action}\bfmirror\downloads" +dos rmdir /s /q "{value "value" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath" of registry}" +dos rmdir /s /q "{value "ContentLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry}" +dos rmdir /s /q "{value "DownloadContentLocation" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService" of registry}" +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\Settings\Client\_BESRelay_HTTPServer_ServerRootPath]" "value"="{escapes of (name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED"))) & (parameter "RelayLocation" of action))}" +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService]" "ContentLocation"="{escapes of (name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED"))) & (parameter "RelayLocation" of action) & "\bfmirror\bfsites")}" +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\GatherService]" "DownloadContentLocation"="{escapes of (name of drive whose (type of it = "DRIVE_FIXED" AND free space of it = maximum of (free spaces of drives whose (type of it = "DRIVE_FIXED"))) & (parameter "RelayLocation" of action) & "\bfmirror\downloads")}" +endif +dos net start BESRelay]]> + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Configure BESChildProcessKiller Ignore Process List (23048).bes b/Sites/BigFix Management/Fixlets/Fixlets/Configure BESChildProcessKiller Ignore Process List (23048).bes new file mode 100644 index 000000000..3216f66cc --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Configure BESChildProcessKiller Ignore Process List (23048).bes @@ -0,0 +1,56 @@ + + + + + Configure BESChildProcessKiller Ignore Process List + This Task configures the client settings involved with the BESChildProcessKiller task.  Two settings are configured -

+
    +
  • +

    BESClient_ChildProcess_ExcludeList

    - a Semicolon-separated list of process names that should not not be considered for stuck process killing.  These processes, their parent processes, and their parent's parent's process will not be killed.  Example "process1.exe;process2.exe"
+

This identifies specific process names that are spawned by BESClient, expected to run for long durations, and will not be killed by BESChildProcessKiller.  An example would be rbagent.exe on a BigFix OS Deployment Server.  The logic to include the process itself, its parent process, and its parent's parent process, ensures that in a process tree resembling

+
    +
  • 1234, besclient.exe
    • +
      +
    • 5678, cmd.exe (task.cmd)
      • +
        +
      • 6789 cmd.exe (task2.cmd)
        • +
          +
        • 7891 rbagent.exe
+

..that if "rbagent.exe" is excluded, the "cmd.exe" grandparent process will not be killed.

]]> + windows of operating system + if exists property "in proxy agent context" then not in proxy agent context else true + Internal + 2016-12-12 + + x-fixlet-modification-time + Mon, 12 Dec 2016 19:54:53 +0000 + + BESC + + + Click + here + to set or clear&nbsp;the BESClient_ChildProcess_ExcludeList value + + // Setup the "current" timeout value for the client + +action parameter query "BESClient_ChildProcess_ExcludeList" with description "Enter a list of processes to exclude" and with default value "process1.exe;process2.exe" + +if {parameter "BESClient_ChildProcess_ExcludeList" as trimmed string != ""} + setting "BESClient_ChildProcess_ExcludeList"="{parameter "BESClient_ChildProcess_ExcludeList"}" on "{parameter "action issue date" of action}" for client +else + setting delete "BESClient_ChildProcess_ExcludeList" on "{parameter "action issue date" of action}" for client +endif + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Configure BESChildProcessKiller Timeout Values (23047).bes b/Sites/BigFix Management/Fixlets/Fixlets/Configure BESChildProcessKiller Timeout Values (23047).bes new file mode 100644 index 000000000..4cbb2f8ad --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Configure BESChildProcessKiller Timeout Values (23047).bes @@ -0,0 +1,83 @@ + + + + + Configure BESChildProcessKiller Timeout Values + This Task configures the client settings involved with the BESChildProcessKiller task.  Two settings are configured -

+
    +
  • BESClient_ChildProcess_Timeout - The current time interval after which stuck BES Child Processes should be terminated +
  • BESClient_ChildProcess_PreferredTimeout - The normal time interval after which stuck BES Child Processes should be terminated
+

Keeping both a "current" and "preferred" timeout value on the client allows for a Baseline with known long-running components to set a longer timeout value early in the baseline, execute the long-running tasks, and then revert the client back to a nominal value when the baseline is complete.

+

Initially, clients should set both values; then, the BESClient_ChildProcess_Timeout value may be manipulated to be longer or shorter than the "preferred" timeout value, then reverted back to the "preferred" timeout value when the off-nominal tasks are completed.

]]> + windows of operating system + if exists property "in proxy agent context" then not in proxy agent context else true + Internal + 2016-12-12 + + x-fixlet-modification-time + Mon, 12 Dec 2016 17:12:19 +0000 + + BESC + + + Click + here + to set the BESClient_ChildProcess_Timeout value (current timeout) + + // Setup the "current" timeout value for the client + +action parameter query "BESClient_ChildProcess_Timeout" with description "Enter a current time interval after which to kill BESClient Child Process (ex %2202:00:00%22 for two hours)" and with default value "02:00:00" + +continue if {exists parameter "BESClient_ChildProcess_Timeout" as time interval} +setting "BESClient_ChildProcess_Timeout"="{parameter "BESClient_ChildProcess_Timeout"}" on "{parameter "action issue date" of action}" for client + + + + + + Click + here + to set the BESClient_ChildProcess_PreferredTimeout&nbsp;value (nominal timeout) + + // Setup the "nominal" value for the client + +action parameter query "BESClient_ChildProcess_PreferredTimeout" with description "Enter a preferred time interval after which to kill BESClient Child Process (ex %2202:00:00%22 for two hours)" and with default value "02:00:00" + +continue if {exists parameter "BESClient_ChildProcess_PreferredTimeout" as time interval} +setting "BESClient_ChildProcess_PreferredTimeout"="{parameter "BESClient_ChildProcess_PreferredTimeout"}" on "{parameter "action issue date" of action}" for client + + + + + + Click + here + to revert BESClient_ChildProcess_Timeout&nbsp; to match the&nbsp;BESClient_ChildProcess_PreferredTimeout&nbsp;value + + // Revert "current" Timeout to PreferredTimeout value ("normal-up") +if {exists setting "BESClient_ChildProcess_PreferredTimeout" whose (exists value of it as time interval) of client AND not exist setting "BESClient_ChildProcess_Timeout" whose (value of it = value of setting "BESClient_ChildProcess_PreferredTimeout" of client) of client} + setting "BESClient_ChildProcess_Timeout"="{value of setting "BESClient_ChildProcess_PreferredTimeout" of client}" on "{now}" for client +endif + + + + Click + here + to delete both settings, effectively disabling the BESChildProcessKiller processing + + // Delete both settings, preventing the Scheduled Task from taking effect + +setting delete "BESClient_ChildProcess_Timeout" on "{parameter "action issue date" of action}" for client +setting delete "BESClient_ChildProcess_PreferredTimeout" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Configure Development Client Performance Settings (80).bes b/Sites/BigFix Management/Fixlets/Fixlets/Configure Development Client Performance Settings (80).bes new file mode 100644 index 000000000..9f4d2a86e --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Configure Development Client Performance Settings (80).bes @@ -0,0 +1,67 @@ + + + + + Configure Development Client Performance Settings + + host name of root server as string as lowercase contains "dev.bigfix.me" + if name of operating system as lowercase starts with "win" then (exists setting "_BESClient_Resource_WorkIdle" whose (value of it != "75") of client) OR (exists setting "_BESClient_Resource_SleepIdle" whose (value of it != "480") of client) OR (exists setting "_BESClient_Report_MinimumInterval" whose (value of it != "60") of client) OR (exists setting "_BESClient_Comm_CommandPollEnable" whose (value of it != "1") of client) OR (exists setting "_BESClient_Comm_CommandPollIntervalSeconds" whose (value of it != "900") of client) OR (exists setting "_BESClient_Register_IntervalSeconds" whose (value of it != "7200") of client) OR (exists setting "_BESClient_RelaySelect_IntervalSeconds" whose (value of it != "14400") of client) OR (exists setting "_BESClient_RelaySelect_ResistFailureIntervalSeconds" whose (value of it != "1800") of client) else (exists setting "_BESClient_Resource_WorkIdle" whose (value of it != "75") of client) OR (exists setting "_BESClient_Resource_SleepIdle" whose (value of it != "480") of client) OR (exists setting "_BESClient_Report_MinimumInterval" whose (value of it != "120") of client) OR (exists setting "_BESClient_Comm_CommandPollEnable" whose (value of it != "1") of client) OR (exists setting "_BESClient_Comm_CommandPollIntervalSeconds" whose (value of it != "900") of client) OR (exists setting "_BESClient_Register_IntervalSeconds" whose (value of it != "14400") of client) OR (exists setting "_BESClient_RelaySelect_IntervalSeconds" whose (value of it != "28800") of client) OR (exists setting "_BESClient_RelaySelect_ResistFailureIntervalSeconds" whose (value of it != "3600") of client) + BES Client Settings + danielheth@bigfix.me + <Unspecified> + 2012-02-14 + <Unspecified> + + x-fixlet-modification-time + Wed, 08 Aug 2012 21:11:28 +0000 + + BES + + + Click + here + to deploy this action. + + parameter "IsRelayRunning"="{if name of operating system as lowercase starts with "win" then exists running application "BESRelay.exe" else False}" +if {parameter "IsRelayRunning" as boolean} + //Work/Sleep Speed settings milliseconds + setting "_BESClient_Resource_WorkIdle"="75" on "{now}" for client + setting "_BESClient_Resource_SleepIdle"="480" on "{now}" for client + //update action status (1min) + setting "_BESClient_Report_MinimumInterval"="60" on "{now}" for client + //enable upline querying for cmds (15min) + setting "_BESClient_Comm_CommandPollEnable"="1" on "{now}" for client + setting "_BESClient_Comm_CommandPollIntervalSeconds"="900" on "{now}" for client + //setup Register/Heartbeat (2hrs) and ForceRelaySelect (4hrs) settings + setting "_BESClient_Register_IntervalSeconds"="7200" on "{now}" for client + setting "_BESClient_RelaySelect_IntervalSeconds"="14400" on "{now}" for client + //if com failures occurs, then resist the urge to failover for 1 hours. + setting "_BESClient_RelaySelect_ResistFailureIntervalSeconds"="1800" on "{now}" for client +else + //Work/Sleep Speed settings milliseconds + setting "_BESClient_Resource_WorkIdle"="75" on "{now}" for client + setting "_BESClient_Resource_SleepIdle"="480" on "{now}" for client + //update action status (2min) + setting "_BESClient_Report_MinimumInterval"="120" on "{now}" for client + //enable upline querying for cmds (15min) + setting "_BESClient_Comm_CommandPollEnable"="1" on "{now}" for client + setting "_BESClient_Comm_CommandPollIntervalSeconds"="900" on "{now}" for client + //setup Register/Heartbeat (4hrs) and ForceRelaySelect (8hrs) settings + setting "_BESClient_Register_IntervalSeconds"="14400" on "{now}" for client + setting "_BESClient_RelaySelect_IntervalSeconds"="28800" on "{now}" for client + //if com failures occurs, then resist the urge to failover for 2 hours. + setting "_BESClient_RelaySelect_ResistFailureIntervalSeconds"="3600" on "{now}" for client +endif + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Configure Hyper-V Guest Relay (3627).bes b/Sites/BigFix Management/Fixlets/Fixlets/Configure Hyper-V Guest Relay (3627).bes new file mode 100644 index 000000000..e56c757b3 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Configure Hyper-V Guest Relay (3627).bes @@ -0,0 +1,57 @@ + + + + + Configure Hyper-V Guest Relay + + name of operating system starts with "Win" + exists key "Guest" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Virtual Machine" of native registry + exists value "PhysicalHostNameFullyQualified" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Virtual Machine\Guest\Parameters" of native registry + NOT exists service "BESRootServer" + (value "RegisteredOrganization" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion" of native registry) = "Moran IT" + if exists setting "__RelayServer1" of client then NOT( (value of setting "__RelayServer1" of client as string) contains (value "PhysicalHostNameFullyQualified" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Virtual Machine\Guest\Parameters" of native registry as string) ) else true + Configuration + danielheth@bigfix.me + <Unspecified> + 2012-07-20 + <Unspecified> + + x-fixlet-modification-time + Wed, 08 Aug 2012 21:11:28 +0000 + + BES + + + Click + here + to deploy this action. + + +//1. configure manual relay selection +setting "__RelaySelect_Automatic"="0" on "{now}" for client + +//now configure host server +setting "__RelayServer1"="http%3a%2f%2f{value "PhysicalHostNameFullyQualified" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Virtual Machine\Guest\Parameters" of native registry}%3a52311%2fbfmirror%2fdownloads%2f" on "{now}" for client + +//keep client settings clean, delete unneeded settings +setting delete "__RelayServer2" on "{now}" for client +setting delete "_BESClient_RelaySelect_TertiaryRelayList" on "{now}" for client +setting delete "_BESClient_RelaySelect_FailoverRelay" on "{now}" for client + +//also clear the HostSelector value since it is the "cache" for the relay to talk to +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions]" "HostSelector"="" + + +relay select + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Configure Hyper-V Guest Relay (81).bes b/Sites/BigFix Management/Fixlets/Fixlets/Configure Hyper-V Guest Relay (81).bes new file mode 100644 index 000000000..003128d9d --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Configure Hyper-V Guest Relay (81).bes @@ -0,0 +1,52 @@ + + + + + Configure Hyper-V Guest Relay + + name of operating system starts with "Win" + exists key "Guest" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Virtual Machine" of native registry + exists value "PhysicalHostNameFullyQualified" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Virtual Machine\Guest\Parameters" of native registry + NOT exists service "BESRootServer" + (value "RegisteredOrganization" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion" of native registry) = "Moran IT" + if exists setting "__RelayServer1" of client then NOT( (value of setting "__RelayServer1" of client as string) contains (value "PhysicalHostNameFullyQualified" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Virtual Machine\Guest\Parameters" of native registry as string) ) else true + Configuration + danielheth@bigfix.me + <Unspecified> + 2012-07-20 + <Unspecified> + + x-fixlet-modification-time + Wed, 08 Aug 2012 21:11:28 +0000 + + BES + + + Click + here + to deploy this action. + + +//1. configure manual relay selection +setting "__RelaySelect_Automatic"="0" on "{now}" for client +//now configure host server +setting "__RelayServer1"="http%3a%2f%2f{value "PhysicalHostNameFullyQualified" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Virtual Machine\Guest\Parameters" of native registry}%3a52311%2fbfmirror%2fdownloads%2f" on "{now}" for client +//keep client settings clean, delete unneeded settings +setting delete "__RelayServer2" on "{now}" for client +setting delete "_BESClient_RelaySelect_TertiaryRelayList" on "{now}" for client +setting delete "_BESClient_RelaySelect_FailoverRelay" on "{now}" for client +//also clear the HostSelector value since it is the "cache" for the relay to talk to +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions]" "HostSelector"="" +relay select + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Configure Our Defaults for ArchiveManager (15min) (88).bes b/Sites/BigFix Management/Fixlets/Fixlets/Configure Our Defaults for ArchiveManager (15min) (88).bes new file mode 100644 index 000000000..56e96fdc4 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Configure Our Defaults for ArchiveManager (15min) (88).bes @@ -0,0 +1,50 @@ + + + + + Configure Our Defaults for ArchiveManager (15min) + Based on our environment and our desires for bandwidth and such, this task (when setup as a policy) will ensure our upload manager settings are maintained to our desired settings. + not(exists setting "_BESClient_ArchiveManager_OperatingMode" whose (value of it = "1") of client) OR not(exists setting "_BESClient_ArchiveManager_IntervalSeconds" whose (value of it = "900") of client) OR not(exists setting "_BESClient_ArchiveManager_SendAll" whose (value of it = "0") of client) OR not(exists setting "_BESClient_ArchiveManager_MaxArchiveSize" whose (value of it = "31457280") of client) + BES Client Setting + danielheth@bigfix.me + <Unspecified> + 2011-02-24 + <Unspecified> + + x-fixlet-modification-time + Mon, 01 Oct 2012 21:30:49 +0000 + + BES + + + Click + here + to configure default Upload Manager Settings + + //upload updates to specified files in our path every hour... limit entire archive to 8mbs +if {not(exists setting "_BESClient_ArchiveManager_OperatingMode" whose (value of it = "1") of client)} + setting "_BESClient_ArchiveManager_OperatingMode"="1" on "{now}" for client +endif +if {not(exists setting "_BESClient_ArchiveManager_IntervalSeconds" whose (value of it = "900") of client)} + setting "_BESClient_ArchiveManager_IntervalSeconds"="900" on "{now}" for client +endif +if {not(exists setting "_BESClient_ArchiveManager_SendAll" whose (value of it = "0") of client)} + setting "_BESClient_ArchiveManager_SendAll"="0" on "{now}" for client +endif +if {not(exists setting "_BESClient_ArchiveManager_MaxArchiveSize" whose (value of it = "31457280") of client)} + setting "_BESClient_ArchiveManager_MaxArchiveSize"="31457280" on "{now}" for client +endif + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Configure Production Client Performance Settings (87).bes b/Sites/BigFix Management/Fixlets/Fixlets/Configure Production Client Performance Settings (87).bes new file mode 100644 index 000000000..72a14ad94 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Configure Production Client Performance Settings (87).bes @@ -0,0 +1,67 @@ + + + + + Configure Production Client Performance Settings + + host name of root server as string as lowercase contains "master.bigfix.me" + if name of operating system as lowercase starts with "win" then (exists setting "_BESClient_Resource_WorkIdle" whose (value of it != "20") of client) OR (exists setting "_BESClient_Resource_SleepIdle" whose (value of it != "480") of client) OR (exists setting "_BESClient_Report_MinimumInterval" whose (value of it != "900") of client) OR (exists setting "_BESClient_Comm_CommandPollEnable" whose (value of it != "1") of client) OR (exists setting "_BESClient_Comm_CommandPollIntervalSeconds" whose (value of it != "3600") of client) OR (exists setting "_BESClient_Register_IntervalSeconds" whose (value of it != "41400") of client) OR (exists setting "_BESClient_RelaySelect_IntervalSeconds" whose (value of it != "302400") of client) OR (exists setting "_BESClient_RelaySelect_ResistFailureIntervalSeconds" whose (value of it != "10800") of client) else (exists setting "_BESClient_Resource_WorkIdle" whose (value of it != "10") of client) OR (exists setting "_BESClient_Resource_SleepIdle" whose (value of it != "480") of client) OR (exists setting "_BESClient_Report_MinimumInterval" whose (value of it != "1800") of client) OR (exists setting "_BESClient_Comm_CommandPollEnable" whose (value of it != "1") of client) OR (exists setting "_BESClient_Comm_CommandPollIntervalSeconds" whose (value of it != "86400") of client) OR (exists setting "_BESClient_Register_IntervalSeconds" whose (value of it != "82800") of client) OR (exists setting "_BESClient_RelaySelect_IntervalSeconds" whose (value of it != "604800") of client) OR (exists setting "_BESClient_RelaySelect_ResistFailureIntervalSeconds" whose (value of it != "21600") of client) + BES Client Settings + danielheth@bigfix.me + <Unspecified> + 2012-02-14 + <Unspecified> + + x-fixlet-modification-time + Wed, 08 Aug 2012 21:11:28 +0000 + + BES + + + Click + here + to deploy this action. + + parameter "IsRelayRunning"="{if name of operating system as lowercase starts with "win" then exists running application "BESRelay.exe" else False}" +if {parameter "IsRelayRunning" as boolean} + //Work/Sleep Speed settings milliseconds + setting "_BESClient_Resource_WorkIdle"="20" on "{now}" for client + setting "_BESClient_Resource_SleepIdle"="480" on "{now}" for client + //update action status (15min) + setting "_BESClient_Report_MinimumInterval"="900" on "{now}" for client + //enable upline querying for cmds (60min) + setting "_BESClient_Comm_CommandPollEnable"="1" on "{now}" for client + setting "_BESClient_Comm_CommandPollIntervalSeconds"="3600" on "{now}" for client + //setup Register/Heartbeat (11.5hrs) and ForceRelaySelect (3.5days) settings + setting "_BESClient_Register_IntervalSeconds"="41400" on "{now}" for client + setting "_BESClient_RelaySelect_IntervalSeconds"="302400" on "{now}" for client + //if com failures occurs, then resist the urge to failover for 3 hours. + setting "_BESClient_RelaySelect_ResistFailureIntervalSeconds"="10800" on "{now}" for client +else + //Work/Sleep Speed settings milliseconds + setting "_BESClient_Resource_WorkIdle"="10" on "{now}" for client + setting "_BESClient_Resource_SleepIdle"="480" on "{now}" for client + //update action status (30min) + setting "_BESClient_Report_MinimumInterval"="1800" on "{now}" for client + //enable upline querying for cmds (24hours) + setting "_BESClient_Comm_CommandPollEnable"="1" on "{now}" for client + setting "_BESClient_Comm_CommandPollIntervalSeconds"="86400" on "{now}" for client + //setup Register/Heartbeat (23hrs) and ForceRelaySelect (7days) settings + setting "_BESClient_Register_IntervalSeconds"="82800" on "{now}" for client + setting "_BESClient_RelaySelect_IntervalSeconds"="604800" on "{now}" for client + //if com failures occurs, then resist the urge to failover for 6 hours. + setting "_BESClient_RelaySelect_ResistFailureIntervalSeconds"="21600" on "{now}" for client +endif + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Configure WebReports Logging (89).bes b/Sites/BigFix Management/Fixlets/Fixlets/Configure WebReports Logging (89).bes new file mode 100644 index 000000000..7ea70f020 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Configure WebReports Logging (89).bes @@ -0,0 +1,57 @@ + + + + + Configure WebReports Logging + This will enable webreports logging...

+

Options for what to log:  none, all, databases, debug, critical, performance, or memory.

]]> + = "6.0"]]> + exists service "BESWebReportsServer" + Configuration + danielheth@bigfix.me + <Unspecified> + 2011-04-28 + <Unspecified> + + x-fixlet-modification-time + Mon, 01 Oct 2012 21:30:49 +0000 + + BES + + + Click + here + to Enable Logging. + + action parameter query "log" with description "WebReports Logging... (none, all, databases, debug, critical, performance, memory):" +// The port number should not be given +continue if {(parameter "log" of action = "none") OR (parameter "log" of action = "all") OR (parameter "log" of action = "databases") OR (parameter "log" of action = "debug") OR (parameter "log" of action = "critical") OR (parameter "log" of action = "performance") OR (parameter "log" of action = "memory")} +if {parameter "log" of action as string as lowercase != "none"} + regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\BESReports]" "EnableLogs"="{parameter "log" of action as string as lowercase}" + parameter "path"="{value "EnterpriseServerFolder" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server" of registry}" + regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB]" "PerformanceDataPath"="{parameter "path"}\WebReports.log" + regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\BESReports]" "LogOn"=dword:1 +else + regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\BESReports]" "LogOn"=dword:0 +endif + + + + + Click + here + to learn more about WebReports Logging. + + http://support.bigfix.com/cgi-bin/kbdirect.pl?id=324 + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Configure download direct domain list with failback (26704).bes b/Sites/BigFix Management/Fixlets/Fixlets/Configure download direct domain list with failback (26704).bes new file mode 100644 index 000000000..87133ce26 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Configure download direct domain list with failback (26704).bes @@ -0,0 +1,48 @@ + + + + + Configure download direct domain list with failback + This task will configure an endpoint to directly download content in actions from the following list of well known domains:

+

*.adobe.com;*.apple.com;*.microsoft.com;*.bigfix.com;*.windowsupdate.com;*.ibm.com;*.google.com;*.mozilla.org

+

Any download from these sites that fails to download directly from the vendor will be configured to try the client's parent relay

+

 

+

Requires a 10.0.1 or higher Bigfix client version.

+

 

]]> + "10.0.0.133"]]> + Internal + 2020-08-11 + + x-fixlet-modification-time + Tue, 11 Aug 2020 20:15:06 +0000 + + BESC + + + Click + here + to deploy this action. + + // turn off global download direct to enable domain based direct download + +setting "_BESClient_Download_Direct"="0" on "{parameter "action issue date" of action}" for client + +// Specify a list of domains to perform direct download against + +setting "_BESClient_Download_Direct_Domainlist"="*.adobe.com;*.apple.com;*.microsoft.com;*.bigfix.com;*.windowsupdate.com;*.ibm.com;*.google.com;*.mozilla.org" on "{parameter "action issue date" of action}" for client + +// enable failback to the relay in case direct downloads fail. + +setting "_BESClient_Download_DirectRecovery"="1" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/DMZ Relay Selection (1370).bes b/Sites/BigFix Management/Fixlets/Fixlets/DMZ Relay Selection (1370).bes new file mode 100644 index 000000000..703fca84d --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/DMZ Relay Selection (1370).bes @@ -0,0 +1,58 @@ + + + + + DMZ Relay Selection + Evenly distribute endpoints across 4 different DMZ relays.

+

When used with Automatic selection, these endpoints, when leaving the internal network, will attempt to do automatic selection but nothing will respond... thus triggering the logic which leads to the failover relay setting configure using this task.

]]> + true + Configuration + danielheth@bigfix.me + <Unspecified> + 2013-01-09 + <Unspecified> + + x-fixlet-modification-time + Wed, 09 Jan 2013 16:20:59 +0000 + + BES + + + Click + here + to deploy this action. + + //determine which group this computer is in then set the relay parameter +parameter "modVal"="{computer id mod 4}" +if {parameter "modVal" = "0"} + parameter "relay"="dmz1.bigfix.me" +elseif {parameter "modVal" = "1"} + parameter "relay"="dmz2.bigfix.me" +elseif {parameter "modVal" = "2"} + parameter "relay"="dmz3.bigfix.me" +else + parameter "relay"="dmz4.bigfix.me" +endif +//configure the failover relay setting +setting "_BESClient_RelaySelect_FailoverRelay"="{parameter "relay" as string}" on "{now}" for client + + + + + Click + here + to learn more about BigFix client settings. + + https://www.ibm.com/developerworks/mydeveloperworks/wikis/home?lang=en#/wiki/Tivoli%20Endpoint%20Manager/page/Configuration%20Settings + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Delete file from multiple locations (2550).bes b/Sites/BigFix Management/Fixlets/Fixlets/Delete file from multiple locations (2550).bes new file mode 100644 index 000000000..5b047e6f8 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Delete file from multiple locations (2550).bes @@ -0,0 +1,41 @@ + + + + + Delete file from multiple locations + Deletes a specfic file from multiple locations. In this specific example, it iterates through each user's desktop looking for the file. This is for Vista+, it is only looking in the \Users\ folder and not Documents and Settings, further tweaks can make this fixlet work for you. + name of operating system as lowercase starts with "win" + exists file "file.ext" of folders "Desktop" of folders of folder "C:\Users\" + Internal + 2013-08-07 + + x-fixlet-modification-time + Thu, 08 Aug 2013 13:29:56 +0000 + + BESC + + + Click + here + to deploy this action. + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Disable ClientUI's use of Internet Explorer (1391).bes b/Sites/BigFix Management/Fixlets/Fixlets/Disable ClientUI's use of Internet Explorer (1391).bes new file mode 100644 index 000000000..5790301ed --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Disable ClientUI's use of Internet Explorer (1391).bes @@ -0,0 +1,60 @@ + + + + + Disable ClientUI's use of Internet Explorer + Problem(Abstract) +

Applying patch MS09-034 on some systems, when logging in to the system prior to rebooting, users might see the following message: "Name: _noselection.html..."

+

Resolving the problem

+
+

+

-----------------------------------------------
Do you want to open or save this file?

Name: _noselection.html

Type: HTML Document, 47 bytes

From:C:\Program Files\BigFix Enterprise\BES Client\__BESData\__UISession\0\
-------------------------------------------

+

The TEM Client log file has the following (similar) entry:
=================
At 17:51:55 -0400 -
User interface process unable to launch (22.1245) for user ''. Retrying every 30
seconds.
User interface process started for user 'UserName'
======================
The issue is with the blank user entry (i.e. user ''.) first line in the log file entry above.

Solutions:
If rebooting the system does not solve the problem and you are not using offers/dashboards, then you can disable the ClientUI's use of Internet Explorer by setting _BESClient_ActionManager_HasMainDialog to "0".

+

In addition, Internet Explorer does not appear to function correctly during this time. To clear the error and enable IE to function correctly, customers indicate that simply rebooting the system will resolve the issue.

+
+

+
+

Historical Number

+

945

]]> + name of operating system as lowercase starts with "win" + (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) + = "5"]]> + = "7.1"]]> + Configuration + danielheth@bigfix.me + <Unspecified> + 2013-01-29 + <Unspecified> + + x-fixlet-modification-time + Tue, 29 Jan 2013 19:23:30 +0000 + + BESC + + + Click + here + to deploy this action. + + NUL 2> NUL]]> + + + + Click + here + to learn more about the _noselection popup message. + + http://www-01.ibm.com/support/docview.wss?uid=swg21505715 + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Distribute 2 Secrets (3678).bes b/Sites/BigFix Management/Fixlets/Fixlets/Distribute 2 Secrets (3678).bes new file mode 100644 index 000000000..5368e65f2 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Distribute 2 Secrets (3678).bes @@ -0,0 +1,53 @@ + + + + + Distribute 2 Secrets +

+

+

+

+

+

 

+

Varient: This variation also includes, a second hardcoded secret. This is not secure on the console or database, but would be secure "in flight" and "on the endpoint" and "in all client logs". If you require "console secure" then you should only use the first method where the taker of the action has to type in the secret when taking the action.

]]> + true + Internal + 2012-07-31 + + x-fixlet-modification-time + Sat, 21 Dec 2013 13:52:46 +0000 + + BESC + + + Click + here + to deploy this action. + + c:\secret +dos echo {parameter "secret2" of action} >> c:\secret + +// uncomment this line to "clean up" the the secret in normal usage. +// delete c:\secret + +// You may prefer to use the secret directly in commands instead of inserting it into a script file. +// if you choose this method, the plaintext secret will only exist briefly in memory on the endpoint during execution. +// dos net user adminstrator {parameter "secret" of action}]]> + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Distribute 2 Secrets (3679).bes b/Sites/BigFix Management/Fixlets/Fixlets/Distribute 2 Secrets (3679).bes new file mode 100644 index 000000000..ac5e2b08d --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Distribute 2 Secrets (3679).bes @@ -0,0 +1,53 @@ + + + + + Distribute 2 Secrets +

+

+

+

+

+

 

+

Varient: This variation also includes, a second hardcoded secret. This is not secure on the console or database, but would be secure "in flight" and "on the endpoint" and "in all client logs". If you require "console secure" then you should only use the first method where the taker of the action has to type in the secret when taking the action.

]]> + true + Internal + 2012-07-31 + + x-fixlet-modification-time + Sat, 21 Dec 2013 13:52:46 +0000 + + BESC + + + Click + here + to deploy this action. + + c:\secret +dos echo {parameter "secret2" of action} >> c:\secret + +// uncomment this line to "clean up" the the secret in normal usage. +// delete c:\secret + +// You may prefer to use the secret directly in commands instead of inserting it into a script file. +// if you choose this method, the plaintext secret will only exist briefly in memory on the endpoint during execution. +// dos net user adminstrator {parameter "secret" of action}]]> + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Distribute Secret (2593).bes b/Sites/BigFix Management/Fixlets/Fixlets/Distribute Secret (2593).bes new file mode 100644 index 000000000..f763ef59e --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Distribute Secret (2593).bes @@ -0,0 +1,47 @@ + + + + + Distribute Secret +
+ + + + + + ]]> + true + Internal + 2012-07-31 + + x-fixlet-modification-time + Tue, 31 Jul 2012 22:12:33 +0000 + + BESC + + + Click + here + to deploy this action. + + c:\secret +]]> + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Edit Computer Settings (22634).bes b/Sites/BigFix Management/Fixlets/Fixlets/Edit Computer Settings (22634).bes new file mode 100644 index 000000000..371a3887a --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Edit Computer Settings (22634).bes @@ -0,0 +1,54 @@ + + + + + Edit Computer Settings + This task will allow non-master operators to add "Client Settings" to computers under their purview.  They will only be able to deploy this task to computers they have access to.

+

 

+

Note:   Because computer settings are usually created via a specific mechanism of the console an additional step will need to be taken after this deployment is complete in order for the setting to be visible under the "Computers" navigator item in the console.  Once deployment of this task is completed, a user must manually assign a value to this setting on any computer (even the original one that this task was deployed to).

+

What this does is force the server to create a "Property" in the properties repository so the value of this setting can be displayed using the "Column Picker".  If this last step is not done the setting will exist in the computer, but it will not be visible in the console.

+

 

+

 

]]> + true + Client Setting + Mike Consuegra - Lighthouse Computer Services + 2016-11-17 + + x-fixlet-first-propagation + Wed, 19 Aug 2009 22:45:57 +0000 + + + x-fixlet-domain_attributes + BES Component Client + + + x-fixlet-modification-time + Fri, 18 Nov 2016 01:02:59 +0000 + + BESC + + + Click + here + to <STRONG>enable this setting</STRONG> + + // Request for user to enter the name of the client setting to be created or modified +action parameter query "SettingName" with description "Please enter the name of the Client Setting to be added/modified" + +// Request for user to enter the value of the client setting to be created or modified +action parameter query "SettingValue" with description "Please enter the value of the Client Setting to be added/modified" + +// Create or modify the client setting as requested above +setting "{parameter "SettingName" of action}"="{parameter "SettingValue" of action}" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Embedded Script Runner (26949).bes b/Sites/BigFix Management/Fixlets/Fixlets/Embedded Script Runner (26949).bes new file mode 100644 index 000000000..2326a2a60 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Embedded Script Runner (26949).bes @@ -0,0 +1,83 @@ + + + + + Embedded Script Runner + Extracts, decodes and executes fixlet embedded scripts

+

NOTE: Fixlets with embedded scripts must reference a valid Applicability Fixlet's ID in the x-fixlet-scm-sentinel-idref MIMField. Embedded scripts will only be extracted and run from Fixlets whose applicability Fixlet evaluates to true.

]]> + true + Utility + Internal + 2022-09-15 + + x-fixlet-modification-time + Thu, 15 Sep 2022 18:57:40 +0000 + + BESC + + + Click + here + to deploy this action. + + ("{parameter "scripts_dir"}/", $scriptname -join "") + try {{ + & ("{parameter "scripts_dir"}/", $scriptname -join "") > ("{parameter "stdout_dir"}/", ($scriptname -replace ".ps1", ".out") -join "") + } catch {{ + Write-Output $error > ("{parameter "stderr_dir"}/", ($scriptname -replace ".ps1", ".err") -join "") + } +} +__EOF +delete base64decode.ps1 +move __createfile base64decode.ps1 +waithidden powershell -F base64decode.ps1 +elseif {(operating system as string) starts with "Linux"} + // WIP +endif]]> + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Enable FillDB Perf Monitor (3628).bes b/Sites/BigFix Management/Fixlets/Fixlets/Enable FillDB Perf Monitor (3628).bes new file mode 100644 index 000000000..f035eefde --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Enable FillDB Perf Monitor (3628).bes @@ -0,0 +1,44 @@ + + + + + Enable FillDB Perf Monitor + This will enable the built in performance monitor features of the FillDB service. + = "6.0"]]> + exists service "FillDB" + NOT (exists value "PerformanceDataPath" whose (it as string != "") of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB" of registry) + BES Server/Relay Setting + danielheth@bigfix.me + <Unspecified> + 2011-04-28 + <Unspecified> + + x-fixlet-modification-time + Mon, 01 Oct 2012 21:30:49 +0000 + + BES + + + Click + here + to Enable FillDB Perfmon. + + +parameter "path"="{value "DataDirectoryPath" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB" of registry}" + +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB]" "PerformanceDataPath"="{parameter "path"}\filldbperf.log" + + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Enable logging for BES Client Helper Service (2567).bes b/Sites/BigFix Management/Fixlets/Fixlets/Enable logging for BES Client Helper Service (2567).bes new file mode 100644 index 000000000..7cce33574 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Enable logging for BES Client Helper Service (2567).bes @@ -0,0 +1,59 @@ + + + + + Enable logging for BES Client Helper Service + + name of operating system as lowercase starts with "win" + exists service "BESClientHelper" + exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\BESClientHelper" of registry + not exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\BESClientHelper" whose(exists value "ServiceInstallationParameters" of it AND (value "ServiceInstallationParameters" of it as string contains "-l")) of registry + Support + Internal + jgstew + 2013-03-12 + + x-fixlet-modification-time + Fri, 16 Aug 2013 22:30:41 +0000 + + BESC + + + Click + here + to deploy this action. + + NUL 2> NUL +move __appendfile netquiet.bat + +waithidden "{pathname of client folder of site "BESSupport" & "\RunQuiet.exe"}" netquiet.bat stop "{parameter "ServiceName" of action}" +waithidden "{pathname of client folder of site "BESSupport" & "\RunQuiet.exe"}" netquiet.bat start "{parameter "ServiceName" of action}" + +delete netquiet.bat +]]> + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Example Parameterized Fixlet with SecureParameters (26939).bes b/Sites/BigFix Management/Fixlets/Fixlets/Example Parameterized Fixlet with SecureParameters (26939).bes new file mode 100644 index 000000000..19e3890c0 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Example Parameterized Fixlet with SecureParameters (26939).bes @@ -0,0 +1,120 @@ + + + + + Example Parameterized Fixlet with SecureParameters + + + + + +

+ +

+ + + + + + + + + + + + +
Parameter1
Parameter2
Secure Parameter3
+ + + + + +]]> + = "9.0"]]> + if exists property "in proxy agent context" then not in proxy agent context else true + Example + Internal + Jason Walker + 2022-07-07 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + + Take Action + + + + +action parameter query "param1" with description "parameter 1" +action parameter query "param2" with description "parameter 2" +// Secure Parameters should not be queried +// action parameter query "param3" with description "parameter 3" +delete __appendfile +appendfile {parameter "param1"} +appendfile {parameter "param2"} +appendfile {parameter "param3"} + + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Export and Delete Expired Actions (3754).bes b/Sites/BigFix Management/Fixlets/Fixlets/Export and Delete Expired Actions (3754).bes new file mode 100644 index 000000000..f6d1909a8 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Export and Delete Expired Actions (3754).bes @@ -0,0 +1,268 @@ + + + + + Export and Delete Expired Actions + Action Parameters:

+

  <<  Enter the IEM Server Operator Name
    <<  Enter the IEM Server Operator Password (Note: This password will be encrypted)
 

_____________________________________________________________________________________________________

+

Description:

+

This task will export expired actions (10 at a time) then delete the actions from the console.

