Library
The Runbookia library
115 items. Every page lists what the item does, requirements, how to run it, testing steps, rollback steps, version and change log.
Organizational Unit Management
Creates, updates, or removes organizational units (OUs) and places users into them from CSV files.
GWS-002 Google WorkspaceAccount Lifecycle Controls
Suspends, restores, deletes, or undeletes Google Workspace accounts in bulk from a CSV.
GWS-003 Google WorkspaceGroup Membership Management
Adds or removes Google Group members from a CSV, or keeps a group in sync with an OU.
GWS-004 Google WorkspaceUser Provisioning and Profile Updates
Creates new Google Workspace users and updates existing users' profiles from a CSV.
GWS-005 Google WorkspaceDevice Deprovisioning and Wipe Control
Deprovisions, disables, re-enables, or wipes managed devices by serial number from a CSV.
GWS-006 Google WorkspaceDevice Enrollment and Ownership
Adds devices to the company-owned device inventory and labels enrolled Chromebooks, from a CSV.
GWS-007 Google WorkspaceEndpoint Inventory
Exports Chromebooks, mobile devices, and endpoint-managed computers to dated CSV files.
GWS-008 Google WorkspaceMailbox Setup and Delegation
Manages Gmail delegated access from a CSV and applies a standard email signature to users.
GWS-009 Google WorkspaceUser Account Inventory
Exports all Google Workspace user accounts with key details and flags inactive accounts.
GWS-010 Google WorkspaceUser Offboarding Automation
Runs a repeatable offboarding workflow for one or more departing Google Workspace users.
GWS-011 Google WorkspaceUser Onboarding Automation
Creates new Google Workspace accounts, adds them to groups, and emails the starting sign-in details.
GWS-012 K-12Bulk Student Account Creation from SIS
Creates student Google Workspace accounts and OUs from a student information system (SIS) export.
GWS-013 K-12Chromebook Auto Update Expiration Report
Lists Chromebooks by the date they stop receiving automatic updates, for replacement planning.
GWS-014 K-12Chromebook OU Move by Serial Number
Moves Chromebooks into organizational units from a list of serial numbers.
GWS-015 K-12Drive Ownership Transfer on Offboarding
Transfers a departing user's Google Drive files to a manager or archive account.
GWS-016 K-12Graduating Class Suspension and Archive
Suspends a graduating class and moves the accounts to an archive OU at year end.
LINUX-001 LinuxUpdate Linux Packages
Lists pending package updates and, in apply mode, installs them with apt (Debian, Ubuntu) or dnf/yum (RHEL, Rocky, Alma, Fedora). Reports whether a reboot is required and can schedule one.
LINUX-002 LinuxAlert on High Disk Usage
Checks space and inode usage on every local filesystem (or the ones you list) and raises an alert when a threshold is exceeded: exit code 1 for your RMM, plus optional syslog, webhook and email alerts.
LINUX-003 LinuxCheck and Recover Services
Checks the systemd services you list (or every failed service) and, in fix mode, attempts to restart the ones that are not running, then reports which recovered and which are still down.
LINUX-004 LinuxCreate and Rotate File Backups
Creates a tar archive (optionally gzip-compressed) of each folder you list, verifies it can be read back and records a SHA-256 checksum, then removes this script's older archives beyond the retention period.
LINUX-005 LinuxReport System Resource Health
Summarizes CPU, memory, swap, load, disk space and service status, compares them with thresholds you set, and writes a CSV so you can see at a glance whether the system needs attention.
MAC-001 macOSSoftware Update Report and Install
Lists pending macOS software updates and, in install mode, installs the ones that do not need a restart. Never installs a major macOS upgrade.
MAC-002 macOSComputer Rename
Sets the Mac's ComputerName, HostName, LocalHostName and SMB NetBIOS name to one clean, standard name built from the serial number or a name you supply. Safe to run again; it only changes names that do not already match.
MAC-003 macOSPower Settings
Reports or sets power settings used while the Mac is on AC power: system sleep, display sleep, disk sleep, restart after power loss and wake for network access. Only settings you pass are changed.
MAC-004 macOSDeploy App from URL
Downloads an app installer from the vendor's own https link, checks its SHA-256 hash and Apple Developer Team ID, and installs it silently. Supports .pkg, .dmg (containing an .app or .pkg) and .zip. Skips the install when the app is already at or above --min-version. You supply the vendor link; Runbookia does not include or host any installer.
MAC-005 macOSLocal Admin Access Control
Reports which local accounts are administrators, and can add or remove admin rights, remove anyone not on an allowed list, or grant temporary admin rights that are removed automatically. It never removes the last remaining administrator.
