The scripts in this library come from a variety of sources, including partners and other third parties. While N-able performs initial testing on these scripts, we do not regularly or permanently monitor these scripts, and therefore, we cannot make any guarantees about third-party content. By downloading or using any of these scripts, you agree that they are provided AS IS without warranty of any kind and we expressly disclaim all implied warranties including warranties of merchantability or of fitness for a particular purpose. In no event shall N-able or any other party be liable for any damages arising out of the use of or inability to use these scripts.

N-able suggests as a best practice that scripts should be tested on non-production environments.

Workstation Daily Maintenance

Last Modified Date

5/3/2022 3:24 PM

Description

Note : This AMP was created with help from Brett Dawson at NetEffect, as well as Dean Sartin from Aztech IT. Thank you both !

This policy is meant to be run periodically (daily is recommended) to ensure that workstations are up to their basic secure configuration.

The policy does the following :

- Enables UAC
- Flushes DNS
- Set PowerShell to remotesigned
- Disables RDP
- Disables drive autorun (usb/cd)
- disable sleeping and hibernation while computer is plugged in (facilitate updates)
- Restart Windows update service if it is stopped
- Enable Windows SmartScreen
- Disables Fast Start (QuickBoot)
- Delete temporary files
- Sync time to the proper time server

Note that the policy can be easily opened in Automation Manager and modified to your needs. Also feel free to contribute with updates or suggestions by emailing me marcandre.tanguay@n-able.com

Type

Automation Policy

Category

Windows Devices

Target OS

Windows 8/8.1;Windows 10;Windows Server 2012 / 2012R2;Windows Server 2016;Windows Server 2019

Compatible with N-central

Yes

N-central minimum version

12.1

Compatible with RMM

Yes

Syntax

the AMP does not require  any special execution information

Output

the policy does not generate any usable output as it is not  intended to be monitored.   Depending on the environment, the policy may fail on some devices due to some setting being  unaccessible. we recommend to review but usually ignore those execution errors

Keywords

workstation maintenance

Related Content