+

Exported actions will reside in C:\Import under as <actionID>.xml

]]> + exists main gather service + (if( name of operating system starts with "Win" ) then platform id of operating system != 3 else true) AND (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) + = "9.0"]]> + mike.english@us.ibm.com + 2013-11-19 + + x-fixlet-modification-time + Fri, 04 Apr 2014 14:08:34 +0000 + + BESC + + + Click + here + to deploy this action. + + c:\import\expiredactionIDs.xml + +delete api.bat +copy __appendfile api.bat +waithidden api.bat + +//Strip XML +delete __appendfile +appendfile {following text of first ">" of (preceding text of first "" of (lines of file "c:\import\expiredactionIDs.xml"))} +move __appendfile "c:\import\expiredActionTuple.txt" +delete "c:\IMPORT\result.xml" +delete "c:\import\expiredactions.xml" + +//verify that tuple exists +if {exists tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredActionTuple.txt" as string))} + +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} login -q --server=localhost --user={parameter "RemoteOP" of action} --password={parameter "RemoteOPPass" of action} +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} get action/{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))} > c:\import\{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))}.xml +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} delete action/{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))} +delete api.bat +copy __appendfile api.bat +waithidden api.bat +delete __appendfile + + if {exists tuple string item 1 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredActionTuple.txt" as string))} + appendfile {following text of first ", " of lines of file "c:\import\expiredactiontuple.txt"} + delete "c:\import\expiredActionTuple.txt" + move __appendfile "c:\import\expiredActionTuple.txt" + delete __appendfile + endif + +endif + +//verify that tuple exists +if {exists tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredActionTuple.txt" as string))} + +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} login -q --server=localhost --user={parameter "RemoteOP" of action} --password={parameter "RemoteOPPass" of action} +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} get action/{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))} > c:\import\{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))}.xml +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} delete action/{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))} +delete api.bat +copy __appendfile api.bat +waithidden api.bat +delete __appendfile + + if {exists tuple string item 1 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredActionTuple.txt" as string))} + appendfile {following text of first ", " of lines of file "c:\import\expiredactiontuple.txt"} + delete "c:\import\expiredActionTuple.txt" + move __appendfile "c:\import\expiredActionTuple.txt" + delete __appendfile + endif + +endif + +//verify that tuple exists +if {exists tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredActionTuple.txt" as string))} + +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} login -q --server=localhost --user={parameter "RemoteOP" of action} --password={parameter "RemoteOPPass" of action} +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} get action/{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))} > c:\import\{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))}.xml +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} delete action/{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))} +delete api.bat +copy __appendfile api.bat +waithidden api.bat +delete __appendfile + + if {exists tuple string item 1 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredActionTuple.txt" as string))} + appendfile {following text of first ", " of lines of file "c:\import\expiredactiontuple.txt"} + delete "c:\import\expiredActionTuple.txt" + move __appendfile "c:\import\expiredActionTuple.txt" + delete __appendfile + endif + +endif + +//verify that tuple exists +if {exists tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredActionTuple.txt" as string))} + +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} login -q --server=localhost --user={parameter "RemoteOP" of action} --password={parameter "RemoteOPPass" of action} +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} get action/{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))} > c:\import\{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))}.xml +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} delete action/{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))} +delete api.bat +copy __appendfile api.bat +waithidden api.bat +delete __appendfile + + if {exists tuple string item 1 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredActionTuple.txt" as string))} + appendfile {following text of first ", " of lines of file "c:\import\expiredactiontuple.txt"} + delete "c:\import\expiredActionTuple.txt" + move __appendfile "c:\import\expiredActionTuple.txt" + delete __appendfile + endif + +endif + +//verify that tuple exists +if {exists tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredActionTuple.txt" as string))} + +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} login -q --server=localhost --user={parameter "RemoteOP" of action} --password={parameter "RemoteOPPass" of action} +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} get action/{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))} > c:\import\{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))}.xml +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} delete action/{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))} +delete api.bat +copy __appendfile api.bat +waithidden api.bat +delete __appendfile + + if {exists tuple string item 1 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredActionTuple.txt" as string))} + appendfile {following text of first ", " of lines of file "c:\import\expiredactiontuple.txt"} + delete "c:\import\expiredActionTuple.txt" + move __appendfile "c:\import\expiredActionTuple.txt" + delete __appendfile + endif + +endif + +//verify that tuple exists +if {exists tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredActionTuple.txt" as string))} + +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} login -q --server=localhost --user={parameter "RemoteOP" of action} --password={parameter "RemoteOPPass" of action} +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} get action/{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))} > c:\import\{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))}.xml +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} delete action/{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))} +delete api.bat +copy __appendfile api.bat +waithidden api.bat +delete __appendfile + + if {exists tuple string item 1 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredActionTuple.txt" as string))} + appendfile {following text of first ", " of lines of file "c:\import\expiredactiontuple.txt"} + delete "c:\import\expiredActionTuple.txt" + move __appendfile "c:\import\expiredActionTuple.txt" + delete __appendfile + endif + +endif + +//verify that tuple exists +if {exists tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredActionTuple.txt" as string))} + +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} login -q --server=localhost --user={parameter "RemoteOP" of action} --password={parameter "RemoteOPPass" of action} +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} get action/{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))} > c:\import\{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))}.xml +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} delete action/{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))} +delete api.bat +copy __appendfile api.bat +waithidden api.bat +delete __appendfile + + if {exists tuple string item 1 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredActionTuple.txt" as string))} + appendfile {following text of first ", " of lines of file "c:\import\expiredactiontuple.txt"} + delete "c:\import\expiredActionTuple.txt" + move __appendfile "c:\import\expiredActionTuple.txt" + delete __appendfile + endif + +endif + +//verify that tuple exists +if {exists tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredActionTuple.txt" as string))} + +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} login -q --server=localhost --user={parameter "RemoteOP" of action} --password={parameter "RemoteOPPass" of action} +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} get action/{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))} > c:\import\{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))}.xml +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} delete action/{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))} +delete api.bat +copy __appendfile api.bat +waithidden api.bat +delete __appendfile + + if {exists tuple string item 1 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredActionTuple.txt" as string))} + appendfile {following text of first ", " of lines of file "c:\import\expiredactiontuple.txt"} + delete "c:\import\expiredActionTuple.txt" + move __appendfile "c:\import\expiredActionTuple.txt" + delete __appendfile + endif + +endif + +//verify that tuple exists +if {exists tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredActionTuple.txt" as string))} + +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} login -q --server=localhost --user={parameter "RemoteOP" of action} --password={parameter "RemoteOPPass" of action} +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} get action/{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))} > c:\import\{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))}.xml +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} delete action/{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))} +delete api.bat +copy __appendfile api.bat +waithidden api.bat +delete __appendfile + + if {exists tuple string item 1 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredActionTuple.txt" as string))} + appendfile {following text of first ", " of lines of file "c:\import\expiredactiontuple.txt"} + delete "c:\import\expiredActionTuple.txt" + move __appendfile "c:\import\expiredActionTuple.txt" + delete __appendfile + endif + +endif + +//verify that tuple exists +if {exists tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredActionTuple.txt" as string))} + +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} login -q --server=localhost --user={parameter "RemoteOP" of action} --password={parameter "RemoteOPPass" of action} +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} get action/{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))} > c:\import\{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))}.xml +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} delete action/{tuple string item 0 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredactiontuple.txt" as string))} +delete api.bat +copy __appendfile api.bat +waithidden api.bat +delete __appendfile + + if {exists tuple string item 1 of (concatenation ", " of (substrings separated by ", " of lines of file "c:\import\expiredActionTuple.txt" as string))} + appendfile {following text of first ", " of lines of file "c:\import\expiredactiontuple.txt"} + delete "c:\import\expiredActionTuple.txt" + move __appendfile "c:\import\expiredActionTuple.txt" + delete __appendfile + endif + +endif]]> + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Fix SUA server JVM max memory to resolve catalog import issue (3654).bes b/Sites/BigFix Management/Fixlets/Fixlets/Fix SUA server JVM max memory to resolve catalog import issue (3654).bes new file mode 100644 index 000000000..d31a390f3 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Fix SUA server JVM max memory to resolve catalog import issue (3654).bes @@ -0,0 +1,40 @@ + + + + + Fix SUA server JVM max memory to resolve catalog import issue + This fixlet is meant to address the issue found here: http://www-01.ibm.com/support/docview.wss?uid=swg21638307

+

Latest version found here: http://bigfix.me/fixlet/details/3653

]]> + windows of operating system + + /* Relevant on SUA server that does not have the JAVA max memory set to 1.5gb */ 1536 != ((it as string as integer) of (value "JvmMx" of key "TEMA\Parameters\Java" of key whose(exists key "TEMA" of it) of key "HKEY_LOCAL_MACHINE\SOFTWARE\Apache Software Foundation" of registry)) + Internal + jgstew + 2013-11-06 + + x-fixlet-modification-time + Thu, 07 Nov 2013 17:33:27 +0000 + + BESC + + + Click + here + to deploy this action. + + +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\Apache Software Foundation\Procrun 2.0\TEMA\Parameters\Java]" "JvmMx"=dword:{1536 as hexadecimal} + +// The SUA service will need restarted for this change to take effect, but that is probably better handled seperately during a maintance window. + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Flash Workaround_ Enable Flash Content for OS Deployment Dashboards (26729).bes b/Sites/BigFix Management/Fixlets/Fixlets/Flash Workaround_ Enable Flash Content for OS Deployment Dashboards (26729).bes new file mode 100644 index 000000000..e4b9795a1 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Flash Workaround_ Enable Flash Content for OS Deployment Dashboards (26729).bes @@ -0,0 +1,44 @@ + + + + + Flash Workaround: Enable Flash Content for OS Deployment Dashboards + Enable Flash Content for OS Deployment Dashboards
+
This Fixlet enables Flash content for the "OS Deployment and Bare Metal Imaging" dashboards, by adding the local file directory paths as  AllowListUrlPattern entries at \Windows\SysWow64\Macromed\Flash\mms.cfg
+
This allows (temporarily) the continued use of Flash-based dashboards for the OS Deployment and Bare Metal Imaging site.
+
 
+
This Fixlet assumes default cache paths for the BigFix Console, and applies the updates only for users who have previously logged on and used the BigFix Console.  It may need to be re-executed periodically to find new BigFix Console paths as additional users execute the Console.
+
 
+
For more details on this workaround to allow Flash content in the Console, please see the BigFix Forum topic at https://forum.bigfix.com/t/bigfix-flash-announcement/35218
]]> + windows of operating system AND (if exists property "in proxy agent context" then not in proxy agent context else true) + 0) of ((item 1 of it - item 0 of it)) of (set of lines of files "mms.cfg" of folders "Macromed\Flash" of system folder, set of ("AllowListUrlPattern=file:///" & concatenation "%2520" of substrings separated by " " of concatenation "/" of substrings separated by "\" of it) of (pathnames of folders "Sites\OS Deployment and Bare Metal Imaging" of folders of folders of folders "AppData\Local\BigFix\Enterprise Console" of folders (expand environment strings of (values "ProfileImagePath" of keys whose (name of it starts with "S-1-5-21-") of keys "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" of native registry as string))))]]> + Internal + 2021-01-13 + + x-fixlet-modification-time + Wed, 13 Jan 2021 23:23:35 +0000 + + BESC + + + Click + here + to deploy this action. + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Flash Workaround_ Enable Flash Content for Software Distribution Dashboard (26730).bes b/Sites/BigFix Management/Fixlets/Fixlets/Flash Workaround_ Enable Flash Content for Software Distribution Dashboard (26730).bes new file mode 100644 index 000000000..3d9d7e436 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Flash Workaround_ Enable Flash Content for Software Distribution Dashboard (26730).bes @@ -0,0 +1,47 @@ + + + + + Flash Workaround: Enable Flash Content for Software Distribution Dashboard + Enable Flash Content for Software Distribution Dashboard
+
This Fixlet enables Flash content for the "Software Distribution" dashboards, by adding the local file directory paths as  AllowListUrlPattern entries at \Windows\SysWow64\Macromed\Flash\mms.cfg
+
This allows (temporarily) the continued use of Flash-based dashboards for the Software Distribution.
+
 
+
This Fixlet assumes default cache paths for the BigFix Console, and applies the updates only for users who have previously logged on and used the BigFix Console.  It may need to be re-executed periodically to find new BigFix Console paths as additional users execute the Console.
+
 
+
For more details on this workaround to allow Flash content in the Console, please see the BigFix Forum topic at https://forum.bigfix.com/t/bigfix-flash-announcement/35218
]]> + windows of operating system AND (if exists property "in proxy agent context" then not in proxy agent context else true) + 0) of ((item 1 of it - item 0 of it)) of (set of lines of files "mms.cfg" of folders "Macromed\Flash" of system folder, set of ("AllowListUrlPattern=file:///" & concatenation "%2520" of substrings separated by " " of concatenation "/" of substrings separated by "\" of it) of (pathnames of folders "Sites\OS Deployment and Bare Metal Imaging" of folders of folders of folders "AppData\Local\BigFix\Enterprise Console" of folders (expand environment strings of (values "ProfileImagePath" of keys whose (name of it starts with "S-1-5-21-") of keys "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" of native registry as string))))]]> + TrueNope + Flash Workaround: Enable Flash Content for Dashboards + 2021-01-14 + TrueNope + + x-fixlet-modification-time + Thu, 14 Jan 2021 14:32:37 +0000 + + BESC + + + Click + here + to deploy this action. + + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Force BES Clients to Run Manual Relay Selection (342).bes b/Sites/BigFix Management/Fixlets/Fixlets/Force BES Clients to Run Manual Relay Selection (342).bes new file mode 100644 index 000000000..657418787 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Force BES Clients to Run Manual Relay Selection (342).bes @@ -0,0 +1,56 @@ + + + + + Force BES Clients to Run Manual Relay Selection +

Use this task to make the BES Client's re-check for more optimal BES Relays.

When a BES Client is using manual Relay selection, the BES Client will choose its BES Relay in the following order (the primary, secondary, and failover relay settings are set using the "Edit Settings" dialog):

  1. Primary BES Relay
  2. Secondary BES Relay
  3. Failover BES Relay
  4. Main BES Server

If the BES Client's current relay becomes unavailable, it will try to connect to another relay using the order above. Once it connects to a different relay, it will re-check for a better relay periodically (6 hours by default). Using this Task will make the BES Client check for a better relay immediately.

Note: During the re-selection process, the BES Client will send out a negligible amount of ICMP packets to the BES Relays in the list above to figure out the distance to each relay (similar to the "tracert" algorithm).

Note: Do not set the "Reapply" behavior when taking this action or you may cause the BES Client to constantly perform manual relay selection.

 

+]]> + (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) + = "5.1"]]> + (not exists values of settings "__RelaySelect_Automatic" of client) OR (value of setting "__RelaySelect_Automatic" of client = "0") + Support + BigFix + <Unspecified> + 2007-01-04 + Low + + x-fixlet-domain_attributes + BES Component Client + + + x-fixlet-first-propagation + Fri, 29 Dec 2006 19:19:03 +0000 + + + x-fixlet-modification-time + Fri, 29 Jun 2012 22:02:45 +0000 + + BESC + + + Click + here + to make the BES Client run manual relay selection. + + relay select + + + + Click + here + for more information on manual relay selection. + + http://www-01.ibm.com/support/docview.wss?uid=swg21506250 + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Force BES Clients to Run Relay Autoselection (532).bes b/Sites/BigFix Management/Fixlets/Fixlets/Force BES Clients to Run Relay Autoselection (532).bes new file mode 100644 index 000000000..d676d27eb --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Force BES Clients to Run Relay Autoselection (532).bes @@ -0,0 +1,56 @@ + + + + + Force BES Clients to Run Relay Autoselection +

BES Clients that are set to automatically select the closest BES Relay run the algorithm to choose a new BES Relay every six hours by default. By clicking below you can tell the BES Clients to run the relay selection algorithm immediately.

Note: Do not set the "Reapply" behavior when taking this action or you may cause the BES Client to constantly perform auto relay selection.

Note: Depending on the details of your network, causing all the BES Clients to simultaneously do relay autoselection might cause a heavy load on the routers while they handle the ICMP traffic from the BES Clients. If you are worried about this, use the "temporal distribution" option when sending this action.

+]]> + (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) + = "5.1"]]> + (exists setting "__RelaySelect_Automatic" of client) AND ((exists setting "__RelaySelect_Automatic" of client) and (value of setting "__RelaySelect_Automatic" of client = "1")) + Support + BigFix + <Unspecified> + 2004-10-19 + Low + + x-fixlet-domain_attributes + BES Component Client + + + x-fixlet-modification-time + Sat, 12 May 2012 00:55:27 +0000 + + + x-fixlet-first-propagation + Thu, 07 Oct 2004 02:16:15 +0000 + + BESC + + + Click + here + to make the BES Client run manual relay selection. + + relay select + + + + Click + here + to make the BES Client run relay autoselection. + + relay select + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Force Refresh (21737).bes b/Sites/BigFix Management/Fixlets/Fixlets/Force Refresh (21737).bes new file mode 100644 index 000000000..75cf56780 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Force Refresh (21737).bes @@ -0,0 +1,40 @@ + + + + + Force Refresh + Force the Bigfix Agent to check-in. This task is useful when the client is unable to receive UDP Pings, a technician can instruct the end-user to open the UI and force the BigFix Agent to check-in.

+

To enable the re-offer when applicable, the following relevance must be applied to the action:
not exists last active time of action or ( absolute value of ( now - last active time of action ) ) > 1 * second

+

References:

+]]> + true + Internal + 2016-09-22 + + x-fixlet-modification-time + Wed, 28 Sep 2016 02:21:08 +0000 + + BESC + + + + Report now + &nbsp; + + // Enter your action script here +notify client ForceRefresh + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/ForceRefresh BESClient if it has been a while - Universal (6033).bes b/Sites/BigFix Management/Fixlets/Fixlets/ForceRefresh BESClient if it has been a while - Universal (6033).bes new file mode 100644 index 000000000..9e73308ad --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/ForceRefresh BESClient if it has been a while - Universal (6033).bes @@ -0,0 +1,38 @@ + + + + + ForceRefresh BESClient if it has been a while - Universal + + 10*day) of minimum of subscribe times of sites]]> + 1*hour) of last command time of client]]> + not exists lines whose(it as lowercase contains "forcerefresh" AND it as lowercase contains "command received.") of files whose(exists lines of it AND (name of it as lowercase ends with ".log" OR name of it as lowercase ends with ".bkg") AND name of it starts with ( (it as string) of (it as integer / 100) of current year ) ) of folders "Logs" of folders "__Global" of ( (if (exists properties whose(it as string starts with "data folder of " AND it as string contains "client")) then (data folder of client) else NULL)|(folder "/var/opt/BESClient/__BESData")|(folder "/Library/Application Support/BigFix/BES Agent/__BESData")|(folder "__BESData" of parent folder of client) ) + Internal + 2015-04-23 + + x-fixlet-modification-time + Thu, 23 Apr 2015 17:45:19 +0000 + + BESC + + + Click + here + to deploy this action. + + +notify client ForceRefresh + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Full Cleanup of Old Sites on BES Relay (6256).bes b/Sites/BigFix Management/Fixlets/Fixlets/Full Cleanup of Old Sites on BES Relay (6256).bes new file mode 100644 index 000000000..8a9f78401 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Full Cleanup of Old Sites on BES Relay (6256).bes @@ -0,0 +1,74 @@ + + + + + Full Cleanup of Old Sites on BES Relay + This task will rename the GatherState.xml and bfemapfile.xml files on the relay and delete the bfsites folder, then restart the BES Relay service to cleanup old sites and reinitialize the gather process. 

+

When attempting to use this task on all relays, run it first on the bottom tier of relays and work up to the server one tier at a time.

+

NOTE: This task should be deployed only at the direction of BigFix support.

]]> + exists regapp "besrelay.exe" + Troubleshooting + BigFix + 2009-05-06 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click&nbsp; + here + &nbsp;to deploy this action. + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Hide BES Clients from the Add_Remove Programs List - BES Client _ 8.0 (539).bes b/Sites/BigFix Management/Fixlets/Fixlets/Hide BES Clients from the Add_Remove Programs List - BES Client _ 8.0 (539).bes new file mode 100644 index 000000000..324c434d9 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Hide BES Clients from the Add_Remove Programs List - BES Client _ 8.0 (539).bes @@ -0,0 +1,62 @@ + + + + + Hide BES Clients from the Add/Remove Programs List - BES Client < 8.0 +
Note: After applying this action, Task #252 will become relevant and will allow you to restore the BES Client entry to the "Add/Remove Programs" list.

Note: On BES Client upgrades, the BES Client entry will be automatically restored to the "Add/Remove Programs" list. To prevent this from happening, you can apply this action as a "policy" action. +]]> + (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) + = "5.1"]]> + = "8.0") then (windows of it) else (name of it starts with "Win")) AND platform id of it != 3) of operating system]]> + + exists key whose (exists value "DisplayName" of it AND value "DisplayName" of it = "BigFix Enterprise Client" AND name of it starts with "{") of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall" of registry + not exists key "HKEY_CLASSES_ROOT\Installer\Products\CB3207FBB9131EF45B968C451AF9188F" of registry + Support + BigFix + <Unspecified> + 2026-09-17 + <Unspecified> + + x-fixlet-domain_attributes + BES Component Client + + + x-fixlet-modification-time + Sat, 12 May 2012 00:55:27 +0000 + + + x-fixlet-first-propagation + Thu, 03 Feb 2005 17:59:20 +0000 + + BESC + + + Click + here + to hide the BES Client from the "Add/Remove Programs" list. + + parameter "guid" = "{(name of it) of (key whose (value "DisplayName" of it = "BigFix Enterprise Client" and name of it starts with "{") of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall" of registry)}" +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{parameter "guid"}]" "RemovedDisplayName"="BigFix Enterprise Client" +continue if {exists key whose (exists value "RemovedDisplayName" of it and value "RemovedDisplayName" of it = "BigFix Enterprise Client" and name of it starts with "{") of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall" of registry} +regdelete "[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{parameter "guid"}]" "DisplayName" + + + + Click + here + for information on how to make this action a "policy" action that will automatically open the BES port on any computer that has this Fixlet message relevant. + + http://support.bigfix.com/cgi-bin/kbdirect.pl?id=113 + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Hide BES Clients from the Add_Remove Programs List - BES Client _= 8.0 (248).bes b/Sites/BigFix Management/Fixlets/Fixlets/Hide BES Clients from the Add_Remove Programs List - BES Client _= 8.0 (248).bes new file mode 100644 index 000000000..7cb4f3a59 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Hide BES Clients from the Add_Remove Programs List - BES Client _= 8.0 (248).bes @@ -0,0 +1,68 @@ + + + + + Hide BES Clients from the Add/Remove Programs List - BES Client >= 8.0 + The standard BES Client installation package will list the BES Client in the Windows "Add/Remove Programs" Tool. Any user logged in with sufficient privileges can see and remove the BES Client using "Add/Remove Programs". Use the action below to remove the BES Client entry from the "Add/Remove Programs" list.

Note: After applying this action, Task #714 will become relevant and will allow you to restore the BES Client entry to the "Add/Remove Programs" list.

Note: On BES Client upgrades, the BES Client entry will be automatically restored to the "Add/Remove Programs" list. To prevent this from happening, you can apply this action as a "policy" action. +]]> + (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) + = "5.1"]]> + = "8.0"]]> + = "8.0") then (windows of it) else (name of it starts with "Win")) AND platform id of it != 3) of operating system]]> + exists key whose (value "ProductName" of it = "BigFix Enterprise Client" OR value "ProductName" of it = "Tivoli Endpoint Manager Client" OR value "ProductName" of it = "Trend Micro Endpoint Security Platform") of keys "HKEY_CLASSES_ROOT\Installer\Products" of native registry + Support + BigFix + <Unspecified> + 2026-09-17 + <Unspecified> + + x-fixlet-domain_attributes + BES Component Client + + + x-fixlet-modification-time + Sat, 12 May 2012 00:55:27 +0000 + + + x-fixlet-first-propagation + Thu, 29 Jul 2010 17:34:32 +0000 + + BESC + + + Click + here + to hide the BES Client from the "Add/Remove Programs" list. + + regset64 "[HKEY_CLASSES_ROOT\Installer\Products\{name of key whose (value "ProductName" of it = "BigFix Enterprise Client" OR value "ProductName" of it = "Tivoli Endpoint Manager Client" OR value "ProductName" of it = "Trend Micro Endpoint Security Platform") of keys "HKEY_CLASSES_ROOT\Installer\Products" of native registry}]" "RemovedProductName"="{value "ProductName" of key whose (value "ProductName" of it = "BigFix Enterprise Client" OR value "ProductName" of it = "Tivoli Endpoint Manager Client" OR value "ProductName" of it = "Trend Micro Endpoint Security Platform") of keys "HKEY_CLASSES_ROOT\Installer\Products" of native registry}" +continue if {exists key whose (value "RemovedProductName" of it = "BigFix Enterprise Client" OR value "ProductName" of it = "Tivoli Endpoint Manager Client" OR value "ProductName" of it = "Trend Micro Endpoint Security Platform") of keys "HKEY_CLASSES_ROOT\Installer\Products" of native registry} +regdelete64 "[HKEY_CLASSES_ROOT\Installer\Products\{name of key whose (value "ProductName" of it = "BigFix Enterprise Client" OR value "ProductName" of it = "Tivoli Endpoint Manager Client" OR value "ProductName" of it = "Trend Micro Endpoint Security Platform") of keys "HKEY_CLASSES_ROOT\Installer\Products" of native registry}]" "ProductName" + + + + Click + here + for information on how to make this action a "policy" action that will automatically open the BES port on any computer that has this Fixlet message relevant. + + http://support.bigfix.com/cgi-bin/kbdirect.pl?id=113 + + + + Click + here + for information on how to make this action a "policy" action. + + http://support.bigfix.com/cgi-bin/kbdirect.pl?id=113 + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Hide BES Clients from the Add_Remove Programs List - MSI (554).bes b/Sites/BigFix Management/Fixlets/Fixlets/Hide BES Clients from the Add_Remove Programs List - MSI (554).bes new file mode 100644 index 000000000..6c22e048b --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Hide BES Clients from the Add_Remove Programs List - MSI (554).bes @@ -0,0 +1,58 @@ + + + + + Hide BES Clients from the Add/Remove Programs List - MSI +
Note: After applying this action, Fixlet #326 will become relevant and will allow you to restore the BES Client entry to the "Add/Remove Programs" list.

Note: On BES Client upgrades, the BES Client entry will be automatically restored to the "Add/Remove Programs" list. To prevent this from happening, you can apply this action as a "policy" action. +]]> + (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) + = "5.1"]]> + = "8.0") then (windows of it) else (name of it starts with "Win")) AND platform id of it != 3) of operating system]]> + exists key "HKEY_CLASSES_ROOT\Installer\Products\CB3207FBB9131EF45B968C451AF9188F" whose (exists value "ProductName" of it) of registry + Support + BigFix + <Unspecified> + 2026-09-17 + <Unspecified> + + x-fixlet-domain_attributes + BES Component Client + + + x-fixlet-modification-time + Sat, 12 May 2012 00:55:27 +0000 + + + x-fixlet-first-propagation + Fri, 05 Aug 2005 23:00:14 +0000 + + BESC + + + Click + here + to hide the BES Client from the "Add/Remove Programs" list. + + regset "[HKEY_CLASSES_ROOT\Installer\Products\CB3207FBB9131EF45B968C451AF9188F]" "RemovedProductName"="{value "ProductName" of key "HKEY_CLASSES_ROOT\Installer\Products\CB3207FBB9131EF45B968C451AF9188F" of registry}" +regdelete "[HKEY_CLASSES_ROOT\Installer\Products\CB3207FBB9131EF45B968C451AF9188F]" "ProductName" + + + + Click + here + for information on how to make this action a "policy" action that will automatically open the BES port on any computer that has this Fixlet message relevant. + + http://support.bigfix.com/cgi-bin/kbdirect.pl?id=113 + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Hide Tivoli Remote Control Target from the Add_Remove Programs List (3939).bes b/Sites/BigFix Management/Fixlets/Fixlets/Hide Tivoli Remote Control Target from the Add_Remove Programs List (3939).bes new file mode 100644 index 000000000..1ca72fd34 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Hide Tivoli Remote Control Target from the Add_Remove Programs List (3939).bes @@ -0,0 +1,58 @@ + + + + + Hide Tivoli Remote Control Target from the Add/Remove Programs List + + + +The standard TRC installation package will list the TRC Target in the Windows "Add/Remove Programs" Tool. Any user logged in with sufficient privileges can see and remove the TRC Target using "Add/Remove Programs". Use the action below to remove the BES Client entry from the "Add/Remove Programs" list.]]> + (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) + = "7.2"]]> + (name of it starts with "Win" AND platform id of it != 3) of operating system + 1 = number of keys whose ((it = "IBM Endpoint Manager for Remote Control - Target") of value "ProductName" of it) of keys "HKEY_CLASSES_ROOT\Installer\Products" of native registry + Support + BigFix + <Unspecified> + 2015-01-07 + <Unspecified> + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to hide the TRC Target from the "Add/Remove Programs" list. + + + + + + Click + here + for information on how to make this action a "policy" action. + + http://support.bigfix.com/cgi-bin/kbdirect.pl?id=113 + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/IE 7_8 May Cause Script Errors in the BES Console (613).bes b/Sites/BigFix Management/Fixlets/Fixlets/IE 7_8 May Cause Script Errors in the BES Console (613).bes new file mode 100644 index 000000000..52bcf1985 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/IE 7_8 May Cause Script Errors in the BES Console (613).bes @@ -0,0 +1,48 @@ + + + + + IE 7/8 May Cause Script Errors in the BES Console +
To resolve this issue, use the action below to set a registry value that adds the BES Console to a list of applications that "opt out" of the script blocking feature.

Note: The BES Console must be restarted for this fix to take effect. +]]> + exists regapp "BESConsole.exe" + (it = "7" OR it = "8") of version of regapp "iexplore.exe" + not exists key "FEATURE_BLOCK_LMZ_SCRIPT" whose (value "BESConsole.exe" of it=0) of keys "HKLM\Software\Microsoft\Internet Explorer\Main\FeatureControl\" of registry + Support + BigFix + <Unspecified> + 2026-09-17 + Important + + x-fixlet-modification-time + Sat, 12 May 2012 00:55:27 +0000 + + + x-fixlet-first-propagation + Thu, 19 Oct 2006 19:58:29 +0000 + + + x-fixlet-domain_attributes + BES Potential + + BESC + + + Click + here + to resolve this issue. + + regset "[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT]" "BESConsole.exe"=dword:00000000 + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Import Fixlet and Packages From Remote IEM Server (3757).bes b/Sites/BigFix Management/Fixlets/Fixlets/Import Fixlet and Packages From Remote IEM Server (3757).bes new file mode 100644 index 000000000..4ff5476e1 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Import Fixlet and Packages From Remote IEM Server (3757).bes @@ -0,0 +1,201 @@ + + + + + Import Fixlet and Packages From Remote IEM Server + Action Parameters:

+

  <<  Enter the Exporting IEM Server IP Address or Hostname
  <<  Enter the Exporting/Importing IEM Server Communication Port
  <<  Enter the Exporting IEM Server Operator Name (Note: This account must have READ access on the export site)
    <<  Enter the Exporting IEM Server Operator Password (Note: This password will be encrypted)
  <<  Enter the Exporting IEM Server Site
                                               (Note: For the Master Action Site type: master -  For Custom Sites use: custom/<site> -   For External Sites use: external/<site>)
  <<  Enter the Exporting IEM Server Fixlet ID (Fixlet, Task, Analyses or Group ID) (Note: for Groups, remove the '##-' prefix from the ID)
  <<  Enter the Importing IEM Server Site
                                               (Note: For the Master Action Site type: master -  For Custom Sites use: custom/<site> -   For External Sites use: external/<site>)
  <<  Enter the Importing IEM Server Operator Name (Note: This account must have WRITE access on the import site)
    <<  Enter the Importing IEM Server Operator Password (Note: This password will be encrypted)
  << Import Pre-Cached Packages?

_____________________________________________________________________________________________________

+

Description:

+
    +
  • This Task will export a single Fixlet, Task, Baseline, Group or Analyses from a remote IEM Server and import it. +
      +
    •  The action must be deployed on the Importing IEM Server 
    +
  • Fixlets and Tasks with packages that are pre-cached will also be downloaded and placed in the same directory structure as the Remote IEM Server (You must type 'yes' in the 'Import Pre-cached Packages' field to enable this option) +
      +
    • If more than 10 pre-cached packages are required, you will need to expand the tuple range in the action script +
    • This will work on Software Distribution Tasks utilizing SWDProtocol as well as task utilizing DOWNLOAD and PREFETCH commands. +
    • This will NOT import packages into the SWD Manage Software Distribution Dashboard +
        +
      • Imported SWD Tasks will be available in the Software Package Distribution Tasks
    +
  • Download URL's for pre-cached packages that are not pointing to either 127.0.0.1 or localhost will be modified to point to 127.0.0.1
    +
  • The logs import.txt, import_err.txt and export_err.txt located in C:\Import can be used for troubleshooting
+

Use Case:
Can be used to propagate IEM content between different systems (eg: Development > QA > Production)

+

Prerequisites:
Importing and Exporting IEM server must be version 9.x (This utilizes the REST API)

Importing IEM Server must have Wget for Windows installed (default location: %ProgramFiles(x86)%\GnuWin32)
(This is required as the REST API does not currently support exporting and the Action Script Download commands do not support HTTPS)

Importing IEM Sever must have directory C:\Imports (will be created if it does not exist)

+

Importing IEM Server must have Operator account with write permission on the site importing to.

+

Exporting IEM Server must have normal operator account with read permissions on site exporting from.
(It may be best to create an 'EXPORT' operator account with read permission for all sites but manages no endpoints.)