M365-001 Microsoft 365Directory and User Reports
Exports Microsoft 365 users with status, licenses, admin roles and last sign-in, and flags risky accounts.
M365-002 Microsoft 365Bulk Tenant Configuration
Checks a Microsoft 365 tenant against a security baseline and optionally applies it.
M365-003 Microsoft 365Cloud User Lifecycle Management
Resets passwords, disables or enables accounts, revokes sessions, and updates user details in bulk; can also disable inactive accounts.
M365-004 Microsoft 365Exchange Mailbox Inventory and Usage
Lists every Exchange Online mailbox with size, item count, quota use, archive, holds, forwarding and last activity.
M365-005 Microsoft 365MFA Enrollment and Status
Reports which Microsoft 365 users have registered for multifactor authentication (MFA), and how MFA is enforced.
M365-006 Microsoft 365Device Inventory and Cleanup
Finds stale Microsoft Entra ID devices and Exchange mobile devices, and optionally disables or removes them.
M365-007 Microsoft 365Teams Governance and Lifecycle
Reviews every Microsoft Teams team for owners, guests, channels and recent activity, and can add a backup owner to ownerless teams.
NETS-001 NetworkingNetwork Device Reboot Scheduler
Reboots selected Cisco Meraki devices through the Meraki Dashboard API, on a schedule you set or only when a device stops answering.
NETS-002 NetworkingNetwork Reachability Checker
Tests whether a list of hosts resolve in DNS, answer ping and accept connections on a TCP port, and reports any that fail.
VIRT-001 VirtualizationVirtual Machine Guest Operations
Reports virtual machine power state and can start, stop, restart, checkpoint, run a command in, or copy a file into a virtual machine guest.
VIRT-002 VirtualizationGuest Filesystem Capacity Report
Reports free space on the filesystems inside virtual machine guests and flags any that are running low.
VIRT-003 VirtualizationGuest Tools and Integration Status
Reports guest integration tool status and version, and can upgrade VMware Tools, set its upgrade policy, or enable Hyper-V integration services.
VIRT-004 VirtualizationVirtual Disk Management
Reports virtual disk locations, sizes and provisioning type, and can expand an existing virtual disk or add a new one.
VIRT-005 VirtualizationVirtual Machine Inventory Report
Lists virtual machines with their power state, guest operating system, hardware version, lifecycle dates and configured resources.
VIRT-006 VirtualizationVirtual Machine Network Configuration
Reports virtual machine network adapters with their connected networks and guest addresses, and can move an adapter to a different virtual switch or port group.
VIRT-007 VirtualizationVirtual Machine Performance Report
Reports current or recent CPU, memory, storage and network usage of virtual machines and flags the most heavily used ones.
VIRT-008 VirtualizationVirtualization Event Audit and Export
Finds and exports administrative virtualization events such as sign-ins, power changes, host changes, permission changes and virtual machine reconfiguration.
SERVER-001 Windows Server and ADAudit Directory Password Aging
Lists directory accounts whose passwords are expiring soon, already expired, or set to never expire.
SERVER-002 Windows Server and ADCheck Disk Space Across Servers
Checks free space on every fixed drive across many servers at once and flags drives running low.
SERVER-003 Windows Server and ADCheck Windows Service Health
Checks that key server services, such as DNS, DHCP and directory services, are running on each server.
SERVER-004 Windows Server and ADCreate and Configure Directory User
Creates one or many directory user accounts with name, OU, job details, manager and groups set.
SERVER-005 Windows Server and ADDisable and Offboard Directory User
Disables departing users' directory accounts and, optionally, removes groups, resets the password and moves them to a disabled OU.
SERVER-006 Windows Server and ADJoin Windows Computer to Domain
Joins this Windows computer to a domain silently, using an offline join file or a join account.
SERVER-007 Windows Server and ADMove Users Between Organizational Units
Moves directory user accounts to a new OU by name list, CSV file, or everyone in a source OU.
SERVER-008 Windows Server and ADReset Account Password
Resets passwords for directory or local accounts to new random passwords, saved to a protected file.
SERVER-009 Windows Server and ADUpdate Directory User Attributes
Updates directory user details (title, department, phone, manager and more) from a CSV file.
SERVER-010 Windows Server and ADPending Reboot Report Across Servers
Reports which servers are waiting for a restart, and why, along with last boot time and uptime.
SERVER-011 Windows Server and ADAssist Domain Migration
Inventories users and computers in an OU before a domain or tenant move, and can change user sign-in suffixes.
