Recast Builder Templates

Recast Builder templates can help you quickly automate a workflow in your environment. These pre-built actions are designed to get you started using Recast Builder, introduce you to some of the automation features available in Builder, and help you start making tools on your own.

Disclaimer: These Builder actions are provided on the basis that they can be edited, changed, and shared, but not sold. While every available effort has been made to be sure they work well and do what was intended, we can't anticipate the requirements of every conceivable Configuration Manager environment, so download/use at your own risk — no guarantees of function, support, or that they won't break something. As with everything, test first.

Recast Builder Starter Pack

All Client Policies

This Builder action runs through all the Configuration Manager's client policies. This is great for new or recently re-built computers to force them to check into Configuration Manager.

This tool completes the following steps:

• Ping computer
• Machine Policy Retrieval and Evaluation Cycle
• Discovery Data Collection Cycle
• Hardware Inventory Cycle
• Software Inventory Cycle
• Send Unsent State Messages Cycle
• Software Updates Scan Cycle
• Application Deployment Evaluation Cycle
• State Message Cache Cleanup
• Windows Installer Source List Update Cycle
• Software Inventory Cycle
• File Collection Cycle
• Software Updates Deployment Evaluation Cycle

For v5 Releases: All Client Policies 5.xml

For v4 Releases: All Client Policies.xml

Add an AD User to an AD Group 

This Builder action lets you add an AD user to an AD group from a list of groups.

For v5 Releases: Add To Group 5.xml

For v4 Releases: Add To Group.xml

For instructions on setting up this template in Builder, see Configure Starter Pack Templates in Recast Builder.

BitLocker Recovery Password from Device

This Builder action grabs the BitLocker Recovery Password from any drive on a device. This uses a custom input parameter to allow users to choose what drive they want to grab the recovery password from.

This tool completes the following step:

• Get Recovery Password From Device

For v5 Releases: BitLocker Recovery Password 5.xml

For v4 Releases: BitLocker Recovery Password.xml

Compare Two Users' AD Groups

This Builder action lets you compare the group memberships of two AD users. This action is particularly useful if, for example, you have a new team member and want to compare their group memberships to those of an existing team member.

This tool completes the following steps:

• Gets AD group membership for a selected user
• Prompts you to enter the AD username that you'd like to compare against the selected user
• Shows you group memberships for both users in tabbed results 

For v5 Releases: Compare AD Groups 5.xml

For v4 Releases: Compare AD Groups.xml

User Account Retire Protocol

This Builder action automates a common task — taking steps when a person leaves an organization to secure their account credentials and prepare the account for retirement. It's easily adaptable to other user-based tasks as well, and is a nice jumping-off point for Recast Builder.

This tool completes the following steps:

• Prompts the admin running the tool to input a new password for the account
• Resets the password for the account to this password
• Disables the account
• Moves the account to a new OU
  

In the Target Input Parameters panel, you must specify a valid OU in your environment as a Constant value. 

Format Example: OU=RecastUsers,DC=demo,DC=recastsoftware,DC=com

For v5 Releases: User Account Retire Protocol 5.xml

For v4 Releases: User Account Retire Protocol.xml

For instructions on setting up this template in Builder, see Configure Starter Pack Templates in Recast Builder.

Reboot if Pending Restart Exists

This Builder action allows you to force a restart on systems that have a pending reboot scheduled, without requiring you to query for pending reboot data in advance. It's a friendly way to help your end users who hate to restart stay updated and compliant without requiring any personal intervention.

This tool completes the following steps:

• Ping Computer
• If Ping is successful, Check System Information Collection for Pending Restart Information
• If Pending Restart Exists, force a Reboot with a 5-minute timer and a user pop-up message: "Your computer needs to restart, please save and close in the next 5 minutes."

For v5 Releases: Reboot If Pending Restart Exists 5.xml

For v4 Releases: Reboot If Pending Restart Exists.xml

Video Overview

Fix Encryption Method

This Builder action automates the process of adding TPM and Numerical Key Protectors to BitLocker. It includes all the necessary precursor steps and enough intelligence to complete this task without admin intervention.

This tool completes the following steps:

• Stop MBAM Service
• Decrypt C: Drive
• A Powershell Script with Progress Stream on to monitor the progress of the decryption, and proceed when successfully completed. (Here is the script)

   #Wait for Decrypt Finish   Write-Output "Waiting on Decrypt...."   $encryption = Get-WmiObject -Namespace root/cimv2/security/microsoftvolumeencryption -Class win32_encryptablevolume -Filter {DriveLetter = 'C:'}   $Percent = ($encryption.GetConversionStatus()).EncryptionPercentage   While($Percent -ne '0'){   Start-Sleep -Seconds 10  $encryption = Get-WmiObject -Namespace root/cimv2/security/microsoftvolumeencryption -Class win32_encryptablevolume -Filter {DriveLetter = 'C:'}  $Percent = ($encryption.GetConversionStatus()).EncryptionPercentage  Write-Progress -activity "Decryption Progress" -PercentComplete $Percent -status "Decryption RProgress"  }

• A Registry change to override the encryption method
• Add the TPM Key Protector
• Add the Numerical Password Key Protector
• Encrypt C:

For v5 Releases: Coming soon

For v4 Releases: Fix Encryption Method.xml

Video Overview

Re-Enroll Agent

There are times when a Recast Agent attempts to connect to a Recast Management Server, but is unable. You'll see a warning in the Recast Management Server telling you that there is an Agent that is trying to connect, but it is not approved. This occurs most often if you delete the Agent from the Recast Management Server manually. Because the Agent information is deleted, there is no way to approve this Agent. 

To resolve the problem, use this Builder action to re-enroll the Recast Agent.

The tool completes the following steps:

• Deletes the agent.sqlite file located in this folder:

Version 5.x Recast Agent: C:\ProgramData\Recast Software\Recast Agent

Version 4.x Recast Agent: C:\Windows\System32\config\systemprofile\AppData\Roaming\Recast Software\Recast Agent

• Restarts the Recast Agent service

For v5 Releases: Coming soon

For v4 Releases: Re-Enroll Agent.xml

Grant Remote Access

This Builder action is used to grant a specific AD user remote access to a device by adding the user to the local "Remote Desktop Users" group on the device. 

The tool completes the following steps:

• Asks for the AD Username
• Adds the AD Username entered to the "Remote Desktop Users" local group. 

For v5 Releases: Grant Remote Access 5.xml 

For v4 Releases: Grant Remote Access.xml

For instructions on setting up this template in Builder, see Configure Starter Pack Templates in Recast Builder.