+

 

]]> + exists main gather service + (if( name of operating system starts with "Win" ) then platform id of operating system != 3 else true) AND (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) + = "9.0"]]> + mike.english@us.ibm.com + 2013-11-19 + + x-fixlet-modification-time + Sat, 05 Apr 2014 12:46:04 +0000 + + BESC + + + Click + here + to deploy this action. + + "c:\import\export_err.txt" +endif + +continue if {exist file ((value of variable "ProgramFiles" of environment) & "\GnuWin32\bin\wget.exe")} + +//Export fixlet from remote IEM server +delete c:\IMPORT\{parameter "RemoteFixletID" of action}.xml +delete c:\IMPORT\{parameter "RemoteFixletID" of action}.bak +delete c:\IMPORT\import.txt +delete c:\IMPORT\import_err.txt +delete c:\IMPORT\export_err.txt +wait {((value of variable "ProgramFiles" of environment) & "\GnuWin32\bin\wget.exe")} -a c:\import\import.txt -O c:\IMPORT\{parameter "RemoteFixletID" of action}.xml --user={parameter "RemoteOP" of action} --password={parameter "RemoteOPPass" of action} "https:{"//"}{parameter "RemoteIEM" of action}:{parameter "RemoteIEMPort" of action}/api/fixlet/{parameter "RemoteSite" of action}/{parameter "RemoteFixletID" of action}" --no-check-certificate + +//check for errors +if {size of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml") = 0} + dos echo "EXPORT ERROR: Check username/password, Site Name and Fixlet ID" > "c:\import\export_err.txt" +endif + +continue if {size of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml") > 0} + +//iterate through the xml replacing hostname where necessary +delete __appendfile +appendfile {concatenation "%0d%0a" of ( if (it contains (tuple string item 0 of concatenation ", " of (preceding texts of firsts (":" & (parameter "RemoteIEMPort" of action)) of (following texts of firsts "://" of (lines whose (it as lowercase contains "uploads" and it contains (":" & (parameter "RemoteIEMPort" of action))) of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) | false then ((preceding text of first (tuple string item 0 of concatenation ", " of (preceding texts of firsts (":" & (parameter "RemoteIEMPort" of action)) of (following texts of firsts "://" of (lines whose (it as lowercase contains "uploads" and it contains (":" & (parameter "RemoteIEMPort" of action))) of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml"))))) of it) & "127.0.0.1" & (following text of first (tuple string item 0 of concatenation ", " of (preceding texts of firsts (":" & (parameter "RemoteIEMPort" of action)) of (following texts of firsts "://" of (lines whose (it as lowercase contains "uploads" and it contains (":" & (parameter "RemoteIEMPort" of action))) of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml"))))) of it) ) else it ) of lines of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")} +// backup the old file +move {("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")} {("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".bak")} +// replace with the new file +move __appendfile {("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")} + + +//Login API +dos {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} login -q --server=localhost --user={parameter "LocalOP" of action} --password={parameter "LocalOPPass" of action} 2> c:\import\import_err.txt + +//check for login errors errors +continue if {exist file "c:\import\import_err.txt" whose (not exist line 1 of it)} + +//Import Fixlet +dos {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} post c:\import\{parameter "RemoteFixletID" of action}.xml import/{parameter "LocalSite" of action} 1>> c:\import\import.txt 2> c:\import\import_err.txt + +//check for invalid local site +continue if {exist file "c:\import\import_err.txt" whose (not exist line 1 of it)} + +//Import packages pre-cached on remote IEM Server +if {parameter "ImportPkg" of action = "yes"} + + if {exists tuple string item 0 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml"))} + if {(it as lowercase = "localhost" or it = "127.0.0.1") of (preceding text of first (":" & (parameter "RemoteIEMPort" of action)) of (following text of first "http://" of ("http://" & (following text of first "://" of (tuple string item 0 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml"))))))))} + wait { ((value of variable "ProgramFiles" of environment) & "\GnuWin32\bin\wget.exe")} -a c:\import\import.txt -P {(concatenation "/" of (substrings separated by "\" of (preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\wwwrootbes\" & ( (preceding text of last "/" of following text of first (":" & (parameter "RemoteIEMPort" of action) & "/") of tuple string item 0 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) & "/%22")} {concatenation (parameter "RemoteIEM" of action) of (substrings separated by (preceding text of first (":" & (parameter "RemoteIEMPort" of action)) of (following text of first "//" of (tuple string item 0 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) of ("http://" & (following text of first "://" of (tuple string item 0 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))))} + else + wait { ((value of variable "ProgramFiles" of environment) & "\GnuWin32\bin\wget.exe")} -a c:\import\import.txt -P {(concatenation "/" of (substrings separated by "\" of (preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\wwwrootbes\" & ( (preceding text of last "/" of following text of first (":" & (parameter "RemoteIEMPort" of action) & "/") of tuple string item 0 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) & "/%22")} {"http://" & (parameter "RemoteIEM" of action) & ":" & (parameter "RemoteIEMPort" of action) & (following text of first ":52311" of (tuple string item 0 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))} + endif + endif + + if {exists tuple string item 1 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml"))} + if {(it as lowercase = "localhost" or it = "127.0.0.1") of (preceding text of first (":" & (parameter "RemoteIEMPort" of action)) of (following text of first "http://" of ("http://" & (following text of first "://" of (tuple string item 1 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml"))))))))} + wait { ((value of variable "ProgramFiles" of environment) & "\GnuWin32\bin\wget.exe")} -a c:\import\import.txt -P {(concatenation "/" of (substrings separated by "\" of (preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\wwwrootbes\" & ( (preceding text of last "/" of following text of first (":" & (parameter "RemoteIEMPort" of action) & "/") of tuple string item 1 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) & "/%22")} {concatenation (parameter "RemoteIEM" of action) of (substrings separated by (preceding text of first (":" & (parameter "RemoteIEMPort" of action)) of (following text of first "//" of (tuple string item 1 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) of ("http://" & (following text of first "://" of (tuple string item 1 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))))} + else + wait { ((value of variable "ProgramFiles" of environment) & "\GnuWin32\bin\wget.exe")} -a c:\import\import.txt -P {(concatenation "/" of (substrings separated by "\" of (preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\wwwrootbes\" & ( (preceding text of last "/" of following text of first (":" & (parameter "RemoteIEMPort" of action) & "/") of tuple string item 1 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) & "/%22")} {"http://" & (parameter "RemoteIEM" of action) & ":" & (parameter "RemoteIEMPort" of action) & (following text of first ":52311" of (tuple string item 1 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))} + endif + endif + + if {exists tuple string item 2 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml"))} + if {(it as lowercase = "localhost" or it = "127.0.0.1") of (preceding text of first (":" & (parameter "RemoteIEMPort" of action)) of (following text of first "http://" of ("http://" & (following text of first "://" of (tuple string item 2 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml"))))))))} + wait { ((value of variable "ProgramFiles" of environment) & "\GnuWin32\bin\wget.exe")} -a c:\import\import.txt -P {(concatenation "/" of (substrings separated by "\" of (preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\wwwrootbes\" & ( (preceding text of last "/" of following text of first (":" & (parameter "RemoteIEMPort" of action) & "/") of tuple string item 2 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) & "/%22")} {concatenation (parameter "RemoteIEM" of action) of (substrings separated by (preceding text of first (":" & (parameter "RemoteIEMPort" of action)) of (following text of first "//" of (tuple string item 2 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) of ("http://" & (following text of first "://" of (tuple string item 2 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))))} + else + wait { ((value of variable "ProgramFiles" of environment) & "\GnuWin32\bin\wget.exe")} -a c:\import\import.txt -P {(concatenation "/" of (substrings separated by "\" of (preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\wwwrootbes\" & ( (preceding text of last "/" of following text of first (":" & (parameter "RemoteIEMPort" of action) & "/") of tuple string item 2 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) & "/%22")} {"http://" & (parameter "RemoteIEM" of action) & ":" & (parameter "RemoteIEMPort" of action) & (following text of first ":52311" of (tuple string item 2 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))} + endif + endif + + if {exists tuple string item 3 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml"))} + if {(it as lowercase = "localhost" or it = "127.0.0.1") of (preceding text of first (":" & (parameter "RemoteIEMPort" of action)) of (following text of first "http://" of ("http://" & (following text of first "://" of (tuple string item 3 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml"))))))))} + wait { ((value of variable "ProgramFiles" of environment) & "\GnuWin32\bin\wget.exe")} -a c:\import\import.txt -P {(concatenation "/" of (substrings separated by "\" of (preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\wwwrootbes\" & ( (preceding text of last "/" of following text of first (":" & (parameter "RemoteIEMPort" of action) & "/") of tuple string item 3 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) & "/%22")} {concatenation (parameter "RemoteIEM" of action) of (substrings separated by (preceding text of first (":" & (parameter "RemoteIEMPort" of action)) of (following text of first "//" of (tuple string item 3 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) of ("http://" & (following text of first "://" of (tuple string item 3 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))))} + else + wait { ((value of variable "ProgramFiles" of environment) & "\GnuWin32\bin\wget.exe")} -a c:\import\import.txt -P {(concatenation "/" of (substrings separated by "\" of (preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\wwwrootbes\" & ( (preceding text of last "/" of following text of first (":" & (parameter "RemoteIEMPort" of action) & "/") of tuple string item 3 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) & "/%22")} {"http://" & (parameter "RemoteIEM" of action) & ":" & (parameter "RemoteIEMPort" of action) & (following text of first ":52311" of (tuple string item 3 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))} + endif + endif + + if {exists tuple string item 4 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml"))} + if {(it as lowercase = "localhost" or it = "127.0.0.1") of (preceding text of first (":" & (parameter "RemoteIEMPort" of action)) of (following text of first "http://" of ("http://" & (following text of first "://" of (tuple string item 4 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml"))))))))} + wait { ((value of variable "ProgramFiles" of environment) & "\GnuWin32\bin\wget.exe")} -a c:\import\import.txt -P {(concatenation "/" of (substrings separated by "\" of (preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\wwwrootbes\" & ( (preceding text of last "/" of following text of first (":" & (parameter "RemoteIEMPort" of action) & "/") of tuple string item 4 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) & "/%22")} {concatenation (parameter "RemoteIEM" of action) of (substrings separated by (preceding text of first (":" & (parameter "RemoteIEMPort" of action)) of (following text of first "//" of (tuple string item 4 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) of ("http://" & (following text of first "://" of (tuple string item 4 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))))} + else + wait { ((value of variable "ProgramFiles" of environment) & "\GnuWin32\bin\wget.exe")} -a c:\import\import.txt -P {(concatenation "/" of (substrings separated by "\" of (preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\wwwrootbes\" & ( (preceding text of last "/" of following text of first (":" & (parameter "RemoteIEMPort" of action) & "/") of tuple string item 4 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) & "/%22")} {"http://" & (parameter "RemoteIEM" of action) & ":" & (parameter "RemoteIEMPort" of action) & (following text of first ":52311" of (tuple string item 4 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))} + endif + endif + + if {exists tuple string item 5 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml"))} + if {(it as lowercase = "localhost" or it = "127.0.0.1") of (preceding text of first (":" & (parameter "RemoteIEMPort" of action)) of (following text of first "http://" of ("http://" & (following text of first "://" of (tuple string item 5 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml"))))))))} + wait { ((value of variable "ProgramFiles" of environment) & "\GnuWin32\bin\wget.exe")} -a c:\import\import.txt -P {(concatenation "/" of (substrings separated by "\" of (preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\wwwrootbes\" & ( (preceding text of last "/" of following text of first (":" & (parameter "RemoteIEMPort" of action) & "/") of tuple string item 5 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) & "/%22")} {concatenation (parameter "RemoteIEM" of action) of (substrings separated by (preceding text of first (":" & (parameter "RemoteIEMPort" of action)) of (following text of first "//" of (tuple string item 5 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) of ("http://" & (following text of first "://" of (tuple string item 5 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))))} + else + wait { ((value of variable "ProgramFiles" of environment) & "\GnuWin32\bin\wget.exe")} -a c:\import\import.txt -P {(concatenation "/" of (substrings separated by "\" of (preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\wwwrootbes\" & ( (preceding text of last "/" of following text of first (":" & (parameter "RemoteIEMPort" of action) & "/") of tuple string item 5 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) & "/%22")} {"http://" & (parameter "RemoteIEM" of action) & ":" & (parameter "RemoteIEMPort" of action) & (following text of first ":52311" of (tuple string item 5 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))} + endif + endif + + if {exists tuple string item 6 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml"))} + if {(it as lowercase = "localhost" or it = "127.0.0.1") of (preceding text of first (":" & (parameter "RemoteIEMPort" of action)) of (following text of first "http://" of ("http://" & (following text of first "://" of (tuple string item 6 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml"))))))))} + wait { ((value of variable "ProgramFiles" of environment) & "\GnuWin32\bin\wget.exe")} -a c:\import\import.txt -P {(concatenation "/" of (substrings separated by "\" of (preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\wwwrootbes\" & ( (preceding text of last "/" of following text of first (":" & (parameter "RemoteIEMPort" of action) & "/") of tuple string item 6 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) & "/%22")} {concatenation (parameter "RemoteIEM" of action) of (substrings separated by (preceding text of first (":" & (parameter "RemoteIEMPort" of action)) of (following text of first "//" of (tuple string item 6 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) of ("http://" & (following text of first "://" of (tuple string item 6 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))))} + else + wait { ((value of variable "ProgramFiles" of environment) & "\GnuWin32\bin\wget.exe")} -a c:\import\import.txt -P {(concatenation "/" of (substrings separated by "\" of (preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\wwwrootbes\" & ( (preceding text of last "/" of following text of first (":" & (parameter "RemoteIEMPort" of action) & "/") of tuple string item 6 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) & "/%22")} {"http://" & (parameter "RemoteIEM" of action) & ":" & (parameter "RemoteIEMPort" of action) & (following text of first ":52311" of (tuple string item 6 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))} + endif + endif + + if {exists tuple string item 7 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml"))} + if {(it as lowercase = "localhost" or it = "127.0.0.1") of (preceding text of first (":" & (parameter "RemoteIEMPort" of action)) of (following text of first "http://" of ("http://" & (following text of first "://" of (tuple string item 7 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml"))))))))} + wait { ((value of variable "ProgramFiles" of environment) & "\GnuWin32\bin\wget.exe")} -a c:\import\import.txt -P {(concatenation "/" of (substrings separated by "\" of (preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\wwwrootbes\" & ( (preceding text of last "/" of following text of first (":" & (parameter "RemoteIEMPort" of action) & "/") of tuple string item 7 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) & "/%22")} {concatenation (parameter "RemoteIEM" of action) of (substrings separated by (preceding text of first (":" & (parameter "RemoteIEMPort" of action)) of (following text of first "//" of (tuple string item 7 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) of ("http://" & (following text of first "://" of (tuple string item 7 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))))} + else + wait { ((value of variable "ProgramFiles" of environment) & "\GnuWin32\bin\wget.exe")} -a c:\import\import.txt -P {(concatenation "/" of (substrings separated by "\" of (preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\wwwrootbes\" & ( (preceding text of last "/" of following text of first (":" & (parameter "RemoteIEMPort" of action) & "/") of tuple string item 7 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) & "/%22")} {"http://" & (parameter "RemoteIEM" of action) & ":" & (parameter "RemoteIEMPort" of action) & (following text of first ":52311" of (tuple string item 7 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))} + endif + endif + + if {exists tuple string item 8 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml"))} + if {(it as lowercase = "localhost" or it = "127.0.0.1") of (preceding text of first (":" & (parameter "RemoteIEMPort" of action)) of (following text of first "http://" of ("http://" & (following text of first "://" of (tuple string item 8 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml"))))))))} + wait { ((value of variable "ProgramFiles" of environment) & "\GnuWin32\bin\wget.exe")} -a c:\import\import.txt -P {(concatenation "/" of (substrings separated by "\" of (preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\wwwrootbes\" & ( (preceding text of last "/" of following text of first (":" & (parameter "RemoteIEMPort" of action) & "/") of tuple string item 8 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) & "/%22")} {concatenation (parameter "RemoteIEM" of action) of (substrings separated by (preceding text of first (":" & (parameter "RemoteIEMPort" of action)) of (following text of first "//" of (tuple string item 8 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) of ("http://" & (following text of first "://" of (tuple string item 8 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))))} + else + wait { ((value of variable "ProgramFiles" of environment) & "\GnuWin32\bin\wget.exe")} -a c:\import\import.txt -P {(concatenation "/" of (substrings separated by "\" of (preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\wwwrootbes\" & ( (preceding text of last "/" of following text of first (":" & (parameter "RemoteIEMPort" of action) & "/") of tuple string item 8 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) & "/%22")} {"http://" & (parameter "RemoteIEM" of action) & ":" & (parameter "RemoteIEMPort" of action) & (following text of first ":52311" of (tuple string item 8 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))} + endif + endif + + if {exists tuple string item 9 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml"))} + if {(it as lowercase = "localhost" or it = "127.0.0.1") of (preceding text of first (":" & (parameter "RemoteIEMPort" of action)) of (following text of first "http://" of ("http://" & (following text of first "://" of (tuple string item 9 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml"))))))))} + wait { ((value of variable "ProgramFiles" of environment) & "\GnuWin32\bin\wget.exe")} -a c:\import\import.txt -P {(concatenation "/" of (substrings separated by "\" of (preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\wwwrootbes\" & ( (preceding text of last "/" of following text of first (":" & (parameter "RemoteIEMPort" of action) & "/") of tuple string item 9 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) & "/%22")} {concatenation (parameter "RemoteIEM" of action) of (substrings separated by (preceding text of first (":" & (parameter "RemoteIEMPort" of action)) of (following text of first "//" of (tuple string item 9 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) of ("http://" & (following text of first "://" of (tuple string item 9 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))))} + else + wait { ((value of variable "ProgramFiles" of environment) & "\GnuWin32\bin\wget.exe")} -a c:\import\import.txt -P {(concatenation "/" of (substrings separated by "\" of (preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\wwwrootbes\" & ( (preceding text of last "/" of following text of first (":" & (parameter "RemoteIEMPort" of action) & "/") of tuple string item 9 of (concatenation ", " of unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))) & "/%22")} {"http://" & (parameter "RemoteIEM" of action) & ":" & (parameter "RemoteIEMPort" of action) & (following text of first ":52311" of (tuple string item 9 of (concatenation ", " of (unique values of lines whose ((it does not start with "//" and it does not start with "%09%09//") and it contains (":" & (parameter "RemoteIEMPort" of action)) and it as lowercase contains "uploads") of file ("C:\IMPORT\" & (parameter "RemoteFixletID" of action) & ".xml")))))} + endif + endif + +endif]]> + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Make the ClientUI open the Custom Dashboard by default - Universal (23994).bes b/Sites/BigFix Management/Fixlets/Fixlets/Make the ClientUI open the Custom Dashboard by default - Universal (23994).bes new file mode 100644 index 000000000..669aa5e4e --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Make the ClientUI open the Custom Dashboard by default - Universal (23994).bes @@ -0,0 +1,38 @@ + + + + + Make the ClientUI open the Custom Dashboard by default - Universal + + not exists values whose("Dashboard" = it) of settings "_BESClient_ActionManager_InitialUITab" of client + exists files "_dashboard.html" of folders "__UISupport" of data folders of client + Internal + jgstew + 2017-04-04 + + x-fixlet-modification-time + Tue, 04 Apr 2017 22:04:46 +0000 + + BESC + + + Click + here + to deploy this action. + + +// related: https://forum.bigfix.com/t/deploying-updated-mac-dashboard-and-technician-pages-besclientui/1418 +setting "_BESClient_ActionManager_InitialUITab"="Dashboard" on "{parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Measure.log Size Restriction (3631).bes b/Sites/BigFix Management/Fixlets/Fixlets/Measure.log Size Restriction (3631).bes new file mode 100644 index 000000000..758ff2bb0 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Measure.log Size Restriction (3631).bes @@ -0,0 +1,38 @@ + + + + + Measure.log Size Restriction + This task is designed to limit the size of the measure.log file and prevent tickets from being created. + name of operating system as lowercase does not contain "win" + 52428800)]]> + Configuration + danielheth@bigfix.me + <Unspecified> + 2011-08-29 + <Unspecified> + + x-fixlet-modification-time + Mon, 01 Oct 2012 21:30:49 +0000 + + BES + + + Click + here + to deploy this action. + + delete "/opt/BESClient/var/__BESData/__Global/measure.log" + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Modify Client Download cache settings from default (10520).bes b/Sites/BigFix Management/Fixlets/Fixlets/Modify Client Download cache settings from default (10520).bes new file mode 100644 index 000000000..c5abfd7a4 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Modify Client Download cache settings from default (10520).bes @@ -0,0 +1,54 @@ + + + + + Modify Client Download cache settings from default + _BESClient_Download_PreCacheStageDiskLimitMB

+

This setting stops pre-cache stage downloading if the client is already using this much pre-cache stage download disk space. Actions marked for pre-caching will report constrained if the total space used for downloads exceeds this limit.

+
    +
  • Default Value: 250 (250 MB) +
  • Setting Type: Numeric (MB) +
  • Value Range: 0 - 2147483647
+

 

+

_BESClient_Download_NormalStageDiskLimitMB

+

This setting stops normal stage downloading if the client is already using this much normal stage download disk space. Actions marked for normal downloads will report constrained if the total space used for downloads exceeds this limit.

+

Note that normal stage downloads may exceed this limit by borrowing some space from the pre-cache stage space if it is not full.

+
    +
  • Default Value: 2048 (2 GB) +
  • Setting Type: Numeric (MB) +
  • Value Range: 0 - 2147483647
+

 

]]> + 4096) or (not exists setting "_BESClient_Download_NormalStageDiskLimitMB" of client OR value of setting "_BESClient_Download_NormalStageDiskLimitMB" of client as integer > 4096)]]> + Internal + 2016-03-22 + + x-fixlet-modification-time + Wed, 23 Mar 2016 01:33:20 +0000 + + BESC + + + Click + here + to deploy this action. + + = 1 AND parameter "setDownloadCacheSize" of action as integer <= 2147483647} + +setting "_BESClient_Download_PreCacheStageDiskLimitMB"="{parameter "setDownloadCacheSize" of action}" on "{parameter "action issue date" of action}" for client +setting "_BESClient_Download_NormalStageDiskLimitMB"="{parameter "setDownloadCacheSize" of action}" on "{parameter "action issue date" of action}" for client + +]]> + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Modify Solaris BES Agent Privileges (580).bes b/Sites/BigFix Management/Fixlets/Fixlets/Modify Solaris BES Agent Privileges (580).bes new file mode 100644 index 000000000..eb64754dc --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Modify Solaris BES Agent Privileges (580).bes @@ -0,0 +1,51 @@ + + + + + Modify Solaris BES Agent Privileges + +The Solaris BES Agent installer inadvertently turned on the setuid and setgid bits for the "Inspectors" folder. This is not necessary for the proper operation of the BES Agent. To remove these privileges, use the action below. + + (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) + = "5.1"]]> + = "8.0") then (unix of it) else ((it does not start with "Win" AND it does not start with "Mac OS X") of name of it)) of operating system]]> + + name of operating system contains "SunOS" + exists folder "/opt/BESClient/BESLib/Inspectors" AND (setuid of mode of folder "/opt/BESClient/BESLib/Inspectors" OR setgid of mode of folder "/opt/BESClient/BESLib/Inspectors" OR sticky of mode of folder "/opt/BESClient/BESLib/Inspectors") + Configuration + BigFix + <Unspecified> + 2006-06-20 + Critical + + x-fixlet-modification-time + Sat, 12 May 2012 00:55:27 +0000 + + + x-fixlet-first-propagation + Wed, 05 Apr 2006 19:49:23 +0000 + + + x-fixlet-domain_attributes + BES Potential + + BESC + + + Click + here + to set the proper bits on the BES Agent Inspector folder (/opt/BESClient/BESLib/Inspectors). + + run chmod g-s,u-s,u-t /opt/BESClient/BESLib/Inspectors + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/OSD - Custom Start Menu Template (1903) (26667).bes b/Sites/BigFix Management/Fixlets/Fixlets/OSD - Custom Start Menu Template (1903) (26667).bes new file mode 100644 index 000000000..55379b5aa --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/OSD - Custom Start Menu Template (1903) (26667).bes @@ -0,0 +1,60 @@ + + + + + OSD - Custom Start Menu Template (1903) + + name of operating system starts with "Win10" + operating system as string contains "1903" + Brad Sexton + 2020-02-13 + + x-fixlet-modification-time + Thu, 13 Feb 2020 21:55:44 +0000 + + BESC + + + Click + here + to deploy this action. + + + +END_OF_FILE + +delete Startmenu.xml +move __createfile Startmenu.xml + + +delete __createfile + +// CREATEFILE +createfile until END_OF_FILE2 + +Import-StartLayout –LayoutPath Startmenu.xml -MountPath $env:SystemDrive\ + + +END_OF_FILE2 + +delete startmenu.ps1 +move __createfile startmenu.ps1 + +waithidden { pathname of file ((it as string) of value "Path" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\1\ShellIds\Microsoft.PowerShell" of native registry) } -ExecutionPolicy unrestricted -File startmenu.ps1 +]]> + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/OSD - Disable Windows Store Updates (26664).bes b/Sites/BigFix Management/Fixlets/Fixlets/OSD - Disable Windows Store Updates (26664).bes new file mode 100644 index 000000000..ce2fde90d --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/OSD - Disable Windows Store Updates (26664).bes @@ -0,0 +1,35 @@ + + + + + OSD - Disable Windows Store Updates + + operating system as string contains "Win10" + NOT exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" whose (value "AutoDownload" of it = 2) of x64 registry + OSD + Brad Sexton + 2019-03-01 + + x-fixlet-modification-time + Thu, 13 Feb 2020 19:33:10 +0000 + + BESC + + + Click + here + to deploy this action. + + dos reg add HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore /v AutoDownload /t REG_DWORD /d 2 /f + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/OSD - Remove Microsoft Store App (26612).bes b/Sites/BigFix Management/Fixlets/Fixlets/OSD - Remove Microsoft Store App (26612).bes new file mode 100644 index 000000000..07a1aed71 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/OSD - Remove Microsoft Store App (26612).bes @@ -0,0 +1,118 @@ + + + + + OSD - Remove Microsoft Store App + + = "8.2"]]> + 4658 else if ((mac of it) of operating system) then free space of filesystem of folder (pathname of client) > 4658 else free space of filesystem of client > 4658)]]> + /* No special file types found. Default relevance used. */ true + name of operating system starts with "Win10" + Software Distribution + OSD + <Unspecified> + 2019-03-07 + <Unspecified> + + x-fixlet-runAsSystem + {"passwordType":"required","username":"","asAdmin":"true","userType":"system","completion":"none","targetuser":""} + + + action-ui-metadata + {"icon":"","size":"2329","version":"0.0"} + + + x-fixlet-swdCommandOverride + Import-StartLayout –LayoutPath Startmenu.xml -MountPath $env:SystemDrive\ + + + x-fixlet-swd-wizard-data + {"lastmodified":"Thu Mar 7 16:18:14 GMT-0500 2019","categories":[],"useCommandLine":false,"site":null,"os":[],"vendor":"StartMenu","pkgvariablekey":"SWD_Package_brad.sexton@sexton.local_1551993461449250","runAsSystem":null,"pkgTag":"","product":"OSD","files":[{"file_url":null,"msi_metadata":null,"sha1":"846585C0D276A36519405D13C898A580F00FB7D7","id":"846585C0D276A36519405D13C898A580F00FB7D7_1551993494996733","filename":"Startmenu.xml","appx_metatdata":null,"dateadded":"Thu, 07 Mar 2019 16:18:14 -0500","exe_metadata":null,"compressed_data_for_package":false,"spb_metadata":null,"osd_metadata":null,"size":2329,"folderoffset":"","ReferenceName":"/846585C0D276A36519405D13C898A580F00FB7D7/Startmenu.xml","HasAnonymousReference":false,"sha256":"1c143386c41ee6eb62baa895ead35634419651db22f50350547049fa099b2c57","uploadSuffix":"bfswd","appv_metadata":null,"ReferenceID":"6976","rpm_metadata":null}],"fullInstallCommand":null,"comment":null,"description":null,"owner":"brad.sexton@sexton.local","version":"0.0","creator":"brad.sexton@sexton.local"} + + + x-fixlet-advancedPathOptions + {"deleteCustomPath":false,"customPath":false,"customPathName":null} + + + x-fixlet-advancedLogOptions + {"individualLogCustomerName":null,"uploadTheLog":false,"individualLog":false} + + + x-fixlet-swdPackageID + SWD_Package_brad.sexton@sexton.local_1551993461449250 + + + x-fixlet-prePostInstall + {"preInstall":null,"postType":null,"preType":null,"selected":false,"postInstall":null} + + + x-fixlet-pkgTag + + + + x-fixlet-pkgType + + + + x-fixlet-swdSelectedFiles + ["846585C0D276A36519405D13C898A580F00FB7D7"] + + + x-fixlet-canPreserveCustom + true + + + x-fixlet-swdUseCommandLine + true + + + x-fixlet-swdDeployCategory + Install + + + x-fixlet-adf-wizard-source + Software Distribution_SoftwareDistribution + + + x-fixlet-adf-wizard-data + "" + + + x-fixlet-modification-time + Tue, 19 Mar 2019 17:26:38 +0000 + + SYST + + + Click&nbsp; + here + &nbsp;to deploy this action + + action uses wow64 redirection false +delete __createfile + +// CREATEFILE +createfile until END_OF_FILE + +Get-appxprovisionedpackage –online | where-object {{$_.packagename –like '*Microsoft.WindowsStore*'} | remove-appxprovisionedpackage –online + +END_OF_FILE + +delete store.ps1 +move __createfile store.ps1 + +waithidden { pathname of file ((it as string) of value "Path" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\1\ShellIds\Microsoft.PowerShell" of native registry) } -ExecutionPolicy unrestricted -File store.ps1 + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/OSD - Remove ModernUI Apps Template (26665).bes b/Sites/BigFix Management/Fixlets/Fixlets/OSD - Remove ModernUI Apps Template (26665).bes new file mode 100644 index 000000000..61e944f03 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/OSD - Remove ModernUI Apps Template (26665).bes @@ -0,0 +1,116 @@ + + + + + OSD - Remove ModernUI Apps Template + + = "8.2"]]> + 4658 else if ((mac of it) of operating system) then free space of filesystem of folder (pathname of client) > 4658 else free space of filesystem of client > 4658)]]> + /* No special file types found. Default relevance used. */ true + name of operating system starts with "Win10" + Software Distribution + Brad Sexton + <Unspecified> + 2019-03-07 + <Unspecified> + + x-fixlet-runAsSystem + {"passwordType":"required","username":"","asAdmin":"true","userType":"system","completion":"none","targetuser":""} + + + action-ui-metadata + {"icon":"","size":"2329","version":"0.0"} + + + x-fixlet-swdCommandOverride + Import-StartLayout –LayoutPath Startmenu.xml -MountPath $env:SystemDrive\ + + + x-fixlet-swd-wizard-data + {"lastmodified":"Thu Mar 7 16:18:14 GMT-0500 2019","categories":[],"useCommandLine":false,"site":null,"os":[],"vendor":"StartMenu","pkgvariablekey":"SWD_Package_brad.sexton@sexton.local_1551993461449250","runAsSystem":null,"pkgTag":"","product":"OSD","files":[{"file_url":null,"msi_metadata":null,"sha1":"846585C0D276A36519405D13C898A580F00FB7D7","id":"846585C0D276A36519405D13C898A580F00FB7D7_1551993494996733","filename":"Startmenu.xml","appx_metatdata":null,"dateadded":"Thu, 07 Mar 2019 16:18:14 -0500","exe_metadata":null,"compressed_data_for_package":false,"spb_metadata":null,"osd_metadata":null,"size":2329,"folderoffset":"","ReferenceName":"/846585C0D276A36519405D13C898A580F00FB7D7/Startmenu.xml","HasAnonymousReference":false,"sha256":"1c143386c41ee6eb62baa895ead35634419651db22f50350547049fa099b2c57","uploadSuffix":"bfswd","appv_metadata":null,"ReferenceID":"6976","rpm_metadata":null}],"fullInstallCommand":null,"comment":null,"description":null,"owner":"brad.sexton@sexton.local","version":"0.0","creator":"brad.sexton@sexton.local"} + + + x-fixlet-advancedPathOptions + {"deleteCustomPath":false,"customPath":false,"customPathName":null} + + + x-fixlet-advancedLogOptions + {"individualLogCustomerName":null,"uploadTheLog":false,"individualLog":false} + + + x-fixlet-swdPackageID + SWD_Package_brad.sexton@sexton.local_1551993461449250 + + + x-fixlet-prePostInstall + {"preInstall":null,"postType":null,"preType":null,"selected":false,"postInstall":null} + + + x-fixlet-pkgTag + + + + x-fixlet-pkgType + + + + x-fixlet-swdSelectedFiles + ["846585C0D276A36519405D13C898A580F00FB7D7"] + + + x-fixlet-canPreserveCustom + true + + + x-fixlet-swdUseCommandLine + true + + + x-fixlet-swdDeployCategory + Install + + + x-fixlet-adf-wizard-source + Software Distribution_SoftwareDistribution + + + x-fixlet-adf-wizard-data + "" + + + x-fixlet-modification-time + Thu, 13 Feb 2020 21:06:17 +0000 + + SYST + + + Click&nbsp; + here + &nbsp;to deploy this action + + + +END_OF_FILE + +delete windowsapps.ps1 +move __createfile windowsapps.ps1 + +waithidden { pathname of file ((it as string) of value "Path" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\1\ShellIds\Microsoft.PowerShell" of native registry) } -ExecutionPolicy unrestricted -File windowsapps.ps1]]> + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/OSD - Remove ModernUI Apps Template (26666).bes b/Sites/BigFix Management/Fixlets/Fixlets/OSD - Remove ModernUI Apps Template (26666).bes new file mode 100644 index 000000000..5349be320 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/OSD - Remove ModernUI Apps Template (26666).bes @@ -0,0 +1,116 @@ + + + + + OSD - Remove ModernUI Apps Template + + = "8.2"]]> + 4658 else if ((mac of it) of operating system) then free space of filesystem of folder (pathname of client) > 4658 else free space of filesystem of client > 4658)]]> + /* No special file types found. Default relevance used. */ true + name of operating system starts with "Win10" + Software Distribution + Brad Sexton + <Unspecified> + 2019-03-07 + <Unspecified> + + x-fixlet-runAsSystem + {"passwordType":"required","username":"","asAdmin":"true","userType":"system","completion":"none","targetuser":""} + + + action-ui-metadata + {"icon":"","size":"2329","version":"0.0"} + + + x-fixlet-swdCommandOverride + Import-StartLayout –LayoutPath Startmenu.xml -MountPath $env:SystemDrive\ + + + x-fixlet-swd-wizard-data + {"lastmodified":"Thu Mar 7 16:18:14 GMT-0500 2019","categories":[],"useCommandLine":false,"site":null,"os":[],"vendor":"StartMenu","pkgvariablekey":"SWD_Package_brad.sexton@sexton.local_1551993461449250","runAsSystem":null,"pkgTag":"","product":"OSD","files":[{"file_url":null,"msi_metadata":null,"sha1":"846585C0D276A36519405D13C898A580F00FB7D7","id":"846585C0D276A36519405D13C898A580F00FB7D7_1551993494996733","filename":"Startmenu.xml","appx_metatdata":null,"dateadded":"Thu, 07 Mar 2019 16:18:14 -0500","exe_metadata":null,"compressed_data_for_package":false,"spb_metadata":null,"osd_metadata":null,"size":2329,"folderoffset":"","ReferenceName":"/846585C0D276A36519405D13C898A580F00FB7D7/Startmenu.xml","HasAnonymousReference":false,"sha256":"1c143386c41ee6eb62baa895ead35634419651db22f50350547049fa099b2c57","uploadSuffix":"bfswd","appv_metadata":null,"ReferenceID":"6976","rpm_metadata":null}],"fullInstallCommand":null,"comment":null,"description":null,"owner":"brad.sexton@sexton.local","version":"0.0","creator":"brad.sexton@sexton.local"} + + + x-fixlet-advancedPathOptions + {"deleteCustomPath":false,"customPath":false,"customPathName":null} + + + x-fixlet-advancedLogOptions + {"individualLogCustomerName":null,"uploadTheLog":false,"individualLog":false} + + + x-fixlet-swdPackageID + SWD_Package_brad.sexton@sexton.local_1551993461449250 + + + x-fixlet-prePostInstall + {"preInstall":null,"postType":null,"preType":null,"selected":false,"postInstall":null} + + + x-fixlet-pkgTag + + + + x-fixlet-pkgType + + + + x-fixlet-swdSelectedFiles + ["846585C0D276A36519405D13C898A580F00FB7D7"] + + + x-fixlet-canPreserveCustom + true + + + x-fixlet-swdUseCommandLine + true + + + x-fixlet-swdDeployCategory + Install + + + x-fixlet-adf-wizard-source + Software Distribution_SoftwareDistribution + + + x-fixlet-adf-wizard-data + "" + + + x-fixlet-modification-time + Thu, 13 Feb 2020 21:06:17 +0000 + + SYST + + + Click&nbsp; + here + &nbsp;to deploy this action + + + +END_OF_FILE + +delete windowsapps.ps1 +move __createfile windowsapps.ps1 + +waithidden { pathname of file ((it as string) of value "Path" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\1\ShellIds\Microsoft.PowerShell" of native registry) } -ExecutionPolicy unrestricted -File windowsapps.ps1]]> + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Open BigFix QnA in the Terminal - Mac (22767).bes b/Sites/BigFix Management/Fixlets/Fixlets/Open BigFix QnA in the Terminal - Mac (22767).bes new file mode 100644 index 000000000..939a09891 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Open BigFix QnA in the Terminal - Mac (22767).bes @@ -0,0 +1,46 @@ + + + + + Open BigFix QnA in the Terminal - Mac + This is an offer to open BigFix QnA in Terminal.app for macOS. + mac of operating system + exists unique value of names of (current users; logged on users) + exists files "/Library/BESAgent/BESAgent.app/Contents/MacOS/QnA" + BigFix + Internal + jgstew + 2016-05-03 + + x-fixlet-modification-time + Mon, 28 Nov 2016 19:24:11 +0000 + + BESC + + + Click + here + to deploy this action. + + +parameter "CurrentUserName" = "{unique value of names of (current users; logged on users)}" +// parameter "pathname" = "{ pathname of files "/Library/BESAgent/BESAgent.app/Contents/MacOS/QnA" }" + +// This AppleScript option worked: +run su {parameter "CurrentUserName"} -c "osascript -e 'tell application \"Terminal\"' -e 'if not (exists window 1) then reopen' -e 'activate' -e 'do script \"/Library/BESAgent/BESAgent.app/Contents/MacOS/QnA -showtypes\" in window 1' -e 'end tell'" +// run su {parameter "CurrentUserName"} -c "/Library/BESAgent/BESAgent.app/Contents/MacOS/QnA -showtypes" // TESTED: Didn't work + +// https://github.com/jgstew/tools/blob/master/AppleScript/openQnA.scpt + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Open QnA GUI as root - Mac OS X (20469).bes b/Sites/BigFix Management/Fixlets/Fixlets/Open QnA GUI as root - Mac OS X (20469).bes new file mode 100644 index 000000000..ac30bc9cb --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Open QnA GUI as root - Mac OS X (20469).bes @@ -0,0 +1,55 @@ + + + + + Open QnA GUI as root - Mac OS X + + mac of operating system + exists files "QnA GUI" of folders "Contents/MacOS" of folders "QnA GUI.app" of (it; folders "Utilities" of it; folders "Documents/code/QnAGUI/Releases" of folders of folders "/Users") of folders "/Applications" + Internal + 2016-05-06 + + x-fixlet-modification-time + Fri, 06 May 2016 23:49:04 +0000 + + BESC + + + Click + here + to deploy this action. + + +parameter "PathnameQnAgui" = "{ (tuple string item 0 of it | it) of concatenations "," of pathnames of files "QnA GUI" of folders "Contents/MacOS" of folders "QnA GUI.app" of (it; folders "Utilities" of it; folders "Documents/code/QnAGUI/Releases" of folders of folders "/Users") of folders "/Applications" }" + +// Options that didn't work, or didn't work the way I wanted: +// run open "{parameter "PathnameQnAgui"}" +// run open -a QnA\ GUI +// run osascript -e 'tell application "QnA GUI" to activate' + +delete __createfile + +createfile until END_OF_FILE +#!/bin/sh +open -a "{parameter "PathnameQnAgui"}" +END_OF_FILE + +delete _open_QnA.sh +copy __createfile _open_QnA.sh + +wait chmod u+x _open_QnA.sh + +run ./_open_QnA.sh + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Open current BES Client Log file - BareTail - Windows (24457).bes b/Sites/BigFix Management/Fixlets/Fixlets/Open current BES Client Log file - BareTail - Windows (24457).bes new file mode 100644 index 000000000..b33ae6fd8 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Open current BES Client Log file - BareTail - Windows (24457).bes @@ -0,0 +1,58 @@ + + + + + Open current BES Client Log file - BareTail - Windows + + windows of operating system + + exists (it as string) whose(it contains name of logged on users) of members of local groups "Administrators" + not exists processes "baretail.exe" + Internal + 2017-06-12 + + x-fixlet-modification-time + Wed, 14 Jun 2017 17:12:59 +0000 + + BESC + + + Click + here + to deploy this action. + + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Open current BigFix log in Visual Studio Code (26886).bes b/Sites/BigFix Management/Fixlets/Fixlets/Open current BigFix log in Visual Studio Code (26886).bes new file mode 100644 index 000000000..b7ee25cd7 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Open current BigFix log in Visual Studio Code (26886).bes @@ -0,0 +1,63 @@ + + + + + Open current BigFix log in Visual Studio Code + + 1 = number of unique values of names of (logged on users;current users) + + Internal + 2021-12-01 + + x-fixlet-modification-time + Wed, 01 Dec 2021 14:59:23 +0000 + + BESC + + + Click + here + to deploy this action. + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Open current log file - Mac (20447).bes b/Sites/BigFix Management/Fixlets/Fixlets/Open current log file - Mac (20447).bes new file mode 100644 index 000000000..9ead68c1f --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Open current log file - Mac (20447).bes @@ -0,0 +1,42 @@ + + + + + Open current log file - Mac + + mac of operating system + exists unique value of names of (current users; logged on users) + + Internal + 2016-05-03 + + x-fixlet-modification-time + Tue, 03 May 2016 21:21:40 +0000 + + BESC + + + Click + here + to deploy this action. + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Outdated Internet Explorer - BES Console (590).bes b/Sites/BigFix Management/Fixlets/Fixlets/Outdated Internet Explorer - BES Console (590).bes new file mode 100644 index 000000000..cce5b0845 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Outdated Internet Explorer - BES Console (590).bes @@ -0,0 +1,40 @@ + + + + + Outdated Internet Explorer - BES Console + The listed computers are running the BES Console, but have an outdated version of Internet Explorer. BES 6.0 and later consoles require Internet Explorer version 5.5 SP2 and above to load various active documents such as Dashboards and Wizards. If an earlier version of Internet Explorer is installed, the document may not be displayed correctly.