SERVER-012 Windows Server and ADAudit Directory Access Controls
Finds directory permissions that give control over OUs or the domain to accounts you did not expect.
SERVER-013 Windows Server and ADAudit Directory Security Settings
Checks the domain for common risky settings and accounts, and writes a findings report.
SERVER-014 Windows Server and ADAudit Group Policy
Reviews every Group Policy object for links, empty or half-disabled policies, filters and missing read access.
SERVER-015 Windows Server and ADAudit NTFS Permissions
Reviews folder permissions on file shares and flags broad write access, per-user entries, unknown accounts and broken inheritance.
SERVER-016 Windows Server and ADAudit Privileged Group Membership
Lists everyone with administrative rights in the domain, including through nested groups, and flags risky members.
SERVER-017 Windows Server and ADAutomate Employee Lifecycle
Processes a single CSV of new hires, role changes and departures in one run.
SERVER-018 Windows Server and ADCheck IIS Health
Checks IIS websites, application pools and HTTPS certificates on this server, and can start anything that stopped.
SERVER-019 Windows Server and ADCheck Server Availability
Checks that each server answers on the network and on the ports you depend on.
SERVER-020 Windows Server and ADDeliver Password Resets Securely
Resets directory passwords and hands each one to a named person through a locked-down file that expires.
SERVER-021 Windows Server and ADFind Inactive Directory Users
Finds directory user accounts that have not signed in for a set number of days, and can disable and move them.
SERVER-022 Windows Server and ADFind Inactive Workstations
Finds computer accounts that have not contacted the domain for a set number of days, and can disable and move them.
SERVER-023 Windows Server and ADFind Locked Directory Accounts
Lists locked-out directory accounts and, optionally, which computer caused each lockout.
SERVER-024 Windows Server and ADGenerate Policy Based Passwords
Generates a batch of strong random passwords and saves them to a protected file.
SERVER-025 Windows Server and ADGenerate User Audit Report
Builds a readable HTML report of directory user accounts, with summary counts, for audits and leadership.
SERVER-026 Windows Server and ADInspect Installed Software and Hotfixes
Lists installed programs and installed Windows updates on one or many computers.
SERVER-027 Windows Server and ADManage Directory Group Membership
Adds and removes members of directory groups from a CSV file or a short list, then reports each group's membership.
SERVER-028 Windows Server and ADManage Local Administrator Passwords
Shows which computers have their local administrator password managed by LAPS, and can force a new password.
SERVER-029 Windows Server and ADRepair Profile Folder Permissions
Checks and repairs ownership and permissions on per-user profile folders (FSLogix profile containers or roaming profiles).
SERVER-030 Windows Server and ADReport Server Patch Status
Shows when each server last installed a Windows update, and flags servers that have gone too long without one.
SERVER-031 Windows Server and ADReview Server Event Logs
Collects recent critical, error and warning events from servers and summarizes them by source and event ID.
SERVER-032 Windows Server and ADUnlock User Account
Unlocks locked-out directory or local accounts, either the ones you name or every locked account.
WIN-001 Windows endpoint Free sampleDisk Space Monitor and Cleanup
Checks free space on the system drive and optionally removes safe-to-delete temporary data.
WIN-002 Windows endpointWindows Update Manager
Reports or installs pending Windows updates using the built-in Windows Update Agent.
WIN-003 Windows endpointWindows Service Health
Finds services that should be running but are stopped, and optionally restarts them.
WIN-004 Windows endpoint Free sampleUptime and Reboot Status
Reports how long the device has been up and whether a reboot is pending.
WIN-005 Windows endpointLocal Administrator Audit
Lists members of the local Administrators group and flags anyone not on your approved list.
WIN-006 Windows endpoint Free sampleBitLocker Status Check
Confirms the system drive is encrypted with BitLocker and has a recovery password.
WIN-007 Windows endpointAntivirus and Defender Status
Reports which antivirus is active and whether Microsoft Defender is healthy and current.
WIN-008 Windows endpointUser Profile Cleanup
Finds and optionally removes local user profiles that have not been used in a set number of days.
WIN-009 Windows endpointInstalled Software Inventory
Builds a list of installed software for the whole device and saves it as a CSV.
WIN-010 Windows endpointCertificate Expiration Monitor
Finds machine certificates that are expired or will expire soon.
WIN-011 Windows endpointSoftware Package Deployment
Installs, updates, or removes one approved MSI or EXE software package silently, with optional file hash verification.
WIN-012 Windows endpointLocal Account Review
Reports local user accounts, flags ones that look inactive or risky, and can disable inactive accounts.
