Library Pack Header

A lack of visibility into device compliance can quickly escalate into device performance issues, employee frustrations and put the wider organization at risk.\n\nThe Manage Configuration Drift pack allows you to track, detect and remediate devices in your landscape that have \"drifted\" from a defined compliance baseline.\n\nAn overview dashboard provides an at-a-glance view of your overall compliance state, while 4 additional dashboards monitor the software, services, files and registry entries on every device in your estate, allowing you to drill-down into the source of configuration drifts. You can then remediate any identified non-compliant devices using the automated or manual remediations included in the pack.\n\nThis pack is vital for Compliance Managers and EUC leads who wish to keep an eye on the overall compliance of their estate. IT Service Desk teams can also massively benefit from it by effortlessly carrying out necessary fixes at scale.

Manage Configuration Drift

Modifies or creates a String, Binary, DWORD or QWORD value on the Windows Registry.

Full registry key path. Root of registry keys should be provided as a fully-qualified name (Registry::HKEY_LOCAL_MACHINE\...), the full name (HKEY_LOCAL_MACHINE) or an abbreviation (HKLM, HKCU, HKU)

Registry key

Value name

Value to be set. If ValueType is Binary, it should be a positive hexadecimal value with even digits. Eg. 'A4789F', 'A4 78 9F'. If ValueType is a DWORD, the value should be a positive 32-bit number. It can be decimal or hexadecimal if it is preceded by '0x'. Eg. '345', '0xA76D9E'. If ValueType is a QWORD, the value should be a positive 64-bit number. It can be decimal or hexadecimal if it is preceded by '0x'. Eg. '345981694', '0xA76D9EF78'

Value

Type of the Registry Key value to be created or modified. Accepted values are String, Binary, DWORD or QWORD

Value type

Set Windows Registry key value

VM Windows 7 x64 (Multi-language) - VM Windows 10 x86/x64 (Multi-language) (1803/1809/1903)

Compares a defined configuration in the input XML file with the device current configuration and displays whether it is compliant with it or not.\nLists the non compliant items and the file size, checksum and last write time information of all found files.

Maximum random delay set to avoid network overload. Provide number of seconds lower than 600

Maximum delay in seconds

UNC Path where the XML Configuration file is located. Example":" \\\\server\\SharedFolder\\configuration.xml"

Configuration file path

Get configuration drift

Whether all categories are compliant or not (Yes/No)

Overall compliance

Whether all the Windows Registry items in the provided XML configuration file are compliant or not (Yes/No)

Registry compliance

Whether all the Windows Services items in the provided XML configuration file are compliant or not (Yes/No)

Services compliance

Whether all the Files and Directories items in the provided XML configuration file are compliant or not (Yes/No)

Files directories compliance

List of Windows Registry paths which were not found

Registry path not found items

List of Windows Registry properties paths whose properties did not match criteria supplied

Registry property not found items

List of Windows Registry properties paths whose type did not match criteria supplied

Registry property type non compliant items

List of Windows Registry properties paths whose value did not match criteria supplied

Registry value non compliant items

List of Windows Services names which were not found

Service not found items

List of Windows Services names whose startup type did not match criteria supplied

Services startup type non compliant items

List of Windows Services names whose current state did not match criteria supplied

Service current status non compliant items

List of Files and Directories paths which were not found

File directory not found items

List of Files whose SHA256 checksum did not match criteria supplied

File checksum non compliant items

List of the File's size of each found file in KB

File size items

List of the File's SHA256 checksum of each found file

File checksum items

List of the File's last modification date of each found file

File last modified items

VM Windows 10 x86/x64 (Multi-language) (1803/1809/1903)

The script enables the modification of the status and startup type of one or multiple services, which are provided as input. Useful for enforcing the expected status of critical services (e.g. Antivirus, SCCM agent, core business applications, etc.) in accordance with corporate policies.

The service (or comma-separated list of services) whose status or startup type will be modified. Service names are case-insensitive

Service name

The action (or comma-separated list of actions) to apply to the status of the specified service (or comma-separated list of services)

Status change

The startup type (or comma-separated list of startup types) to apply to the specified service (or comma-separated list of services)

Set startup type to

Set service information

Name, status, and startup type of the requested service (or list of services) before and after the change

Updated service status

This Remote Action enables administrators to remotely restart a specified service on a device, ensuring system stability and performance. \n\nAdditionally, service names that need to be restarted must be specified explicitly and should not include wildcard characters.\n\nIt includes a blocklist of critical services that are restricted from being restarted, preventing any unintended disruptions.\n\nThis includes the following services:\n    'DCOM Server Process Launcher', 'Remote Procedure Call (RPC)','Windows Time','Security Accounts Manager',\n    'CNG Key Isolation','Credential Manager','Cryptographic Services','WaaSMedicSvc','Client License Service (ClipSVC)',\n    'AppX Deployment Service (AppXSVC)','Group Policy Client','Security Center','SSDP Discovery','SysMain','Nexthink Coordinator'.

Name of the service to be restarted, no wildcards accepted

Manage Configuration Drift

Description

Versions

Content

Required Products

Platforms

Compatibility