Fixlet messages are available in the "Patches for Windows" sites to deploy the latest version of Internet Explorer to affected machines.

+]]> + exists regapp "BESConsole.exe" + = "6.0"]]> + + Support + BigFix + <Unspecified> + 2026-09-17 + Important + + x-fixlet-modification-time + Sat, 12 May 2012 00:55:27 +0000 + + + x-fixlet-first-propagation + Wed, 21 Jun 2006 00:48:18 +0000 + + + x-fixlet-domain_attributes + BES Warn Important + + BESC + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Patch BigFix Console wizards.js for IE11 compatibility - Windows TODO_testing (23226).bes b/Sites/BigFix Management/Fixlets/Fixlets/Patch BigFix Console wizards.js for IE11 compatibility - Windows TODO_testing (23226).bes new file mode 100644 index 000000000..605fb7cf1 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Patch BigFix Console wizards.js for IE11 compatibility - Windows TODO_testing (23226).bes @@ -0,0 +1,63 @@ + + + + + Patch BigFix Console wizards.js for IE11 compatibility - Windows TODO:testing + + windows of operating system + exists lines containing "window.attachEvent(" whose(it starts with "window.attachEvent(") of files "wizards.js" whose(not exists lines containing "window.addEventListener(" of it) of folders "Reference" of (folder it) of unique values of ( ( pathnames of parent folders of regapps "BESConsole.exe" );( pathnames of (folders it) of (it as string) of values "InstallLocation" of keys whose( exists values "DisplayName" whose(it as string contains "BigFix Console") of it ) of keys "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall" of (x64 registries; x32 registries) ) ) + (exists regapps "BESConsole.exe") OR ( exists keys whose( exists values "DisplayName" whose(it as string contains "BigFix Console") of it ) of keys "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall" of (x64 registries; x32 registries) ) + Internal + 2017-01-14 + + x-fixlet-modification-time + Sun, 15 Jan 2017 05:08:13 +0000 + + BESC + + + Click + here + to deploy this action. + + +parameter "wizardsjsfilepath"="{ unique value of pathnames of files "wizards.js" whose(not exists lines containing "window.addEventListener(" of it) of folders "Reference" of (folder it) of unique values of ( ( pathnames of parent folders of regapps "BESConsole.exe" );( pathnames of (folders it) of (it as string) of values "InstallLocation" of keys whose( exists values "DisplayName" whose(it as string contains "BigFix Console") of it ) of keys "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall" of (x64 registries; x32 registries) ) ) }" + +delete __createfile +createfile until _END_OF_FILE_ +{ concatenations "%0d%0a" of lines whose(it does not start with "window.attachEvent(") of files "wizards.js" whose(not exists lines containing "window.addEventListener(" of it) of folders "Reference" of (folder it) of unique values of ( ( pathnames of parent folders of regapps "BESConsole.exe" );( pathnames of (folders it) of (it as string) of values "InstallLocation" of keys whose( exists values "DisplayName" whose(it as string contains "BigFix Console") of it ) of keys "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall" of (x64 registries; x32 registries) ) ) } + + +(function () {{ + if(window.addEventListener){{ + window.addEventListener('load', InsertUtilityDiv); + } else {{ + window.attachEvent("onload", InsertUtilityDiv); + } +})(); + +_END_OF_FILE_ + +delete "{parameter "wizardsjsfilepath"}" +copy __createfile "{parameter "wizardsjsfilepath"}" + + +// References: +// - https://forum.bigfix.com/t/issues-with-console-dashboards-and-internet-explorer-versions-wizards-js-ie11-incompatibility/19790/6 +// - https://blogs.technet.microsoft.com/heyscriptingguy/2007/09/08/how-can-i-remove-any-line-in-a-text-file-that-contains-a-specified-string-value/ +// - https://bigfix.me/relevance/details/3019211 +// - https://bigfix.me/relevance/details/3019209 +// - https://bigfix.me/relevance/details/3019210 + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Prevent client re-registration for Read Only Filesystem (_BESClient_Register_StopOnFlushError) (25123).bes b/Sites/BigFix Management/Fixlets/Fixlets/Prevent client re-registration for Read Only Filesystem (_BESClient_Register_StopOnFlushError) (25123).bes new file mode 100644 index 000000000..ab33a6bd9 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Prevent client re-registration for Read Only Filesystem (_BESClient_Register_StopOnFlushError) (25123).bes @@ -0,0 +1,46 @@ + + + + + Prevent client re-registration for Read Only Filesystem (_BESClient_Register_StopOnFlushError) + + + + +

_BESClient_Register_StopOnFlushError

To prevent that duplicated computers are generated on the Console when the BESClient file system goes temporarily in read-only mode. + +
    +
  • Default Value: 0 (False) +
  • Setting Type: Boolean +
  • Values: 0-1
+

New setting for 9.8.5 and further of BigFix. Helps avoides Duplicate Computers in the console in cases of Read Only Filesystem 

+

https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/Tivoli%20Endpoint%20Manager/page/Configuration%20Settings/comment/d3afeeb4-3244-46d3-80a7-3ecb49f6de41

]]> + not exists setting "_BESClient_Register_StopOnFlushError" whose (value of it as string = "1") of client + = "9.5.8" as version]]> + Client Settings + bigfix.me + 2018-02-15 + + x-fixlet-modification-time + Thu, 15 Feb 2018 17:02:48 +0000 + + BESC + + + Click + here + to deploy this action. + + setting "_BESClient_Register_StopOnFlushError"="1" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/PropertyIDMapper Service v3.0.3.170 Available (3635).bes b/Sites/BigFix Management/Fixlets/Fixlets/PropertyIDMapper Service v3.0.3.170 Available (3635).bes new file mode 100644 index 000000000..9b37ca87a --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/PropertyIDMapper Service v3.0.3.170 Available (3635).bes @@ -0,0 +1,87 @@ + + + + + PropertyIDMapper Service v3.0.3.170 Available +
This task is applicable on: Windows 2000, Windows XP, Windows XP x64, Windows 2003, Windows 2003 x64, Windows Vista, Windows Vista x64, Windows 2008, Windows 2008 x64, Windows 7, Windows 7 x64, Windows 2008 R2 and Windows XP Embedded. ]]> + (name of it = "Win2000" OR name of it = "WinXP" OR name of it = "WinXP-2003" OR (name of it = "Win2003" AND NOT x64 of it) OR (name of it = "Win2003" AND x64 of it) OR (name of it = "WinVista" AND product type of it = nt workstation product type AND NOT x64 of it) OR (name of it = "WinVista" AND product type of it = nt workstation product type AND x64 of it) OR ((name of it = "Win2008" or (name of it = "WinVista" and product type of it != nt workstation product type)) AND NOT x64 of it) OR ((name of it = "Win2008" or (name of it = "WinVista" and product type of it != nt workstation product type)) AND x64 of it) OR (name of it = "Win7" AND NOT x64 of it) OR (name of it = "Win7" AND x64 of it) OR name of it = "Win2008R2" OR name of it = "WinXPe") of operating system + exists main gather service AND exists service "FillDB" + + Update + danielheth@bigfix.me + <Unspecified> + 2011-03-25 + <Unspecified> + + x-fixlet-source + Software Distribution Wizard + + + x-fixlet-modification-time + Mon, 01 Oct 2012 21:30:49 +0000 + + BES + + + Click + here + to initiate the deployment process. + + NUL 2> NUL +move __appendfile netquiet.bat + +waithidden "{pathname of client folder of site "BESSupport" & "\RunQuiet.exe"}" netquiet.bat start "BESPropertyIDMapper" + +delete netquiet.bat]]> + + + + + Click + here + to learn more about the PropertyIDMapper tool. + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Recommended Client Settings - Initial Provisioning Speed up (5024).bes b/Sites/BigFix Management/Fixlets/Fixlets/Recommended Client Settings - Initial Provisioning Speed up (5024).bes new file mode 100644 index 000000000..344058fd7 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Recommended Client Settings - Initial Provisioning Speed up (5024).bes @@ -0,0 +1,59 @@ + + + + + Recommended Client Settings - Initial Provisioning Speed up + This task is set to run once and only once against all clients in BigFix / TEM / IEM. This task's action should change nothing unless the client does not have any of these settings set at all, even if it runs once against the client. This task will also not overwrite any settings placed subsequently on the client even if this task is restarted and runs again on the client. The goal is to speed up initial provisioning of the client, particularly in the case where the MSI installer is used, or if a clientsettings.cfg file is not used.

+

WorkIdle should be reduced once initial provisioning is completed, particularly on laptops which may experience reduced battery life due to the aggressive WorkIdle setting.

]]> + (now - minimum of subscribe times of sites) /* No real relevance is being used so that this may effect slow clients ASAP without requiring evaulation. Normally relevance would be included so that the action only ran against clients that need it. */]]> + Internal + jgs194 + 2013-10-17 + + x-fixlet-modification-time + Fri, 10 Apr 2015 15:51:39 +0000 + + BESC + + + Click + here + to deploy this action. + + //begin: set recommended client settings - only if these settings are not set. +if {not exists setting "_BESClient_Resource_StartupNormalSpeed" of client} + setting "_BESClient_Resource_StartupNormalSpeed"="1" on "{parameter "action issue date" of action}" for client +endif +if {not exists setting "_BESClient_Resource_SleepIdle" of client} + setting "_BESClient_Resource_SleepIdle"="500" on "{parameter "action issue date" of action}" for client +endif +// WorkIdle should be reduced once initial provisioning is completed. +if {not exists setting "_BESClient_Resource_WorkIdle" of client} + setting "_BESClient_Resource_WorkIdle"="55" on "{parameter "action issue date" of action}" for client +endif +if {not exists setting "_BESClient_Download_RetryMinutes" of client} + setting "_BESClient_Download_RetryMinutes"="1" on "{parameter "action issue date" of action}" for client +endif +if {not exists setting "_BESClient_Download_DownloadsCacheLimitMB" of client} + setting "_BESClient_Download_DownloadsCacheLimitMB"="10000" on "{parameter "action issue date" of action}" for client +endif +if {not exists setting "_BESClient_Download_NormalStageDiskLimitMB" of client} + setting "_BESClient_Download_NormalStageDiskLimitMB"="10000" on "{parameter "action issue date" of action}" for client +endif +if {not exists setting "_BESClient_Download_PreCacheStageDiskLimitMB" of client} + setting "_BESClient_Download_PreCacheStageDiskLimitMB"="5000" on "{parameter "action issue date" of action}" for client +endif +//end: set recommended client settings + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/RedHat 7 Firewalld is Blocking BES Traffic - BES Client (6221).bes b/Sites/BigFix Management/Fixlets/Fixlets/RedHat 7 Firewalld is Blocking BES Traffic - BES Client (6221).bes new file mode 100644 index 000000000..f22d324f1 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/RedHat 7 Firewalld is Blocking BES Traffic - BES Client (6221).bes @@ -0,0 +1,95 @@ + + + + + RedHat 7 Firewalld is Blocking BES Traffic - BES Client + + + + +

The listed computers have firewalld enabled and are not configured to allow inbound UDP traffic on the port used by BES (BES uses port 52311 by default).

+

The BES Server and BES Relays send UDP packets to the BES Clients to notify them that there is new information available such as new Fixlet messages, actions, and computer refreshes. BES Clients on relevant computers will not receive UDP notification packets and therefore will not see new actions or new Fixlet messages until they gather the new actionsite, which is by default, once a day. After configuring firewalld to allow inbound UDP traffic on the BES Listen Port, BES Clients will resume normal communication with the BES Server and BES Relays.

+

Note: After this action is applied, affected BES Clients will not report until they have performed their standard once-per-day gather or until the BES Client is restarted.

+

Note: The firewalld configuration is modified by inserting a new service into /etc/firewalld/services and enabling it on the default zone.

]]> + (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) + = "6"]]> + = "8.0") then (unix of it) else ((it does not start with "Win" AND it does not start with "Mac OS X") of name of it)) of operating system]]> + = "7.2"]]> + exists file "/proc/net/ip_tables_names" + " ) ) AND exists file "/etc/firewalld/zones/public.xml"]]> + exists match (regex "Linux Red Hat Enterprise (AS|ES|WS|Client|Server|Workstation) (7)") of name of operating system + Support + 2015-10-02 + Important + + x-fixlet-domain_attributes + BES Warn Important + + + x-fixlet-first-propagation + Wed, 17 Jun 2009 18:18:35 +0000 + + + x-fixlet-modification-time + Sat, 03 Oct 2015 01:37:51 +0000 + + BESC + + + Click + here + to leave firewalld enabled, but create a service and enable it on the default zone to allow incoming traffic on the port reserved for BES. + + \n\n bigfix\n The BES Server and BES Relays send UDP packets to the BES Clients to notify them that there is new information available such as new Fixlet messages, actions, and computer refreshes. This service permits that traffic on the port designated by the server.\n \n' > /etc/firewalld/services/bigfix.xml +appendfile firewall-cmd --reload +appendfile firewall-cmd --permanent --add-service=bigfix +appendfile firewall-cmd --reload + +wait chmod +x "{(client folder of current site as string) & "/__appendfile"}" + +wait "{(client folder of current site as string) & "/__appendfile"}" + +//delete delete __appendfile]]> + + + + Click + here + to disable firewalld. + + + + + + Click + here + for information on how to make this action a "policy" action that will automatically open the BES port on any computer that has this Fixlet message relevant. + + http://support.bigfix.com/cgi-bin/kbdirect.pl?id=113 + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/RedHat_CentOS 7 Firewalld is Blocking BES Traffic - BES Client (25072).bes b/Sites/BigFix Management/Fixlets/Fixlets/RedHat_CentOS 7 Firewalld is Blocking BES Traffic - BES Client (25072).bes new file mode 100644 index 000000000..03a493233 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/RedHat_CentOS 7 Firewalld is Blocking BES Traffic - BES Client (25072).bes @@ -0,0 +1,97 @@ + + + + + RedHat/CentOS 7 Firewalld is Blocking BES Traffic - BES Client + + + + +

The listed computers have firewalld enabled and are not configured to allow inbound UDP traffic on the port used by BES (BES uses port 52311 by default).

+

The BES Server and BES Relays send UDP packets to the BES Clients to notify them that there is new information available such as new Fixlet messages, actions, and computer refreshes. BES Clients on relevant computers will not receive UDP notification packets and therefore will not see new actions or new Fixlet messages until they gather the new actionsite, which is by default, once a day. After configuring firewalld to allow inbound UDP traffic on the BES Listen Port, BES Clients will resume normal communication with the BES Server and BES Relays.

+

Note: After this action is applied, affected BES Clients will not report until they have performed their standard once-per-day gather or until the BES Client is restarted.

+

Note: The firewalld configuration is modified by inserting a new service into /etc/firewalld/services and enabling it on the default zone.

]]> + (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) + = "6"]]> + = "8.0") then (unix of it) else ((it does not start with "Win" AND it does not start with "Mac OS X") of name of it)) of operating system]]> + = "7.2"]]> + " ) ) AND exists file "/etc/firewalld/zones/public.xml"]]> + exists match (regex "Linux (Red Hat Enterprise (AS|ES|WS|Client|Server|Workstation)|CentOS) (7)") of name of operating system + exists file "/etc/systemd/system/basic.target.wants/firewalld.service" + Support + Internal + <Unspecified> + 2018-02-07 + Important + + x-fixlet-domain_attributes + BES Warn Important + + + x-fixlet-first-propagation + Wed, 17 Jun 2009 18:18:35 +0000 + + + x-fixlet-modification-time + Fri, 23 Sep 2016 19:41:06 +0000 + + BESC + + + Click + here + to leave firewalld enabled, but create a service and enable it on the&nbsp;default zone to allow incoming traffic on the port reserved for BES. + + \n\n bigfix\n The BES Server and BES Relays send UDP packets to the BES Clients to notify them that there is new information available such as new Fixlet messages, actions, and computer refreshes. This service permits that traffic on the port designated by the server.\n \n' > /etc/firewalld/services/bigfix.xml +appendfile firewall-cmd --reload +appendfile firewall-cmd --permanent --zone=public --add-service=bigfix +appendfile firewall-cmd --reload + +wait chmod +x "{(client folder of current site as string) & "/__appendfile"}" + +wait "{(client folder of current site as string) & "/__appendfile"}" + +//delete delete __appendfile]]> + + + + Click + here + to disable firewalld. + + + + + + Click + here + for information on how to make this action a "policy" action that will automatically open the BES port on any computer that has this Fixlet message relevant. + + http://support.bigfix.com/cgi-bin/kbdirect.pl?id=113 + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/RedHat_CentOS 7 Firewalld is blocking inbound traffic - BES Relay (25168).bes b/Sites/BigFix Management/Fixlets/Fixlets/RedHat_CentOS 7 Firewalld is blocking inbound traffic - BES Relay (25168).bes new file mode 100644 index 000000000..434687a2e --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/RedHat_CentOS 7 Firewalld is blocking inbound traffic - BES Relay (25168).bes @@ -0,0 +1,95 @@ + + + + + RedHat/CentOS 7 Firewalld is blocking inbound traffic - BES Relay + + + + +

The listed computers are BES Relays, have firewalld enabled and are not configured to allow inbound TCP/UDP traffic on the port used by BESRelay (BES uses port 52311 by default).

+

The BES Relays must recieve inbound tcp and udp connections from clients.

+

Note: The firewalld configuration is modified by inserting a new service into /etc/firewalld/services and enabling it on the default zone.

]]> + (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) + exists relay service + = "8.0") then (unix of it) else ((it does not start with "Win" AND it does not start with "Mac OS X") of name of it)) of operating system]]> + exists match (regex "Linux (Red Hat Enterprise (AS|ES|WS|Client|Server|Workstation)|CentOS) (7)") of name of operating system + exists file "/etc/systemd/system/basic.target.wants/firewalld.service" + " ) ) AND exists file "/etc/firewalld/zones/public.xml"]]> + Support + Internal + <Unspecified> + 2018-02-19 + Important + + x-fixlet-domain_attributes + BES Warn Important + + + x-fixlet-first-propagation + Wed, 17 Jun 2009 18:18:35 +0000 + + + x-fixlet-modification-time + Mon, 19 Feb 2018 15:34:44 +0000 + + BES + + + Click + here + to leave firewalld enabled, but create a service and enable it on the&nbsp;default zone to allow incoming traffic on the port reserved for BESRelay. + + \n\n bigfix-relay\n The BES Server and BES Relays send UDP packets to the BES Clients to notify them that there is new information available such as new Fixlet messages, actions, and computer refreshes. This service permits that traffic on the port designated by the server.\n \n\n' > /etc/firewalld/services/bigfix-relay.xml +appendfile firewall-cmd --reload +appendfile firewall-cmd --permanent --zone=public --add-service=bigfix-relay +appendfile firewall-cmd --reload + +wait chmod +x "{(client folder of current site as string) & "/__appendfile"}" + +wait "{(client folder of current site as string) & "/__appendfile"}" + +//delete delete __appendfile]]> + + + + Click + here + to disable firewalld. + + + + + + Click + here + for information on how to make this action a "policy" action that will automatically open the BES port on any computer that has this Fixlet message relevant. + + http://support.bigfix.com/cgi-bin/kbdirect.pl?id=113 + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Reference - Clientsettings.cfg (21269).bes b/Sites/BigFix Management/Fixlets/Fixlets/Reference - Clientsettings.cfg (21269).bes new file mode 100644 index 000000000..a706cb72d --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Reference - Clientsettings.cfg (21269).bes @@ -0,0 +1,41 @@ + + + + + Reference - Clientsettings.cfg + Sample clientsettings.cfg contents + FALSE + Internal + 2016-03-30 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + + Click + here + to deploy this action. + + // Enter your action script here + +//__RelayServer1=http://server.domain.tld:52311/bfmirror/downloads/ +//_BESClient_Resource_StartupNormalSpeed=1 +//_BESClient_Download_RetryMinutes=1 +//_BESClient_Resource_WorkIdle=50 +//_BESClient_Resource_SleepIdle=500 +//_BESClient_Comm_CommandPollEnable=1 +//_BESClient_Comm_CommandPollIntervalSeconds=10800 + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Reinstall BES Client Logging Service (351).bes b/Sites/BigFix Management/Fixlets/Fixlets/Reinstall BES Client Logging Service (351).bes new file mode 100644 index 000000000..9e5e1811c --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Reinstall BES Client Logging Service (351).bes @@ -0,0 +1,152 @@ + + + + + Reinstall BES Client Logging Service + +

One or more of the following installed BigFix Extensions requires the BES Client Logging Service for real-time logging, but it is not installed. Use the below action to reinstall the BES Client Logging Service.

  • AntiPest 2
  • AntiVirus
  • DLP
  • Firewall
  • Power Management (on 7.2 clients)
+ +
+

File Size:

+3.18 MB+ +
+]]> + name of operating system as lowercase starts with "win" + = "6"]]> + not exists service"BESClientLoggingService" + = "1.1.0.17") of it)) of registry))) OR ((exist regapp "BigFixAntiPest.exe" whose (version of it >= "0.9.0.34"))) OR ((if (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\eTrustAntivirus\CurrentVersion\Path" whose (exists value "HOME" of it) of registry) then (exists file ((value "HOME" of key "HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\eTrustAntivirus\CurrentVersion\Path" of registry as string) & "\InoOEM.dll") whose (version of it = "7.1")) else (false)) AND (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\AntiVirus" of registry)) OR ((exists key "HKEY_LOCAL_MACHINE\SOFTWARE\CA\HIPSEngine\Products\BigFixFW" whose (exists value "UninstallCmdLine" of it) of registry)) OR (((exists setting "PowerManagement_PowerTrackingEnabled" whose (value of it = "1" or value of it = "2") of client)) AND (NOT ((((name of operating system starts with "Win") AND (version of client >= "8") ) AND (exists setting "_BESClient_PowerHistory_EnablePowerHistory" whose (exists value whose (it = "1") of it) of client)))))]]> + Support + BigFix + <Unspecified> + 2008-02-26 + Important + + x-fixlet-modification-time + Tue, 12 Jul 2011 22:23:36 +0000 + + + x-fixlet-first-propagation + Wed, 28 Mar 2007 00:28:33 +0000 + + + x-fixlet-domain_attributes + BES Warn Important Component Client + + BESC + + + Click + here + to deploy the BES Client Logging Service. + + NUL 2> NUL +copy __appendfile myScript.bat +wait "{pathname of client folder of site "BESSupport"}\RunQuiet.exe" myScript.bat +delete myScript.bat +endif +// #AP2 +if {((exist regapp "BigFixAntiPest.exe" whose (version of it >= "0.9.0.34")))} +prefetch "antipest.dll" sha1:552946f80235b9f6ad8444909424d554bad555f7 size:102400 http://software.bigfix.com/download/LoggingService/lib/antipest.dll +delete "{pathname of parent folder of file of service "BESClientLoggingService"}\lib\antipest.dll" +copy "__Download\antipest.dll" "{pathname of parent folder of file of service "BESClientLoggingService"}\lib\antipest.dll" +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\LoggingService\Plugins\Locations]" "CA_AP"="{escape of (pathname of parent folder of file of service "BESClientLoggingService" & "\lib\antipest.dll")}" +endif +// #AV +if {((if (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\eTrustAntivirus\CurrentVersion\Path" whose (exists value "HOME" of it) of registry) then (exists file ((value "HOME" of key "HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\eTrustAntivirus\CurrentVersion\Path" of registry as string) & "\InoOEM.dll") whose (version of it = "7.1")) else (false)) AND (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\AntiVirus" of registry))} +prefetch "antivirus.dll" sha1:7462e0790198d6f2afbe9c79db589e00eeb8d4c6 size:167936 http://software.bigfix.com/download/LoggingService/lib/antivirus.dll +prefetch "eavrtsdk.dll" sha1:d4e2a29a1d9891e72add0fcb7e47da4e3a57e608 size:241664 http://software.bigfix.com/download/LoggingService/lib/eavrtsdk.dll +delete "{pathname of parent folder of file of service "BESClientLoggingService"}\lib\antivirus.dll" +delete "{pathname of parent folder of file of service "BESClientLoggingService"}\lib\eavrtsdk.dll" +copy "__Download\antivirus.dll" "{pathname of parent folder of file of service "BESClientLoggingService"}\lib\antivirus.dll" +copy "__Download\eavrtsdk.dll" "{pathname of parent folder of file of service "BESClientLoggingService"}\lib\eavrtsdk.dll" +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\LoggingService\Plugins\Locations]" "CA_AV"="{escape of (pathname of parent folder of file of service "BESClientLoggingService" & "\lib\antivirus.dll")}" +regset "[HKEY_LOCAL_MACHINE\Software\BigFix\AntiVirus]" "SDKPath"="{escape of (pathname of parent folder of file of service "BESClientLoggingService" & "\lib")}" +endif +// #DLP +if {(((exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\DLP" whose (exists folder (values "installedPath" of it as string) whose (exists file "BESLeakProofCTRL.exe" whose (version of it >= "1.1.0.17") of it)) of registry)))} +prefetch "dlp.dll" sha1:e5d05be8daedf5143d2ae2b10fe75cc834ae0bad size:110592 http://software.bigfix.com/download/LoggingService/lib/dlp.dll +delete "{pathname of parent folder of file of service "BESClientLoggingService"}\lib\dlp.dll" +copy "__Download\dlp.dll" "{pathname of parent folder of file of service "BESClientLoggingService"}\lib\dlp.dll" +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\LoggingService\Plugins\Locations]" "TM_DLP"="{escape of (pathname of parent folder of file of service "BESClientLoggingService" & "\lib\dlp.dll")}" +endif +// #FW +if {((exists key "HKEY_LOCAL_MACHINE\SOFTWARE\CA\HIPSEngine\Products\BigFixFW" whose (exists value "UninstallCmdLine" of it) of registry))} +prefetch "compliance.dll" sha1:ba6b4f295a8933584d9c502db54797d839a4ee81 size:151552 http://software.bigfix.com/download/LoggingService/lib/compliance.dll +prefetch "firewall.dll" sha1:4a010c72c199c4deb302553332a23407b6f8cd49 size:151552 http://software.bigfix.com/download/LoggingService/lib/firewall.dll +delete "{pathname of parent folder of file of service "BESClientLoggingService"}\lib\compliance.dll" +delete "{pathname of parent folder of file of service "BESClientLoggingService"}\lib\firewall.dll" +copy "__Download\compliance.dll" "{pathname of parent folder of file of service "BESClientLoggingService"}\lib\compliance.dll" +copy "__Download\firewall.dll" "{pathname of parent folder of file of service "BESClientLoggingService"}\lib\firewall.dll" +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\LoggingService\Plugins\Locations]" "CA_FW"="{escape of (pathname of parent folder of file of service "BESClientLoggingService" & "\lib\firewall.dll")}" +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\LoggingService\Plugins\Locations]" "BF_CP"="{escape of (pathname of parent folder of file of service "BESClientLoggingService" & "\lib\compliance.dll")}" +endif +if {(exists setting "PowerManagement_PowerTrackingEnabled" whose (value of it = "1" or value of it = "2") of client)} +// Create Power Management folder if it does not exist +if {not exists folder (pathname of parent folder of regapp "besclient.exe" & "\Power Management")} +delete __createfile +delete createFolder.bat +createfile until end-of-file +@ECHO OFF +mkdir "{(pathname of parent folder of regapp "besclient.exe" & "\Power Management")}" > NUL 2> NUL +end-of-file +copy __createfile createFolder.bat +waithidden "{pathname of client folder of site "BESSupport"}\RunQuiet.exe" createFolder.bat +delete createFolder.bat +// ENDIF - power management folder +endif +// Download PM Plugin and executable - temporary for development only +if {not exists file (pathname of parent folder of regapp "besclient.exe" & "\BESClientLoggingService\lib\StandbyPowerTracker.dll")} +prefetch StandbyPowerTracker.dll sha1:5ba029e15c0123a413cbaf85596a28a5f1debeb5 size:543744 http://software.bigfix.com/download/LoggingService/lib/1.0.11.0/StandbyPowerTracker.dll +copy __Download\StandbyPowerTracker.dll "{(pathname of parent folder of regapp "besclient.exe" & "\BESClientLoggingService\lib\StandbyPowerTracker.dll")}" +endif // not exists StandByPowerTracker.dll +if {not exists file (pathname of parent folder of regapp "besclient.exe" & "\Power Management\BESPower.exe")} +prefetch BESPower.exe sha1:b0efd608ebd88bd788f7028a19f8600dcab95acd size:410112 http://software.bigfix.com/download/LoggingService/lib/1.0.11.0/BESPower.exe +copy __Download\BESPower.exe "{(pathname of parent folder of regapp "besclient.exe" & "\Power Management\BESPower.exe")}" +endif // if BESPower.exe does not exist +//Setup full path of the pluggin files +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\LoggingService\Plugins\Locations]" "BF_PM"="{escape of (pathname of parent folder of regapp "besclient.exe" & "\BESClientLoggingService\lib\StandbyPowerTracker.dll")}" +endif // power tracking enabled +//*********************** RESTART LOGGING SERVICE *******************// +waithidden "{pathname of parent folder of regapp "besclient.exe" & "\BESClientLoggingService\BESClientLoggingService.exe"}" -s +action may require restart]]> + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Relay - besrelay no ulimit (26606).bes b/Sites/BigFix Management/Fixlets/Fixlets/Relay - besrelay no ulimit (26606).bes new file mode 100644 index 000000000..b72ea13ca --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Relay - besrelay no ulimit (26606).bes @@ -0,0 +1,51 @@ + + + + + Relay - besrelay no ulimit + + exists relay service + exists ("red hat enterprise server 7"; "centos 7") whose (operating system as string as lowercase contains it) + not exists file "/etc/systemd/system/besrelay.service.d/filelimits.conf" + Internal + 2018-09-20 + + x-fixlet-modification-time + Tue, 06 Nov 2018 19:44:44 +0000 + + BESC + + + Click + here + to deploy this action. + + parameter "serviceName"="besrelay" + +if {exists process whose (name of it as string as lowercase = (parameter "serviceName") )} + + folder create /etc/systemd/system/{parameter "serviceName"}.service.d + + createfile until __FileCreate + [Service] + LimitNOFILE=infinity + __FileCreate + + move __createfile /etc/systemd/system/{parameter "serviceName"}.service.d/filelimits.conf + wait systemctl daemon-reload + wait systemctl restart {parameter "serviceName"}.service + +endif + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Relay AdvertisementList (ADSite) - Non-core Infrastructure (23800).bes b/Sites/BigFix Management/Fixlets/Fixlets/Relay AdvertisementList (ADSite) - Non-core Infrastructure (23800).bes new file mode 100644 index 000000000..6d2e2bd9a --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Relay AdvertisementList (ADSite) - Non-core Infrastructure (23800).bes @@ -0,0 +1,59 @@ + + + + + Relay AdvertisementList (ADSite) - Non-core Infrastructure + This fixlet sets the "_BESRelay_Register_Affiliation_AdvertisementList" for non-core infrastructure BES relays to match the property "AD Site"

]]> + NOT exists main gather service + exists relay service + /*Server name fits standard names*/ exists ("bfr") whose (computer name as lowercase contains it) + /*Exclude some server names*/ not exists ("bftr") whose (computer name as lowercase contains it) + /* AD site matches standards */ (value of setting "AD Site" of client as lowercase = regex "([0-9]{3}-[a-z,0-9]{2}[0-9]{3})" ) and (not exists setting "_BESRelay_Register_Affiliation_AdvertisementList" whose (value of it contains (value of setting "AD Site" of client )) of client) + , Relay, AdvertisementList, Non-core Infrastructure + 2015-10-05 + Low + + x-fixlet-modification-time + Mon, 13 Mar 2017 17:38:00 +0000 + + BESC + + + Click + here + to deploy this action. + + // Check for valid AD-Site property value +if {value of setting "AD Site" of client as lowercase = regex "([0-9]{3}}-[a-z,0-9]{2}}[0-9]{3}})" } + parameter "_AD_Site" = "{value of setting "AD Site" of client as string | "N/A"}" + if {parameter "_AD_Site" = "N/A"} + exit 1 + endif +else + parameter "_AD_Site" = "" +endif + +//both settings are set +if {parameter "_AD_Site" != "" } + parameter "_set" = "{parameter "_AD_Site"}" + +//something is wrong and should never get to this point +else + exit 3 +endif + +setting "_BESRelay_Register_Affiliation_AdvertisementList"="{parameter "_set"}" on "{now}" for client + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Relocate BES Client Directory (3637).bes b/Sites/BigFix Management/Fixlets/Fixlets/Relocate BES Client Directory (3637).bes new file mode 100644 index 000000000..efc3fa930 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Relocate BES Client Directory (3637).bes @@ -0,0 +1,98 @@ + + + + + Relocate BES Client Directory + Fixlet used to relocate the BES client directory to a new location. This is typical another file system which has more available disk space. A symbolic link is used.