WIN-013 Windows endpointWindows Security Baseline Audit
Checks a set of common Windows security settings on the device and exports the findings for review.
WIN-014 Windows endpointDirectory User Lifecycle Automation
Creates, updates, disables, or moves directory user accounts from a CSV file, with a report-first default.
WIN-015 Windows endpointInventory and Ticket API Connector
Collects a device inventory record, optionally with issue details for a ticket, and sends it as JSON to your HTTPS webhook or API.
WIN-016 Windows endpointSystem Health Report
Builds a readable HTML and CSV health report for the device, including recent results from other Runbookia scripts.
WIN-017 Windows endpointAdd or Remove Network Printer
Adds or removes a shared print server printer or a direct IP printer silently, using parameters.
WIN-018 Windows endpointApp Updates via WinGet
Lists available app updates with the Windows Package Manager (WinGet) and can install them silently.
WIN-019 Windows endpointClear Teams and Outlook Cache
Clears cached data for classic Teams, new Teams and Outlook in user profiles, without touching mailbox data files.
WIN-020 Windows endpointNetwork Stack Reset and DNS Flush
Checks basic network health and can flush DNS, renew DHCP leases, and reset Winsock and TCP/IP.
WIN-021 Windows endpointPower Plan Configuration
Reports and sets the power plan, screen, sleep, hibernate and lid close actions for desktops or laptops.
WIN-022 Windows endpointPrinter Spooler Reset and Queue Clear
Checks the print spooler for stuck jobs and, in Fix mode, stops it, clears the queue and starts it again.
WIN-023 Windows endpointRemove Preinstalled Consumer Apps
Finds built-in consumer apps from a configurable list and, in Remove mode, removes them for all users and from the image for new users.
WIN-024 Windows endpointRename Computer from Naming Standard
Builds a computer name from your naming pattern (prefix, serial number, site, type, asset tag) and, in Apply mode, renames the device.
WIN-025 Windows endpointSilent Software Uninstall by Name
Finds installed software by display name and, in Remove mode, uninstalls it silently.
WIN-026 Windows endpointTime Sync Repair
Checks the Windows Time service and clock offset and, in Fix mode, repairs the service and resyncs against the domain or your NTP servers.
WIN-027 Windows endpointUnapproved Remote Access Tool Removal
Finds remote access tools that are not on your approved list and, in Remove mode, uninstalls them silently.
WIN-028 Windows endpointWi Fi Profile Deployment
Checks for a Wi-Fi profile and, in Apply mode, adds it for all users from an exported profile or from a network name and key, without prompts.
WIN-029 Windows endpointWindows 11 Upgrade Readiness Check
Checks TPM, Secure Boot, UEFI, CPU, RAM and disk against the Windows 11 hardware requirements and reports whether the device looks ready.
WIN-030 Windows endpointWindows Feature Upgrade with Scheduled Reboot
Moves a device to a target Windows feature release through Windows Update policy or your own setup media, and schedules the restart for a set time.
WIN-031 Windows endpointWindows Update Component Reset
Checks the Windows Update services and caches and, in Fix mode, resets them by renaming the SoftwareDistribution and catroot2 folders.
K12-001 K-12 SOPStart-of-Year Student Account and Device Rollout
A timeline for creating student accounts, preparing Chromebooks and handing them out without first-week chaos.
K12-002 K-12 SOPEnd-of-Year Chromebook Collection and Inventory
A step-by-step plan for collecting, checking and storing student devices so summer repairs and fall rollout are simple.
K12-003 K-12 SOPGraduating Class Account Offboarding
How to give seniors time to save their work, then suspend and archive their accounts on a published schedule.
NET-001 Network SOPAdding a New Switch or Access Point
A checklist for bringing a new switch or wireless access point online with consistent settings and records.
NET-002 Network SOPFirewall Rule Change Request and Review
A simple request, review and record process so every firewall rule has an owner, a reason and a removal date.
NET-003 Network SOPKeeping an IP Address and Network Record
How to build and maintain one trusted record of subnets, VLANs, reserved addresses and key network devices.
NET-004 Network SOPRotating Wi-Fi Passwords for Staff and Guest Networks
A planned, low-disruption way to change shared Wi-Fi passwords and tell the right people.
NET-005 Network SOPInternet Outage First Response
A calm, ordered checklist for the first minutes of an internet outage, written so on-site staff can follow it.
SOP-001 General SOP Free sampleTesting a Script Safely Before Rollout
A repeatable way to prove a new script is safe on one device before it reaches every device you manage.
No items match. Try a shorter search.