Cb Protection - Identify endpoints with agent not running
Log In or Register to download the BES file, and more.

0 Votes

Description

This Fixlet will become relevant on endpoints where the Cb Protection Agent is installed, but not currently running.  Use it within a policy action to ensure the agent stays running.

Property Details

ID21661
StatusProduction - Fully Tested and Ready for Production
TitleCb Protection - Identify endpoints with agent not running
CategoryApplication Maintenance
SourceCarbon Black
Source SeverityCritical
Source Release Date1/21/2016 12:00:00 AM
KeywordsIBM BigFix & Carbon Black Integration Content
Added by on 9/16/2016 11:50:35 AM
Last Modified by on 9/16/2016 11:56:27 AM
Counters 8168 Views / 139 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 0 ratings. ** Log In or Register to add your rating.

Relevance

isWindows (Relevance 1172)
Used in 1152 fixlets and 538 analyses   * Results in a true/false
Show indented relevance
windows of operating system
Used in 77 fixlets and 6 analyses   * Results in a true/false
Show indented relevance
version of client >= "9.0"
Used in 1 fixlet   * Results in a true/false
Show indented relevance
exists keys whose (value "DisplayName" of it = "Bit9 Agent") of key "HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall" of registry
Used in 1 fixlet   * Results in a true/false
Show indented relevance
state of service whose (display name of it = "Bit9 Agent") = "Stopped"

Actions

Action 1 (default)

Action Link Click here to deploy this action.
Script Type BigFix Action Script
parameter "ServiceName" = "parity"

delete __appendfile
delete netquiet.bat

appendfile @ECHO OFF
appendfile start "" /min /b net %1 %2 /y > NUL 2> NUL
move __appendfile netquiet.bat

waithidden "{pathname of client folder of site "BESSupport" & "\RunQuiet.exe"}" netquiet.bat start "{parameter "ServiceName" of action}"

delete netquiet.bat
Success Criteria

This action will be considered successful when the applicability relevance evaluates to false.


Sharing

Social Media:
Share this page on Yammer

Comments

Log In or Register to leave comments!