+

The new target directory must already exist and have adaquete free space.

]]> + name of operating system as lowercase contains "linux" + not exists symlink "/var/opt/BESClient" + BES Support + Internal + 2013-10-23 + + x-fixlet-modification-time + Wed, 23 Oct 2013 18:37:35 +0000 + + BESC + + + Click + here + to deploy this action. + + > $LOG +if [ ! -d $IDIR ]; then + echo "`date` Target directory $TDIR does not exists!" >> $LOG + exit 1 +fi + +echo "`date` Stopping BES Client" >> $LOG +$RCCMD stop +sleep 10 + +cd /var/opt +echo "`date` Backing up BESClient directory" >> $LOG +tar cf /tmp/BESClient.tar BESClient >> $LOG 2>&1 +if [ $? -ne 0 ]; then + echo "`date` Error backing up BESClient directory" >> $LOG + exit 1 +fi + +/bin/rm -rf BESClient + +cd $TDIR +echo "`date` Extracting BESClient directory to $TDIR" >> $LOG +tar xf /tmp/BESClient.tar >> $LOG 2>&1 +if [ $? -ne 0 ]; then + echo "`date` Error extracting BESClient tar file!" >> $LOG + /bin/rm -f /tmp/BESClient.tar + echo "`date` Restarting bes agent" >> $LOG + $RCCMD start + exit 1 +fi + +echo "`date` Creating symbolic link" >> $LOG +ln -s $TDIR/BESClient /var/opt/BESClient +if [ $? -ne 0 ]; then + echo "`date` Error creating symbolic link!" >> $LOG + echo "`date` Restoring BESClient directory!" >> $LOG + cd /var/opt + rm -f BESClient + tar xf /tmp/BESClient.tar + /bin/rm -f /tmp/BESClient.tar + echo "`date` Restarting bes agent" >> $LOG + $RCCMD start + exit 1 +else + echo "`date` Restarting BES Client" >> $LOG + $RCCMD start +fi +echo "`date` BES Client directory successfully relocated to $TDIR" >> $LOG +exit 0 +_EOF_ + +delete besreloc.sh +move __createfile besreloc.sh +wait sh besreloc.sh +]]> + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Remove Maintenance Window (303).bes b/Sites/BigFix Management/Fixlets/Fixlets/Remove Maintenance Window (303).bes new file mode 100644 index 000000000..9a9bea376 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Remove Maintenance Window (303).bes @@ -0,0 +1,53 @@ + + + + + Remove Maintenance Window + Use this Task to remove the Maintenance Window from computers. +]]> + exists settings whose(name of it = "MaintenanceWindow_StartTime" AND exists value of it) of client + Maintenance Window + BigFix + <Unspecified> + 2026-09-17 + <Unspecified> + + x-fixlet-first-propagation + Thu, 18 Nov 2010 23:39:31 +0000 + + + x-fixlet-domain_attributes + Maintenance Window + + + x-fixlet-modification-time + Fri, 04 Nov 2011 22:14:55 +0000 + + BESC + + + Click + here + to execute this action. + + setting delete "MaintenanceWindow_Name" on "{parameter "action issue date" of action}" for client +setting delete "MaintenanceWindow_ID" on "{parameter "action issue date" of action}" for client +setting delete "MaintenanceWindow_WindowSizeMinutes" on "{parameter "action issue date" of action}" for client +setting delete "MaintenanceWindow_StartTime" on "{parameter "action issue date" of action}" for client +setting delete "MaintenanceWindow_RepeatType" on "{parameter "action issue date" of action}" for client +setting delete "MaintenanceWindow_RepeatInterval" on "{parameter "action issue date" of action}" for client +setting delete "MaintenanceWindow_DayOrdinal" on "{parameter "action issue date" of action}" for client +setting delete "MaintenanceWindow_DaysOfWeek" on "{parameter "action issue date" of action}" for client + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Rename (Backup) specified files from computers - In relation to Log4j vulnerability scan results (26896).bes b/Sites/BigFix Management/Fixlets/Fixlets/Rename (Backup) specified files from computers - In relation to Log4j vulnerability scan results (26896).bes new file mode 100644 index 000000000..3dccf1caa --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Rename (Backup) specified files from computers - In relation to Log4j vulnerability scan results (26896).bes @@ -0,0 +1,82 @@ + + + + + Rename (Backup) specified files from computers - In relation to Log4j vulnerability scan results + This is a Multi OS, multip endpoint file renamer.

+

Specify servers and files to rename from "filename.ext" to "filename.ext.bak.yyymmdd-hhmmss". This will allow re-running multiple times and have multiple backups if needed.

+

Enter server and file path in CSV format "server, C:\full path\to_file\to-rename.txt"
The CSV should be entered ONLY BETWEEN "_END_OF_FILE" PARTS and you can have multiple endpoints in the CSV as the endpoint will check for lines behinning with the same computer name as itself.

+

This should easily allow renaming of multiple files in one hit and keep the "backups" dormant if necessary in the future.

]]> + true + Internal + 2021-12-14 + + x-fixlet-modification-time + Mon, 13 Dec 2021 17:50:24 +0000 + + BESC + + + Click + here + to deploy this action. + + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Reserve Port for BES Client for DNS Servers (Windows 2008_2008 R2) (300).bes b/Sites/BigFix Management/Fixlets/Fixlets/Reserve Port for BES Client for DNS Servers (Windows 2008_2008 R2) (300).bes new file mode 100644 index 000000000..ff1eb2175 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Reserve Port for BES Client for DNS Servers (Windows 2008_2008 R2) (300).bes @@ -0,0 +1,74 @@ + + + + + Reserve Port for BES Client for DNS Servers (Windows 2008/2008 R2) +

In some situations, the DNS service may bind to the same port as the Tivoli Endpoint Manager Client. This will cause a Socket Error on the Client and prevent it from communicating properly with the rest of the deployment making it unable to receive messages from the Tivoli Endpoint Manager Server or Relay.


The default task will change ephemeral port range to exclude the Tivoli Endpoint Manager Client port used in your deployment (default of port 52311) by moving the range to above that port.


A secondary task is available allowing you to specify a different range if this range does not work for your environemnt which will be validated against the port the client is using.


Note: Due to where the setting is stored, we cannot examine the success of this action. Please record that the event has taken place as this fixlet will remain relevant on systems with a running DNS server.

+]]> + (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) + = "5.1"]]> + = "8.0") then (windows of it) else (name of it starts with "Win")) AND platform id of it != 3) of operating system]]> + ((product type of it != nt workstation product type) AND (major version of it = 6)) of operating system + exists running service "DNS" + <Unspecified> + BigFix + <Unspecified> + 2011-11-22 + <Unspecified> + + x-fixlet-domain_attributes + BES Component Client + + + x-fixlet-modification-time + Mon, 30 Jul 2012 22:05:05 +0000 + + + x-fixlet-first-propagation + Mon, 28 Mar 2011 20:23:51 +0000 + + BESC + + + Click + here + to move the ephemeral port range to above the port the client is using. + + waithidden netsh interface ipv4 set dynamicport udp start={(value "ListenPort" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions" of registry as integer + 1) as string} num={(65535 - (value "ListenPort" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions" of registry as integer + 1)) as string} + + + + Click + here + to choose the ephemeral port range. + + (value "ListenPort" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions" of registry as integer)) | (((parameter "STARTPORT" as integer) + (parameter "RANGE" as integer)) < (value "ListenPort" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions" of registry as integer))} +waithidden netsh interface ipv4 set dynamicport udp start={parameter "STARTPORT"} num={parameter "RANGE"}]]> + + + + Click + here + to view Microsoft KB Article 956188, which describes how the DNS service may cause problems when selecting random ports and how to work around the issue. + + http://support.microsoft.com/kb/956188/ + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Reset 'Pending Restart' Registry Keys_Values (26911).bes b/Sites/BigFix Management/Fixlets/Fixlets/Reset 'Pending Restart' Registry Keys_Values (26911).bes new file mode 100644 index 000000000..2d3d47631 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Reset 'Pending Restart' Registry Keys_Values (26911).bes @@ -0,0 +1,416 @@ + + + + + Reset 'Pending Restart' Registry Keys/Values + This task will reset all Registry keys known to be associated with a Status of 'Pending Restart' when taking an action on an endpoint

+

Note:
Computers reporting this status may actually require a reboot in order to complete installation of a patch or software.  The intent of this task is to attempt to reset 'persistent' registry keys and values that do not reset on their own after the computer is rebooted.  Use this task as a last resort when dealing with computers reporting a 'Pending Restart' 

]]> + pending restart + windows of operating system + Internal + 2021-12-18 + + x-fixlet-modification-time + Wed, 05 Jan 2022 17:26:14 +0000 + + BESC + + + Click + here + to deploy this action. + + > "{parameter "tasklogfilename"}" +dos echo {"[" & (now) as string & "] - Task started by operator: "} {parameter "Operator"} >> "{parameter "tasklogfilename"}" +dos echo {"[" & (now) as string & "] - BES Console Action ID: "} {parameter "ActionID"} >> "{parameter "tasklogfilename"}" + + + +// BEGIN EXAMINING AND RESETTING KEYS + + +// Key Name: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates (32-bit and 64-bit registry hives) +// Value Name: UpdateExeVolatile +// Reset the value to zero (0) if it is not already zero + +// Write log detailing what is being done +dos echo {"[" & (now) as string & "] - Examining Value 'UpdateExeVolatile' in key [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates]"} >> "{parameter "tasklogfilename"}" + +if {((exists key "HKEY_LOCAL_MACHINE\Software\Microsoft\Updates" of it and exists value "UpdateExeVolatile" of key "HKEY_LOCAL_MACHINE\Software\Microsoft\Updates" of it) of registry) and value "UpdateExeVolatile" of key "HKEY_LOCAL_MACHINE\Software\Microsoft\Updates" of registry != 0} + dos echo {"[" & (now) as string & "] - Value exists and is not zero (0)...Resetting"} >> "{parameter "tasklogfilename"}" + + dos echo {"[" & (now) as string & "] - Deleting any existing version of the key"} >> "{parameter "tasklogfilename"}" + regdelete "[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Updates]" "UpdateExeVolatile" + + dos echo {"[" & (now) as string & "] - recreating the key with a dword value of zero (0)"} >> "{parameter "tasklogfilename"}" + regset "[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Updates]" "UpdateExeVolatile"=dword:0 + +elseif {((exists key "HKEY_LOCAL_MACHINE\Software\Microsoft\Updates" of it and exists value "UpdateExeVolatile" of key "HKEY_LOCAL_MACHINE\Software\Microsoft\Updates" of it) of native registry) and value "UpdateExeVolatile" of key "HKEY_LOCAL_MACHINE\Software\Microsoft\Updates" of native registry != 0} + dos echo {"[" & (now) as string & "] - Value exists and is not zero (0)...Resetting"} >> "{parameter "tasklogfilename"}" + + dos echo {"[" & (now) as string & "] - Deleting any existing version of the key"} >> "{parameter "tasklogfilename"}" + regdelete "[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates]" "UpdateExeVolatile" + + dos echo {"[" & (now) as string & "] - recreating the key with a dword value of zero (0)"} >> "{parameter "tasklogfilename"}" + regset "[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates]" "UpdateExeVolatile"=dword:0 + +else + dos echo {"[" & (now) as string & "] - Does not exist...proceeding to next entry"} >> "{parameter "tasklogfilename"}" + +endif + + +// Key Name: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager +// Value Name: PendingFileRenameOperations +// Delete Value if It exists + +dos echo {"[" & (now) as string & "] - Examining key [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager] for value 'PendingFileRenameOperations'"} >> "{parameter "tasklogfilename"}" + +if {((exists key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" of it AND exists value "PendingFileRenameOperations" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" of it) of registry)} + dos echo {"[" & (now) as string & "] - value 'PendingFileRenameOperations' exists...Deleting"} >> "{parameter "tasklogfilename"}" + regdelete "[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager]" "PendingFileRenameOperations" + + if {((exists key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" of it AND exists value "PendingFileRenameOperations" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" of it) of registry)} + dos echo {"[" & (now) as string & "] - *** WARNING *** Unable to delete value 'PendingFileRenameOperations' please troubleshoot registry key"} >> "{parameter "tasklogfilename"}" + else + dos echo {"[" & (now) as string & "] - value 'PendingFileRenameOperations' Deleted"} >> "{parameter "tasklogfilename"}" + endif + +else + dos echo {"[" & (now) as string & "] - Does not exist...proceeding to next entry"} >> "{parameter "tasklogfilename"}" +endif + + + + + +// Key Name: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager +// Value Name: PendingFileRenameOperations2 +// Delete Value if it exists + +dos echo {"[" & (now) as string & "] - Examining key [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager] for value 'PendingFileRenameOperations2'"} >> "{parameter "tasklogfilename"}" + +if {((exists key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" of it AND exists value "PendingFileRenameOperations2" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" of it) of registry)} + dos echo {"[" & (now) as string & "] - value 'PendingFileRenameOperations' exists...Deleting"} >> "{parameter "tasklogfilename"}" + regdelete "[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager]" "PendingFileRenameOperations2" + + if {((exists key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" of it AND exists value "PendingFileRenameOperations2" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" of it) of registry)} + dos echo {"[" & (now) as string & "] - *** WARNING *** Unable to delete value 'PendingFileRenameOperations2' please troubleshoot registry key"} >> "{parameter "tasklogfilename"}" + else + dos echo {"[" & (now) as string & "] - value 'PendingFileRenameOperations2' Deleted"} >> "{parameter "tasklogfilename"}" + endif + +else + dos echo {"[" & (now) as string & "] - Does not exist...proceeding to next entry"} >> "{parameter "tasklogfilename"}" +endif + + + +// Key Name: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired +// Value Name: N/A +// Delete key if it exists + +dos echo {"[" & (now) as string & "] - Examining key [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired] for existence"} >> "{parameter "tasklogfilename"}" +if {exists key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootRequired" of registry or exists key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootRequired" of native registry} + dos echo {"[" & (now) as string & "] - key exists...Deleting"} >> "{parameter "tasklogfilename"}" + regkeydelete "[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootRequired]" + + if {exists key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootRequired" of registry or exists key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootRequired" of native registry} + dos echo {"[" & (now) as string & "] - *** WARNING *** Unable to delete key [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootRequired] please troubleshoot registry key"} >> "{parameter "tasklogfilename"}" + else + dos echo {"[" & (now) as string & "] - key Deleted"} >> "{parameter "tasklogfilename"}" + endif +else + dos echo {"[" & (now) as string & "] - Does not exist...proceeding to next entry"} >> "{parameter "tasklogfilename"}" +endif + + +// Key Name: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Services\Pending +// Value Name: N/A +// DELETE SUBKEYS CONTAINING 'GUIDS' *** ON HOLD UNTIL BETTER TESTING CAN RULE OUT POTENTIAL ISSUES *** + + + +// Key Name: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\PostRebootReporting +// Value Name: N/A +// Delete key if it exists + +dos echo {"[" & (now) as string & "] - Examining key [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\PostRebootReporting] for existence"} >> "{parameter "tasklogfilename"}" +if {exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\PostRebootReporting" of registry or exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\PostRebootReporting" of native registry} + dos echo {"[" & (now) as string & "] - key exists...Deleting"} >> "{parameter "tasklogfilename"}" + regkeydelete "[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\PostRebootReporting]" + + if {exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\PostRebootReporting" of registry or exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\PostRebootReporting" of native registry} + dos echo {"[" & (now) as string & "] - *** WARNING *** Unable to delete key [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\PostRebootReporting] please troubleshoot registry key"} >> "{parameter "tasklogfilename"}" + else + dos echo {"[" & (now) as string & "] - key Deleted"} >> "{parameter "tasklogfilename"}" + endif +else + dos echo {"[" & (now) as string & "] - Does not exist...proceeding to next entry"} >> "{parameter "tasklogfilename"}" +endif + + + + + +// Key Name: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce +// Value Name: DVDRebootSignal +// Delete Value if it exists + +dos echo {"[" & (now) as string & "] - Examining key [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] for value 'DVDRebootSignal'"} >> "{parameter "tasklogfilename"}" + +if {((exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce" of it AND exists value "DVDRebootSignal" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce" of it) of registry)} + dos echo {"[" & (now) as string & "] - value 'DVDRebootSignal' exists...Deleting"} >> "{parameter "tasklogfilename"}" + regdelete "[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]" "DVDRebootSignal" + + if {((exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce" of it AND exists value "DVDRebootSignal" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce" of it) of registry)} + dos echo {"[" & (now) as string & "] - *** WARNING *** Unable to delete value 'DVDRebootSignal' please troubleshoot registry key"} >> "{parameter "tasklogfilename"}" + else + dos echo {"[" & (now) as string & "] - value 'DVDRebootSignal' Deleted"} >> "{parameter "tasklogfilename"}" + endif + +else + dos echo {"[" & (now) as string & "] - Does not exist...proceeding to next entry"} >> "{parameter "tasklogfilename"}" +endif + + + + +// Key Name: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootPending +// Value Name: N/A +// Delete key if it exists + +dos echo {"[" & (now) as string & "] - Examining key [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootPending] for existence"} >> "{parameter "tasklogfilename"}" +if {exists key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootPending" of (registry;native registry)} + dos echo {"[" & (now) as string & "] - key exists...Deleting"} >> "{parameter "tasklogfilename"}" + regkeydelete "[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootPending]" + + if {exists key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootPending" of (registry;native registry)} + dos echo {"[" & (now) as string & "] - *** WARNING *** Unable to delete key [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\PostRebootReporting] please troubleshoot registry key"} >> "{parameter "tasklogfilename"}" + else + dos echo {"[" & (now) as string & "] - key Deleted"} >> "{parameter "tasklogfilename"}" + endif +else + dos echo {"[" & (now) as string & "] - Does not exist...proceeding to next entry"} >> "{parameter "tasklogfilename"}" +endif + + +// Key Name: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootInProgress +// Value Name: N/A +// Delete key if it exists + +dos echo {"[" & (now) as string & "] - Examining key [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootInProgress] for existence"} >> "{parameter "tasklogfilename"}" +if {exists key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootInProgress" of (registry;native registry)} + dos echo {"[" & (now) as string & "] - key exists...Deleting"} >> "{parameter "tasklogfilename"}" + regkeydelete "[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootInProgress]" + + if {exists key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootInProgress" of (registry;native registry)} + dos echo {"[" & (now) as string & "] - *** WARNING *** Unable to delete key [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootInProgress] please troubleshoot registry key"} >> "{parameter "tasklogfilename"}" + else + dos echo {"[" & (now) as string & "] - key Deleted"} >> "{parameter "tasklogfilename"}" + endif +else + dos echo {"[" & (now) as string & "] - Does not exist...proceeding to next entry"} >> "{parameter "tasklogfilename"}" +endif + + + +// Key Name: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackagesPending +// Value Name: N/A +// Delete key if it exists + +dos echo {"[" & (now) as string & "] - Examining key [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackagesPending] for existence"} >> "{parameter "tasklogfilename"}" +if {exists key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackagesPending" of (registry;native registry)} + dos echo {"[" & (now) as string & "] - key exists...Deleting"} >> "{parameter "tasklogfilename"}" + regkeydelete "[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackagesPending]" + + if {exists key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackagesPending" of (registry;native registry)} + dos echo {"[" & (now) as string & "] - *** WARNING *** Unable to delete key [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\PackagesPending] please troubleshoot registry key"} >> "{parameter "tasklogfilename"}" + else + dos echo {"[" & (now) as string & "] - key Deleted"} >> "{parameter "tasklogfilename"}" + endif +else + dos echo {"[" & (now) as string & "] - Does not exist...proceeding to next entry"} >> "{parameter "tasklogfilename"}" +endif + + +// Key Name: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ServerManager\CurrentRebootAttempts +// Value Name: N/A +// Delete key if it exists + +dos echo {"[" & (now) as string & "] - Examining key [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ServerManager\CurrentRebootAttempts] for existence"} >> "{parameter "tasklogfilename"}" +if {exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ServerManager\CurrentRebootAttempts" of (registry;native registry)} + dos echo {"[" & (now) as string & "] - key exists...Deleting"} >> "{parameter "tasklogfilename"}" + regkeydelete "[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ServerManager\CurrentRebootAttempts]" + + if {exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ServerManager\CurrentRebootAttempts" of (registry;native registry)} + dos echo {"[" & (now) as string & "] - *** WARNING *** Unable to delete key [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ServerManager\CurrentRebootAttempts] please troubleshoot registry key"} >> "{parameter "tasklogfilename"}" + else + dos echo {"[" & (now) as string & "] - key Deleted"} >> "{parameter "tasklogfilename"}" + endif +else + dos echo {"[" & (now) as string & "] - Does not exist...proceeding to next entry"} >> "{parameter "tasklogfilename"}" +endif + + + + + +// Key Name: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon +// Value Name: JoinDomain +// Delete Value if It exists + +dos echo {"[" & (now) as string & "] - Examining key [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon] for value 'JoinDomain'"} >> "{parameter "tasklogfilename"}" + +if {((exists key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon" of it AND exists value "JoinDomain" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon" of it) of registry)} + dos echo {"[" & (now) as string & "] - value 'PendingFileRenameOperations' exists...Deleting"} >> "{parameter "tasklogfilename"}" + regdelete "[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon]" "JoinDomain" + + if {((exists key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon" of it AND exists value "JoinDomain" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon" of it) of registry)} + dos echo {"[" & (now) as string & "] - *** WARNING *** Unable to delete value 'JoinDomain' please troubleshoot registry key"} >> "{parameter "tasklogfilename"}" + else + dos echo {"[" & (now) as string & "] - value 'JoinDomain' Deleted"} >> "{parameter "tasklogfilename"}" + endif + +else + dos echo {"[" & (now) as string & "] - Does not exist...proceeding to next entry"} >> "{parameter "tasklogfilename"}" +endif + + +// Key Name: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon +// Value Name: AvoidSpnSet +// Delete Value if It exists + +dos echo {"[" & (now) as string & "] - Examining key [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon] for value 'AvoidSpnSet'"} >> "{parameter "tasklogfilename"}" + +if {((exists key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon" of it AND exists value "AvoidSpnSet" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon" of it) of registry)} + dos echo {"[" & (now) as string & "] - value 'PendingFileRenameOperations' exists...Deleting"} >> "{parameter "tasklogfilename"}" + regdelete "[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon]" "AvoidSpnSet" + + if {((exists key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon" of it AND exists value "AvoidSpnSet" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon" of it) of registry)} + dos echo {"[" & (now) as string & "] - *** WARNING *** Unable to delete value 'AvoidSpnSet' please troubleshoot registry key"} >> "{parameter "tasklogfilename"}" + else + dos echo {"[" & (now) as string & "] - value 'AvoidSpnSet' Deleted"} >> "{parameter "tasklogfilename"}" + endif + +else + dos echo {"[" & (now) as string & "] - Does not exist...proceeding to next entry"} >> "{parameter "tasklogfilename"}" +endif + + + +// Key Name: HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\BESPendingRestart +// Value Name: BESPendingRestart +// Delete key and value if it exists + +dos echo {"[" & (now) as string & "] - Examining key [HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\BESPendingRestart] for existence of value BESPendingRestart"} >> "{parameter "tasklogfilename"}" +if {exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\BESPendingRestart" of (registry;native registry) and exists value "BESPendingRestart" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\BESPendingRestart" of (registry;native registry)} + dos echo {"[" & (now) as string & "] - key and value exist...Deleting"} >> "{parameter "tasklogfilename"}" + regkeydelete "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\BESPendingRestart]" + + if {exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\BESPendingRestart" of (registry;native registry)} + dos echo {"[" & (now) as string & "] - *** WARNING *** Unable to delete key [HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\BESPendingRestart] please troubleshoot registry key"} >> "{parameter "tasklogfilename"}" + else + dos echo {"[" & (now) as string & "] - key Deleted"} >> "{parameter "tasklogfilename"}" + endif +else + dos echo {"[" & (now) as string & "] - Does not exist...proceeding to next entry"} >> "{parameter "tasklogfilename"}" +endif + + + + +// Key Name: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce +// Value Name: BESPendingRestart +// Delete value if it exists + +dos echo {"[" & (now) as string & "] - Examining key [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce] for existence of value BESPendingRestart"} >> "{parameter "tasklogfilename"}" +if {exists key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce" of registry and exists value "BESPendingRestart" of key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce" of registry} + dos echo {"[" & (now) as string & "] - key and value exist...Deleting value"} >> "{parameter "tasklogfilename"}" + regdelete "[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce]" "BESPendingRestart" + + if {(exists key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce" of it AND exists value "BESPendingRestart" of key "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce" of it) of registry} + dos echo {"[" & (now) as string & "] - *** WARNING *** Unable to delete value 'BESPendingRestart' in key [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce] please troubleshoot registry key"} >> "{parameter "tasklogfilename"}" + else + dos echo {"[" & (now) as string & "] - value Deleted"} >> "{parameter "tasklogfilename"}" + endif +else + dos echo {"[" & (now) as string & "] - Does not exist...proceeding to next entry"} >> "{parameter "tasklogfilename"}" +endif + + + + +// Key1 Name: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ComputerName\ActiveComputerName +// Key2 Name: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ComputerName\ComputerName +// Value Name: ComputerName +// Different contents of value 'ComputerName' will trigger 'Pending Restart' status + +if {(exists key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ComputerName\ActiveComputerName" of registry and exists value "ComputerName" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ComputerName\ActiveComputerName" of registry and exists key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ComputerName\ComputerName" of registry and exists value "ComputerName" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ComputerName\ComputerName" of registry)} + dos echo {"[" & (now) as string & "] - keys and values exists...validating contents"} >> "{parameter "tasklogfilename"}" + + if {(value "ComputerName" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ComputerName\ActiveComputerName" of registry = value "ComputerName" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ComputerName\ComputerName" of registry)} + dos echo {"[" & (now) as string & "] - Contents of both ComputerName values match...no action required"} >> "{parameter "tasklogfilename"}" + + else + dos echo {"[" & (now) as string & "] - ComputerName contents of key 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ComputerName\ActiveComputerName' is: "} {value "ComputerName" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ComputerName\ActiveComputerName" of registry} >> "{parameter "tasklogfilename"}" + parameter "timeout" = "{now}" + pause while {now < ( ((parameter "timeout" of action ) as time ) + 2 * second)} + dos echo {"[" & (now) as string & "] - ComputerName contents of key 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ComputerName\ComputerName' is: "} {value "ComputerName" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ComputerName\ComputerName" of registry} >> "{parameter "tasklogfilename"}" + endif + +endif + +dos echo {"[" & (now) as string & "] - END of TASK"} >> "{parameter "tasklogfilename"}" +]]> + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Run Nmap with Custom Scan Options - All Local Subnets - Improved (3852).bes b/Sites/BigFix Management/Fixlets/Fixlets/Run Nmap with Custom Scan Options - All Local Subnets - Improved (3852).bes new file mode 100644 index 000000000..5924b65f8 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Run Nmap with Custom Scan Options - All Local Subnets - Improved (3852).bes @@ -0,0 +1,188 @@ + + + + + Run Nmap with Custom Scan Options - All Local Subnets - Improved + This Fixlet was originally created by the BES Asset Scanning Wizard, but has been heavily customized.

+
    +
  • Relevance was corrected to fix an issue where RHEL 6 (or higher) matched the Windows relevance and generate an error. +
  • Relevance and ActionScript updated to handle scanning from multihomed systems +
  • Only machines with an IP interface containing a subnet mask of 22-bits or more are relevant +
  • +

    Only locally-attached networks with subnet masks greater than 22-bits are scanned.

+

This Fixlet message will run an Nmap scan over the local subnets of the Scan Point.

+

+

The following TCP ports will be scanned: 22 23 80 135 139 235 445 61616 +

+

The OS Detection option will be used. +

+

Nmap will run service detection to probe open ports for running services. +

+

The timing policy for this Nmap scan is: 3 (normal) +

+

This Fixlet message is applicable on Windows 7, Vista, 2008, 2003, XP, 2000, and Red Hat Linux.

