Licensed
1E Verified
Copyright © 1E 2022 All Rights Reserved
Downloads
56
Endorsements
14
Components
122
Added
6 months ago
Last Updated
5 days ago
Compatibility
Client Supported - 23.11, 24.7, 9.0
OS Supported - Microsoft Windows
OS Supported - Microsoft Windows
Description
The QuickStart DEX Pack provides immediate improvements to digital employee experiences by offering pre-configured automations and instructions that quickly resolve common IT and user issues, reducing downtime and increasing productivity.
Key Features
- A package comprising of policies and instructions for Disk Management, MS Teams, Networking, Software Inventory, and Windows Operations.
- Measures Microsoft Teams call quality, including loss rate percent, latency, and jitter once, and on a regular basis to get a sense of the call quality baseline.
- Performs auto clean-up action to free disk space on target systems.
- Retrieves a comprehensive list of applications installed on a specific computer or across multiple computers, which can assist in identifying any unauthorized software usage, as well as provide details such as installation count, usage, and version information.
- Instructions to ascertain the behaviour of network-related settings and peripherals on the device.
Setup
- Upload this DEXPack with the help of the Product Pack Deployment Tool.
- An Endpoint Automation Policy named Microsoft Teams and Disk Management will be created.
- Instruction sets named MS Teams, Disk Management, Network, Software Inventory and
Windows Operations containing all the instructions will be created.
Categories
Microsoft Teams:
- Rule "Microsoft Teams - Network Assessment Tool gather"
will store the information on the end user's computer that will be used to identify a Teams audio call network, jitter latency issue and loss of percentage. - Rule “Microsoft Teams - Reset audio when audiodg.exe crashes” This rule helps to restart the Windows Audio service when audiodg.exe crashes to avoid Teams audio issues
- For more details about all the rules, please refer Microsoft Teams V2
- It also contains instructions that helps in deploying the tool that gathers the audio call test results and perform activities on end user device like cache clean-up and read teams logs.
- For more details about all the instructions, please refer Microsoft Teams V2
Disk Management:
- Rule "Disk Management - Auto clear disk space” auto deletes files from temp folder and recycle bin.
- Rule “Disk Management - Manual clear disk space" provides a prompt to end user to accept/decline the auto deletion on files from temp folder and recycle bin.
- It also contains instructions that helps providing data from end user device like display Top n largest file, returns machines that have less than n GB disk space available,
Initiate defragmentation, clear Nomad cache files and set and display shadow storage. - For more details about all the instructions, please refer Disk Space Management
Software Inventory:
- It contains instruction that fetches a detailed list of applications installed on a specific computer or a group of computers, which can help you to find out if any of them are using unauthorized software.
- Details of software like install count, usage, version details etc.
- Perform Uninstall applications from end user computer.
- For more details about all the instructions, please refer Software Inventory
Network:
- It contains instruction that can perform network related activates like changes in host file, List Outbound TCP connections, Show all outward connections from a device.
- Provides the current ISP name of end-user device, DHCP and DNS related information etc.
- Perform basic network related troubleshooting like release/renew IP and check response time from a URL/Hostname.
- For more details about all the instructions, please refer Network
Windows Operations:
- It contains instruction that can perform registry backup, run command on a device.
- Trigger scheduled reboot on a device and update group policy and fetch the windows event log.
- Enable USB access, Set Audit polices and log off an idle user etc.
- For more details about all the instructions, please refer Windows Operations
Components
1E-Exchange-WinDir
INSTRUCTION
Description
Lists the folder that Windows is installed in.
Readable Payload
Get the Windows Root Directory
1E-Exchange-SetComputerDescription
INSTRUCTION
Description
Sets or changes the computer description to specified description
Readable Payload
Set the computer description to %Description%
1E-Exchange-SetDefaultDrive
INSTRUCTION
Description
Set specified drive as the default for command prompts
Readable Payload
Set drive %DriverLetter% as the default for command prompts
1E-Exchange-SetTimeSources
INSTRUCTION
Description
Sets the NTP Time sources for Windows machines
Readable Payload
Set NTP Time server sources to %NTPTimeSources%
1E-Exchange-SetUSBAccess
INSTRUCTION
Description
Enable USB Read/Write permission, if user does not have any access even after raising permission request
Readable Payload
Allow read/write access of USB
1E-Exchange-SetVirtualMemory
INSTRUCTION
Description
Sets the virtual memory size after restart of end-user machine. This instruction notifies the end-user to restart the machine to make the changes.
Readable Payload
Set the C Drive Virtual memory size from initial size %InitialSizeMB%MB to maximum size %MaximumSizeMB%MB. It will ask for restart if user is logged in.
