Search the Community

A number of folks have requested the ability to manage bitlocker with Pulseway, so I thought I would share how I am doing this with Powershell scripts and Pulseway's custom fields feature. First, you will need to create a custom fields in Pulseway (Automation Tab --> Custom Fields). This fields should be a text variable that has the system context. I personally have 3, BitlockerKey, Protection Status (On/Off), and BitLockerVolumeStatus. BitlockerKey is probably the one most people will care about. . After Configuring the Custom fields, you will then need to create your PowerShell script. Notice you have inputs and outputs. You will want to click New for output. Name it what you wish, ensure it is a text variable type, and then turn on "set Custom Field Value" Now we toggle the flag for it being a windows powershell script. You should see in the top that it has created a comment #outputs with your defined output variable assigned the default value you gave it. Now we have our script: Update as of 4/18/2021, script now tracks 3 custom fields and will account for if a drive is encrypted but protection is off and no protectors have been added yet. # Outputs $ProtectionStatus = "na" $recoveryKey = "na" $VolumeStatus = "na" #region functions function Start-BitlockerEnable { Enable-BitLocker -MountPoint c: -EncryptionMethod XtsAes128 -UsedSpaceOnly -TpmProtector $today = Get-Date $scheduledtime = $today.Date.AddHours(23) [int]$SecondsToMidnight = ($scheduledtime - $today).TotalSeconds shutdown /r /t $SecondsToMidnight msg.exe * "Bitlocker Encryption has been enabled. A reboot is needed before the encryption will apply and has been scheduled for $scheduledtime local time. You can reboot before this if you prefer." #start-sleep 90 #msg.exe * "This Computer will reboot in 30 seconds to bitlocker Encryption" #start-sleep 30 #Restart-computer -force } #endregion functions #region execution $BitLockerStatus = Get-BitLockerVolume -MountPoint c: if ((Get-Tpm).tpmpresent -eq $true) { #If Volume is in the process of encrypting or decrypting the Volume status will not say fully. Don't make changes when it changes if (($BitLockerStatus.ProtectionStatus -match 'off') -and ($bitlockerstatus.VolumeStatus -notmatch 'progress')) { #NoBitlocker is enabled so run it. if ($BitLockerStatus.VolumeStatus -eq 'FullyDecrypted') { $recoverykey = $BitLockerStatus.KeyProtector | Select-Object -ExpandProperty recoverypassword if(!($recoveryKey)){ Add-BitLockerKeyProtector -MountPoint c: -RecoveryPasswordProtector } $newStatus = Get-BitLockerVolume -MountPoint c: $recoverykey = $newStatus.KeyProtector | Select-Object -ExpandProperty recoverypassword Start-Process -FilePath "$env:PWY_HOME\CLI.exe" -ArgumentList ("setVariable recoverykey ""$recoverykey""") -Wait if ($newStatus.KeyProtector -match 'Recovery') { Start-BitlockerEnable } } #Bitlocker must be Partially enabled where drive is fully encrypted, but protection is off and no protectors exist. #Typically this is using xtsAES128 so you may wish to disable-bitlocker, then re-enable it with your protectors and prefered encryption level. else{ Disable-BitLocker -MountPoint 'c:' $decryptInProgress = $true While($decryptInProgress -eq $true){ $decryptstatus = Get-BitLockerVolume -MountPoint 'c:' if($decryptstatus.VolumeStatus -match 'progress'){ Start-Sleep 2 } else{ $decryptInProgress = $false } } Add-BitLockerKeyProtector -MountPoint c: -RecoveryPasswordProtector $newStatus = Get-BitLockerVolume -MountPoint c: $recoverykey = $newStatus.KeyProtector | Select-Object -ExpandProperty recoverypassword Start-Process -FilePath "$env:PWY_HOME\CLI.exe" -ArgumentList ("setVariable recoverykey ""$recoverykey""") -Wait if ($newStatus.KeyProtector -match 'Recovery') { Start-BitlockerEnable } } } #BitLocker should already be enabled so log keys, volume status etc. else { $recoverykey = $BitLockerStatus.KeyProtector | Select-Object -ExpandProperty recoverypassword $ProtectionStatus = $BitLockerStatus.ProtectionStatus $VolumeStatus = $BitLockerStatus.VolumeStatus Start-Process -FilePath "$env:PWY_HOME\CLI.exe" -ArgumentList ("setVariable recoverykey ""$recoverykey""") -Wait Start-Process -FilePath "$env:PWY_HOME\CLI.exe" -ArgumentList ("setVariable ProtectionStatus ""$ProtectionStatus""") -Wait Start-Process -FilePath "$env:PWY_HOME\CLI.exe" -ArgumentList ("setVariable VolumeStatus ""$VolumeStatus""") -Wait } } else { $recoverykey = 'NoTpm' Start-Process -FilePath "$env:PWY_HOME\CLI.exe" -ArgumentList ("setVariable recoveryKey ""$recoveryKey""") -Wait } #endregion execution You can modify the above script as you wish. I personally have gone with a bit of a cautious approach where it will not skip the hardware check which will reboot the pc, but for me I prefer this approach to having it encrypt the drive without checking tpm is all good which could then result in the drive being encrypted and locking out the end user. At the end of all this, you now should be able to Both Enable bitlocker encryption as well as pull your recovery keys from pulseway like so :