]]> + if exists property "in proxy agent context" then not in proxy agent context else true + name of operating system as lowercase starts with "win" or name of operating system as lowercase contains "red hat" + = "6.0")]]> + = 5 AND (exists folder "BESScanner-NMAP" of it AND exists file "nmap.exe" of folder "BESScanner-NMAP\NMAP" of it) of parent folder of regapp "BESClient.exe") AND (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\WinPcap" of x32 registry)) else true]]> + if name of operating system as lowercase contains "red hat" then (exists folder "BESScanner-NMAP/NMAP" of parent folder of parent folder of client folder of current site) AND ((exists package "nmap" of rpm) OR ((exists file "nmap" of it AND exists file "_nmap" of it) of folder "BESScanner-NMAP" of parent folder of parent folder of client folder of current site)) else true + = 1)]]> + 22)]]> + 2014-09-03 + + x-fixlet-ADCustomFixlet + Custom Fixlet + + + x-fixlet-modification-time + Wed, 03 Sep 2014 19:51:55 +0000 + + SYST + + + Click + here + to run an Nmap scan. + + NUL 2>NUL +move __appendfile folder.bat +waithidden folder.bat + +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\BESScanner-NMAP]" "LastScanStartTime"="{now}" +delete nmapquiet.bat +delete __appendfile +appendfile @ECHO OFF + +// Following line customized 2014-09-03 Jason Walker, Lockheed Martin Corporation +// to allow for scanning multiple locally-attached subnets +//appendfile "{pathname of folder "BESScanner-NMAP\NMAP" of parent folder of regapp "BESClient.exe"}\nmap.exe" -sV -sS -sU -p T:22,T:23,T:80,T:135,T:139,T:235,T:445,T:61616,U:{value "ListenPort" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions" of x32 registry} --exclude "{concatenation "," of (addresses whose (it as string != "0.0.0.0") of ip interfaces whose (loopback of it = false) of network as string)}"{if (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\BESScanner-NMAP" whose (value "NmapVersion" of it as string as version = "4.20") of x32 registry) then " -O1 --osscan-guess" else " -O --osscan-guess"} -PE -PA80 -T 3 "{(unique value of (subnet addresses whose (it as string != "0.0.0.0") of ip interfaces whose (loopback of it = false) of network as string)) & "/" & (number of bits (0;1;2;3;4;5;6;7) whose (it) of ( it as integer ) of ( if it contains "." then preceding text of first "." of it else it ) of ( it; following texts of substrings "." of it ) of ( unique value of (subnet masks of ip interfaces whose (loopback of it = false) of network as string )) as string) }" -oX "{parameter "nmapXMLFilePath"}" >NUL 2>NUL +appendfile "{pathname of folder "BESScanner-NMAP\NMAP" of parent folder of regapp "BESClient.exe"}\nmap.exe" -sV -sS -sU -p T:22,T:23,T:80,T:135,T:139,T:235,T:445,T:61616,U:{value "ListenPort" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions" of x32 registry} {if (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\BESScanner-NMAP" whose (value "NmapVersion" of it as string as version = "4.20") of x32 registry) then " -O1 --osscan-guess" else " -O --osscan-guess"} -PE -PA80 -T3 -oX "{parameter "nmapXMLFilePath"}" {("--exclude %22" & (concatenation "," of (preceding texts of first "," of it) of substrings separated by ";" of it )& "%22 " & concatenation " " of (following texts of first "," of it) of substrings separated by ";" of it ) of concatenation ";" of (address of it as string & "," & subnet address of it as string & "/" & (it as string) of (number of bits (0;1;2;3;4;5;6;7) whose (it) of ( it as integer ) of ( if it contains "." then preceding text of first "." of it else it ) of ( it; following texts of substrings "." of it) of (subnet mask of it as string) )) whose (preceding text of first "," of it != "0.0.0.0" and following text of first "/" of it as integer > 22) of ip interfaces whose (loopback of it = false) of network} >NUL 2>NUL + +move __appendfile nmapquiet.bat +waithidden nmapquiet.bat +// Another customization for multiple subnets +//regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\BESScanner-NMAP]" "LastSubnetScanned"="{(unique value of (subnet addresses whose (it as string != "0.0.0.0") of ip interfaces whose (loopback of it = false) of network as string)) & "/" & (number of bits (0;1;2;3;4;5;6;7) whose (it) of ( it as integer ) of ( if it contains "." then preceding text of first "." of it else it ) of ( it; following texts of substrings "." of it ) of ( unique value of (subnet masks of ip interfaces whose (loopback of it = false) of network as string )) as string) }" +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\BESScanner-NMAP]" "LastSubnetScanned"="{(concatenation " " of (following texts of first "," of it) of substrings separated by ";" of it ) of concatenation ";" of (address of it as string & "," & subnet address of it as string & "/" & (it as string) of (number of bits (0;1;2;3;4;5;6;7) whose (it) of ( it as integer ) of ( if it contains "." then preceding text of first "." of it else it ) of ( it; following texts of substrings "." of it) of (subnet mask of it as string) )) whose (preceding text of first "," of it != "0.0.0.0" and following text of first "/" of it as integer > 22) of ip interfaces whose (loopback of it = false) of network}" + + + +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\BESScanner-NMAP]" "LastScanFinishTime"="{now}" +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\BESScanner-NMAP]" "NumberOfScansRun"="{value "NumberOfScansRun" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\BESScanner-NMAP" of x32 registry as integer + 1}" + +continue if {(exists file whose (name of it starts with "nmap-" AND name of it contains (parameter "current_time") AND exists line whose (((exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\BESScanner-NMAP" whose (value "NmapVersion" of it as string as version < "4.52") of x32 registry) AND it as lowercase contains "nmap run completed at") OR ((exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\BESScanner-NMAP" whose (value "NmapVersion" of it as string as version >= "4.52") of x32 registry) AND it as lowercase contains "nmap done at")) of it) of folder (pathname of windows folder & "\temp\nmap"))} + +setting "_BESClient_ArchiveManager_MaxArchiveSize"="20971520" on "{parameter "action issue date" of action}" for client + +continue if {(exists file whose (name of it starts with "nmap-" AND name of it contains (parameter "current_time") AND exists line whose (((exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\BESScanner-NMAP" whose (value "NmapVersion" of it as string as version < "4.52") of x32 registry) AND it as lowercase contains "nmap run completed at") OR ((exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\BESScanner-NMAP" whose (value "NmapVersion" of it as string as version >= "4.52") of x32 registry) AND it as lowercase contains "nmap done at")) of it AND size of it <= ((value of setting "_BESClient_ArchiveManager_MaxArchiveSize" of client) as integer)) of folder (pathname of windows folder & "\temp\nmap"))} + +setting "_BESClient_ArchiveManager_OperatingMode"="2" on "{parameter "action issue date" of action}" for client +setting "_BESClient_ArchiveManager_FileSet-nmap{parameter "current_time"}"="{parameter "nmapXMLFilePath"}" on "{parameter "action issue date" of action}" for client +archive now +if {exists key whose (name of it = "ArchiveManager-nmap-delete-settings" and exists value whose (name of it = "type" and it = "numeral") of it and exists value whose (name of it = "value") of it) of key "HKLM\SOFTWARE\BigFix\EnterpriseClient" of registry} +if {exists settings whose (name of it starts with "_BESClient_ArchiveManager_FileSet-nmap" AND effective date of it < now) of client} +parameter "CountRange" = "{value whose (name of it = "value") of key whose (name of it = "ArchiveManager-nmap-delete-settings" and exists value whose (name of it = "type" and it = "numeral") of it and exists value whose (name of it = "value") of it) of key "HKLM\SOFTWARE\BigFix\EnterpriseClient" of registry}" +delete __appendfile +delete allscans.txt +appendfile {(concatenation of "[-HKEY_LOCAL_MACHINE\Software\" & (if x64 of operating system then "Wow6432Node\" else "") & "BigFix\EnterpriseClient\Settings\Client\" & it & "]%0d%0a") of unique values of ((names of it) of settings whose (name of it starts with "_BESClient_ArchiveManager_FileSet-nmap" AND effective date of it < now) of client)} +move __appendfile allscans.txt +delete __createfile +delete createdeletelist.bat +delete deleteoldscans.reg +createfile until end-file-creation +setlocal ENABLEEXTENSIONS +setlocal ENABLEDELAYEDEXPANSION +set COUNTER={number of lines whose (it as string starts with "[") of file "allscans.txt" of client folder of current site} +echo REGEDIT4 >> deleteoldscans.reg +for /f "delims=" %%A in (allscans.txt) do ( + if !COUNTER! gtr {parameter "CountRange" as integer} (echo %%A >> deleteoldscans.reg) else (goto DELETESCANS) + set /a COUNTER=COUNTER-1 +) +:DELETESCANS +regedit -s deleteoldscans.reg +end-file-creation +move __createfile createdeletelist.bat +waithidden createdeletelist.bat +delete allscans.txt +delete createdeletelist.bat +delete deleteoldscans.reg +endif + +elseif {exists key whose (name of it = "ArchiveManager-nmap-delete-settings" and exists value whose (name of it = "type" and it = "temporal") of it and exists value whose (name of it = "value") of it) of key "HKLM\SOFTWARE\BigFix\EnterpriseClient" of registry} +parameter "DayRange" = "{value whose (name of it = "value") of key whose (name of it = "ArchiveManager-nmap-delete-settings" and exists value whose (name of it = "type" and it = "temporal") of it and exists value whose (name of it = "value") of it) of key "HKLM\SOFTWARE\BigFix\EnterpriseClient" of registry}" +if {exists settings whose (name of it starts with "_BESClient_ArchiveManager_FileSet-nmap" AND effective date of it < now-(parameter "DayRange" as integer)*hour) of client} +delete __appendfile +delete deleteoldscans.reg +appendfile REGEDIT4 +appendfile {(concatenation of "[-HKEY_LOCAL_MACHINE\Software\" & (if x64 of operating system then "Wow6432Node\" else "") & "BigFix\EnterpriseClient\Settings\Client\" & it & "]%0d%0a") of (names of it) of settings whose (name of it starts with "_BESClient_ArchiveManager_FileSet-nmap" AND effective date of it < now-(parameter "DayRange" as integer)*hour) of client} +appendfile +move __appendfile deleteoldscans.reg +waithidden regedit -s deleteoldscans.reg +delete deleteoldscans.reg +endif +else +if {exists settings whose (name of it starts with "_BESClient_ArchiveManager_FileSet-nmap" AND effective date of it < now-168*hour) of client} +delete __appendfile +delete deleteoldscans.reg +appendfile REGEDIT4 +appendfile {(concatenation of "[-HKEY_LOCAL_MACHINE\Software\" & (if x64 of operating system then "Wow6432Node\" else "") & "BigFix\EnterpriseClient\Settings\Client\" & it & "]%0d%0a") of (names of it) of settings whose (name of it starts with "_BESClient_ArchiveManager_FileSet-nmap" AND effective date of it < now-168*hour) of client} +appendfile +move __appendfile deleteoldscans.reg +waithidden regedit -s deleteoldscans.reg +delete deleteoldscans.reg +endif +regset "[HKEY_LOCAL_MACHINE\Software\BigFix\EnterpriseClient\ArchiveManager-nmap-delete-settings]" "type"="temporal" +regset "[HKEY_LOCAL_MACHINE\Software\BigFix\EnterpriseClient\ArchiveManager-nmap-delete-settings]" "value"="168" +endif + + +elseif {name of operating system as lowercase contains "red hat"} + +parameter "current_time"="{(now - "01 Jan 1970 00:00:00" as local time)/second}" +parameter "nmapXMLFilePath"="{parent folder of parent folder of client folder of current site as string & "/BESScanner-NMAP/NMAP/nmap-" & (computer name as string) & "-" & (parameter "current_time" as string) & ".xml"}" +continue if {not exists file "/etc/selinux/config" whose (exists line whose (it as lowercase = "selinux=enforcing") of it)} +wait mkdir {parent folder of parent folder of client folder of current site as string & "/BESScanner-NMAP/NMAP/"} +delete __appendfile +appendfile [SOFTWARE\BigFix\EnterpriseClient\BESScanner-NMAP] +appendfile InstallTime = {key "InstallTime" of section "SOFTWARE\BigFix\EnterpriseClient\BESScanner-NMAP" of file ((parent folder of parent folder of client folder of current site) as string & "/BESScanner-NMAP/BESScanner-NMAP.config")} +appendfile LastScanStartTime = {now} + + +// Customized by Jason Walker, Lockheed Martin Corporation +//wait {if ((exists file "nmap" of it AND exists file "_nmap" of it) of folder "BESScanner-NMAP" of parent folder of parent folder of client folder of current site) then ((parent folder of parent folder of client folder of current site) as string & "/BESScanner-NMAP/nmap") else "nmap"} -sV -sS -sU -p T:22,T:23,T:80,T:135,T:139,T:235,T:445,T:61616,U:{key "ListenPort" of section "SOFTWARE\BigFix\EnterpriseClient\GlobalOptions" of file (parent folder of parent folder of client folder of current site as string & "/besclient.config")} --exclude "{concatenation "," of (addresses whose (it as string != "0.0.0.0") of ip interfaces whose (loopback of it = false) of network as string)}" -O --osscan-guess -PE -PA80 -T 3 {(unique value of (subnet addresses whose (it as string != "0.0.0.0") of ip interfaces whose (loopback of it = false) of network as string) as string) & "/" & (number of bits (0;1;2;3;4;5;6;7) whose (it) of ( it as integer ) of ( if it contains "." then preceding text of first "." of it else it ) of ( it; following texts of substrings "." of it ) of ( unique value of (subnet masks of ip interfaces whose (loopback of it = false) of network as string ) as string) as string)} -oX "{parameter "nmapXMLFilePath"}" +wait {if ((exists file "nmap" of it AND exists file "_nmap" of it) of folder "BESScanner-NMAP" of parent folder of parent folder of client folder of current site) then ((parent folder of parent folder of client folder of current site) as string & "/BESScanner-NMAP/nmap") else "nmap"} -sV -sS -sU -p T:22,T:23,T:80,T:135,T:139,T:235,T:445,T:61616,U:{key "ListenPort" of section "SOFTWARE\BigFix\EnterpriseClient\GlobalOptions" of file (parent folder of parent folder of client folder of current site as string & "/besclient.config")} -O --osscan-guess -PE -PA80 -T3 -oX "{parameter "nmapXMLFilePath"}" {("--exclude %22" & (concatenation "," of (preceding texts of first "," of it) of substrings separated by ";" of it )& "%22 " & concatenation " " of (following texts of first "," of it) of substrings separated by ";" of it ) of concatenation ";" of (address of it as string & "," & subnet address of it as string & "/" & (it as string) of (number of bits (0;1;2;3;4;5;6;7) whose (it) of ( it as integer ) of ( if it contains "." then preceding text of first "." of it else it ) of ( it; following texts of substrings "." of it) of (subnet mask of it as string) )) whose (preceding text of first "," of it != "0.0.0.0" and following text of first "/" of it as integer > 22) of ip interfaces whose (loopback of it = false) of network} + +//appendfile LastSubnetScanned = {(unique value of (subnet addresses whose (it as string != "0.0.0.0") of ip interfaces whose (loopback of it = false) of network as string) as string) & "/" & (number of bits (0;1;2;3;4;5;6;7) whose (it) of ( it as integer ) of (if it contains "." then preceding text of first "." of it else it ) of ( it; following texts of substrings "." of it ) of ( unique value of (subnet masks of ip interfaces whose (loopback of it = false) of network as string ) as string) as string)} +appendfile LastSubnetScanned = {(concatenation " " of (following texts of first "," of it) of substrings separated by ";" of it ) of concatenation ";" of (address of it as string & "," & subnet address of it as string & "/" & (it as string) of (number of bits (0;1;2;3;4;5;6;7) whose (it) of ( it as integer ) of ( if it contains "." then preceding text of first "." of it else it ) of ( it; following texts of substrings "." of it) of (subnet mask of it as string) )) whose (preceding text of first "," of it != "0.0.0.0" and following text of first "/" of it as integer > 22) of ip interfaces whose (loopback of it = false) of network} + +appendfile LastScanFinishTime = {now} +appendfile NumberOfScansRun = {(key "NumberOfScansRun" of section "SOFTWARE\Bigfix\EnterpriseClient\BESScanner-NMAP" of (file ((parent folder of parent folder of client folder of current site) as string & "/BESScanner-NMAP/BESScanner-NMAP.config"))) as integer + 1} +appendfile LastFileCreated = {now} +appendfile NmapVersion = {if ((exists file "nmap" of it AND exists file "_nmap" of it) of folder "BESScanner-NMAP" of parent folder of parent folder of client folder of current site) then "5.21" else version of package "nmap" of rpm as string} +delete {(parent folder of parent folder of client folder of current site) as string & "/BESScanner-NMAP/BESScanner-NMAP.config"} +move __appendfile {(parent folder of parent folder of client folder of current site) as string & "/BESScanner-NMAP/BESScanner-NMAP.config"} + +setting "_BESClient_ArchiveManager_MaxArchiveSize"="20971520" on "{parameter "action issue date" of action}" for client +continue if {(exists file whose (name of it starts with "nmap-" AND name of it contains (parameter "current_time") AND exists line whose (it as lowercase contains "nmap done at") of it AND size of it <= ((value of setting "_BESClient_ArchiveManager_MaxArchiveSize" of client) as integer)) of folder (parent folder of parent folder of client folder of current site as string & "/BESScanner-NMAP/NMAP/"))} +setting "_BESClient_ArchiveManager_OperatingMode"="2" on "{parameter "action issue date" of action}" for client +setting "_BESClient_ArchiveManager_FileSet-nmap{parameter "current_time"}"="{parameter "nmapXMLFilePath"}" on "{parameter "action issue date" of action}" for client +archive now +endif]]> + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Run ParseRelaysDotDat.exe - Windows (6206).bes b/Sites/BigFix Management/Fixlets/Fixlets/Run ParseRelaysDotDat.exe - Windows (6206).bes new file mode 100644 index 000000000..77a6c59ee --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Run ParseRelaysDotDat.exe - Windows (6206).bes @@ -0,0 +1,58 @@ + + + + + Run ParseRelaysDotDat.exe - Windows + This task is designed to run periodically to update the contents of a results_ParseRelaysDotDat.log file in the BES Client log directory. This file can then be read by an analysis.

+

 

]]> + = "6.0"]]> + windows of operating system + + Internal + 2015-09-10 + + x-fixlet-modification-time + Thu, 10 Sep 2015 23:58:56 +0000 + + BESC + + + Click + here + to deploy this action. + + output.log 2>&1 +waithidden cmd /C {pathname of folders "temp" of windows folders}\ParseRelaysDotDat.exe "{ pathname of files "Relays.dat" of folders "actionsite" of data folders of client }">__Download\results_ParseRelaysDotDat.log 2>&1 + +delete "{ pathname of folders "Logs" of folders "__Global" of ((data folder of client)|(folder "/var/opt/BESClient/__BESData")|(folder "/Library/Application Support/BigFix/BES Agent/__BESData")|(folder "__BESData" of parent folder of client)) }\results_ParseRelaysDotDat.log" + +copy "{ download path "results_ParseRelaysDotDat.log" }" "{ pathname of folders "Logs" of folders "__Global" of ((data folder of client)|(folder "/var/opt/BESClient/__BESData")|(folder "/Library/Application Support/BigFix/BES Agent/__BESData")|(folder "__BESData" of parent folder of client)) }\results_ParseRelaysDotDat.log" + +// Read the raw result data with the following relevance: + +// ( concatenations " ;; " of ( preceding text of first ":" of it & "=" & (it as trimmed string) of following text of first ":" of it) of (it; previous line of it; next line of it; next line of next line of it; next line of next line of next line of it) ) of lines whose(it starts with "Name:") of files "results_ParseRelaysDotDat.log" whose( (now - creation time of it) < 3*day ) of folders "Logs" of folders "__Global" of ((data folder of client)|(folder "/var/opt/BESClient/__BESData")|(folder "/Library/Application Support/BigFix/BES Agent/__BESData")|(folder "__BESData" of parent folder of client)) +]]> + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Run Scanner (72).bes b/Sites/BigFix Management/Fixlets/Fixlets/Run Scanner (72).bes new file mode 100644 index 000000000..ba6e1614c --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Run Scanner (72).bes @@ -0,0 +1,306 @@ + + + + + Run Scanner +
Once complete, the scan data will be uploaded to the BES Server and automatically imported into the BES Server database by the Asset Discovery Import Service. You will then be able to view the results through the Unmanaged Assets report interface.

To schedule repeated scans or to specify advanced configuration options such as additional ports, timing/agressiveness options, specific hosts to exclude, and other Nmap command line switches, use the BigFix Asset Discovery Nmap Configuration Wizard to generate a custom Nmap Scan Fixlet message.

Note: Nmap is an open-source utility for network scanning.  For more information on Nmap, as well as advanced configuration options, visit the link below.

Note: Client machines may briefly display dos and command prompt windows as a result of running the action below. ]]> + = "6.0"]]> + 0]]> + + = 22]]> + = "5.21") of parent folder of client) else if name of operating system as string as lowercase contains "mac os x" then (exists regapp whose (name of it as string as lowercase contains "zenmap" AND version of it >= "5.21")) else if name of operating system as string as lowercase contains "linux" then (exists file "/usr/bin/nmap" whose (size of it = 2235920 AND sha1 of it = "fc5d5c6b19f9822536063b9b34f687684e973604")) else false]]> + = "4.1") else false else true]]> + Common Tasks + danielheth@bigfix.me + <Unspecified> + 2011-02-04 + <Unspecified> + + x-fixlet-adcategory + scan + + + x-fixlet-first-propagation + Sun, 20 Feb 2005 01:25:55 +0000 + + + x-fixlet-modification-time + Thu, 04 Oct 2012 22:34:22 +0000 + + BES + + + Click + here + to run a simple ping scan on the local subnet(s). + + + NOT((exists file (pathname of parent folder of client & "/Proj/FC/NMAP.ini")) AND (exists file whose (name of it contains "PingScan" and name of it contains computer id as string) of folder (pathname of parent folder of client as string & "/Proj/FC/")) AND (exists lines whose (it as string as lowercase contains "nmap done at" OR it as string as lowercase contains "nmap run completed at") of file whose (name of it contains "PingScan" and name of it contains computer id as string) of folder (pathname of parent folder of client as string & "/Proj/FC/")) AND (size of file whose (name of it contains "PingScan" and name of it contains computer id as string) of folder (pathname of parent folder of client as string & "/Proj/FC/") <= ((value of setting "_BESClient_ArchiveManager_MaxArchiveSize" of client) as integer))) + + + + Click + here + for more information about our Scanner. + + http://www.insecure.org/nmap/ + + + + Click + here + for more information about BES Asset Discovery. + + http://support.bigfix.com/bes/sites/assetdiscovery.html + + + + Click + here + to run a full port scan on the local subnet(s). + + + NOT((exists file (pathname of parent folder of client & "/Proj/FC/NMAP.ini")) AND (exists file whose (name of it contains "PortScan" and name of it contains computer id as string) of folder (pathname of parent folder of client as string & "/Proj/FC/")) AND (exists lines whose (it as string as lowercase contains "nmap done at" OR it as string as lowercase contains "nmap run completed at") of file whose (name of it contains "PortScan" and name of it contains computer id as string) of folder (pathname of parent folder of client as string & "/Proj/FC/")) AND (size of file whose (name of it contains "PortScan" and name of it contains computer id as string) of folder (pathname of parent folder of client as string & "/Proj/FC/") <= ((value of setting "_BESClient_ArchiveManager_MaxArchiveSize" of client) as integer))) + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set BES Client Service start type to auto (2568).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set BES Client Service start type to auto (2568).bes new file mode 100644 index 000000000..74c13fd77 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set BES Client Service start type to auto (2568).bes @@ -0,0 +1,36 @@ + + + + + Set BES Client Service start type to auto + The service start type is normally delayed auto start, but you could set it to auto. There are advantages to keeping it set to delayed auto start. + windows of operating system + "auto" != start type of service "BESClient" + Internal + jgstew + 2013-08-16 + + x-fixlet-modification-time + Fri, 16 Aug 2013 22:51:53 +0000 + + BESC + + + Click + here + to deploy this action. + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set FailoverRelayList randomly v2 (27374).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set FailoverRelayList randomly v2 (27374).bes new file mode 100644 index 000000000..53f64694e --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set FailoverRelayList randomly v2 (27374).bes @@ -0,0 +1,43 @@ + + + + + Set FailoverRelayList randomly v2 + This fixlet will randomize a list of any number of relays in both a primary a secondary group, and then set the _BESClient_RelaySelect_FailoverRelayList with the resulting randomized list. 

+

Each relay value can be anything that resolves to a valid IP address, the list must be separated by commas.  Edit the "relaylist" and "relaysecondarylist" parameters to values that work for your environment, for example, change the bolded text in the Actions tab:

+

parameter "relaylist" = "server1.otherdomain.com,server2.hcl.com,127.0.0.1,192.168.3.1"

+

 

+

Every execution will re-randomize the values.

]]> + true + Internal + 2020-03-14 + + x-fixlet-modification-time + Tue, 25 Feb 2025 21:23:08 +0000 + + BESC + + + Click + here + to deploy this action. + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set Service BESClient to DelayedAutoStart - Windows (24609).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set Service BESClient to DelayedAutoStart - Windows (24609).bes new file mode 100644 index 000000000..361b16381 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set Service BESClient to DelayedAutoStart - Windows (24609).bes @@ -0,0 +1,45 @@ + + + + + Set Service BESClient to DelayedAutoStart - Windows + + windows of operating system + exists services "besclient" + not exists keys whose(name of it as lowercase = "besclient" as lowercase AND exists values "DelayedAutoStart" whose(it as integer = 1) of it AND exists values "Start" whose(it as integer = 2) of it) of keys "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services" of registries + Internal + 2017-08-02 + + x-fixlet-modification-time + Thu, 10 Aug 2017 04:16:29 +0000 + + BESC + + + Click + here + to deploy this action. + + +waithidden cmd /C sc config besclient start= delayed-auto + +// References: +// - http://windowsitpro.com/systems-management/q-how-can-i-set-service-automatic-delayed-start-command-line +// - https://bigfix.me/relevance/details/3020300 +// - https://bigfix.me/relevance/details/3020298 +// - https://bigfix.me/relevance/details/3020297 +// - https://technet.microsoft.com/en-us/library/cc990290 +// - https://developer.bigfix.com/relevance/reference/service.html + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set _BESGather_Download_RetryLimit to 3 for Root Server (3829).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set _BESGather_Download_RetryLimit to 3 for Root Server (3829).bes new file mode 100644 index 000000000..1887a2155 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set _BESGather_Download_RetryLimit to 3 for Root Server (3829).bes @@ -0,0 +1,42 @@ + + + + + Set _BESGather_Download_RetryLimit to 3 for Root Server + This is to prevent the root server from downloading the same file with the wrong SHA1 over and over and over again.

+

This could have detrimental effects of gathering from IBM if IBM is unreachable for some reason, or other unknown effects.

+

 

]]> + exists main gather service + = "5.1"]]> + not exists settings "_BESGather_Download_RetryLimit" whose(3 = (value of it as string as integer)) of client + Internal + jgstew + 2014-08-20 + + x-fixlet-modification-time + Wed, 20 Aug 2014 18:41:14 +0000 + + BESC + + + Click + here + to deploy this action. + + +// Limit the Root Server from retrying downloads to 3 times instead of 432 times. +setting "_BESGather_Download_RetryLimit"="3" on "{parameter "action issue date" of action}" for client + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set _DellCommand_ to _OptOut_ - Universal (20881).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set _DellCommand_ to _OptOut_ - Universal (20881).bes new file mode 100644 index 000000000..3d261e13f --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set _DellCommand_ to _OptOut_ - Universal (20881).bes @@ -0,0 +1,36 @@ + + + + + Set "DellCommand" to "OptOut" - Universal + This task will set a client setting

+

 

]]> + not exists settings "DellCommand" whose(value of it as lowercase contains "optout") of client + Configuration: Client Settings + https://forum.bigfix.com/users/jgstew + 2016-06-18 + + x-fixlet-modification-time + Mon, 20 Jun 2016 20:59:41 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "DellCommand"="OptOut" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_ActionManager_HistoryKeepDays_ to _1825_ - 5 years - Universal (23378).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_ActionManager_HistoryKeepDays_ to _1825_ - 5 years - Universal (23378).bes new file mode 100644 index 000000000..90fab6744 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_ActionManager_HistoryKeepDays_ to _1825_ - 5 years - Universal (23378).bes @@ -0,0 +1,37 @@ + + + + + Set "_BESClient_ActionManager_HistoryKeepDays" to "1825" - 5 years - Universal + This task will set a client setting

+

 

]]> + not exists settings "_BESClient_ActionManager_HistoryKeepDays" whose("1825" = value of it) of client + Configuration: Client Settings + jgstew + https://forum.bigfix.com/users/jgstew + 2017-01-31 + + x-fixlet-modification-time + Wed, 01 Feb 2017 02:03:06 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "_BESClient_ActionManager_HistoryKeepDays"="1825" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Comm_CommandPollEnable_ to _1_ - Universal (20524).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Comm_CommandPollEnable_ to _1_ - Universal (20524).bes new file mode 100644 index 000000000..f362456f7 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Comm_CommandPollEnable_ to _1_ - Universal (20524).bes @@ -0,0 +1,37 @@ + + + + + Set "_BESClient_Comm_CommandPollEnable" to "1" - Universal + This task will set a client setting

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

 

]]> + true + not exists settings "_BESClient_Comm_CommandPollEnable" whose("1" = value of it) of client + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2015-10-18 + + x-fixlet-modification-time + Mon, 19 Oct 2015 05:46:47 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "_BESClient_Comm_CommandPollEnable"="1" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Comm_CommandPollIntervalSeconds_ to _1200_ - Universal (20499).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Comm_CommandPollIntervalSeconds_ to _1200_ - Universal (20499).bes new file mode 100644 index 000000000..d44e554e3 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Comm_CommandPollIntervalSeconds_ to _1200_ - Universal (20499).bes @@ -0,0 +1,37 @@ + + + + + Set "_BESClient_Comm_CommandPollIntervalSeconds" to "1200" - Universal + This task will set a client setting

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

 

]]> + true + not exists settings "_BESClient_Comm_CommandPollIntervalSeconds" whose("1200" = value of it) of client + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2015-10-18 + + x-fixlet-modification-time + Mon, 19 Oct 2015 05:24:22 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "_BESClient_Comm_CommandPollIntervalSeconds"="1200" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Comm_CommandPollIntervalSeconds_ to _21600_ - Universal (20512).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Comm_CommandPollIntervalSeconds_ to _21600_ - Universal (20512).bes new file mode 100644 index 000000000..c5376255f --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Comm_CommandPollIntervalSeconds_ to _21600_ - Universal (20512).bes @@ -0,0 +1,37 @@ + + + + + Set "_BESClient_Comm_CommandPollIntervalSeconds" to "21600" - Universal + This task will set a client setting

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

 

]]> + true + not exists settings "_BESClient_Comm_CommandPollIntervalSeconds" whose("21600" = value of it) of client + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2015-10-18 + + x-fixlet-modification-time + Mon, 19 Oct 2015 05:30:53 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "_BESClient_Comm_CommandPollIntervalSeconds"="21600" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Comm_CommandPollIntervalSeconds_ to _4000_ - Universal (20510).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Comm_CommandPollIntervalSeconds_ to _4000_ - Universal (20510).bes new file mode 100644 index 000000000..ade00b301 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Comm_CommandPollIntervalSeconds_ to _4000_ - Universal (20510).bes @@ -0,0 +1,37 @@ + + + + + Set "_BESClient_Comm_CommandPollIntervalSeconds" to "4000" - Universal + This task will set a client setting

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

 

]]> + true + not exists settings "_BESClient_Comm_CommandPollIntervalSeconds" whose("4000" = value of it) of client + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2015-10-18 + + x-fixlet-modification-time + Mon, 19 Oct 2015 05:30:23 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "_BESClient_Comm_CommandPollIntervalSeconds"="4000" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Download_DownloadsCacheLimitMB_ to _10000_ - Universal (20500).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Download_DownloadsCacheLimitMB_ to _10000_ - Universal (20500).bes new file mode 100644 index 000000000..f247039dd --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Download_DownloadsCacheLimitMB_ to _10000_ - Universal (20500).bes @@ -0,0 +1,37 @@ + + + + + Set "_BESClient_Download_DownloadsCacheLimitMB" to "10000" - Universal + This task will set a client setting

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

 

]]> + true + not exists settings "_BESClient_Download_DownloadsCacheLimitMB" whose("10000" = value of it) of client + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2015-10-18 + + x-fixlet-modification-time + Mon, 19 Oct 2015 05:24:22 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "_BESClient_Download_DownloadsCacheLimitMB"="10000" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Download_MinimumDiskFreeMB_ to _5000_ - Universal (20501).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Download_MinimumDiskFreeMB_ to _5000_ - Universal (20501).bes new file mode 100644 index 000000000..c81c233e2 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Download_MinimumDiskFreeMB_ to _5000_ - Universal (20501).bes @@ -0,0 +1,37 @@ + + + + + Set "_BESClient_Download_MinimumDiskFreeMB" to "5000" - Universal + This task will set a client setting

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

 

]]> + true + not exists settings "_BESClient_Download_MinimumDiskFreeMB" whose("5000" = value of it) of client + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2015-10-18 + + x-fixlet-modification-time + Mon, 19 Oct 2015 05:24:22 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "_BESClient_Download_MinimumDiskFreeMB"="5000" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Download_NormalStageDiskLimitMB_ to _20000_ - Universal (20502).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Download_NormalStageDiskLimitMB_ to _20000_ - Universal (20502).bes new file mode 100644 index 000000000..692c6d172 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Download_NormalStageDiskLimitMB_ to _20000_ - Universal (20502).bes @@ -0,0 +1,37 @@ + + + + + Set "_BESClient_Download_NormalStageDiskLimitMB" to "20000" - Universal + This task will set a client setting

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

 

]]> + true + not exists settings "_BESClient_Download_NormalStageDiskLimitMB" whose("20000" = value of it) of client + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2015-10-18 + + x-fixlet-modification-time + Mon, 19 Oct 2015 05:24:22 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "_BESClient_Download_NormalStageDiskLimitMB"="20000" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Download_PreCacheStageDiskLimitMB_ to _10000_ - Universal (20503).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Download_PreCacheStageDiskLimitMB_ to _10000_ - Universal (20503).bes new file mode 100644 index 000000000..b66f4c2ef --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Download_PreCacheStageDiskLimitMB_ to _10000_ - Universal (20503).bes @@ -0,0 +1,37 @@ + + + + + Set "_BESClient_Download_PreCacheStageDiskLimitMB" to "10000" - Universal + This task will set a client setting

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

 

]]> + true + not exists settings "_BESClient_Download_PreCacheStageDiskLimitMB" whose("10000" = value of it) of client + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2015-10-18 + + x-fixlet-modification-time + Mon, 19 Oct 2015 05:24:22 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "_BESClient_Download_PreCacheStageDiskLimitMB"="10000" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Download_RetryMinutes_ to 1 min (2492).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Download_RetryMinutes_ to 1 min (2492).bes new file mode 100644 index 000000000..371e73447 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Download_RetryMinutes_ to 1 min (2492).bes @@ -0,0 +1,39 @@ + + + + + Set "_BESClient_Download_RetryMinutes" to 1 min + This task sets the "_BESClient_Download_RetryMinutes" to 1 min on the client. This will cause the client to wait 1 min after a failed attempt at asking a relay for a download. If it fails again, the client will wait 2 min before trying again, then 4, then 8, then 16, etc... This does not relate to how long a download may actually take to complete, only what happens when a relay responds to a client that a download is not available.

+

https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/Tivoli%20Endpoint%20Manager/page/Configuration%20Settings

+

When the TEM Client fails to download a file from the TEM Server or a TEM Relay during an action, it will wait for the amount of time specified in the "_BESClient_Download_RetryMinutes" setting, then try again. After each failed attempt, it will double the retry time.

+

This setting used to have a default value of 1, but appears to now have a default value of 10, which means the client will by default wait a full 10 minutes before checking with the relay again if a download is available. This can significantly slow down the processing of baselines and other actions.

]]> + (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) + (not exists setting "_BESClient_Download_RetryMinutes" whose("1" = value of it) of client) + jgs194 + 2013-06-26 + + x-fixlet-modification-time + Wed, 26 Jun 2013 15:17:15 +0000 + + BESC + + + Click + here + to deploy this action. + + setting "_BESClient_Download_RetryMinutes"="1" on "{parameter "action issue date" of action}" for client + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Download_RetryMinutes_ to _1_ - Universal (20504).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Download_RetryMinutes_ to _1_ - Universal (20504).bes new file mode 100644 index 000000000..20bf11bb8 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Download_RetryMinutes_ to _1_ - Universal (20504).bes @@ -0,0 +1,38 @@ + + + + + Set "_BESClient_Download_RetryMinutes" to "1" - Universal + This task will set a client setting

+

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

+

 

]]> + not exists settings "_BESClient_Download_RetryMinutes" whose("1" = value of it) of client + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2015-10-18 + + x-fixlet-modification-time + Mon, 19 Oct 2015 19:53:42 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "_BESClient_Download_RetryMinutes"="1" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Download_RetryMinutes_ to _5_ - Universal (20513).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Download_RetryMinutes_ to _5_ - Universal (20513).bes new file mode 100644 index 000000000..e531608b1 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Download_RetryMinutes_ to _5_ - Universal (20513).bes @@ -0,0 +1,37 @@ + + + + + Set "_BESClient_Download_RetryMinutes" to "5" - Universal + This task will set a client setting

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

 

]]> + true + not exists settings "_BESClient_Download_RetryMinutes" whose("5" = value of it) of client + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2015-10-18 + + x-fixlet-modification-time + Mon, 19 Oct 2015 05:30:53 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "_BESClient_Download_RetryMinutes"="5" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Download_UtilitiesCacheLimitMB_ to _500_ - Universal (20505).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Download_UtilitiesCacheLimitMB_ to _500_ - Universal (20505).bes new file mode 100644 index 000000000..5ea46708a --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Download_UtilitiesCacheLimitMB_ to _500_ - Universal (20505).bes @@ -0,0 +1,37 @@ + + + + + Set "_BESClient_Download_UtilitiesCacheLimitMB" to "500" - Universal + This task will set a client setting

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

 

]]> + true + not exists settings "_BESClient_Download_UtilitiesCacheLimitMB" whose("500" = value of it) of client + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2015-10-18 + + x-fixlet-modification-time + Mon, 19 Oct 2015 05:24:22 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "_BESClient_Download_UtilitiesCacheLimitMB"="500" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Log_Days_ to _30_ - Universal (20506).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Log_Days_ to _30_ - Universal (20506).bes new file mode 100644 index 000000000..cf0255d68 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Log_Days_ to _30_ - Universal (20506).bes @@ -0,0 +1,37 @@ + + + + + Set "_BESClient_Log_Days" to "30" - Universal + This task will set a client setting

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

 

]]> + true + not exists settings "_BESClient_Log_Days" whose("30" = value of it) of client + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2015-10-18 + + x-fixlet-modification-time + Mon, 19 Oct 2015 05:24:22 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "_BESClient_Log_Days"="30" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Report_MinimumInterval_ to _40_ - Universal (20507).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Report_MinimumInterval_ to _40_ - Universal (20507).bes new file mode 100644 index 000000000..446ed671f --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Report_MinimumInterval_ to _40_ - Universal (20507).bes @@ -0,0 +1,37 @@ + + + + + Set "_BESClient_Report_MinimumInterval" to "40" - Universal + This task will set a client setting

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

 

]]> + true + not exists settings "_BESClient_Report_MinimumInterval" whose("40" = value of it) of client + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2015-10-18 + + x-fixlet-modification-time + Mon, 19 Oct 2015 05:24:22 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "_BESClient_Report_MinimumInterval"="40" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Report_MinimumInterval_ to _90_ - Universal (20514).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Report_MinimumInterval_ to _90_ - Universal (20514).bes new file mode 100644 index 000000000..27bbfb664 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Report_MinimumInterval_ to _90_ - Universal (20514).bes @@ -0,0 +1,37 @@ + + + + + Set "_BESClient_Report_MinimumInterval" to "90" - Universal + This task will set a client setting

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

 

]]> + true + not exists settings "_BESClient_Report_MinimumInterval" whose("90" = value of it) of client + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2015-10-18 + + x-fixlet-modification-time + Mon, 19 Oct 2015 05:30:53 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "_BESClient_Report_MinimumInterval"="90" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Resource_PowerSaveEnable_ to _1_ - Universal (24633).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Resource_PowerSaveEnable_ to _1_ - Universal (24633).bes new file mode 100644 index 000000000..29e4cd36a --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Resource_PowerSaveEnable_ to _1_ - Universal (24633).bes @@ -0,0 +1,39 @@ + + + + + Set "_BESClient_Resource_PowerSaveEnable" to "1" - Universal + This task will set a client setting

+

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

+

 

]]> + not exists settings "_BESClient_Resource_PowerSaveEnable" whose("1" = value of it) of client + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2017-08-18 + + x-fixlet-modification-time + Thu, 24 Aug 2017 20:37:32 +0000 + + BESC + + + Click + here + to set the Client Setting + + +setting "_BESClient_Resource_PowerSaveEnable"="1" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Resource_SleepIdle_ to _500_ - Universal (20508).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Resource_SleepIdle_ to _500_ - Universal (20508).bes new file mode 100644 index 000000000..85d200d61 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Resource_SleepIdle_ to _500_ - Universal (20508).bes @@ -0,0 +1,37 @@ + + + + + Set "_BESClient_Resource_SleepIdle" to "500" - Universal + This task will set a client setting

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

 

]]> + true + not exists settings "_BESClient_Resource_SleepIdle" whose("500" = value of it) of client + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2015-10-18 + + x-fixlet-modification-time + Mon, 19 Oct 2015 05:24:22 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "_BESClient_Resource_SleepIdle"="500" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Resource_WorkIdle_ to _10_ - Universal (24621).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Resource_WorkIdle_ to _10_ - Universal (24621).bes new file mode 100644 index 000000000..4b0bacce4 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Resource_WorkIdle_ to _10_ - Universal (24621).bes @@ -0,0 +1,39 @@ + + + + + Set "_BESClient_Resource_WorkIdle" to "10" - Universal + This task will set a client setting

+

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

+

 

]]> + not exists settings "_BESClient_Resource_WorkIdle" whose("10" = value of it) of client + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2015-10-18 + + x-fixlet-modification-time + Thu, 24 Aug 2017 17:21:20 +0000 + + BESC + + + Click + here + to set the Client Setting + + +setting "_BESClient_Resource_WorkIdle"="10" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Resource_WorkIdle_ to _20_ - Universal (20511).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Resource_WorkIdle_ to _20_ - Universal (20511).bes new file mode 100644 index 000000000..139678881 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Resource_WorkIdle_ to _20_ - Universal (20511).bes @@ -0,0 +1,37 @@ + + + + + Set "_BESClient_Resource_WorkIdle" to "20" - Universal + This task will set a client setting

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

 

]]> + true + not exists settings "_BESClient_Resource_WorkIdle" whose("20" = value of it) of client + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2015-10-18 + + x-fixlet-modification-time + Mon, 19 Oct 2015 05:30:23 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "_BESClient_Resource_WorkIdle"="20" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Resource_WorkIdle_ to _50_ - Universal (20509).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Resource_WorkIdle_ to _50_ - Universal (20509).bes new file mode 100644 index 000000000..457cf158d --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESClient_Resource_WorkIdle_ to _50_ - Universal (20509).bes @@ -0,0 +1,37 @@ + + + + + Set "_BESClient_Resource_WorkIdle" to "50" - Universal + This task will set a client setting

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

 

]]> + true + not exists settings "_BESClient_Resource_WorkIdle" whose("50" = value of it) of client + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2015-10-18 + + x-fixlet-modification-time + Mon, 19 Oct 2015 05:24:22 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "_BESClient_Resource_WorkIdle"="50" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESGather_Download_CacheLimitMB_ to _307200_ - Universal (6324).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESGather_Download_CacheLimitMB_ to _307200_ - Universal (6324).bes new file mode 100644 index 000000000..a5c0702fe --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESGather_Download_CacheLimitMB_ to _307200_ - Universal (6324).bes @@ -0,0 +1,39 @@ + + + + + Set "_BESGather_Download_CacheLimitMB" to "307200" - Universal + This task will set a client setting

+

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

+

 

]]> + exists relay service OR exists main gather service + + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2015-10-18 + + x-fixlet-modification-time + Tue, 22 Dec 2015 05:43:52 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "_BESGather_Download_CacheLimitMB"="307200" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESGather_Download_CheckInternetFlag_ to _1_ - Universal (20515).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESGather_Download_CheckInternetFlag_ to _1_ - Universal (20515).bes new file mode 100644 index 000000000..84d882536 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESGather_Download_CheckInternetFlag_ to _1_ - Universal (20515).bes @@ -0,0 +1,37 @@ + + + + + Set "_BESGather_Download_CheckInternetFlag" to "1" - Universal + This task will set a client setting

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

 

]]> + true + not exists settings "_BESGather_Download_CheckInternetFlag" whose("1" = value of it) of client + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2015-10-18 + + x-fixlet-modification-time + Mon, 19 Oct 2015 05:30:53 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "_BESGather_Download_CheckInternetFlag"="1" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESGather_Download_CheckParentFlag_ to _0_ - Universal (20516).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESGather_Download_CheckParentFlag_ to _0_ - Universal (20516).bes new file mode 100644 index 000000000..edf929dc7 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESGather_Download_CheckParentFlag_ to _0_ - Universal (20516).bes @@ -0,0 +1,37 @@ + + + + + Set "_BESGather_Download_CheckParentFlag" to "0" - Universal + This task will set a client setting

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

 

]]> + true + not exists settings "_BESGather_Download_CheckParentFlag" whose("0" = value of it) of client + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2015-10-18 + + x-fixlet-modification-time + Mon, 19 Oct 2015 05:30:53 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "_BESGather_Download_CheckParentFlag"="0" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESGather_Download_InactivityTimeout_ to _300_ - Universal (20517).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESGather_Download_InactivityTimeout_ to _300_ - Universal (20517).bes new file mode 100644 index 000000000..a060bca63 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESGather_Download_InactivityTimeout_ to _300_ - Universal (20517).bes @@ -0,0 +1,37 @@ + + + + + Set "_BESGather_Download_InactivityTimeout" to "300" - Universal + This task will set a client setting

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

 

]]> + true + not exists settings "_BESGather_Download_InactivityTimeout" whose("300" = value of it) of client + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2015-10-18 + + x-fixlet-modification-time + Mon, 19 Oct 2015 05:30:53 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "_BESGather_Download_InactivityTimeout"="300" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESRelay_HTTPServer_PortNumber_ to _52311_ - Universal (20518).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESRelay_HTTPServer_PortNumber_ to _52311_ - Universal (20518).bes new file mode 100644 index 000000000..c898c93ec --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESRelay_HTTPServer_PortNumber_ to _52311_ - Universal (20518).bes @@ -0,0 +1,37 @@ + + + + + Set "_BESRelay_HTTPServer_PortNumber" to "52311" - Universal + This task will set a client setting

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

 

]]> + true + not exists settings "_BESRelay_HTTPServer_PortNumber" whose("52311" = value of it) of client + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2015-10-18 + + x-fixlet-modification-time + Mon, 19 Oct 2015 05:30:53 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "_BESRelay_HTTPServer_PortNumber"="52311" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESRelay_Log_Verbose_ to _0_ - Universal (24849).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESRelay_Log_Verbose_ to _0_ - Universal (24849).bes new file mode 100644 index 000000000..23beb1f2c --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESRelay_Log_Verbose_ to _0_ - Universal (24849).bes @@ -0,0 +1,39 @@ + + + + + Set "_BESRelay_Log_Verbose" to "0" - Universal + + exists relay service OR exists main gather service + not exists settings "_BESRelay_Log_Verbose" whose("0" = value of it) of client + Configuration: Client Settings + Custom Dashboard - Client Settings Manager + jgstew + 2017-10-16 + + x-fixlet-modification-time + Mon, 16 Oct 2017 22:11:32 +0000 + + BESC + + + Click + here + to set the Client Setting + + +setting "_BESRelay_Log_Verbose"="0" on "{ parameter "action issue date" of action}" for client + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESRelay_Log_Verbose_ to _1_ - Universal (24850).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESRelay_Log_Verbose_ to _1_ - Universal (24850).bes new file mode 100644 index 000000000..92d8841fe --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESRelay_Log_Verbose_ to _1_ - Universal (24850).bes @@ -0,0 +1,40 @@ + + + + + Set "_BESRelay_Log_Verbose" to "1" - Universal + WARNING: This will cause the "BESRelay.log" on the root server to grow very rapidly.

