SupportAssist for Business PCs Administrator Guide

Create a remediation rule using predefined Dell library scripts

Prerequisites

You must be signed in to TechDirect as a Connect and manage administrator or Connect and manage technician.
The PCs must run SupportAssist for Business PCs version 3.5 or later.
NOTE:Newer Dell library remediation scripts and enhanced remediation capabilities are available only if you upgrade to SupportAssist for Business PC 4.5.2 or higher version.
ASP.NET Core Runtime version 8.0.x to install Dell Trusted Device. See Microsoft .NET 8.0.
The PCs must have an active ProSupport Plus or ProSupport Flex for Client service plan.

About this task

Remediation rules help identify and remediate issues within your PC fleet proactively. You can remediate the PCs by selecting the script from the Dell library and apply it to eligible PCs in your site and group. The following are the scripts available in the Dell library to remediate the PCs:

Table 1. Dell Library Remediation ScriptsThe following table describes the information that is displayed on the Remediation scripts:
Prod Script Name	Description
Slow Boot Time Detection	Monitors boot time over 30 days to find slowdowns, identifying the top three problematic applications. For accurate detection, set the script to run daily and ensure it operates for at least 30 device restarts.
High Network Latency Detection	Detects high network latency on a device by monitoring performance over a minimum period of three weeks, requiring a total execution time of 3–5 weeks, during which it reports any remediation failures.
Windows 11 Readiness	Check if a PC is ready to be upgraded to Windows 11 and checks if the PC meets the minimum requirements for the upgrade.
BIOS Password Compliance	Check if the BIOS on the PC is password-protected.
BitLocker Compliance	Check if BitLocker is enabled on the PC.
Firewall Enabled Compliance	Check if a firewall is activated on the PC.
SafeBIOS Check	Installs the Dell Trusted Device agent and checks if the BIOS signature on the PC matches the known Dell BIOS signature to detect any signs of tampering.
Anti-virus Software Compliance	Check if the PC has either Next-Gen or classic anti-virus installed.
Classic anti-virus Software Compliance	Check whether the PC has a classic antivirus that is installed, which mainly uses signature-based detection to identify malicious software.
NexGen anti-virus Software Compliance	Check if the PC has Next-Gen anti-virus, which uses signature-based detection and AI to identify malicious software.
Create System Restore Point	Creates a system restore point that can be accessed from the restore page.
Detect AHCI mode	Check if the Advanced Host Controller Interface (AHCI) storage mode is enabled in the BIOS.
Check Local Admin Rights	Detects if the logged-in user has local admin rights on the PC. The script does not verify administrative rights that are granted through Domain Admin Groups (Active Directory, Azure Active Directory, or other directory services).
Detect Chassis Intrusion Compliance	Determines the current setting of the Chassis Intrusion option in the BIOS—Detection Only or Set Chassis Intrusion to On-Silent. Detection Only—determines if the Chassis Intrusion option is set to Enabled or On-Silent.
Set Chassis Intrusion to On-Silent	Configures the Chassis Intrusion option to On-Silent. This script works only if the PC BIOS password is not set.
Chassis Intrusion Alert Status	Check if the chassis intrusion switch on the device is tripped.
Clear Chassis Intrusion Warning	Check for any occurrences of chassis intrusion alerts. If an intrusion alert is detected, the script proceeds to clear the warning.
Disable Sleep Mode on AC Power	Set the computer sleep time to Never overriding the default of 5 minutes (or any other setting) to prevent the device from entering sleep mode. This ensures that data is not lost due to failed sleep state recovery and helps speed up boot times by eliminating sleep state transitions.
Uninstall DCU when SA-Business PCs are installed	Detects whether both Dell Command Update and SupportAssist for Business PCs are installed, and it uninstalls Dell Command Update. This action prevents conflicts between the two products since SupportAssist for Business PCs already updates drivers and firmware.
Disable RDP	Detects the state of RDP and checks whether it is enabled or disabled. If RDP is enabled, the script disables it and also disables any associated firewall rules.
Rename Computer- Model name and service tag	Update the computer name to the format ModelnameServicetag.
Rename Computer- OS and Service tag.	Update the computer name to the format OSSservicetag.
Rename Computer- Dell and Service tag	Update the computer name to the format DellServicetag.
Audio Optimization with Dell Optimizer	Installs Dell Optimizer to reduce background noise and improves audio quality to optimize the end user's audio experience.
System Reboot - Detection Only	Check whether a reboot has occurred on the device in the past 7 days. Scheduled reboots are essential for maintaining system health, resolving software-related issues, and resetting various operating system services.
System Reboot - Notify User and Reboot	Checks the device's reboot status. If the device has not rebooted in the past 7 days, it issues a toast message to the end user and, upon their consent, reboots the device.
Clear Microsoft Outlook Cache for Improved Performance	Proactively clears the Microsoft Teams cache to enhance performance across the PC fleet. Clearing the cache can resolve corruption sues and significantly improve the overall user experience with Microsoft Teams.
Windows Hello Compliance - Detection Only	Checks the status of Windows Hello capability. Detection only—checks if Windows Hello is enabled and if a camera or fingerprint scanner is set up.
Windows Hello Compliance - Show Windows Notification	Notifies the end user to set up Windows Hello Biometrics if Windows Hello is enabled but not yet configured.
Detect and Remediate GPO Policy Refresh	Check whether Group Policy Objects (GPO) have been refreshed in the last 24 hours. If they have, no action is taken. If it has been longer, the script attempts to force an update of the GPO policy.
Memory Leak Detection	Continuously monitors and logs memory consumption on a device, capturing allocation values daily. After a minimum of seven consecutive daily runs, it analyzes the data for a 10% increase in memory consumption and identifies the top memory-consuming app over the period.
File System Maintenance	Verify the integrity of the file system on the hard drive and fix the file system to prevent operating system issues with the hard disk.
