ControlUp Community

Connect, Learn, and Grow

Microsoft Windows Related Training & Support Archives

Microsoft Windows training and support-related archives from inside the ControlUp Community on Slack.

How to Create Triggers for MS Defender Endpoint Scripts in ControlUp

Posted on

A user created a PowerShell script to check if a machine is running MS Defender Endpoint in EDR Block Mode and asked about setting up a trigger for alerts. Another user suggested using event log entries to trigger actions, citing a thread discussing it on the ControlUp Community Slack. The original script is provided in the discussion for reference and the user updates it to address false positive reports. The final version of the script is tested and confirmed to work.

Read the entire article here...

Using ControlUp Triggers to Restart VMs with Pending Updates in Citrix

Posted on

There is a question about using ControlUp Triggers to restart a VM when the user count reaches 0. There is a trigger set up to check the user session and reboot, but the check pending update condition is not working. It is clarified that the update referred to is for a master/golden image for Citrix. The CVAD pending image update column is suggested as a possible solution. A screenshot is provided for reference.

Read the entire article here...

Dealing with a Compliance Alert in ControlUp

Posted on

A user received a compliance alert about the "built-in" local Windows administrator account being in the local administrators group, which is a default and mandatory setting. There was discussion about how to deal with this issue and suggestions were made to check and exclude items in the scanning template. One user suggested that the setting could be more useful if it could identify other accounts and ignore the built-in "administrator" account. The issue was passed on to the secure DX PM.

Read the entire article here...

Uninstalling ControlUp Agent Using Powershell

Posted on

A user asked for guidance on uninstalling an agent from an on-premises architecture using Powershell and CUP version 8.8. The solution suggested by another user was to access the registry at "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ControlUpAgent" to find the uninstall string and remove the agent. No ControlUp URLs were mentioned.

Read the entire article here...

Setting Up Alerts for SQL Always On Availability Group Failovers

Posted on

A user asked for help with setting up an alert for a customer's SQL Always On Availability Group. Suggestions were made to use a PowerShell script or a scheduled trigger using the Edge DX agent. It was eventually resolved with the use of a PowerShell script that runs every 5 minutes and checks event logs for specific event IDs. No incidents are generated due to the potential scale of scheduled triggers.

Read the entire article here...

BSOD Events in ControlUp and How to Investigate Them

Posted on

A user asked about BSOD events in ControlUp and shared that they have around 700 devices and 3-5 BSOD events per day. Another user suggested using the BSOD analysis script from the library to get more detailed information. After looking into the reported BSOD event, it was unclear if it was an actual BSOD or just a minidump. The user wanted this issue resolved and was willing to provide any necessary information. The power events tab in ControlUp can be checked to see if a machine rebooted during a reported BSOD event. The user was unsure if the machine had automatically rebooted when the user was not at their device.

Read the entire article here...

How to Troubleshoot ControlUp Monitor Script Actions Not Firing

Posted on

A user encountered an issue with script actions not firing as expected on a ControlUp Moniter. This led to a discussion on potential solutions and troubleshooting steps, including checking the script location and examining monitor logs. The user ultimately decided to look into the issue further when they have access to the customer environment. Troubleshooting steps and suggestions were provided by other members in the Slack discussion.

Read the entire article here...