1E-Exchange-ShowLastStatus
INSTRUCTION
Description
Show last restore point status
Readable Payload
Get status of last restore point action
1E-Exchange-SyslogTest
INSTRUCTION
Description
Write and send a Syslog message to the specified SyslogServerUrl as specified facility.
Readable Payload
Send syslog message to %syslogServerUrl% as %facility%
1E-Exchange-UpdateGroupPolicy
INSTRUCTION
Description
Invoke/Run the Gpupdate utility to apply the group policy
Readable Payload
Invoke the GPupdate utility and message the user for restart required to apply the changes.
1E-Exchange-OpenStartUpWindow
INSTRUCTION
Description
Open start-up apps window so that end-users can decide which apps to disable. This might help with reducing boot times.
Readable Payload
Open start-up apps window
1E-Exchange-LogOffIdleUser
INSTRUCTION
Description
Log off all idle users who have been idle for more than the specified minutes. Windows only. (Warning: This will log off device and unsaved data might be lost).
Readable Payload
Log off users who have been idle for more than %minutes% minutes. (Warning: This will log off device and unsaved data might be lost).
1E-Exchange-ProductInstalledWithProcessLaunchDetailFullDetail
INSTRUCTION
Description
Show list of versioned executables which have been launched in the last %DaysBack% days, what launched them, and the current version of that executable on disk
Readable Payload
Identify if %Product% is installed and show list of versioned %ExecutableName% files which have been launched in the last %DaysBack% days, what launched them, and the current version of that executable on disk
1E-Exchange-Question-ProcessStabilizationLive
INSTRUCTION
Description
Read process stabilization live
Readable Payload
Read process stabilization live (processes to monitor must be added to the 1E.Client.conf)
1E-Exchange-Question-WindowsLocation
INSTRUCTION
Description
Returns longitude and latitude location of the device along with a link to Google Maps showing the location
Readable Payload
Windows endpoint location
1E-Exchange-RebootSystem
INSTRUCTION
Description
Show custom message to user to Schedules a reboot in seconds.CAUTION: DO NOT RUN AGAINST ALL SYSTEMS.
Readable Payload
Reboot device in %RebootTimeInSeconds% seconds and %action% the message %message% to user.
1E-Exchange-RegisterCOMdlls
INSTRUCTION
Description
Instruction will re-register the dll files to fix the COM Surrogate error message pop up
Readable Payload
Apply fix for the COM process issue
1E-Exchange-ResolveNoDiskInDriveError
INSTRUCTION
Description
Removes the No Disk In Drive error message by modifying the value of ErrorMode registry for windows
Readable Payload
Apply fix for the No Disk In Drive error message
1E-Exchange-RestartExplorer
INSTRUCTION
Description
Restart the Windows Explorer process
Readable Payload
Refresh Windows Explorer
1E-Exchange-Run-CheckDisk
INSTRUCTION
Description
Run Check Disk on C: drive
Readable Payload
Run Check Disk
1E-Exchange-Run-SystemScan
INSTRUCTION
Description
This instruction scans end-user device for issues where Microsoft Console based script host has stopped working.
Readable Payload
Run system scan
1E-Exchange-RunBasicDiagnosis
INSTRUCTION
Description
Get logged in user account status and password expiry information. This also checks whether device is connected to internet by wi-fi, wired or Cisco AnyConnect VPN. Available disk space is also determined
Readable Payload
Get logged-in user account status, device connectivity, proxy info and available disk space
1E-Exchange-RunCommand
INSTRUCTION
Description
This instruction allows admin to run any command on the endpoint as a logged in user or under system context. It is recommended that admins use this instruction cautiously and keep the usage under control using RBAC
Readable Payload
Caution: Run a command line %cmdline% using %RunAs% user.
1E-Exchange-RunPowerShellCommand
INSTRUCTION
Description
This instruction allows admin to run any command on the endpoint as a logged in user or under system context. It is recommended that admins use this instruction cautiously and keep the usage under control using RBAC
Readable Payload
Caution: Run PowerShell command line %cmdline% using %RunAs% user.
1E-Exchange-SetAuditPolicies
INSTRUCTION
Description
Sets the chosen Windows Audit policy to the state required
Readable Payload
Set audit policy %AuditPolicy% to state %SetState%
1E-Exchange-ListWhitelistRegistry
INSTRUCTION
Description
Provides the list of whitelisted applications mentioned under RestrictRun registry key.
Readable Payload
List applications whitelisting rules for %Username% from Registry.
1E-Exchange-EnablePinToStart
INSTRUCTION
Description
Enable Pin to start Windows option in explorer.
Readable Payload
Enable Pin to start Windows.