Detect IoA events using Dell Trusted Device	Check for Dell Trusted Device IoA (Indicators of Attack) events and notifies you if any events occur. It helps you proactively manage your device's security at the BIOS level.
Clear DNS Cache	Clears and verifies the DNS cache, which is useful after network changes or when connectivity issues arise.
Update Docking station firmware	Identifies devices with outdated docking firmware and updates them to the latest version to prevent functional issues. It also installs any available drivers that accompany these firmware updates.
Clean Files	Clears temporary, redundant, and other unwanted files from your PC fleet.
Delete Orphan Profiles	Detects and deletes temporary files from your PC fleet.
Detect CVEs and DSAs using Dell Trusted Device	Checks for Dell Trusted Device Common Vulnerabilities and Exposures (CVE) and Dell Security Advisories (DSA) events and provides information about any relevant issues. It helps you proactively manage device security. If events are found, it notifies you of the applicable DSA or CVE, which can be addressed through firmware, BIOS, or operating systemS updates.
Microsoft Store Taskbar Management	Manage the Microsoft Store icon on your taskbar.
Update Storage Firmware for HDDs and SSDs	Proactively identifies devices with outdated SSD/HDD firmware and updates them to the latest version. This helps prevent data corruption, data loss, and system crashes for end users.
Optimize Browser Performance	Optimizes browser performance by clearing cookies and temporary files, updating the browser, resetting host files, updating drivers, and disabling hardware rendering or acceleration in the browser.
Disable Power Management on Network Devices	Disables the default power-saving mode for networkdevices that are enabled by firmware, preventing them from entering sleep mode when inactive. This ensures continuous network connectivity and prevents potential issues that are related to devices not waking up properly.
Disable Power Management on Bluetooth Devices	Disables the default behavior that allows Bluetooth devices to enter power-saving mode when not in use.
BSOD	updates drivers, firmware, and BIOS if it detects one or more BSOD in a week.
Thermal Optimization	Updates drivers, firmware, and BIOS if the CPU temperature is high. The thermal setting is also updated to cool, if required.
Delete Old Profiles	Detects and deletes profiles that have not been logged in on the PC in more than 60 days. NOTE:In certain PCs, the Delete Old Profile remediation script may not delete user profiles even if the profiles have not been logged in on the PC for 60 days.
Intel RST driver compliance for RAID mode	Detects systems with RAID storage mode that is enabled in the BIOS and, if detected, updates the Intel RST driver along with all recommended BKC drivers. It displays the results in the TechDirect user interface.
BIOS Update for Intel 13th and 14th Gen Processors	Scans to determine if the device is running an affected processor and checks if a BIOS update has not been performed. If no update is found, it initiates a driver update on the device.
USB Headset Issue Detection and Remediation	Updates drivers/firmware/BIOS and sets audio/Realtek services to automatic to address USB headset issues.
HDD Performance Dectection and Remediation	Monitors hard disk drive performance, identifies potential issues affecting speed and efficiency, and implements necessary remediations to enhance overall drive functionality and reliability.
Battery Charge Policy Update	Updates the battery charge policy to Primarily AC, which extends battery life by lowering the charge threshold to prevent the battery from charging to 100 percent capacity.
13_SR_Remediate MS Teams Cache Clearing_SPL-43161.ps1	Proactively clears the Teams cache to enhance performance across the PC fleet. Clearing the cache helps resolve corruption issues and improves overall Teams functionality.
Detect and Enable Microsoft Defender anti-virus services	Detects if Defender A/V services are enabled.
Restart Microsoft Defender anti-virus Services	Detects if Defender A/V services are running.
Detect and Enable Trend Micro anti-virus Services	Detects if Trend A/V services are enabled.
Restart Trend Micro anti-virus Services	Detects if Trend A/V services are running.
Detect and Enable Carbon Black anti-virus Services	Detects if Carbon Black A/V services are enabled.
Restart Carbon Black anti-virus Service	Detects if Carbon Black A/V services are running.
Detect and Enable CrowdStrike anti-virus Service	Detects if Crowdstrike A/V services are enabled.
Restart CrowdStrike Anti-Virus service	Detects if Crowdstrike A/V services are running.
Detect and Enable Symantec Anti-Virus Service	Detects if Symantec A/V services are enabled.
Restart Symantec Anti-Virus service	Detects if Symantec A/V services are running.
Detect and Enable McAfee/Trellix Anti-Virus Service	Detects if Symantec A/V services are running.
Restart McAfee/Trellix Anti-Virus service	Detects if McAfee/Trellix A/V services are running.
Apps Affecting Battery Usage	Identifies the top battery-consuming applications if battery usage is beyond acceptable range.
Disable O365 telemetry sharing	Detects whether the Microsoft Office 365 telemetry feature is enabled. If telemetry is enabled, the script disables it by modifying the registry.
Detect and Remediate Microsoft OneDrive Sync	Detects if Microsoft OneDrive has not synced in 8 hours. If Microsoft OneDrive has not synced, then it restarts Microsoft OneDrive services and checks to ensure if syncing is restored.
Detection ONLY of gaming platforms/applications	Detects the gaming applications: Battle.net, Steam, Epic Game Launcher, Ubisoft Connect, GOG Galaxy, EA, BlueStacks, NOX Player, LDPlayer, MEmu, GameLoop, Ubisoft Nano.
Detection and removal of gaming platforms/applications	Detects the gaming applications: Battle.net, Steam, Epic Game Launcher, Ubisoft Connect, GOG Galaxy, EA, BlueStacks, NOX Player, LDPlayer, MEmu, GameLoop, Ubisoft Nano. If found, this script will run a registry change that blocks Windows execution of the applications so that they cannot be run, started or used.
Microsoft Teams Network Assessment.	Executes the Microsoft Teams Network Assessment Tool on a Dell PC three times daily - at 9:00AM, 12:00PM, and 3:00PM (local system time). If a Teams or Zoom call is in progress, the assessment will automatically wait until the call ends before proceeding. The script runs for seven consecutive days, capturing network performance data. After the collection period, the results are averaged and analyzed to determine whether the device meets the threshold requirements for a high-quality Teams audio/video experience.