BitDefender: In-product trial set-up, purchasing and provisioning now available We have made it easier to quickly get the EDR protection you need by making it possible to trial, purchase and provision Bitdefender AV, including EDR, from within the Pulseway RMM. Users can set up a free trial from the AntiVirus section of the WebApp, then purchase directly from the billing section. The new license can than be provisioned directly from the WebApp as well. Remote Control for macOS Performance Enhancements We have launched an improved Remote Control engine for macOS that delivers speed and performance enhancements. The latest release also introduces support for monitor selection.

You can now trigger workflow executions from Performance Counter notifications and evaluate Name, Category and Instance in conditions to build even more customizable workflows for your IT processes.

You can now trigger workflow executions from Event Logs notifications and evaluate Event Id, Level, Message, Name, Source and Filter Title in conditions to build even more customisable workflows for your IT processes.

Using USB external hard drive as backup devices and each drive can be recognized if manually added to the notifications/storage screen but I need to know if there is a way to set this to be automatic when the drive is replaced either daily or weekly. Also, where would this be set globally for are servers being monitored. Currently have 8.6.8. Thank you, Todd Kollars Onsite IT Services

How would I get a ticket status to change to "client responded" when a client responds to a "completed" ticket

I would like to move away from using TeamViewer. LTT was just advertising Pulseway, I thought I would try it out. I installed the Remote Control Desktop client (6.6.3) and the Dashboard client (6.5.1), and proceeded to set up an organization, group, site, and policy. Then I downloaded the "Agent" client to the desktop I would like to be able to remote into. I installed, registered my product, assigned it to my group, and checked the "Enable Remote Control" box. I was under the impression this is all I had to do. Although both the Remote Control Desktop and Dashboard show the computer, I'm unable to "Start Remote Control Session". It's grayed out. Interestingly, I am able to view all of the system specs, and even successfully restart the computer via the website! What might I be doing wrong? Thank you for your time!

Hi, i want to know how i can monitor the dropbox daemon on linux, i'v tried things with workflow but when i stop the service manualy it won't send me a notification or try to restart the service, and that is bothering me becaus on our servers we need to have dropbox running all the time for our application, i know that dropbox is weird on linux, it won't show with systemctl, but it's still like a daemon. I'm running debian buster machine all up to date with the last pulseway agent

I am trying to configure Pulseway on my Ubuntu Server 20.04 LTS machine, but I'm having issues getting it to recognise systemd services. The services I want to monitor are smbd, plexmediaserver and clamav-freshclam. Regardless of what configuration I use, none of these services are even recognised by Pulseway let alone monitored. I have also tried setting each service as "NONE", "UPSTART" and "SYSVINIT" but nothing seems to work. The strange part is that ssh is monitored despite the fact that it's configuration is identical to the others. Here is a screenshot of my configuration: Can someone please help me out here? Is there something I'm missing? EDIT: Never mind. It suddenly started working after I posted this.

Hello there, I was in the process of configuring my Pulseway agent on a VPS running Ubuntu Server 20.04 and I ran in this interesting bug. Even using the sample config provided by the agent, uncommenting the Ping Responses bloc throws this error in the log, and prevents the service from starting. vps pulseway: Starting Pulseway Daemon version 6.5 (2019082205) vps pulseway: Configuration: Values for 'Milliseconds' attribute at 'PingResponse' node 10.6.0.53(1) should be between 1 and 1000 vps systemd: pulseway.service: Main process exited, code=exited, status=1/FAILURE The PingResponse bloc in /etc/pulseway/config.xml looks like this: <PingResponses> <PingResponse Address="10.6.0.53" Milliseconds="1500" Minutes="1" PriorityOnSlowResponse="1" PriorityOnNoResponse="1" Alias="vps DNS notif" Enabled="true"/> </PingResponses> So then I tried many Milliseconds values between 1 and 1000 but the same exact error always comes back. Is this a known issue or is there anything wrong with my setup? Many thanks to anyone who can help, Best,

In order to import a Pulseway configuration file you need to start PCMonitorManager (Pulseway Manager) from Pulseway's installation directory with the following parameters: PCMonitorManager.exe /config=C:\Configuration\NoPassword.pcmcfg If the exported configuration file contains the account details then you need to provided the configuration password as well: PCMonitorManager.exe /config=C:\Configuration\WithPassword.pcmcfg /configpassword=s3cr3tpassw0rd Note: The PCMonitorManager will not provide any console output or custom exit codes based to indicate the success of the operation.