1E-Exchange-EventLogInfo
INSTRUCTION
Description
Event log info
Readable Payload
Windows Event log info. Event log %Eventlog%, event source %Source%, event ID %EventID%, number of events to return %Numberofeventstoreturn%
1E-Exchange-FastStartupWin10
INSTRUCTION
Description
This instruction provides the flexibility to enable or disable the Fast startup option in windows 10 devices
Readable Payload
%EnableOrDisable% Fast Startup setting in Windows 10
1E-Exchange-ForceTimeResync
INSTRUCTION
Description
Forces a time resync by controlling w32time service and executing resync command.
Readable Payload
Perform a TimeSync
1E-Exchange-GetFileContentByFileName
INSTRUCTION
Description
Returns the content of a specified file name. This will search all fixed disks for matching files and will take some time. This may return a lot of data.
Readable Payload
What is the content of %fileName% regardless of path?
1E-Exchange-GetLocaleSetting
INSTRUCTION
Description
Get the User locale and system OS locale setting
Readable Payload
Get the user Locale and system Locale setting
1E-Exchange-GetPrintJobDetails
INSTRUCTION
Description
List active print job details such as document name, job status, pagesprinted etc., from print queue for the specified printer.
Readable Payload
List active print job details for %printer% printer.
1E-Exchange-GetTimeZone
INSTRUCTION
Description
Provides Time Zone, Local Date Time, UTC Time, Standard Name, Time Zone Bias information for Windows devices only.
Readable Payload
List TimeZone information.
1E-Exchange-GraphOSInstallDateWithUserDetails
INSTRUCTION
Description
It shows the graph illustrating when the OS was installed on the device along with the current user details.
Readable Payload
Graph about the OS Install Date and provide user details.
1E-Exchange-GraphResourceDetails
INSTRUCTION
Description
Shows data on resource consumption for the past 24 hours, I/O, RAM, Processor, Network
Readable Payload
Graph Process Resource Consumption (CPU/Memory/Disk/Network) per hour for the past 24 hours and show difference from average (over past 30 days)
1E-Exchange-GraphWindowsComponentState
INSTRUCTION
Description
List of Windows Components. It uses feature listing via DISM to list status of Windows Components (Windows Only).
Readable Payload
Show the status of all Windows Components
1E-Exchange-Install-IIS
INSTRUCTION
Description
Install the IIS Windows feature
Readable Payload
Install IIS
1E-Exchange-InstalledUsbDevices
INSTRUCTION
Description
Returns details of installed USB devices. Windows only.
Readable Payload
Get the details of installed USB devices
1E-Exchange-ListAuditPolicies
INSTRUCTION
Description
Provides a list of group policies for a specified audit policy.
Readable Payload
List audit policies from Windows for type %AuditPolicy%
1E-Exchange-ListDomainJoinStatus
INSTRUCTION
Description
List Domain Join Status of local device including hybrid and Azure AD. it gives the error code related to domain join.
Readable Payload
Get Domain Join Status of local device including hybrid and Azure AD
1E-Exchange-BackupRegistry
INSTRUCTION
Description
Backup the specified registry key to temp folder. Backup file name will be the child key name.
Readable Payload
Backup the registry %RegPath% to file
1E-Exchange-DayLightSavingsConfiguration
INSTRUCTION
Description
Group devices by the current registry keys for Daylight Savings Time (DST) configuration status and Automatic Time Zone
Readable Payload
Get the configuration of Daylight Saving Time (DST) and Automatic Time Zone.
1E-Exchange-CountTimeSources
INSTRUCTION
Description
Groups machines by the number of NTP time sources and provides details of the NTP peers set. Windows only.
Readable Payload
List devices grouped by count of NTP peer sources
1E-Exchange-CountOSInstalled
INSTRUCTION
Description
Returns a count of all distinct Operating Systems with Version. Virtualization platform details are also provided for each Tachyon-connected device
Readable Payload
How many devices are connected (group by OS)
1E-Exchange-ConfigureKMSinWindows10
INSTRUCTION
Description
Run command to configure KMS in Windows 10
Readable Payload
Configure KMS in Windows 10
1E-Exchange-CleanupPrintSpooler
INSTRUCTION
Description
Print Spooler Cleanup
Readable Payload
Print Spooler Cleanup
1E-Exchange-CheckWindows10LicenseExpiration
INSTRUCTION
Description
Provide information of Windows license expiry date
Readable Payload
Get Windows license expiry date
1E-Exchange-UninstallCitrix
INSTRUCTION
Description
Clean uninstallation of Citrix workspace using TrolleyExpress.exe
Readable Payload
Clean uninstall Citrix workspace
1E-Exchange-UninstallCiscoWebEx
INSTRUCTION
Description
Clean uninstallation of Cisco WebEx and removes all Cisco Webex Meetings related folders and files (including Webex Access Anywhere (AA), Remote Access Agent (RA), Webex Recorder, Productivity Tools and Player. Remove files requires Outlook to be closed
Readable Payload
Uninstall CiscoWebEx and %Remove% all Cisco Webex Meetings related folders and files
1E-Exchange-UninstallApplicationAndDelete
INSTRUCTION
Description
Uninstall an application- 1 by providing only the application name, which will automatically use the uninstall string from the system registry or 2 by providing the application name as well as the uninstall string. In any case, you can choose to either notify the end-user or not.