+

 

]]> + exists relay service OR exists main gather service + not exists settings "_BESRelay_Log_Verbose" whose("1" = value of it) of client + Configuration: Client Settings + Custom Dashboard - Client Settings Manager + jgstew + 2017-10-16 + + x-fixlet-modification-time + Mon, 16 Oct 2017 22:10:51 +0000 + + BESC + + + Click + here + to set the Client Setting + + +setting "_BESRelay_Log_Verbose"="1" on "{ parameter "action issue date" of action}" for client + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __BESRelay_RelaysFileUpdater_RefreshSeconds_ to _21600_ - Universal (25532).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESRelay_RelaysFileUpdater_RefreshSeconds_ to _21600_ - Universal (25532).bes new file mode 100644 index 000000000..204226f3d --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __BESRelay_RelaysFileUpdater_RefreshSeconds_ to _21600_ - Universal (25532).bes @@ -0,0 +1,46 @@ + + + + + Set "_BESRelay_RelaysFileUpdater_RefreshSeconds" to "21600" - Universal + This task will set a client setting, in this case, only on a root server. This will set `_BESRelay_RelaysFileUpdater_RefreshSeconds` to 6 hours. ( 21600 seconds )

+

This setting affects how frequently the root server publishes a new actionsite version to update Relays.dat with new info when new relays are created. The default is 60 seconds, which can be far too frequent for large deployments or scenerios where relays are created and destroyed frequently, like Docker relays.

+

This task was automatically generated using the Dashboard: "Custom - Client Settings Manager"

+

 

]]> + = "8.1"]]> + exists main gather service + not exists settings "_BESRelay_RelaysFileUpdater_RefreshSeconds" whose("21600" = value of it) of client + Configuration: Client Settings + Custom Dashboard - Client Settings Manager + jgstew + 2018-07-25 + + x-fixlet-modification-time + Wed, 25 Jul 2018 18:26:17 +0000 + + BESC + + + Click + here + to set the Client Setting + + +// The Default is 60 seconds +// This setting affects how frequently the root server publishes a new actionsite version to update Relays.dat with new info when new relays are created. +setting "_BESRelay_RelaysFileUpdater_RefreshSeconds"="21600" on "{ parameter "action issue date" of action}" for client + + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __Enterprise Server_ClientRegister_RegistrationListReplicatePeriod_ to _3600_ - Universal (20519).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __Enterprise Server_ClientRegister_RegistrationListReplicatePeriod_ to _3600_ - Universal (20519).bes new file mode 100644 index 000000000..16241775b --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __Enterprise Server_ClientRegister_RegistrationListReplicatePeriod_ to _3600_ - Universal (20519).bes @@ -0,0 +1,37 @@ + + + + + Set "_Enterprise Server_ClientRegister_RegistrationListReplicatePeriod" to "3600" - Universal + This task will set a client setting

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

 

]]> + true + not exists settings "_Enterprise Server_ClientRegister_RegistrationListReplicatePeriod" whose("3600" = value of it) of client + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2015-10-18 + + x-fixlet-modification-time + Mon, 19 Oct 2015 05:30:53 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "_Enterprise Server_ClientRegister_RegistrationListReplicatePeriod"="3600" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __Enterprise Server_ClientRegister_UDPMessagePort_ to _52311_ - Universal (20520).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __Enterprise Server_ClientRegister_UDPMessagePort_ to _52311_ - Universal (20520).bes new file mode 100644 index 000000000..992a9e836 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __Enterprise Server_ClientRegister_UDPMessagePort_ to _52311_ - Universal (20520).bes @@ -0,0 +1,37 @@ + + + + + Set "_Enterprise Server_ClientRegister_UDPMessagePort" to "52311" - Universal + This task will set a client setting

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

 

]]> + true + not exists settings "_Enterprise Server_ClientRegister_UDPMessagePort" whose("52311" = value of it) of client + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2015-10-18 + + x-fixlet-modification-time + Mon, 19 Oct 2015 05:30:53 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "_Enterprise Server_ClientRegister_UDPMessagePort"="52311" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __GatherService_HTTPServer_PortNumber_ to _52310_ - Universal (20521).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __GatherService_HTTPServer_PortNumber_ to _52310_ - Universal (20521).bes new file mode 100644 index 000000000..23f0d08a9 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __GatherService_HTTPServer_PortNumber_ to _52310_ - Universal (20521).bes @@ -0,0 +1,37 @@ + + + + + Set "_GatherService_HTTPServer_PortNumber" to "52310" - Universal + This task will set a client setting

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

 

]]> + true + not exists settings "_GatherService_HTTPServer_PortNumber" whose("52310" = value of it) of client + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2015-10-18 + + x-fixlet-modification-time + Mon, 19 Oct 2015 05:30:53 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "_GatherService_HTTPServer_PortNumber"="52310" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __WebReports_HTTPServer_PortNumber_ to _888_ - Universal (20522).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __WebReports_HTTPServer_PortNumber_ to _888_ - Universal (20522).bes new file mode 100644 index 000000000..ba1e2425c --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __WebReports_HTTPServer_PortNumber_ to _888_ - Universal (20522).bes @@ -0,0 +1,37 @@ + + + + + Set "_WebReports_HTTPServer_PortNumber" to "888" - Universal + This task will set a client setting

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

 

]]> + true + not exists settings "_WebReports_HTTPServer_PortNumber" whose("888" = value of it) of client + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2015-10-18 + + x-fixlet-modification-time + Mon, 19 Oct 2015 05:30:53 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "_WebReports_HTTPServer_PortNumber"="888" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set __WebReports_HTTPServer_UseSSLFlag_ to _0_ - Universal (20523).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set __WebReports_HTTPServer_UseSSLFlag_ to _0_ - Universal (20523).bes new file mode 100644 index 000000000..c3856dba2 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set __WebReports_HTTPServer_UseSSLFlag_ to _0_ - Universal (20523).bes @@ -0,0 +1,37 @@ + + + + + Set "_WebReports_HTTPServer_UseSSLFlag" to "0" - Universal + This task will set a client setting

This task was automatically generated using the task: "RESTAPI: Generate tasks to set client settings on target computer - Windows"

 

]]> + true + not exists settings "_WebReports_HTTPServer_UseSSLFlag" whose("0" = value of it) of client + Configuration: Client Settings + RESTAPI: Generate tasks to set client settings on target computer - Windows + https://forum.bigfix.com/users/jgstew + 2015-10-18 + + x-fixlet-modification-time + Mon, 19 Oct 2015 05:30:53 +0000 + + BESC + + + Click + here + to set the Client Setting + + setting "_WebReports_HTTPServer_UseSSLFlag"="0" on "{ parameter "action issue date" of action}" for client + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Set action download settings to support Win10 patching (November 13th patch webinar) (26657).bes b/Sites/BigFix Management/Fixlets/Fixlets/Set action download settings to support Win10 patching (November 13th patch webinar) (26657).bes new file mode 100644 index 000000000..0c35706be --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Set action download settings to support Win10 patching (November 13th patch webinar) (26657).bes @@ -0,0 +1,74 @@ + + + + + Set action download settings to support Win10 patching (November 13th patch webinar) + This task updates download and action cache settings whose defaults are no longer appropriate for today's large patches.

+
    +
  • _BESClient_Download_PreCacheStageDiskLimitMB +
      +
    • Default value is 250MB, most Windows rollups will not precache with this value.  This task sets the value to 6GB to accomodate up to Win10 feature updates.
    +
  • _BESClient_Download_NormalStageDiskLimitMB +
      +
    • Default value is 2GB, feature updates and service packs will not attempt to download with this value.  This task sets the value to 6GB to accomodate up to Win10 feature updates.
    +
  • _BESGather_Download_CacheLimitMB
    • +
      +
    • This is a relay and root server setting, default value of 1GB will not persistently store many downloads, requiring repeated redownloads of the same file.  This task sets the root server to 100GB, and relays to 20GB if there is enough free space.  Otherwise, dynamically sets the cache value to half of the free disk space.
    +
  • _BESClient_Download_MinimumDiskFreeMB
    • +
      +
    • Default 20MB, the client will prevent downloads if there is less than 20MB of free space.  This task sets the value to 500MB, this is to allow enough overhead space for the client to download a rollup patch with space left to execute the patch.
+

 

+

 

+

 

]]> + true + Internal + 2019-11-04 + + x-fixlet-modification-time + Tue, 12 Nov 2019 14:45:59 +0000 + + BESC + + + Click + here + to deploy this action. + + 100000} + setting "_BESGather_Download_CacheLimitMB" = "100000" on "{parameter "action issue date" of action}" for client + else + //set cache limit to half of free space + used download cache space if less than 100gb + setting "_BESGather_Download_CacheLimitMB" = "{((free space of drive of folder (value of setting "_BESRelay_HTTPServer_ServerRootPath" of client)/1024/1024) + (if ( exists folder "bfmirror/downloads/sha1" of folder (value of setting "_BESRelay_HTTPServer_ServerRootPath" of client)) then ((sum of sizes of files of folder "bfmirror/downloads/sha1" of folder (value of setting "_BESRelay_HTTPServer_ServerRootPath" of client)) /1024/1024) as integer else 0))/2}" on "{parameter "action issue date" of action}" for client + endif +endif + +//set total download cache limit for relays +If {exists relay service} + //check if free drive space + used download cache space is more than 20gb, set download cache limit to 20gb + if {((free space of drive of folder (value of setting "_BESRelay_HTTPServer_ServerRootPath" of client)/1024/1024) + (if ( exists folder "bfmirror/downloads/sha1" of folder (value of setting "_BESRelay_HTTPServer_ServerRootPath" of client)) then ((sum of sizes of files of folder "bfmirror/downloads/sha1" of folder (value of setting "_BESRelay_HTTPServer_ServerRootPath" of client)) /1024/1024) as integer else 0)) > 20000} + setting "_BESGather_Download_CacheLimitMB" = "20000" on "{parameter "action issue date" of action}" for client + else + //set cache limit to half of free space + used download cache space if less than 20gb + setting "_BESGather_Download_CacheLimitMB" = "{((free space of drive of folder (value of setting "_BESRelay_HTTPServer_ServerRootPath" of client)/1024/1024) + (if ( exists folder "bfmirror/downloads/sha1" of folder (value of setting "_BESRelay_HTTPServer_ServerRootPath" of client)) then ((sum of sizes of files of folder "bfmirror/downloads/sha1" of folder (value of setting "_BESRelay_HTTPServer_ServerRootPath" of client)) /1024/1024) as integer else 0))/2}" on "{parameter "action issue date" of action}" for client + endif +endif]]> + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Stop OPEN Actions if 100% of targeted machines have reported. (3758).bes b/Sites/BigFix Management/Fixlets/Fixlets/Stop OPEN Actions if 100% of targeted machines have reported. (3758).bes new file mode 100644 index 000000000..235463402 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Stop OPEN Actions if 100% of targeted machines have reported. (3758).bes @@ -0,0 +1,242 @@ + + + + + Stop OPEN Actions if 100% of targeted machines have reported. + Action Parameters:

+

  <<  Enter the IEM Server Operator Name
    <<  Enter the IEM Server Operator Password (Note: This password will be encrypted)

_____________________________________________________________________________________________________

+

Description:

+
+

Run this action as a policy on the root IEM server as a schedueled policy (reapply action every n minutes)

+

This action will stop any open actions that 100% of the targeted machines have reported on. The open actions that will be stopped are using targeting methods of computer ID or list and the action is NOT a policy.

]]> + exist main gather service + mike.english@us.ibm.com + 2014-02-12 + + x-fixlet-modification-time + Sat, 05 Apr 2014 12:53:19 +0000 + + BESC + + + Click + here + to deploy this action. + + c:\import\openactions.xml + +delete api.bat +copy __appendfile api.bat +waithidden api.bat + + +//verify that an open action exists +if {exists tuple string item 0 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))} +delete c:\IMPORT\result.xml +delete __appendfile + +//take the action ID from the array and verify that 100% of targeted machines have reported and that the open action is NOT a policy +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} login -q --server=localhost --user={parameter "RemoteOP" of action} --password={parameter "RemoteOPPass" of action} +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} get query --relevance "((((number of elements of reported computer set of bes action whose (id of it = {tuple string item 0 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))})) / (number of elements of targeted computer set of bes action whose (id of it = {tuple string item 0 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))}))) * 100) = 100) AND (end date of bes action whose (id of it = {tuple string item 0 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))})) as string | %%22policy%%22 != %%22policy%%22" > c:\import\result.xml +delete api.bat +copy __appendfile api.bat +waithidden api.bat + + //stop the action + if{(preceding text of first "" of (following text of first "" of lines of file "c:\import\result.xml")as boolean = true)} + dos {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} {"post action/" & tuple string item 0 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml")) & "/stop -q"} + endif +endif + +// repeat the process (will stop up to 10 open actions at a time) +//verify that an open action exists +if {exists tuple string item 1 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))} +delete c:\IMPORT\result.xml +delete __appendfile + +//take the action ID from the array and verify that 100% of targeted machines have reported and that the open action is NOT a policy +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} login -q --server=localhost --user={parameter "RemoteOP" of action} --password={parameter "RemoteOPPass" of action} +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} get query --relevance "((((number of elements of reported computer set of bes action whose (id of it = {tuple string item 1 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))})) / (number of elements of targeted computer set of bes action whose (id of it = {tuple string item 1 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))}))) * 100) = 100) AND (end date of bes action whose (id of it = {tuple string item 1 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))})) as string | %%22policy%%22 != %%22policy%%22" > c:\import\result.xml +delete api.bat +copy __appendfile api.bat +waithidden api.bat + + //stop the action + if{(preceding text of first "" of (following text of first "" of lines of file "c:\import\result.xml")as boolean = true)} + dos {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} {"post action/" & tuple string item 1 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml")) & "/stop -q"} + endif +endif + +//verify that an open action exists +if {exists tuple string item 2 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))} +delete c:\IMPORT\result.xml +delete __appendfile + +//take the action ID from the array and verify that 100% of targeted machines have reported and that the open action is NOT a policy +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} login -q --server=localhost --user={parameter "RemoteOP" of action} --password={parameter "RemoteOPPass" of action} +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} get query --relevance "((((number of elements of reported computer set of bes action whose (id of it = {tuple string item 2 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))})) / (number of elements of targeted computer set of bes action whose (id of it = {tuple string item 2 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))}))) * 100) = 100) AND (end date of bes action whose (id of it = {tuple string item 2 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))})) as string | %%22policy%%22 != %%22policy%%22" > c:\import\result.xml +delete api.bat +copy __appendfile api.bat +waithidden api.bat + + //stop the action + if{(preceding text of first "" of (following text of first "" of lines of file "c:\import\result.xml")as boolean = true)} + dos {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} {"post action/" & tuple string item 2 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml")) & "/stop -q"} + endif +endif + +//verify that an open action exists +if {exists tuple string item 3 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))} +delete c:\IMPORT\result.xml +delete __appendfile + +//take the action ID from the array and verify that 100% of targeted machines have reported and that the open action is NOT a policy +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} login -q --server=localhost --user={parameter "RemoteOP" of action} --password={parameter "RemoteOPPass" of action} +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} get query --relevance "((((number of elements of reported computer set of bes action whose (id of it = {tuple string item 3 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))})) / (number of elements of targeted computer set of bes action whose (id of it = {tuple string item 3 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))}))) * 100) = 100) AND (end date of bes action whose (id of it = {tuple string item 3 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))})) as string | %%22policy%%22 != %%22policy%%22" > c:\import\result.xml +delete api.bat +copy __appendfile api.bat +waithidden api.bat + + //stop the action + if{(preceding text of first "" of (following text of first "" of lines of file "c:\import\result.xml")as boolean = true)} + dos {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} {"post action/" & tuple string item 3 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml")) & "/stop -q"} + endif +endif + +//verify that an open action exists +if {exists tuple string item 4 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))} +delete c:\IMPORT\result.xml +delete __appendfile + +//take the action ID from the array and verify that 100% of targeted machines have reported and that the open action is NOT a policy +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} login -q --server=localhost --user={parameter "RemoteOP" of action} --password={parameter "RemoteOPPass" of action} +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} get query --relevance "((((number of elements of reported computer set of bes action whose (id of it = {tuple string item 4 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))})) / (number of elements of targeted computer set of bes action whose (id of it = {tuple string item 4 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))}))) * 100) = 100) AND (end date of bes action whose (id of it = {tuple string item 4 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))})) as string | %%22policy%%22 != %%22policy%%22" > c:\import\result.xml +delete api.bat +copy __appendfile api.bat +waithidden api.bat + + //stop the action + if{(preceding text of first "" of (following text of first "" of lines of file "c:\import\result.xml")as boolean = true)} + dos {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} {"post action/" & tuple string item 4 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml")) & "/stop -q"} + endif +endif + +//verify that an open action exists +if {exists tuple string item 5 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))} +delete c:\IMPORT\result.xml +delete __appendfile + +//take the action ID from the array and verify that 100% of targeted machines have reported and that the open action is NOT a policy +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} login -q --server=localhost --user={parameter "RemoteOP" of action} --password={parameter "RemoteOPPass" of action} +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} get query --relevance "((((number of elements of reported computer set of bes action whose (id of it = {tuple string item 5 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))})) / (number of elements of targeted computer set of bes action whose (id of it = {tuple string item 5 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))}))) * 100) = 100) AND (end date of bes action whose (id of it = {tuple string item 5 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))})) as string | %%22policy%%22 != %%22policy%%22" > c:\import\result.xml +delete api.bat +copy __appendfile api.bat +waithidden api.bat + + //stop the action + if{(preceding text of first "" of (following text of first "" of lines of file "c:\import\result.xml")as boolean = true)} + dos {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} {"post action/" & tuple string item 5 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml")) & "/stop -q"} + endif +endif + +//verify that an open action exists +if {exists tuple string item 6 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))} +delete c:\IMPORT\result.xml +delete __appendfile + +//take the action ID from the array and verify that 100% of targeted machines have reported and that the open action is NOT a policy +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} login -q --server=localhost --user={parameter "RemoteOP" of action} --password={parameter "RemoteOPPass" of action} +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} get query --relevance "((((number of elements of reported computer set of bes action whose (id of it = {tuple string item 6 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))})) / (number of elements of targeted computer set of bes action whose (id of it = {tuple string item 6 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))}))) * 100) = 100) AND (end date of bes action whose (id of it = {tuple string item 6 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))})) as string | %%22policy%%22 != %%22policy%%22" > c:\import\result.xml +delete api.bat +copy __appendfile api.bat +waithidden api.bat + + //stop the action + if{(preceding text of first "" of (following text of first "" of lines of file "c:\import\result.xml")as boolean = true)} + dos {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} {"post action/" & tuple string item 6 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml")) & "/stop -q"} + endif +endif + +//verify that an open action exists +if {exists tuple string item 7 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))} +delete c:\IMPORT\result.xml +delete __appendfile + +//take the action ID from the array and verify that 100% of targeted machines have reported and that the open action is NOT a policy +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} login -q --server=localhost --user={parameter "RemoteOP" of action} --password={parameter "RemoteOPPass" of action} +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} get query --relevance "((((number of elements of reported computer set of bes action whose (id of it = {tuple string item 7 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))})) / (number of elements of targeted computer set of bes action whose (id of it = {tuple string item 7 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))}))) * 100) = 100) AND (end date of bes action whose (id of it = {tuple string item 7 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))})) as string | %%22policy%%22 != %%22policy%%22" > c:\import\result.xml +delete api.bat +copy __appendfile api.bat +waithidden api.bat + + //stop the action + if{(preceding text of first "" of (following text of first "" of lines of file "c:\import\result.xml")as boolean = true)} + dos {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} {"post action/" & tuple string item 7 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml")) & "/stop -q"} + endif +endif + +//verify that an open action exists +if {exists tuple string item 8 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))} +delete c:\IMPORT\result.xml +delete __appendfile + +//take the action ID from the array and verify that 100% of targeted machines have reported and that the open action is NOT a policy +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} login -q --server=localhost --user={parameter "RemoteOP" of action} --password={parameter "RemoteOPPass" of action} +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} get query --relevance "((((number of elements of reported computer set of bes action whose (id of it = {tuple string item 8 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))})) / (number of elements of targeted computer set of bes action whose (id of it = {tuple string item 8 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))}))) * 100) = 100) AND (end date of bes action whose (id of it = {tuple string item 8 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))})) as string | %%22policy%%22 != %%22policy%%22" > c:\import\result.xml +delete api.bat +copy __appendfile api.bat +waithidden api.bat + + //stop the action + if{(preceding text of first "" of (following text of first "" of lines of file "c:\import\result.xml")as boolean = true)} + dos {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} {"post action/" & tuple string item 8 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml")) & "/stop -q"} + endif +endif + +//verify that an open action exists +if {exists tuple string item 9 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))} +delete c:\IMPORT\result.xml +delete __appendfile + +//take the action ID from the array and verify that 100% of targeted machines have reported and that the open action is NOT a policy +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} login -q --server=localhost --user={parameter "RemoteOP" of action} --password={parameter "RemoteOPPass" of action} +appendfile {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} get query --relevance "((((number of elements of reported computer set of bes action whose (id of it = {tuple string item 9 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))})) / (number of elements of targeted computer set of bes action whose (id of it = {tuple string item 9 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))}))) * 100) = 100) AND (end date of bes action whose (id of it = {tuple string item 9 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml"))})) as string | %%22policy%%22 != %%22policy%%22" > c:\import\result.xml +delete api.bat +copy __appendfile api.bat +waithidden api.bat + + //stop the action + if{(preceding text of first "" of (following text of first "" of lines of file "c:\import\result.xml")as boolean = true)} + dos {preceding text of last "\" of (expand environment string of (image path of service "FILLDB")) & "\iem.exe%22"} {"post action/" & tuple string item 9 of (preceding text of first "" of (following text of first "" of lines of file "c:\import\openactions.xml")) & "/stop -q"} + endif +endif]]> + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/TROUBLESHOOTING_ Perform BES Gather Reset on Relays (26858).bes b/Sites/BigFix Management/Fixlets/Fixlets/TROUBLESHOOTING_ Perform BES Gather Reset on Relays (26858).bes new file mode 100644 index 000000000..18a77e1e0 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/TROUBLESHOOTING_ Perform BES Gather Reset on Relays (26858).bes @@ -0,0 +1,215 @@ + + + + + TROUBLESHOOTING: Perform BES Gather Reset on Relays + + table.sortable th:not(.sorttable_sorted):not(.sorttable_sorted_reverse):not(.sorttable_nosort):after { + content: " \25B4\25BE" +} + +/* Sortable tables */ +table.sortable thead { + background-color:#eee; + color:#666666; + font-weight: bold; + cursor: default; +} +table.sortable tbody, td { + vertical-align: top; +} + +body {background-color:lightgrey} +h1 {color:blue} +p {color:green} + +.proserv-background +{ + background-color: #1976d2; + border: 10px solid #1976d2; + color: white; + padding: 10px 10px 10px 10px; +} + +.proserv-logo +{ + padding:0; + vertical-align:top; + width: 455px; + height: 55px; + + background-repeat: no-repeat; + /*background-size: cover;*/ + background-image: url(data:image/png;base64,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); +} +.proserv-container-div +{ + border: 10px solid #1976d2; + border-top: none; +} + +.proserv-description-div +{ + padding: 20px; + font-size: 18px; + font-family: sans-serif; + font-weight: 300; + font-size: 16px; +} + +.proserv-table +{ +font-size: 14px; +color: black; +padding: 6px 40px 6px 10px; +white-space: nowrap; +/*border-left: 1px solid black; +border-right: 1px solid black; */ +border-top: 1px solid black; +border-bottom: 1px solid black; +width: 100%; +} +.proserv-table-header +{ +font-size: 14px; +background-color: #990000; +color: white; +padding: 6px 40px 6px 10px; +white-space: nowrap; +/*border-right: 1px solid white; */ +} + +.proserv-table-data +{ + font-size: 14px; + padding: 6px 40px 6px 10px; + white-space: nowrap; + border: 1px solid black; + border-top: none; +} + + +
+
+
+
+

Resets gather states on Relays, by removing those sites' lines from gatherstate.xml and bfemapfile.xml and deleting the content of bfmirror/bfsites folder.

+

This is a modification to the instructions at https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0079078

+

 Note: If a client continues requesting a site that is failing, the Relay will again try to retrieve the site and it will again fail to gather.  This may occur for example in cases where clients are still subscribed to defunct operator accounts.

+

 

]]> + exists relay service + if exists property "in proxy agent context" then not in proxy agent context else true + BES Management + HCL BigFix Professional Services / J. Walker + 2020-04-07 + + x-fixlet-modification-time + Tue, 29 Jun 2021 16:51:13 +0000 + + BESC + + + Click + here + to deploy this action. + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/TROUBLESHOOTING_ File or Folder Uploads Monitor (1.0) (26976).bes b/Sites/BigFix Management/Fixlets/Fixlets/TROUBLESHOOTING_ File or Folder Uploads Monitor (1.0) (26976).bes new file mode 100644 index 000000000..44762018e --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/TROUBLESHOOTING_ File or Folder Uploads Monitor (1.0) (26976).bes @@ -0,0 +1,95 @@ + + + + + TROUBLESHOOTING: File or Folder Uploads Monitor (1.0) + TROUBLESHOOTING: File or Folder Uploads Monitor (1.0)

+

Description

+

This will become relevant when there are files or folder present in the UploadManagerData folder as a result of being uploaded by the "TROUBLESHOOTING: Upload a Specified File or Folder" task.  When actioned the task will move the file(s) to a more convenient location.  See the action parameters for more info.

+

Deployment Notes

+
    +
  • Run this only when needed. +
  • Unless modified, this task will only be relevant for uploads with the keyword "avpfileupload_" in the file name. +
  • Set the destination folder for the file moves by editing the "rootFolder" parameter in the actionscript. +
  • The task will backup any files/folders that exist.
+
Supported Platforms
+

Windows root servers

+

Version and Release Info

+

1.0.0 -- Initial Version

]]> + /* IS A ROOT SERVER */ exists main gather service and not exists relay service + + BigFix AVP + Internal + 2022-08-17 + + x-fixlet-modification-time + Thu, 17 Nov 2022 21:22:15 +0000 + + BESC + + + Click + here + to deploy this action. + + +//* +//* DESCRIPTION AND NOTES +//* +//* - This task will move the uploaded files/folders to the location specified in +//* parameter "rootFolder" below. +//* +//* ====================================================================================================> + + +//* ====================================================================================================> +//* +//* SET SOME PARAMETERS +//* +//* - These parameters can be used to control the location of the files +//* +//* ====================================================================================================> + +parameter "driveLetter"="{name of drive of regapp "besadmin.exe"}" +parameter "rootFolder"="{parameter "driveLetter" & "\Uploaded_Files"}" +parameter "uploadsFolder"="{parameter "driveLetter" & "\Program Files (x86)\BigFix Enterprise\BES Server\UploadManagerData\BufferDir\sha1"}" +parameter "backupFolder"="{parameter "rootFolder" & "\Backup"}" + +// BACKUP EXISTING FILES, IF PRESENT. +if {exists folder (parameter "rootFolder")} +waithidden cmd.exe /C mkdir "{parameter "backupFolder"}" +waithidden cmd.exe /C xcopy /Y /I "{parameter "rootFolder"}\*.*" "{parameter "backupFolder"}" +waithidden cmd.exe /C del /F /Q "{parameter "rootFolder"}\*.*" + +// CREATE BASE DIRECTORY STRUCTURE +waithidden cmd.exe /c mkdir "{parameter "rootFolder"}" + +// FIND ANY UPLOADED FILES OR FOLDERS IN THE UPLOAD MANAGER DATA FOLDER AND MOVE THEM TO THE SPECIFIED FOLDER +// NOTE: THE UPLOAD TASK NAMED THE FILES "AVPFileUpload" AND THAT IS THE KEYWORD WE WILL LOOK FOR. +// IF THAT KEYWORD IS CHANGED IN THE UPLOAD TASK THEN CHANGE IT HERE AS WELL +delete __createfile +delete move_files.bat + +createfile until _END_ +cd {parameter "uploadsFolder"} +for /r %%g in (AVPFileUpload_*.*) do ( +move /y "%%g" {parameter "rootFolder"} +) +_END_ + +move __createfile move_files.bat +waithidden cmd.exe /C move_files.bat + +]]> + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Test Action Header Info - Universal (26698).bes b/Sites/BigFix Management/Fixlets/Fixlets/Test Action Header Info - Universal (26698).bes new file mode 100644 index 000000000..6947d2830 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Test Action Header Info - Universal (26698).bes @@ -0,0 +1,157 @@ + + + + + Test Action Header Info - Universal + WARNING: This should only be run for on a system for testing what data is available. This should not be deployed to user systems. This could be useful as an offer only available to Admins for debugging.

+

This will dump a bunch of data to a file. This is useful for seeing what data is available internally for introspection and use. On Windows, this action can open the resulting file in Notepad by specifying a logged on current user. (currently hard coded to "jgstew")

+

 

]]> + true + Internal + jgstew + 2015-08-27 + + x-fixlet-modification-time + Wed, 20 May 2020 18:40:16 +0000 + + BESC + + + Click + here + to deploy this action. + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Test Action Header Info - Universal (6250).bes b/Sites/BigFix Management/Fixlets/Fixlets/Test Action Header Info - Universal (6250).bes new file mode 100644 index 000000000..c5bcbe802 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Test Action Header Info - Universal (6250).bes @@ -0,0 +1,114 @@ + + + + + Test Action Header Info - Universal + WARNING: This should only be run for on a system for testing what data is available. This should not be deployed to user systems. This could be useful as an offer only available to Admins for debugging.

+

This will dump a bunch of data to a file. This is useful for seeing what data is available internally for introspection and use. On Windows, this action will open the resulting file in Notepad.

+

 

]]> + true + Internal + jgstew + 2015-08-27 + + x-fixlet-modification-time + Wed, 14 Oct 2015 19:26:45 +0000 + + BESC + + + Click + here + to deploy this action. + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Trigger Gather _ Command Polling with file - BES Client (25454).bes b/Sites/BigFix Management/Fixlets/Fixlets/Trigger Gather _ Command Polling with file - BES Client (25454).bes new file mode 100644 index 000000000..a49a907d2 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Trigger Gather _ Command Polling with file - BES Client (25454).bes @@ -0,0 +1,37 @@ + + + + + Trigger Gather / Command Polling with file - BES Client + + exists files whose(name of it starts with "_BigFix_Trigger_Gather") of (folders "/tmp"; folders "/Windows/Temp") + Internal + 2018-03-06 + + x-fixlet-modification-time + Tue, 06 Mar 2018 19:16:52 +0000 + + BESC + + + Click + here + to deploy this action. + + +enable gathering + +delete "{ pathname of files whose(name of it starts with "_BigFix_Trigger_Gather") of (folders "/tmp"; folders "/Windows/Temp") }" + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Trigger Gathering - BES Client (24400).bes b/Sites/BigFix Management/Fixlets/Fixlets/Trigger Gathering - BES Client (24400).bes new file mode 100644 index 000000000..e454c366d --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Trigger Gathering - BES Client (24400).bes @@ -0,0 +1,36 @@ + + + + + Trigger Gathering - BES Client + This will help new things happen quicker in BigFix, but it shouldn't be done too often. This is especially useful for clients that are mobile and not on a primary network. + true + Internal + jgstew + 2016-12-10 + + x-fixlet-modification-time + Tue, 13 Dec 2016 23:18:06 +0000 + + BESC + + + Click + here + to deploy this action. + + +enable gathering + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Truncate SWD_DeploymentResults.log (27331).bes b/Sites/BigFix Management/Fixlets/Fixlets/Truncate SWD_DeploymentResults.log (27331).bes new file mode 100644 index 000000000..4d842d652 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Truncate SWD_DeploymentResults.log (27331).bes @@ -0,0 +1,92 @@ + + + + + Truncate SWD_DeploymentResults.log + This fixlet takes the last 200 lines of SWD_DeploymentResults.log and discards the rest. + +It's relevant for logfiles with over 300 lines, giving 100 lines of wiggle room before it becomes relevant again. + 300]]> + Internal + 2024-03-12 + + x-fixlet-modification-time + Wed, 13 Mar 2024 01:36:32 +0000 + + BESC + + + Click + here + to deploy this action. + + > "{parameter "logFolder"}\{parameter "logFile"}" +waithidden cmd.exe /C echo Action ID: {id of active action} >> "{parameter "logFolder"}\{parameter "logFile"}" +delete prometheus.ps1 +delete __createfile +createfile until _EOF_ +$truncatedContent = Get-Content "{parameter "logPath"}" -tail {parameter "targetLength"} +Remove-Item -Path "{parameter "logPath"}" +$Utf8NoBomEncoding = New-Object System.Text.UTF8Encoding $False +[System.IO.File]::WriteAllLines("{parameter "logPath"}", $truncatedContent, $Utf8NoBomEncoding) +#https://stackoverflow.com/a/5596984/5458134 +Copy-Item "SWD_DeploymentResults.log" -Destination "{parameter "logPath"}" +Remove-Item -Path "SWD_DeploymentResults.log" +_EOF_ +copy "__createfile" "prometheus.ps1" +waithidden powershell.exe -executionpolicy bypass -File "prometheus.ps1" +parameter "error" = "{exit code of action}" +waithidden cmd.exe /C echo Log truncated to {parameter "targetLength"} lines >> "{parameter "logFolder"}\{parameter "logFile"}" +waithidden cmd.exe /C echo Return Code: {parameter "error"} >> "{parameter "logFolder"}\{parameter "logFile"}" +waithidden cmd.exe /C echo. >> "{parameter "logFolder"}\{parameter "logFile"}" +delete "prometheus.ps1" + +else +wait sh -c "echo '' >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +wait sh -c "echo $(date +%Y_%m_%d' '%T) >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +wait sh -c "echo Action ID: {id of active action} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +delete prometheus.sh +delete __createfile +createfile until _EOF_ +#!/bin/sh +tail -n {parameter "targetLength"} "{parameter "logPath"}" > SWD_DeploymentResults.log +rm -rf "{parameter "logPath"}" +mv -f SWD_DeploymentResults.log "{parameter "logPath"}" +rm -rf SWD_DeploymentResults.log +_EOF_ +copy "__createfile" "prometheus.sh" +wait chmod +x "prometheus.sh" +wait /bin/sh "prometheus.sh" +parameter "error" = "{exit code of action}" +wait sh -c "echo Log truncated to {parameter "targetLength"} lines >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +wait sh -c "echo Return Code: {parameter "error"} >> '{parameter "mainSWDLogFolder"}/{parameter "logFile"}'" +delete "prometheus.sh" +endif + +if {parameter "error" != "0"} +exit {parameter "error"} +endif + +exit {parameter "error"}]]> + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Update BES Server Plugin Service (285).bes b/Sites/BigFix Management/Fixlets/Fixlets/Update BES Server Plugin Service (285).bes new file mode 100644 index 000000000..b9a430b05 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Update BES Server Plugin Service (285).bes @@ -0,0 +1,63 @@ + + + + + Update BES Server Plugin Service + +

An update to the BES Server Plugin Service is available.

