Overview: RCT Builder Templates
These RCT Builder Templates will help you get started with Builder and quickly deploy custom tools to your environment. They are designed to give you an opportunity to get started with something useful to most environments, and to help you acquire the skills to create your own tools, so you can get the most out of your RCT Enterprise investment.
Disclaimer: These templates are provided on the basis that they can be edited, changed, and shared, but not sold. While every available effort has been made to be sure they work well and do what was intended, we can't anticipate the requirements of every conceivable SCCM environment, so download/use at your own risk-- no guarantees of function, support, or that they won't break something. As with everything-- test first.
How To Import Templates Into RCT Builder
Video Overview
Steps
1. Open RCT Builder from the location you wish to be able to run the tool from later (IE, if importing a device tool template, access RCT Builder from Devices).
2. In the Saved Actions section to the far left, right click and select Import.
3. Navigate to the XML file for the tool template you wish to import and open it.
4. The Tool will now appear in your Saved Actions list in RCT Builder.
RCT Builder Starter Pack
These tools are designed to get you started using RCT Builder, introduce you to some of the automation features available in builder, and help you start making tools on your own.
User Account Retire Protocol
This tool automates a common task-- taking steps when a person leaves an organization to secure their account credentials and prepare the account for retirement. It's easily adaptable to other user-based tasks as well, and is a nice jumping-off point for RCT Builder.
The steps this tool completes are:
- Prompts the admin running the tool to input a new password for the account
- Resets the password for the account to this password
- Disables the account
- Moves the account to a new OU. NOTE: for this tool to function, you need to specify a valid OU in your environment as a constant value in the Target Input Parameters under "OU" as seen below:
Download Tool Template
Video Overview
Reboot if Pending Restart Exists
The goal of this tool is to quickly allow you to force a restart on systems that have a pending reboot scheduled-- without requiring you to query for pending reboot data in advance. It's a friendly way to help your end users who hate to restart stay updated and compliant without requiring any personal intervention.
This tool completes the following action steps:
- Ping Computer
- If Ping is successful, Check System Information Collection for Pending Restart Information
- If Pending Restart Exists, force a Reboot with a 5 minute timer and a user popup message: "Your computer needs to restart, please save and close in the next 5 minutes."
Download Tool Template
RebootIfPendingRestartExists.xml
Video Overview
Fix Encryption Method
This tool automates the process of adding TPM and Numerical Key Protectors to BitLocker. It includes all the necessary precursor steps and enough intelligence to complete this task without admin intervention.
This tool completes the following action steps:
- Stop MBAM Service
- Decrypt C: Drive
- A Powershell Script with Progress Stream on to monitor the progress of the decryption, and proceed when successfully completed. (Here is the script)
#Wait for Decrypt Finish Write-Output "Waiting on Decrypt...." $encryption = Get-WmiObject -Namespace root/cimv2/security/microsoftvolumeencryption -Class win32_encryptablevolume -Filter {DriveLetter = 'C:'} $Percent = ($encryption.GetConversionStatus()).EncryptionPercentage While($Percent -ne '0'){ Start-Sleep -Seconds 10 $encryption = Get-WmiObject -Namespace root/cimv2/security/microsoftvolumeencryption -Class win32_encryptablevolume -Filter {DriveLetter = 'C:'} $Percent = ($encryption.GetConversionStatus()).EncryptionPercentage Write-Progress -activity "Decryption Progress" -PercentComplete $Percent -status "Decryption RProgress" }- A Registry change to override the encryption method
- Adding of the TPM Key Protector
- Adding the Numerical Password Key Protector
- Finally, Encrypt C:
Download Tool Template
Video Overview
Find This Computer
This tool gets creative with PowerShell to help remote technicians quickly locate a machine in need of attention. It also gently encourages end users to leave the computer alone while a technician is en route.
The tool completes the following action steps:
- Executes a conditional Ping of the device to confirm connectivity
- If the ping is unsuccessful, a PowerShell command to wait 5 seconds is executed, and the Ping is re-attempted. Here is the script:
Write-Output "Ping Failed, Re-attempting" Start-sleep 5
- If the ping is successful, a series of two PowerShell scripts follows, each creating, executing, and then deleting a scheduled task. The task opens a webpage on the remote device in IE- first a youtube video of a heartbeat monitor and then a brightly colored, flashing GIF directing end users to leave the computer alone. Here are the powershell scripts for these two steps (identical apart from the website):
$TA = New-ScheduledTaskAction -Execute "C:\Program Files\internet explorer\iexplore.exe" -Argument "https://www.youtube.com/watch?v=yEb4kojtVHw" $STP = New-ScheduledTaskPrincipal -GroupId "Users" New-ScheduledTask -Action $TA -Principal $STP | Register-ScheduledTask "TEST" Start-ScheduledTask "TEST" Unregister-ScheduledTask "TEST" -Confirm:$false
and
$TA = New-ScheduledTaskAction -Execute "C:\Program Files\internet explorer\iexplore.exe" -Argument "https://media.giphy.com/media/7E6376vO08k936G3fh/giphy.gif" $STP = New-ScheduledTaskPrincipal -GroupId "Users" New-ScheduledTask -Action $TA -Principal $STP | Register-ScheduledTask "TEST" Start-ScheduledTask "TEST" Unregister-ScheduledTask "TEST" -Confirm:$false
Download Tool Template
Video Overview