Readable Payload
Uninstall application %AppName% using silent uninstall string %UninstallString% and notify user %notifyUser% to reboot the machine. %FileorFolderPath% file or directory path to delete.
1E-Exchange-UninstallApplication
INSTRUCTION
Description
Uninstall an application - 1 by providing only the application name, which will automatically use the uninstall string from the system registry 2 by providing the application name as well as the uninstall string. In any case you can choose to either notify the end-user or not.
Readable Payload
Uninstall Application %AppName% using silent uninstall string %UninstallString% and %notifyUser% to reboot the machine.
1E-Exchange-UninstallAdobeFlash
INSTRUCTION
Description
Uninstall Adobe flash completely and remove all associated files. (Warning: This will delete all files from flash related folders).
Readable Payload
Uninstall Adobe Flash and remove all related files.
1E-Exchange-Trigger-ApplicationFromSoftwareCenter
INSTRUCTION
Description
Trigger specified packageId package or task sequence Installation from the software center. Application/Package must be available for installation in software center.
Readable Payload
Trigger the package or task sequence %PackageId% from software center
1E-Exchange-SWIDTagGroup
INSTRUCTION
Description
Groups application details from ISO 19770-2 Software ID tags
Readable Payload
Group devices by SWID Tag file
1E-Exchange-ProcessCalledByAnotherProcessFullDetail
INSTRUCTION
Description
Show list of versioned %ExeName% executables which have been launched in the last %DaysBack% days, what launched them, and the current version of that executable on disk
Readable Payload
Show list of versioned %ExeName% executables which have been launched in the last %DaysBack% days, what launched them, and the current version of that executable on disk
1E-Exchange-SoftwareOverTime
INSTRUCTION
Description
Provides install and uninstall graphs/data for software over time. Useful for showing the speed of deployment for software or patches in an environment.
Readable Payload
Show software installations over the past %numDays% days
1E-Exchange-SoftwareInstallandUsage
INSTRUCTION
Description
Shows the installation date for specified publisher and product with the last execution time of specific executable.
Readable Payload
List Installation date for %Publisher% and %Product% with last execution of %Exe%
1E-Exchange-Check-ProductInstalled
INSTRUCTION
Description
Checks if a specified product is installed on the machines or not and provide the details.
Readable Payload
Find if product %SoftwareName% is installed or not
1E-Exchange-ListMSSoftwares
INSTRUCTION
Description
Return the list of Microsoft publisher installed software
Readable Payload
List the installed Microsoft applications
1E-Exchange-Inventory-Software
INSTRUCTION
Description
Retrieve the detailed Software inventory for SLA while staggering for the specified time in seconds.
Readable Payload
Inventory: What software is installed? With a stagger of %limitSecs% seconds
1E-Exchange-Inventory-FileUsageSummary
INSTRUCTION
Description
Retrieve the summary of file usage data inventory for SLA from the specified start date while staggering for the specified time in seconds.
Readable Payload
Inventory: What is the summary of file usage since %startDate%? With a stagger of %limitSecs% seconds
1E-Exchange-InstalledProductVersionsByPublisher
INSTRUCTION
Description
Graphs versions of installed applications published by specified vendor.Product and publisher parameters are wild-carded and are case insensitive.
Readable Payload
Graph software titles matching %product% by %publisher%
1E-Exchange-InstallApplicationFromUNCPath
INSTRUCTION
Description
Deploy the Package with the provided command line from given UNC Path and user for the end-user device.
Readable Payload
Install Application from %UNCPath% with %CmdLine%
1E-Exchange-Install-ApplicationFromSoftwareCenter
INSTRUCTION
Description
This instruction triggers the application installation from the software center. The application must already be available for installation in the software center.
Readable Payload
Install the %ApplicationName% from software center
1E-Exchange-CountSWVersions
INSTRUCTION
Description
Retrieve aggregated software information including distinct application Vendors (Publisher), Titles (Products), Versions and their count for each end-user device.
