Overview: RCT Builder Templates
These RCT Builder Templates will help you get started with Builder and quickly deploy custom tools to your environment. They are designed to give you an opportunity to get started with something useful to most environments, and to help you acquire the skills to create your own tools, so you can get the most out of your RCT Enterprise investment.
Disclaimer: These templates are provided on the basis that they can be edited, changed, and shared, but not sold. While every available effort has been made to be sure they work well and do what was intended, we can't anticipate the requirements of every conceivable SCCM environment, so download/use at your own risk-- no guarantees of function, support, or that they won't break something. As with everything-- test first.
How To Import Templates Into RCT Builder
Video Overview
Steps
1. Open RCT Builder from the location you wish to be able to run the tool from later (IE, if importing a device tool template, access RCT Builder from Devices).
2. In the Saved Actions section to the far left, right click and select Import.
3. Navigate to the XML file for the tool template you wish to import and open it.
4. The Tool will now appear in your Saved Actions list in RCT Builder.
RCT Builder Starter Pack
These tools are designed to get you started using RCT Builder, introduce you to some of the automation features available in builder, and help you start making tools on your own.
All Client Policies
This template runs through all the Configuration Manager's client policies. This is great for new computers or recently re-built computers to force them to check into Configuration Manager.
The steps this tool completes are:
- Ping computer
- Machine Policy Retrieval and Evaluation Cycle
- Discovery Data Collection Cycle
- Hardware Inventory Cycle
- Software Inventory Cycle
- Send Unsent State Messages Cycle
- Software Updates Scan Cycle
- Application Deployment Evaluation Cycle
- State Message Cache Cleanup
- Windows Installer Source List Update Cycle
- Software Inventory Cycle
- File Collection Cycle
- Software Updates Deployment Evaluation Cycle
Download Tool Template
Add an AD User to an AD Group
This template creates a user action that will let you add an AD user to an AD group from a list of groups.
- Asks for for group selection from list of groups
Download Tool Template
Video Overview
BitLocker Recovery Password from Device
This template grabs the BitLocker Recovery Password from any drive on a device. This uses a custom input parameter to allow users to choose what drive they want to grab the recovery password from.
The steps this tool completes are:
- Get Recovery Password From Device
Download Tool Template
BitLocker Recovery Password.xml
Compare Two Users' AD Groups with RCT Builder
This template creates an RCT builder action that will help you easily compare group memberships between two AD users. The first user is the one that you right on and the second user is one that you that you would specify when prompted.
The steps this tool completes are:
- Gets AD group membership for the user that you Right Click on
- Prompts you to enter the AD username that you'd like to compare the first user to
- Shows you group memberships for both users in tabbed results
Download Tool Template
User Account Retire Protocol
This tool automates a common task-- taking steps when a person leaves an organization to secure their account credentials and prepare the account for retirement. It's easily adaptable to other user-based tasks as well, and is a nice jumping-off point for RCT Builder.
The steps this tool completes are:
- Prompts the admin running the tool to input a new password for the account
- Resets the password for the account to this password
- Disables the account
- Moves the account to a new OU. NOTE: for this tool to function, you need to specify a valid OU in your environment as a constant value in the Target Input Parameters under "OU" as seen below:
Download Tool Template
Video Overview
Reboot if Pending Restart Exists
The goal of this tool is to quickly allow you to force a restart on systems that have a pending reboot scheduled-- without requiring you to query for pending reboot data in advance. It's a friendly way to help your end users who hate to restart stay updated and compliant without requiring any personal intervention.
This tool completes the following action steps:
- Ping Computer
- If Ping is successful, Check System Information Collection for Pending Restart Information
- If Pending Restart Exists, force a Reboot with a 5 minute timer and a user popup message: "Your computer needs to restart, please save and close in the next 5 minutes."
Download Tool Template
RebootIfPendingRestartExists.xml
Video Overview
Fix Encryption Method
This tool automates the process of adding TPM and Numerical Key Protectors to BitLocker. It includes all the necessary precursor steps and enough intelligence to complete this task without admin intervention.
This tool completes the following action steps:
- Stop MBAM Service
- Decrypt C: Drive
- A Powershell Script with Progress Stream on to monitor the progress of the decryption, and proceed when successfully completed. (Here is the script)
#Wait for Decrypt Finish Write-Output "Waiting on Decrypt...." $encryption = Get-WmiObject -Namespace root/cimv2/security/microsoftvolumeencryption -Class win32_encryptablevolume -Filter {DriveLetter = 'C:'} $Percent = ($encryption.GetConversionStatus()).EncryptionPercentage While($Percent -ne '0'){ Start-Sleep -Seconds 10 $encryption = Get-WmiObject -Namespace root/cimv2/security/microsoftvolumeencryption -Class win32_encryptablevolume -Filter {DriveLetter = 'C:'} $Percent = ($encryption.GetConversionStatus()).EncryptionPercentage Write-Progress -activity "Decryption Progress" -PercentComplete $Percent -status "Decryption RProgress" }- A Registry change to override the encryption method
- Adding of the TPM Key Protector
- Adding the Numerical Password Key Protector
- Finally, Encrypt C:
Download Tool Template
Video Overview
Re-Enroll Agent
This tool is used to re-enroll the Recast Agent. There are times where a Recast Agent is attempting to connect to a Recast Management Server, but is unable. This most often occurs if you delete the agent from the Recast Management Server manually. When this happens you will see a warning in the Recast Management Server telling you that there is an Agent that is trying to connect, but it is not approved. Because you deleted the Agent information, there is no way to approve this Agent. To resolve this you will need to re-enroll the Recast Agent.
The tool completes the following action steps:
- Deletes agent.sqlite located in this folder: C:\Windows\System32\config\systemprofile\AppData\Roaming\Recast Software\Recast Agent\
- Restarts the Recast Agent service.
Download Tool Template
Grant Remote Access
This tool is used to grant a specific AD user remote access to a device by adding the user to the local "Remote Desktop Users" group on the device.
- Asks for AD Username
- Adds the AD Username entered to the "Remote Desktop Users" local group.