NOTE:After the remediation scripts run, they are classified as either remediation or detection scripts.

Remediation scripts display four key data points:

PCs targeted by this rule
PCs detected with the issue
PCs successfully remediated
PCs that failed remediation

Detection scripts display two key data points:

PCs targeted by this rule
PCs detected with the issue

Steps

From the TechDirect dashboard, go to Connect and manage > Manage PC fleet > Connect and manage PCs > Manage > Remediation rules.
The Remediation rules page is displayed.
Click Create a rule.
The Create a rule page is displayed.
In the Build workflow section, enter a name for your rule in the Name your rule field.
In the Select workflow type section, choose Dell Workflow and, click Next.
Select a Script From the list of available scripts, select the most appropriate one by clicking the radio button next to the script name.
Click Next to proceed after selecting the script or Cancel if you need to cancel the process.
In the Rule type and schedule section, choose the occurrence and frequency at which a rule should be executed:
- - Scheduled—runs at specific intervals. You must specify the frequency and time (AM or PM).
  - Telemetry—based on telemetry data.
  - Run Once Now—runs immediately.
If you choose Scheduled, a drop-down menu appears to select the frequency daily or weekly, and then you select the specific time (AM or PM) suitable for execution.
Click Next .
In the Assign section, perform one of the following methods to assign the rule:
- Assign PCs by site and groups
- Assign PCs manually
1. If you choose Assign PCs by site and groups, select the site and group to which you want to assign the rule. Click View PCs to generate the list of targeted PCs.
  
  NOTE:The Sites & groups list displays only PCs that have an active ProSupport Plus or ProSupport Flex for Client service plan.
2. Select the rule and, click Create rule to finalize, or you can choose to Save draft if you need to make further modifications later.
3. If you choose the Assign PCs manually, you can search for up to 30 PCs by choosing one of the following PC identifiers:
  - Service tag
  - Asset tag
  - Hostname
4. Click Add PC.
Click Create rule to finalize, or you can choose to Save draft if you need to make further modifications later.

Results

The remediation rule is saved and is displayed on the Remediation rules page.

NOTE:By default, the remediation rule is not applied to a new site or groups that are created after the creation of the remediation rule. You must edit the remediation rule to include PCs in the new site or group, to the rule. See Update a remediation rule.