Readable Payload
How many software titles are installed (group by version)
1E-Exchange-CountSWTitles
INSTRUCTION
Description
Retrieve aggregated software information including distinct application Vendors (Publisher), Titles (Products) and their count for each end-user device.
Readable Payload
How many software titles are installed (group by title)
1E-Exchange-WiFiIPDefault
INSTRUCTION
Description
Indicates which endpoints have WiFi as their default path to the network and internet. Searches through the list of Network Interface Cards (NICs) in each Windows endpoint using WMI, then enumerates Manufacturer, Description and IP Address of each WiFi card.
Readable Payload
Group endpoints based on WiFi being the default network.
1E-Exchange-NetworkSpeed
INSTRUCTION
Description
Provides a list of network adapters, driver details and link speed. Very useful in migrations or WSS scenarios.
Readable Payload
List of Network Adapters with Link Speed
1E-Exchange-PassiveDiscovery
INSTRUCTION
Description
Passive Discovery - takes data from the activity record to show the devices outbound connections are most frequently made to.
Readable Payload
Show devices grouped by frequent connections to IP address - passive discovery
1E-Exchange-PortProcess
INSTRUCTION
Description
Returns listening TCP ports and related processes
Readable Payload
Show machines listening on port %Port% and related processes in group
1E-Exchange-ProcConn
INSTRUCTION
Description
Provides a list of network connections for the process selected
Readable Payload
List network connections for process %ProcessName%
1E-Exchange-Question-NetworkStats
INSTRUCTION
Description
Measures link speed, wifi signal strength, local default gateway, ISP average latency and website %URL% access total time. Stores in local storage 'networkstats'
Readable Payload
Measures link speed, wifi signal strength, local default gateway, ISP average latency and website %URL% access total time. Stores in local storage 'networkstats'. Return %Options% results.
1E-Exchange-ReleaseRenewIP
INSTRUCTION
Description
This instruction performs the actions of releasing and renewing an IP address on target devices
Readable Payload
Release and Renew an IP Address
1E-Exchange-ResponseTDNVariable
INSTRUCTION
Description
Returns the current response time for a defined URL along with average response and deviation from norm as a factor to assess perception of performance
Readable Payload
Graph network response speed endpoint perception for %URL%
1E-Exchange-ScanPortsOnDevices
INSTRUCTION
Description
Discovery instruction that scans a port and IP range
Readable Payload
Port scan one of the following %IPRanges% on ports %Ports% with a concurrency of %ConcurrentIps% across IPs and a wait of %WaitPerPortMs%ms (and a timeout of %TimeoutPerPortMs%) if the device has an IP in %IPs%
1E-Exchange-SendArpRequest
INSTRUCTION
Description
Sends an arp request to the subnet for a given IP. Returns the MAC address of the specified IP if a response is recieved.
Readable Payload
Send an ARP request to %RequestIps% if the device has an IP in %IPs%
1E-Exchange-TracertTime
INSTRUCTION
Description
Returns the reponse time in ms for each traceroute/tracert hop the endpoint makes to get a response from the specified host. Wait timeout for each hop is 1000 ms.
Readable Payload
Check traceroute response time for host %target%
1E-Exchange-TurnOffMeteredConnection
INSTRUCTION
Description
Turn off metered network connection for wifi and mobile broadband connections.
Readable Payload
Turn metered connection state off
1E-Exchange-URLResponseTime
INSTRUCTION
Description
Returns the response time from the specified URI in ms for the end-user device
Readable Payload
Check website response time in milliseconds for URI %URI%
1E-Exchange-WiFiIP
INSTRUCTION
Description
Searches through the list of Network Interface Cards (NICs) in each Windows endpoint using WMI, then enumerates Manufacturer, Description and IP Address of each WiFi card
Readable Payload
Group endpoints by WiFi adapter(s) and list IP address of WiFi adapter(s)
1E-Exchange-Latency
INSTRUCTION
Description
Creates a storage historic record of latency to specific target hosts
Readable Payload
List and record latency to host: %Hostname%
1E-Exchange-NetworkConnections
INSTRUCTION
Description
Discovery instruction that returns network connection details from given IP range machine in specified number of days.
Readable Payload
List network connections thats filters on %IpRange% in the last %NumDays% days
1E-Exchange-NetCategory
INSTRUCTION
Description
Provide details (name and username) of devices grouped by network connections.
Readable Payload
Group machines by Category (Domain, Private, Public) of network connections
1E-Exchange-IPConfig
INSTRUCTION
Description
Discovery instruction that returns network adapter configuration details
Readable Payload
Get the Network adapter configurations that filters on %IpRange%.
