SupportAssist for Business PCs Administrator Guide

• You must be signed in to TechDirect as a Connect and manage administrator or Connect and manage technician.
• The PCs must run SupportAssist for Business PCs version 3.5 or later.
• The PCs must have an active ProSupport Plus or ProSupport Flex for Client service plan.

Remediation rules help identify and remediate issues within your PC fleet proactively. You can remediate the PCs by selecting the script from the Dell library and apply it to eligible PCs in your site and group. The following are the scripts available in the Dell library to remediate the PCs:

• Antivirus Software Compliance—checks if the PC has either Next-Gen or classic anti-virus installed.
• Battery Charge Policy Update—updates the battery charge policy to "Primarily AC". This extends battery life by lowering the charge threshold, so that the battery never charges to the 100 percent capacity.
• BIOS Password Compliance—checks if the BIOS on the PC is password-protected.
• BitLocker Compliance—checks if BitLocker is enabled on the PC.
• BSOD Remediation—updates drivers, firmware, and BIOS if it detects one or more BSODs in a week.
• Check Local Admin Rights—detects if the logged-in user has local admin rights on the PC. The script does not verify administrative rights granted through Domain Admin Groups (Active Directory, Azure Active Directory, or other directory services).
• Chassis Intrusion Compliance—determines the current setting of the Chassis Intrusion option in the BIOS—Detection Only or Set Chassis Intrusion to On-Silent.
  • Detection Only—determines if the Chassis Intrusion option is set to Enabled or On-Silent.
  • Set Chassis Intrusion to On-Silent—configures the Chassis Intrusion option to On-Silent. This script works only if the PC BIOS password is not set.
• Chassis Intrusion Alert—installs the Dell Command | PowerShell Provider agent, checks for chassis intrusion alerts, and clears any detected warnings.
• Classic Antivirus Software Compliance—checks whether the PC has a classic antivirus installed, which mainly uses signature-based detection to identify malicious software.
• Clean files—clears temporary, redundant, and other unwanted files from your PC fleet.
• Create System Restore Point—creates a system restore point that can be accessed from the Inventory page. See Restoring PC files and settings.
• Delete Old Profile—detects and deletes profiles that have not been logged in on the PC in more than 60 days.
  NOTE:In certain PCs, the Delete Old Profile remediation script may not delete user profiles even if the profiles have not been logged in on the PC for 60 days.
• Delete Orphan Profiles—detects and deletes temporary files from your PC fleet.
• Detect AHCI Mode—checks if the Advanced Host Controller Interface (AHCI) storage mode is enabled in BIOS.
• Firewall Enabled Compliance—checks if a firewall is activated on the PC.
• High Network Latency Detection—tracks network latency over 5 weeks and compares it to the average of the current week to identify anomalies.
• Next-Gen Antivirus Software Compliance—checks if the PC has Next-Gen anti-virus, which uses signature-based detection and AI to identify malicious software.
• SafeBIOS Check—installs the Dell Trusted Device agent and checks if the BIOS signature on the PC matches the known Dell BIOS signature to detect any signs of tampering.
• Slow Boot Time Detection—monitors boot time over 30 days to find slowdowns, identifying the top three problematic applications. For accurate detection, set the script to run daily and ensure it operates for at least 30 device restarts.
• Thermal Optimization—updates drivers, firmware, and BIOS if the CPU temperature is high. The thermal setting is also updated to cool, if required.
• Windows 11 Readiness—checks if a PC is ready to be upgraded to Windows 11 and also checks if the PC meets the minimum requirements for the upgrade.