The BES Server Plugin Service is required by several BigFix Applications to facilitate automation of processes that require communication with the BES Server and Webreports.

+ +
+

File Size:

+1.72 MB +
+]]> + exists relay service OR exists main gather service + exists main gather service + exists service "BESPluginService" + exists services whose(service name of it = "BESRootServer") + + Support + BigFix + <Unspecified> + 2012-02-08 + Critical + + x-fixlet-first-propagation + Wed, 01 Aug 2012 01:09:07 +0000 + + + x-fixlet-modification-time + Wed, 01 Aug 2012 01:09:07 +0000 + + BESC + + + Click + here + to update the BES Server Plugin Service. + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Upgrade BES Client Logging Service (405).bes b/Sites/BigFix Management/Fixlets/Fixlets/Upgrade BES Client Logging Service (405).bes new file mode 100644 index 000000000..0f195e4ad --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Upgrade BES Client Logging Service (405).bes @@ -0,0 +1,125 @@ + + + + + Upgrade BES Client Logging Service + +

BigFix has released an upgrade to the BES Client Logging Service. This upgrade contains several bug fixes and BigFix highly recommends that all customers apply the upgrade. This upgrade is required to upgrade the BES Client to version 7.0.9 or greater if any BigFix Extensions are installed.

Use the action below to upgrade to the latest version of the BES Client Logging Service.

Note: This action will temporarily stop the BES Client Logging Service. Please schedule the upgrade to occur at a time when a service interruption is acceptable.

The following BigFix Extensions require the BES Client Logging Service:

  • AntiPest 2
  • AntiVirus
  • DLP
  • Firewall
  • Power Management (on 7.2 clients)
+ +
+

File Size:

+3.18 MB+ +
+]]> + name of operating system as lowercase starts with "win" + = "6"]]> + + Upgrade + BigFix + <Unspecified> + 2008-02-26 + Critical + + x-fixlet-modification-time + Tue, 12 Jul 2011 22:23:36 +0000 + + + x-fixlet-first-propagation + Fri, 09 Nov 2007 18:40:08 +0000 + + + x-fixlet-domain_attributes + BES Deploy Client + + BESC + + + Click + here + to initiate the deployment process. + + NUL 2> NUL +copy __appendfile myScript.bat +wait "{pathname of client folder of site "BESSupport"}\RunQuiet.exe" myScript.bat +delete myScript.bat +endif +// #AP2 +if {((exist regapp "BigFixAntiPest.exe" whose (version of it >= "0.9.0.34")))} +prefetch "antipest.dll" sha1:552946f80235b9f6ad8444909424d554bad555f7 size:102400 http://software.bigfix.com/download/LoggingService/lib/antipest.dll +delete "{pathname of parent folder of file of service "BESClientLoggingService"}\lib\antipest.dll" +copy "__Download\antipest.dll" "{pathname of parent folder of file of service "BESClientLoggingService"}\lib\antipest.dll" +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\LoggingService\Plugins\Locations]" "CA_AP"="{escape of (pathname of parent folder of file of service "BESClientLoggingService" & "\lib\antipest.dll")}" +endif +// #AV +if {((if (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\eTrustAntivirus\CurrentVersion\Path" whose (exists value "HOME" of it) of registry) then (exists file ((value "HOME" of key "HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\eTrustAntivirus\CurrentVersion\Path" of registry as string) & "\InoOEM.dll") whose (version of it = "7.1")) else (false)) AND (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\AntiVirus" of registry))} +prefetch "antivirus.dll" sha1:7462e0790198d6f2afbe9c79db589e00eeb8d4c6 size:167936 http://software.bigfix.com/download/LoggingService/lib/antivirus.dll +prefetch "eavrtsdk.dll" sha1:d4e2a29a1d9891e72add0fcb7e47da4e3a57e608 size:241664 http://software.bigfix.com/download/LoggingService/lib/eavrtsdk.dll +delete "{pathname of parent folder of file of service "BESClientLoggingService"}\lib\antivirus.dll" +delete "{pathname of parent folder of file of service "BESClientLoggingService"}\lib\eavrtsdk.dll" +copy "__Download\antivirus.dll" "{pathname of parent folder of file of service "BESClientLoggingService"}\lib\antivirus.dll" +copy "__Download\eavrtsdk.dll" "{pathname of parent folder of file of service "BESClientLoggingService"}\lib\eavrtsdk.dll" +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\LoggingService\Plugins\Locations]" "CA_AV"="{escape of (pathname of parent folder of file of service "BESClientLoggingService" & "\lib\antivirus.dll")}" +regset "[HKEY_LOCAL_MACHINE\Software\BigFix\AntiVirus]" "SDKPath"="{escape of (pathname of parent folder of file of service "BESClientLoggingService" & "\lib")}" +endif +// #DLP +if {(((exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\DLP" whose (exists folder (values "installedPath" of it as string) whose (exists file "BESLeakProofCTRL.exe" whose (version of it >= "1.1.0.17") of it)) of registry)))} +prefetch "dlp.dll" sha1:e5d05be8daedf5143d2ae2b10fe75cc834ae0bad size:110592 http://software.bigfix.com/download/LoggingService/lib/dlp.dll +delete "{pathname of parent folder of file of service "BESClientLoggingService"}\lib\dlp.dll" +copy "__Download\dlp.dll" "{pathname of parent folder of file of service "BESClientLoggingService"}\lib\dlp.dll" +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\LoggingService\Plugins\Locations]" "TM_DLP"="{escape of (pathname of parent folder of file of service "BESClientLoggingService" & "\lib\dlp.dll")}" +endif +// #FW +if {((exists key "HKEY_LOCAL_MACHINE\SOFTWARE\CA\HIPSEngine\Products\BigFixFW" whose (exists value "UninstallCmdLine" of it) of registry))} +prefetch "compliance.dll" sha1:ba6b4f295a8933584d9c502db54797d839a4ee81 size:151552 http://software.bigfix.com/download/LoggingService/lib/compliance.dll +prefetch "firewall.dll" sha1:4a010c72c199c4deb302553332a23407b6f8cd49 size:151552 http://software.bigfix.com/download/LoggingService/lib/firewall.dll +delete "{pathname of parent folder of file of service "BESClientLoggingService"}\lib\compliance.dll" +delete "{pathname of parent folder of file of service "BESClientLoggingService"}\lib\firewall.dll" +copy "__Download\compliance.dll" "{pathname of parent folder of file of service "BESClientLoggingService"}\lib\compliance.dll" +copy "__Download\firewall.dll" "{pathname of parent folder of file of service "BESClientLoggingService"}\lib\firewall.dll" +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\LoggingService\Plugins\Locations]" "CA_FW"="{escape of (pathname of parent folder of file of service "BESClientLoggingService" & "\lib\firewall.dll")}" +regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\LoggingService\Plugins\Locations]" "BF_CP"="{escape of (pathname of parent folder of file of service "BESClientLoggingService" & "\lib\compliance.dll")}" +endif +//*********************** RESTART LOGGING SERVICE *******************// +waithidden "{pathname of parent folder of regapp "besclient.exe" & "\BESClientLoggingService\BESClientLoggingService.exe"}" -s +action may require restart]]> + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Upgrade BES Client from SystemStarter to launchd Start Up Mechanism (449).bes b/Sites/BigFix Management/Fixlets/Fixlets/Upgrade BES Client from SystemStarter to launchd Start Up Mechanism (449).bes new file mode 100644 index 000000000..c625ce0c9 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Upgrade BES Client from SystemStarter to launchd Start Up Mechanism (449).bes @@ -0,0 +1,78 @@ + + + + + Upgrade BES Client from SystemStarter to launchd Start Up Mechanism +
Note: It is strongly suggested that this action be taken on all relevant computers as the SystemStarter mechanism may be deprecated in the future. +]]> + (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) + = "5.1"]]> + = "8.0") then (mac of it) else (name of it starts with "Mac OS X")) of operating system]]> + = "7.1") AND (exists folder "/Library/StartupItems/BESAgent/BESAgent.app") AND (system version >= "10.4")]]> + not exists file "/Library/LaunchDaemons/BESAgentDaemon.plist" + Common Tasks + BigFix + <Unspecified> + 2008-10-09 + Low + + x-fixlet-modification-time + Sat, 12 May 2012 00:55:27 +0000 + + + x-fixlet-first-propagation + Thu, 09 Oct 2008 19:11:08 +0000 + + + x-fixlet-domain_attributes + BES Potential + + BESC + + + Click + here + to upgrade the client's start up mechanism. + + +appendfile +appendfile +appendfile +appendfile Label +appendfile com.bigfix.BESAgent +appendfile OnDemand +appendfile +appendfile ProgramArguments +appendfile +appendfile /Library/BESAgent/BESAgent.app/Contents/MacOS/BESAgent +appendfile -noservice +appendfile +appendfile WorkingDirectory +appendfile /Library/BESAgent/BESAgent.app/Contents/MacOS +appendfile +appendfile +move "{(client folder of current site as string) & "/__appendfile"}" "{(client folder of current site as string) & "/BESAgentDaemon.plist"}" +appendfile #!/bin/sh +appendfile /sbin/SystemStarter stop BESAgent +appendfile sleep 5 +appendfile mv "/Library/StartupItems/BESAgent" "/Library/" +appendfile rm "/Library/StartupItems/BESAgent/StartupParameters.plist" +appendfile mv "{(client folder of current site as string) & "/BESAgentDaemon.plist"}" "/Library/LaunchDaemons/" +appendfile chmod 444 "/Library/LaunchDaemons//BESAgentDaemon.plist" +appendfile /bin/launchctl load /Library/LaunchDaemons/BESAgentDaemon.plist +wait chmod 555 "{(client folder of current site as string) & "/__appendfile"}" +run {"/bin/sh -c %22trap '' 15;'" & (client folder of current site as string) & "/__appendfile'%22"}]]> + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Upload Logs if Action Fails (3759).bes b/Sites/BigFix Management/Fixlets/Fixlets/Upload Logs if Action Fails (3759).bes new file mode 100644 index 000000000..2499f2297 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Upload Logs if Action Fails (3759).bes @@ -0,0 +1,50 @@ + + + + + Upload Logs if Action Fails + + (name of operating system starts with "Win") + mike.english@us.ibm.com + 2014-04-04 + + x-fixlet-modification-time + Sat, 05 Apr 2014 12:50:35 +0000 + + BESC + + + Click + here + to deploy this action. + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Upload Unknown.csv (95).bes b/Sites/BigFix Management/Fixlets/Fixlets/Upload Unknown.csv (95).bes new file mode 100644 index 000000000..5fbd014f1 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Upload Unknown.csv (95).bes @@ -0,0 +1,54 @@ + + + + + Upload Unknown.csv + http://bigfix.me/w7apps/import database. +

Source: http://bigfix.me/w7apps

+

Support: dmoran@us.ibm.com

]]> + (if( name of operating system starts with "Win" ) then platform id of operating system != 3 else false) AND (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) + name of operating system starts with "Win7" + exists file "Unknown.csv" of folder "Win7AppCompat" of parent folder of client + Upload + danielheth@bigfix.me + <Unspecified> + 2012-10-03 + <Unspecified> + + x-fixlet-modification-time + Wed, 03 Oct 2012 17:03:09 +0000 + + LABS + + + Click + here + to upload the Unknown.csv file. + + parameter "current_time"="{(now - "01 Jan 1970 00:00:00" as local time)/second}" +// set max size to 20 MB to prevent too much data +setting "_BESClient_ArchiveManager_MaxArchiveSize"="20971520" on "{parameter "action issue date" of action}" for client +setting "_BESClient_ArchiveManager_OperatingMode"="2" on "{parameter "action issue date" of action}" for client +setting "_BESClient_ArchiveManager_FileSet-w7apps{parameter "current_time"}"="{pathname of parent folder of client}\Win7AppCompat\Unknown.csv" on "{parameter "action issue date" of action}" for client +// send results +archive now + + + + Click + here + to learn more and download the latest versions of Feature Installer tasks. + + http://bigfix.me/w7apps/ + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Upload client logs to Root Server (6077).bes b/Sites/BigFix Management/Fixlets/Fixlets/Upload client logs to Root Server (6077).bes new file mode 100644 index 000000000..72d8ae545 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Upload client logs to Root Server (6077).bes @@ -0,0 +1,58 @@ + + + + + Upload client logs to Root Server + This task will Leverage the Upload and Archive Manager to Pull a specific's client's logs back to the Root Server + true + Utilities + Created by Jared Levy, jlevy@us.ibm.com. This content is custom content and not supported by IBM support. + 2015-05-18 + + x-fixlet-modification-time + Mon, 18 May 2015 16:36:48 +0000 + + BESC + + + Click + here + to deploy this action. + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Version of Dbmslpcn.dll May Cause Handle Leak on BES Client_Server Components (400).bes b/Sites/BigFix Management/Fixlets/Fixlets/Version of Dbmslpcn.dll May Cause Handle Leak on BES Client_Server Components (400).bes new file mode 100644 index 000000000..0e3bcbf67 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Version of Dbmslpcn.dll May Cause Handle Leak on BES Client_Server Components (400).bes @@ -0,0 +1,55 @@ + + + + + Version of Dbmslpcn.dll May Cause Handle Leak on BES Client/Server Components +

The listed computers have a version of dbmslpcn.dll that may cause the BES Client, FillDB, and/or GatherDB Services to leak handles. To resolve this issue, use the action below to set a registry key value and disable the 'Shared Memory Net-Library' for SQL Server client.

Important Note: There have been reports of issues caused by disabling the 'Shared Memory Net-Library' setting. In particular, the firewall service may no longer start on computers running ISA Server 2004. Please take extra caution to qualify this setting change in a test environment prior to use in a production environment.

+]]> + = "2000.80.818.0") of system folder]]> + not exists value "SharedMemoryOn" whose (it = 0) of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSSQLServer\Client" of registry + Support + BigFix + <Unspecified> + 2026-09-17 + Important + + x-fixlet-modification-time + Tue, 12 Jul 2011 22:23:36 +0000 + + + x-fixlet-first-propagation + Wed, 20 Oct 2004 00:39:45 +0000 + + + x-fixlet-domain_attributes + BES Potential + + BESC + + + Click + here + to disable the 'Shared Memory Net-Library'. + + regset "[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSSQLServer\Client]" "SharedMemoryOn"=dword:00000000 + + + + Click + here + for more information from Microsoft on how to configure SQL Server Client Net-Libraries manually. + + http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adminsql/ad_1_client_7v03.asp + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Warning - BES Server Plugin Service REST API Credentials are not Configured Correctly - Universal (22983).bes b/Sites/BigFix Management/Fixlets/Fixlets/Warning - BES Server Plugin Service REST API Credentials are not Configured Correctly - Universal (22983).bes new file mode 100644 index 000000000..c714568d5 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Warning - BES Server Plugin Service REST API Credentials are not Configured Correctly - Universal (22983).bes @@ -0,0 +1,34 @@ + + + + + Warning - BES Server Plugin Service REST API Credentials are not Configured Correctly - Universal + + + + +

The BES Server Plugin Service requires a master operator's user name and password.

+

To configure the BES Server Plug-in Service, use = "9.0") then (links of fixlets (1294) of bes site whose (id of it = 1)) else (links of wizards whose (dashboard id of it = "MFSConfiguration.ojo") of bes site whose (id of it = 1))) ?>.

]]> + exists relay service OR exists main gather service + exists main gather service + exists service "BESPluginService" + not exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\MFSConfig" whose ((exists value "RESTUsername" whose (it != "") of it) AND (exists value "RESTPassword" whose (it != "") of it)) of registry + Prerequisite + 2016-12-05 + Critical + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Warning - BigFix Root Server has a long Evaluation Cycle - Windows (22985).bes b/Sites/BigFix Management/Fixlets/Fixlets/Warning - BigFix Root Server has a long Evaluation Cycle - Windows (22985).bes new file mode 100644 index 000000000..5f6541ddc --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Warning - BigFix Root Server has a long Evaluation Cycle - Windows (22985).bes @@ -0,0 +1,36 @@ + + + + + Warning - BigFix Root Server has a long Evaluation Cycle - Windows + This Fixlet is relevant when the BigFix Root has an evaluation cycle of longer than 40 minutes. An evaluation cycle of longer than 20 minutes is indicative of poor root server performance.

+

This means that existing Fixlets/Tasks/Analyses will be slow to show as applicable and slow to report results.

+

You can solve this by either:

+
    +
  1. Increasing the CPU Usage of the BigFix Agent on the Root Server (Using Fixlet 168 in BES Support: , setting to High or Very High). For concerns about raising the CPU Usage please see the notes below. +
  2. Review the evaluation cycles and determine what the root server is spending its time on.
+

CPU Usage Notes: 

+

The BigFix Agent is often said to consume 2% CPU and this is a bit of a misnomer -- the default agent settings mean that it will indeed consume 2% CPU but because the agent is single-threaded the most it will ever consume is 2% of a single CPU Core. This means on an 8 core server the agent actually consumes 0.25% of total CPU and on a 16 core server the agent consumes 0.125% of total CPU.

+

Increasing the CPU Usage of the agent on the root server will make it significantly more responsive and, because the agent is limited to one CPU, raising it to even 25% or 50% on the root server is unlikely to impact any services on the server itself.

]]> + exists main gather service + 40]]> + Audit + Internal + 2016-12-05 + Critical + + x-fixlet-modification-time + Sun, 11 Sep 2016 22:05:56 +0000 + + BESC + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Warning - BigFix Server does not have .Net 4.5 - Windows (22986).bes b/Sites/BigFix Management/Fixlets/Fixlets/Warning - BigFix Server does not have .Net 4.5 - Windows (22986).bes new file mode 100644 index 000000000..9ae097268 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Warning - BigFix Server does not have .Net 4.5 - Windows (22986).bes @@ -0,0 +1,30 @@ + + + + + Warning - BigFix Server does not have .Net 4.5 - Windows + This is relevant on BigFix Servers which do not have .Net 4.5 installed.

+

.Net 4.5 is required for both the RES Database Connector and the BigFix.Me Sync Tool. You can use Fixlet 45001 in the Patches for Windows (English) site: "UPDATE: Microsoft .NET Framework 4.5 Available - Windows 7 SP1 / Windows 2008 SP2 / Windows 2008 R2 SP1 / Windows Vista SP2" to resolve this issue.

]]> + exists main gather service + windows of operating system + not exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4.0" of registry + Prerequisite + Internal + 2016-12-05 + Critical + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Warning - BigFix Server is below minimum supported version - Windows (22987).bes b/Sites/BigFix Management/Fixlets/Fixlets/Warning - BigFix Server is below minimum supported version - Windows (22987).bes new file mode 100644 index 000000000..fe1bdcc68 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Warning - BigFix Server is below minimum supported version - Windows (22987).bes @@ -0,0 +1,28 @@ + + + + + Warning - BigFix Server is below minimum supported version - Windows + This fixlet is relevant if your BigFix environment is running on an unsupported version + exists main gather service + + Audit + Internal + 2016-12-05 + Critical + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Warning - Client clock is off by more than 5 minutes - Universal (21630).bes b/Sites/BigFix Management/Fixlets/Fixlets/Warning - Client clock is off by more than 5 minutes - Universal (21630).bes new file mode 100644 index 000000000..f65e37b40 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Warning - Client clock is off by more than 5 minutes - Universal (21630).bes @@ -0,0 +1,26 @@ + + + + + Warning - Client clock is off by more than 5 minutes - Universal + This fixlet is relevant if the client's clock is skewed by more than 5 minutes

+

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory

]]> + = (5 * minute)]]> + Internal + 2016-04-23 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BES + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Warning - Client download cache may be too small (20275).bes b/Sites/BigFix Management/Fixlets/Fixlets/Warning - Client download cache may be too small (20275).bes new file mode 100644 index 000000000..d1aa76e82 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Warning - Client download cache may be too small (20275).bes @@ -0,0 +1,25 @@ + + + + + Warning - Client download cache may be too small + + + Internal + 2016-04-24 + + x-fixlet-modification-time + Sun, 24 Apr 2016 17:08:42 +0000 + + BESC + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Warning - Client running BigFix Console has unsupported version of Internet Explorer - Windows (22988).bes b/Sites/BigFix Management/Fixlets/Fixlets/Warning - Client running BigFix Console has unsupported version of Internet Explorer - Windows (22988).bes new file mode 100644 index 000000000..23ba53d46 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Warning - Client running BigFix Console has unsupported version of Internet Explorer - Windows (22988).bes @@ -0,0 +1,29 @@ + + + + + Warning - Client running BigFix Console has unsupported version of Internet Explorer - Windows + + exists regapp "BESConsole.exe" + windows of operating system + + Audit + Internal + 2016-12-05 + Critical + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Warning - Command Polling frequency may be too long (20555).bes b/Sites/BigFix Management/Fixlets/Fixlets/Warning - Command Polling frequency may be too long (20555).bes new file mode 100644 index 000000000..cd276c5d9 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Warning - Command Polling frequency may be too long (20555).bes @@ -0,0 +1,26 @@ + + + + + Warning - Command Polling frequency may be too long + For general information or to report issues with C3 Platform Kickstart content please visit GitHub here: https://github.com/strawgate/C3-Platform-Kickstart

]]> + 7200)]]> + Internal + 2016-04-24 + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Warning - Command Polling may be disabled (20276).bes b/Sites/BigFix Management/Fixlets/Fixlets/Warning - Command Polling may be disabled (20276).bes new file mode 100644 index 000000000..3bf26b400 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Warning - Command Polling may be disabled (20276).bes @@ -0,0 +1,25 @@ + + + + + Warning - Command Polling may be disabled + This fixlet is relevant if command polling is disabled + (NOT exists setting "_BESClient_Comm_CommandPollEnable" of client) OR (value of setting "_BESClient_Comm_CommandPollEnable" of client as integer != 1) + Internal + 2016-04-24 + + x-fixlet-modification-time + Sun, 24 Apr 2016 17:06:19 +0000 + + BESC + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Warning - Relay download cache may be too small (20278).bes b/Sites/BigFix Management/Fixlets/Fixlets/Warning - Relay download cache may be too small (20278).bes new file mode 100644 index 000000000..28e247983 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Warning - Relay download cache may be too small (20278).bes @@ -0,0 +1,26 @@ + + + + + Warning - Relay download cache may be too small + This fixlet is relevant if the relay download cache is set to a value smaller than 20 GB (Default is 1 GB) + exists relay service + + Internal + 2016-04-24 + + x-fixlet-modification-time + Sun, 24 Apr 2016 17:43:15 +0000 + + BESC + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Warning - Server download cache may be too small (20279).bes b/Sites/BigFix Management/Fixlets/Fixlets/Warning - Server download cache may be too small (20279).bes new file mode 100644 index 000000000..894716254 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Warning - Server download cache may be too small (20279).bes @@ -0,0 +1,26 @@ + + + + + Warning - Server download cache may be too small + This fixlet is relevant if the server download cache is set to a value smaller than 20 GB (Default is 1 GB) + exists main gather service + + Internal + 2016-04-24 + + x-fixlet-modification-time + Sun, 24 Apr 2016 17:43:24 +0000 + + BESC + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Warning - Windows Firewall may be blocking RES Relay traffic - Windows (22991).bes b/Sites/BigFix Management/Fixlets/Fixlets/Warning - Windows Firewall may be blocking RES Relay traffic - Windows (22991).bes new file mode 100644 index 000000000..61eb6a9ce --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Warning - Windows Firewall may be blocking RES Relay traffic - Windows (22991).bes @@ -0,0 +1,42 @@ + + + + + Warning - Windows Firewall may be blocking RES Relay traffic - Windows + + + + +

The listed computers have the Windows Firewall enabled. Windows Firewall is currently configured to block inbound UDP traffic on the port used by BES (BES uses port 52311 by default) as well as inbound ICMP traffic.

Important Note: If the listed computers' firewall settings are being administered through a domain group policy, the results of this action may be overwritten by that policy. The actions below will only affect the local firewall policy, and will not affect any group firewall policy settings that may have been applied by a domain administrator. If your firewall has been configured via a domain group policy, these actions may report back as 'Failed', and the firewall must be disabled or configured through group policy instead.

]]> + (if exists property "in proxy agent context" then ( not in proxy agent context ) else true ) + windows of operating system + exists service "RESRLS" + (firewall enabled of current profile of local policy of firewall|false) OR (exists key "HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile" whose (value "EnableFirewall" of it = 1) of registry) OR (exists key "HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile" whose (value "EnableFirewall" of it = 1) of registry) OR (exists key "HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile" whose (value "EnableFirewall" of it = 1) of registry) + + not exists (rules of firewall) whose ((set of substrings separated by "," of local ports string of it) contains (Value "Port" of key "HKEY_LOCAL_MACHINE\Software\RES\Workspace Manager\RelayServer" of native registry as string)) + (not exists authorized application whose (enabled of it AND (it ends with "resrls.exe") of (process image file name of it as lowercase)) of current profile of local policy of firewall) + Support + BigFix + <Unspecified> + 2016-12-05 + Important + + x-fixlet-domain_attributes + BES Warn Important + + + x-fixlet-modification-time + Thu, 17 Sep 2026 20:18:21 +0000 + + BESC + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Watchdog for FillDB (3632).bes b/Sites/BigFix Management/Fixlets/Fixlets/Watchdog for FillDB (3632).bes new file mode 100644 index 000000000..f1ea3dedb --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Watchdog for FillDB (3632).bes @@ -0,0 +1,98 @@ + + + + + Watchdog for FillDB + FillDB has been known to stall.  This task will monitor for that situation and correct it.

+

NOTE:  You must enable FillDBperf in order for this watchdog task to be relevant.

+

this watchdog runs every 15min. 

+

Here is the sudocode for what will happen:

+

if filldb = stopping and no flag
    set flag
elseif filldb = stopping and flag
    it is taking longer than 15min to stop, so kill it
    if flag set, then clear it
    start filldb
else
    if flag set, then clear it
    check sha1 of filldbperf log, this log should be updated every minute or more with data assuming everything is working correctly.
    if old sha1 == new sha1 then the log didn't get updated... stop filldb
    if filldb = stopped then start filldb

]]> + = "6.0"]]> + exists service "FillDB" + if exists value "PerformanceDataPath" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB" of registry then exists file (value "PerformanceDataPath" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB" of registry as string) else false + Maintenance + danielheth@bigfix.me + <Unspecified> + 2011-12-05 + <Unspecified> + + x-fixlet-modification-time + Mon, 01 Oct 2012 21:30:49 +0000 + + BES + + + Click + here + to activate this Watchdog. + + //state of service = Continuing, Pausing, Paused, Running, Starting, Stopping, Stopped, Unknown + +//if filldb is stopping and we haven't configured the stopping flag. +//this means this is the first time we've seen the filldb service in a stopping state +//we need to configure the flag so the next time this task runs, we'll be able to fix +if {state of service "FillDB" = "Stopping" AND not exists setting "FillDB_Stopping" of client} + //set flag for next run... + setting "FillDB_Stopping"="{now as string}" on "{now}" for client + //every 15min this task will run again, filldb will be stopped and + //the flag will be set which will make it go into the next section of code + //where we can kill the process... it shouldn't take 15min to stop. + //if it was able to stop during the 15min wait, then the else section + //will run which clears the flag. + +elseif {state of service "FillDB" = "Stopping" AND exists setting "FillDB_Stopping" of client} + //forcably kill the FillDB process + waithidden cmd /c taskkill /IM FillDB.exe /F + + //if it successfully killed it, then clear the flag and restart + if {state of service "FillDB" = "Stopped"} + //first remove the flag... + if {exists setting "FillDB_Stopping" of client} + setting delete "FillDB_Stopping" on "{now}" for client + endif + + waithidden cmd /c net start FillDB + endif + +else + //delete the flag under any other circomstances + if {exists setting "FillDB_Stopping" of client} + setting delete "FillDB_Stopping" on "{now}" for client + endif + + + //pull old sha1 from registry and read new sha1 + parameter "LASTsha1"="{if exists setting "FillDB_PerfSha1" of client then value of setting "FillDB_PerfSha1" of client else ""}" + parameter "NEWsha1"="{if exists value "PerformanceDataPath" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB" of registry then sha1 of file (value "PerformanceDataPath" of key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\FillDB" of registry as string) else ""}" + + //compare sha1's to see if filldb has stalled... + if {parameter "LASTsha1" != "" AND parameter "LASTsha1" = parameter "NEWsha1"} + //sha1 did not change, restart service + waithidden cmd /c net stop FillDB + else + //save new sha1 for later use + setting "FillDB_PerfSha1"="{parameter "NEWsha1" of action}" on "{now}" for client + endif + + + //if the filldb is in a stopped state, then start it now + if {state of service "FillDB" = "Stopped"} + waithidden cmd /c net start FillDB + endif +endif + + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Watchdog for RootServer (3633).bes b/Sites/BigFix Management/Fixlets/Fixlets/Watchdog for RootServer (3633).bes new file mode 100644 index 000000000..edd68dc9d --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Watchdog for RootServer (3633).bes @@ -0,0 +1,42 @@ + + + + + Watchdog for RootServer + + = "6.0"]]> + exists service "BESRootServer" + not exists running service "BESRootServer" + BESRootServer + danielheth@bigfix.me + <Unspecified> + 2011-05-02 + <Unspecified> + + x-fixlet-modification-time + Mon, 01 Oct 2012 21:30:49 +0000 + + BES + + + Click + here + to deploy this action. + + //this task is triggered if filldb is stopped... it will kick in and start it back up... + +waithidden cmd /c net start BESRootServer + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/WebUI Create a Custom Logon Banner (26623).bes b/Sites/BigFix Management/Fixlets/Fixlets/WebUI Create a Custom Logon Banner (26623).bes new file mode 100644 index 000000000..e7fa6d3e6 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/WebUI Create a Custom Logon Banner (26623).bes @@ -0,0 +1,37 @@ + + + + + WebUI Create a Custom Logon Banner +  

+

 

]]> + exist folder "C:\Program Files (x86)\BigFix Enterprise\BES WebUI" + Brad Sexton + 2019-03-01 + + x-fixlet-modification-time + Thu, 16 May 2019 14:02:07 +0000 + + BESC + + + Click + here + to deploy this action. + + action parameter query "Banner" with description "Please type login banner you want to display" With default "By logging in to the WebUI, I agree to the terms and conditions" +setting "_WebUIAppEnv_USER_TEXT"="{parameter "Banner" of action}" on "{parameter "action issue date" of action}" for client + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/Webui Create a Custom Background and Color (26622).bes b/Sites/BigFix Management/Fixlets/Fixlets/Webui Create a Custom Background and Color (26622).bes new file mode 100644 index 000000000..567de6587 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/Webui Create a Custom Background and Color (26622).bes @@ -0,0 +1,73 @@ + + + + + Webui Create a Custom Background and Color + This action prompts you for the default css color you want to use for your WebUI.  https://www.w3schools.com/cssref/css_colors.asp

+

 

+

 

+

Next it creates a directory in C:\Program Files (x86)\BigFix Enterprise\BES WebUI\WebUI\sites\WebUI Common_12049_51_1553129035\login-app\app\client\public\skins\skins that looks for an image called Custom.jpg once you copy your custom.jpg file to C:\Program Files (x86)\BigFix Enterprise\BES WebUI\WebUI\sites\WebUI Common_12049_51_1553129035\login-app\app\client\public\skins\skins you will need to restart the BESWebUI on your WebUI server.

+

 

+

For Best results it looks like you want to use an image size of 1280x975 for best rendering

+

 

]]> + exist folder "C:\Program Files (x86)\BigFix Enterprise\BES WebUI" + Brad Sexton + 2019-03-01 + + x-fixlet-modification-time + Wed, 15 May 2019 21:16:03 +0000 + + BESC + + + Click + here + to deploy this action. + + action parameter query "Color" with description "Please type in the CSS Color Code" With default "#2F4F4F" + +if {not exist folder "C:\Program Files (x86)\BigFix Enterprise\BES WebUI\WebUI\sites\WebUI Common_12049_51_1553129035\login-app\app\client\public\skins\skins"} +dos mkdir "C:\Program Files (x86)\BigFix Enterprise\BES WebUI\WebUI\sites\WebUI Common_12049_51_1553129035\login-app\app\client\public\skins\skins" + +endif + +action uses wow64 redirection false +delete __createfile +Createfile until END_OF_FILE + +.container .login-container .login-box {{ + background: {parameter "Color" of action}; +} + +.container .login-container .login-image-section div img {{ + padding-top: 10%; + height: 100%; + width: 115%; + opacity: 0.5; + background-image: url('Custom.jpg') +} + +END_OF_FILE + +delete "C:\Program Files (x86)\BigFix Enterprise\BES WebUI\WebUI\sites\WebUI Common_12049_51_1553129035\login-app\app\client\public\skins\skins\custom.css" +move __createfile "C:\Program Files (x86)\BigFix Enterprise\BES WebUI\WebUI\sites\WebUI Common_12049_51_1553129035\login-app\app\client\public\skins\skins\custom.css" + +delete __createfile + + +setting "_WebUIAppEnv_SKIN_DEFAULT_DIR"="0" on "{parameter "action issue date" of action}" for client +setting "_WebUIAppEnv_SKIN_DEFAULT_FILE"="custom.css" on "{parameter "action issue date" of action}" for client + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/broadcast message at bigfix install - _nix (24646).bes b/Sites/BigFix Management/Fixlets/Fixlets/broadcast message at bigfix install - _nix (24646).bes new file mode 100644 index 000000000..9408f614b --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/broadcast message at bigfix install - _nix (24646).bes @@ -0,0 +1,39 @@ + + + + + broadcast message at bigfix install - *nix + + exists files "/usr/bin/wall" + + Internal + jgstew + 2017-09-26 + + x-fixlet-modification-time + Tue, 26 Sep 2017 20:34:38 +0000 + + BESC + + + Click + here + to deploy this action. + + + + + diff --git a/Sites/BigFix Management/Fixlets/Fixlets/fixlet pausing for 5 minutes (24354).bes b/Sites/BigFix Management/Fixlets/Fixlets/fixlet pausing for 5 minutes (24354).bes new file mode 100644 index 000000000..a02978210 --- /dev/null +++ b/Sites/BigFix Management/Fixlets/Fixlets/fixlet pausing for 5 minutes (24354).bes @@ -0,0 +1,38 @@ + + + + + fixlet pausing for 5 minutes + fixlet that pauses for 5 minutes + windows of operating system + Internal + 2014-04-11 + + x-fixlet-modification-time + Thu, 18 May 2017 19:41:29 +0000 + + BESC + + + Click + here + to deploy this action. + + C:\pio.txt +pause while {(now - ((parameter "adesso") as time)) < 5 * minute } +dos time /T >> C:\pio.txt]]> + + + +