1E-Exchange-CurrentISP
INSTRUCTION
Description
Provides the current ISP name on end-user device
Readable Payload
Get the current ISP for a device
1E-Exchange-DeviceConnectivityStatus
INSTRUCTION
Description
Check whether device is connected to internet by wi-fi, wired or Cisco AnyConnect VPN
Readable Payload
Check internet connectivity of device
1E-Exchange-DHCPInfo
INSTRUCTION
Description
Provides IP Address, IP Subnet, Description, DNS Host Name, DHCP Server, DHCP Enabled, DHCP Lease Expires, DHCP Lease Obtained, DNS Domain, DNS Server Search Order and MAC Address. For Windows only.
Readable Payload
Get DHCP information with network adapter details
1E-Exchange-Discovery-ShowLocalUDPPorts
INSTRUCTION
Description
List all the UDP ports being listened upon by the services on device
Readable Payload
Discovery: Show local UDP listen ports
1E-Exchange-DnsLookupsGraph
INSTRUCTION
Description
Provides DNS Lookip historic data details from the activity record Fully Qualified Domain Name with date days and times
Readable Payload
List DNS FQDN Lookups from %Period% data for domain %domainName%
1E-Exchange-Enable-NetBIOS
INSTRUCTION
Description
Enables NetBIOS over TCP/IP for all active network adaptors.
Readable Payload
Enable NetBIOS over Tcpip
1E-Exchange-GetDNSValues
INSTRUCTION
Description
Collects the DNS Server settings configured on end-user device.
Readable Payload
What are the DNS servers on Windows devices?
1E-Exchange-GetHostfile
INSTRUCTION
Description
Returns the hostnames and IP Addresses from the hosts file
Readable Payload
List host file entries (if any) providing Host and IP
1E-Exchange-GetIPv4AdapterDefaultGateway
INSTRUCTION
Description
Lists name and default IPv4 gateway for each adapter on each device, optionally including the Disabled ones. Windows only.
Readable Payload
Get the default IPv4 gateways on the network adapters, %includingDisabled% disabled adapters.
1E-Exchange-GetListeningEndpoints
INSTRUCTION
Description
Get listening but currently inactive TCP and UDP connections, for IPv4 and also IPv6 if available. Windows, Linux and Mac only.
Readable Payload
List the TCP and UDP connections that are listening but are currently inactive.
1E-Exchange-GroupSSID
INSTRUCTION
Description
Provides details on WiFi signal, radio type, profile names, and network adaptors groups by interfaces connected to a given SSID and BSSID (SID GUID)
Readable Payload
Group Windows devices by SSID and provide WiFi speed and strength details
1E-Exchange-HostChanges
INSTRUCTION
Description
Identify and list the relevant details about changes to the host file, such as addition, modification etc. this will only list the changes made be 1E instruction
Readable Payload
List hostfile modifications
1E-Exchange-AddHostEntry
INSTRUCTION
Description
Adds the specified host name and IP address to hosts file present at end-user device
Readable Payload
Add Host %Hostname% with IP Address %IPAddress% to the hosts file
1E-Exchange-ConnectionsOutBound
INSTRUCTION
Description
Show all outward connections from a device.
Readable Payload
List all outbound connections made from devices.
1E-Exchange-CheckMeteredConnection
INSTRUCTION
Description
Check if the current connection is a Metered connection.
Readable Payload
Get the Metered connection status for connected wi-fi network
1E-Exchange-AR-TCP
INSTRUCTION
Description
Provides Outbound TCP network connection details from the activity record including IP Address, Port and ProcessName with date days and times
Readable Payload
List Outbound TCP connections from %Period% data
1E-Exchange-MSTeams-Action-CacheCleanup
INSTRUCTION
Description
Shows a list of the binary files in the executable folder of the 1E Client
Readable Payload
List deployed 1E Client binary files
1E-Exchange-MSTeams-Action-NewTeamsCacheCleanup
INSTRUCTION
Description
Cleanup MS New Teams cache files from all relevant folders such as application cache, cache, blob_storage, databases, GPUcache, IndexedDB, Local Storage and tmp._x000D_ _x000D_ This does NOT apply to Microsoft Teams Classic: EOL in July 1 2024_x000D_ _x000D_ Caution: This will close all opened MS New Teams processes and will delete cache files.
Readable Payload
Cleanup Microsoft New Teams cache and Show notification to user %ShowPopUp% for %PopUpTimeout% seconds if New Teams is running with Popup Message %MessageToCloseTeams%.
1E-Exchange-MSTeams-Action-TeamsNetworkAssesmentTool
INSTRUCTION
Description
Shows the list of data files (logs, databases, etc) created by the 1E client
Readable Payload
List 1E Client data files
1E-Exchange-MSTeams-GetCurrentStatus
INSTRUCTION
Description
Shows the full content of the 1E Client configuration file
Readable Payload
Show 1E Client configuration file content
1E-Exchange-MSTeams-GetNewTeamsLog
INSTRUCTION
Description
Get errors, warnings, etc. from for user's New Teams session. Windows machines only.