Can anyone find the new in 8.5 feature "Network Monitoring" or know how to add a device?

When u use the built-in script "Add Automatically Started Services in Pulseway" some services wil be monitored that are triggert and not always on. This wil result in unwanted notifications. The first variable has the servicenames you want to disable. $services = @('gupdate', 'ShellHWDetection', 'sppsvc', 'RemoteRegistry', 'MapsBroker', 'tiledatamodelsvc', 'WbioSrvc', 'WinDefend', 'CDPSvc') $servicesRegex = [string]::Join('|', $services) # create the regex $regservices = Get-ItemProperty "HKLM:\Software\MMSOFT Design\PC Monitor\Services" $regservicesSplit = $regservices -split ";" foreach ($regservice in $regservicesSplit) { If ($regservice -match $servicesRegex ) { $servicesSplit = $regservice -split "=" $servicesTrim = $servicesSplit[0] $servicesTrim = $servicesTrim.Trim() Remove-ItemProperty -Path "HKLM:\Software\MMSOFT Design\PC Monitor\Services" -Name $servicesTrim Write-Host $regservice " Verwijderd" } } Hope it helps.

Hi there, I have installed Pulseway on 2 PC's and according to my subscription page. I get 2 free licences. I was using Pulseway quite successfully last night till I received an email saying I had reached the Notification limit and to remove this limitation I should consider getting a subscription. I have logged on today to try and purchase a subscription for 2 licences as luckily that is all I need at this stage but due to it saying the first 2 agents are free I can't purchase a full subscription for just 2 licences How can I get unlimited notification for my 2 free licences?

We reinstalled Pulseway on a re-imaged system and after the install we noticed issues. In the patch mgmt section, the status was "assign failed" in red. We rebooted the system and then the service was not starting. We checked the service, it was set to start automatically and in the event log it was generating this error: "Service cannot be started. The handle is invalid" We removed the system from Pulseway, uninstalled, and reinstalled. Service is starting normally, but still getting the same issue of the patch policy failing to assign. I tried moving the system to another group that did not have a patch policy at all and got the same result.

I had installed Pulseway and then wanted to delete it but I was not able to find Pulseway in the control panel uninstall feature and so I tried manually uninstalling files but that also did not work. I tried running the .msi installer again but an error came up saying that Pulseway is already installed but it still was not showing up. Please help me with this.

How do you enable network discovery to search across all your VLANs (192.168.1.x, 192.168.10.x, 192.168.20.x excetera)?

Hi all I have installed an endpoint with era server on a system that I monitor with PW. How do I configure so that the web and iphone app recognises the era server for smart scans etc. Thanks and Happy Christmas All........

I would like to make a script that will run a batch file on my desktop. How do i do that?

I am working on building an Ad Hoc report in PSA to be able to list on-hand products and serial numbers assigned to that product for inventorying purposes. I know the Serial Numbers are tracked, and are listed when deploying them as assets in Service Desk. Is there a way to get that information to display in a report to possibly inventory product & serial number?

Hi there, This might be a bit of a long shot - but I have an end client who's interested in deploying custom Teams issues with Pulseway (as there aren't many users in-office for obvious reasons). I've attempted to deploy this by pushing a batch script, to copy the backgrounds from a shared location. The backgrounds folder in question is located in the user's roaming appdata (%appdata%\Microsoft\Teams\Backgrounds\Uploads). For this reason I wasn't able to use %username% correctly in my batch script, as the script is being run by some Pulseway service, rather than as the local user account. Please let me know if you've any ideas and have a great day. Cheers, Joe

Hi all, I hope you're having a great day and are keeping safe. I'm having an issue with setting up email notifications via SMTP to Office365. I've followed the document on setting Pulseway up to talk with Office365. I've also been in touch with support on this and haven't been satisfied with their answer. Have any of you linked this up successfully? If so, which IP addresses do you have whitelisted? Is there anything obvious I'm missing? I've set up a relay and can't see any attempt at mail delivery via 365. Cheers! Joe

Hi, I am looking for a script that can trigger a 3rd party patch policy ad-hoc outside the policy schedule. It´s going to be used to start the installation process of software on newly registered machines in a "Computer registered" workflow. If there is anyone with another take on that I´m all ears. Best regards Mike

Here is a pdf for setting up your synology nas with pulseway. PublicSNMPPulsewaySynology.pdf

Hi! I was searching for an option in the mobile Android app to switch the language! Perhaps I'm just blind... Thanks, BR, Andreas