Readable Payload
Scan the Active Loggedin User's Microsoft NewTeams log for last %limit% %RegType% rows
1E-Exchange-MSTeams-ReadStoredTeamsNetworkData
INSTRUCTION
Description
Shows extensibility objects (modules and providers) loaded by the 1E Client
Readable Payload
Show 1E Client extensibility (modules and providers)
1E-Exchange-MSTeams-WhatLogsAreinNewMSTeams
INSTRUCTION
Description
Return a list New Microsoft Teams Log files for loggedin user
Readable Payload
Return the 10 most recent Microsoft New Teams (ms-teams.exe) Log files for actively loggedin user
1E-Exchange-Question-WindowsStartupApps
INSTRUCTION
Description
Shows list of tables in the 1E Client Inventory database, along with a row count per table
Readable Payload
List of inventory database tables
1E-Exchange-SetShadowStorage
INSTRUCTION
Description
Shows routing tables
Readable Payload
Routing table information
1E-Exchange-ShowShadowStorage
INSTRUCTION
Description
Returns a list of established TCP connections
Readable Payload
Established TCP connections
1E-Exchange-CheckFreeDiskSpace
INSTRUCTION
Description
Show disk drives, including hardware and usage information
Readable Payload
List disk drives
1E-Exchange-FreeDiskSpace
INSTRUCTION
Description
Shows system disk, CPU and memory usage per minute for the last one hour
Readable Payload
Hardware resource usage over time
1E-Exchange-FreeDiskSpaceWithNomadCacheClean
INSTRUCTION
Description
Show executable resource usage for a specific minute
Readable Payload
Resource usage by executable for %minute%
1E-Exchange-GetFolderFileSize
INSTRUCTION
Description
Shows the list of entries in the local ARP (Address Resolution Protocol) cache
Readable Payload
List entries in ARP cache
1E-Exchange-GetTopXLargestFiles
INSTRUCTION
Description
Shows network throughput on all adapters for the last hour
Readable Payload
Network throughput for last 60 minutes
1E-Exchange-LessThanNGbDisk
INSTRUCTION
Description
Shows entries from local DNS cache
Readable Payload
DNS cache entries
1E-Exchange-LessThanPercentDisk
INSTRUCTION
Description
Shows content of drivers/etc/hosts file
Readable Payload
Host file content (for DNS overrides)
1E-Exchange-LogicalDiskDetails
INSTRUCTION
Description
Returns the output from the native network interface configuration command (e.g. ipconfig or ifconfig)
Readable Payload
Network interface configuration
1E-Exchange-RunDefragment
INSTRUCTION
Description
Returns a list of processes which are listening for network connections
Readable Payload
Processes listening on TCP and UDP ports
1E-Exchange-MSTeams-Action-SetSkypeUsername
INSTRUCTION
Description
Shows the list of plug and play hardware devices (Windows only)
Readable Payload
List of hardware devices
Microsoft Teams
POLICY
Microsoft Teams monitoring and troubleshooting
Microsoft Teams - Fix teams crash issue (Rule)
Cleanup MS Teams cache files from all relevant folders to fix crash issue
1E-GuaranteedState-Check-TeamsApplicationCrashes (Check)
Check that the Teams application has not suffered more than %MaxCrashCount% crashes in the last %Days% days
1E-GuaranteedState-Precondition-Combined (Precondition)
Windows only. User logged in %Userloggedin%, 1E Client started and/or policy downloaded in last %1EClientXminutes% minutes. Check free disk %DiskspaceGBfree%. Don't run on device type %Devicetype%. Check if Storage exists %Storageexists% with value %Storagevalue%. Check if software installed %Softwareinstalled%. Check if OS is %DeviceOS%
1E-GuaranteedState-Fix-MSTeams-CacheCleanup (Fix)
Cleanup Microsoft Teams cache. Show %ShowPopUp% notification %MessageToCloseTeams% to user if Teams is running. Popup timeout seconds %TimeoutSeconds%
Microsoft Teams - Network Assessment Tool data cleanup (Rule)
Cleanup Teams Network Assessment Tool gathered info
1E-GuaranteedState-Check-StorageDataCleanup (Check)
Check metrics gathered in %Storagename% by Teams NetworkAssessmentTool is older than %noOfdays% days for cleanup.
1E-GuaranteedState-Fix-StorageDataCleanup (Fix)
Delete data from metrics gathered in %Storagename% by Teams Network Assessment Tool if it is older than %noOfdays% days
Microsoft Teams - Network Assessment Tool gather (Rule)
Run Teams Network Assessment Tool to gather jitter, loss rate, latency
1E-GuaranteedState-Check-FailToRunFix (Check)
Check failed with %Datamessage%
1E-GuaranteedState-Fix-TeamsNetworkAssesmentTool (Fix)
Run Microsoft Teams Network Assessment Tool to get loss rate, latency, jitter and store in %Storagename%.. To install provide; Installer Name %NetAssessmentExe%, Installer Size %NetAssessmentSize% and Installer SHA256 Hash %NetAssessmentHash%
Microsoft Teams - Network Assessment Tool jitter compliance (Rule)
Report compliance on Teams Network Assessment Tool gathered info - jitter
1E-GuaranteedState-Check-TeamsNetworkAssessmentToolAverageJitterMSThreshold (Check)
Check metrics gathered in %Storagename% by Teams Network Assessment Tool are below the threshold AverageJitterMS %Averagejitter% with %Options%
Microsoft Teams - Network Assessment Tool Latency compliance (Rule)
Report compliance on Teams Network Assessment Tool gathered info - Latency
1E-GuaranteedState-Check-TeamsNetworkAssessmentToolAverageLatencyMSThreshold (Check)
Check metrics gathered in %Storagename% by Teams Network Assessment Tool are below the threshold AverageLatencyMS %Averagelatency% with %Options%
Microsoft Teams - Network Assessment Tool loss percentage (Rule)
Report compliance on Teams Network Assessment Tool gathered info - loss rate
1E-GuaranteedState-Check-TeamsNetworkAssessmentToolAveragelossrateThreshold (Check)
Check metrics gathered in %Storagename% by Teams Network Assessment Tool are below the threshold Averagelossrate %Averagelossrate% with %Options%
Microsoft Teams - Enable Teams addin in Outlook (Rule)
Enable the Teams addin in Outlook
1E-GuaranteedState-Check-Teams-Outlook-Addin-ListAddins (Check)
Check Outlook addins %AddinsList% and their LoadBehavior %LoadBehavior%
1E-GuaranteedState-Fix-Outlook-Addin-SetAddinLoadBehavior (Fix)
Set Outlook addin load behavior to LoadBehavior %LoadBehavior% for the addins named IncludeList %IncludeList%
Microsoft Teams - Reset audio when audiodg.exe crashes (Rule)
Restarts the Windows Audio service when audiodg.exe crashes to avoid Teams issues
1E-GuaranteedState-Check-Service-State (Check)
Check the %ServiceName% service is in %State% state
1E-GuaranteedState-General-Fix-ServiceState (Fix)
Request service "%serviceName%" to %action%
Disk Management
POLICY
Disk Management like, Clear disk space, etc
Disk Management - Manual clear disk space (Rule)
Manual clear disk space as per user choice
1E-GuaranteedState-Check-Service-Exists (Check)
Check that %ServiceName% service exists
1E-GuaranteedState-Fix-DiskManualClearSpace (Fix)
Display user interaction question: %Interactionquestion%, description:%Interactiondescription%, interaction button color %Interactioncolor%, timeout seconds: %Interactiontimeoutseconds% with a list of folders %folders% they can optionally delete files in to clear disk space. Manual disk space clear trigger %trigger%
Disk Management - Auto clear disk space (Rule)
Auto clear disk space as per user choice
1E-GuaranteedState-Check-FreeDiskSpace (Check)
Check the Free Disk space %CheckType% is at least %CheckVal%.
1E-GuaranteedState-Precondition-MultipleConditions (Precondition)
Multiple Preconditions - _x000D_ Check if user logged in %Userloggedin%,_x000D_ Check 1E Client started and/or policy downloaded in last %1EClientXminutes% minutes,_x000D_ Check free disk %DiskspaceGBfree%,_x000D_ Don't run on device type %Devicetype%, _x000D_ Check if 1E Client storage exists %Storageexists% with value %Storagevalue%,_x000D_ Check if software installed %Softwareinstalled%,_x000D_ Check if OS is %DeviceOS%,_x000D_ Check if %PhysicalorVirtual%,_x000D_ Check Windows service exists %serviceName%
1E-GuaranteedState-Fix-DiskAutoClearSpace (Fix)
Show user interaction %Showuserinteraction%_x000D_ Display user interaction question: %Interactionquestion%, description:%Interactiondescription%, interaction choices %manualDelete% or %autoDelete%, interaction button color %Interactioncolor%, timeout seconds: %Interactiontimeoutseconds% with a list of folders %folders% they can optionally delete files in to clear disk space. Manual disk space clear trigger %trigger%