Welcome
Runbook AI (Add-on)
The Runbook AI (Add-on) is designed for both BigFix Runbook AI administrators and end users who are working towards the resolution of IT support tickets. Its primary purpose is to help BigFix administrators to easily monitor the health of their servers and initiate well-informed recovery actions with specialized Runbooks AI.
Fixlet Repository Guide
This document provides detailed list of out-of-box fixlets available within BigFix Runbook AI. This information is intended for administrators and users authorized for configuring use cases / fixlets within BigFix Runbook AI, which works in conjunction with HCL Bigfix engine.
Fixlet Repository
This section lists the out-of-the-box fixlets available in BigFix Runbook AI, categorized into Linux Server Management, Windows Server Management, Active Directory, and Database Management.
Active Directory
Active Directory provides a range of fixlets for managing user accounts, groups, authentication policies, and other AD objects. These fixlets offer user-friendly methods for tasks such as adding service accounts, changing user passwords, checking administrator privileges, and more.

BigFix Documentation Homepage
BigFix AEX
Welcome to the BigFix AEX (Advanced Endpoint Management) documentation.
Runbook AI (Add-on)
The Runbook AI (Add-on) is designed for both BigFix Runbook AI administrators and end users who are working towards the resolution of IT support tickets. Its primary purpose is to help BigFix administrators to easily monitor the health of their servers and initiate well-informed recovery actions with specialized Runbooks AI.
- Introduction
  This guide provides you with an overview of BigFix Runbook AI and its features and benefits. It also provides an architectural overview and talks about various configurations and end user activities in brief.
- Pre-requisites guide
  This guide provides instructions to install the prerequisites required for BigFix Runbook AI. This includes the installation of MongoDB and Solr for both HA (High Availability) and non-HA modes as well as generation of certificates for authentication and authorization purposes.
- Installation Guide
  This guide provides instructions to install BigFix Runbook AI. It includes the pre-installation and the installation procedures for BigFix Runbook AI. This guide also provides summary material about additional servers and optional post- installations and references to the other documents for detailed information.
- Configuration Guide
  This guide instructs on how to install and configure BigFix Runbook AI. These instructions also include the configuration procedures for the product.
- User Guide
  This guide introduces you to the key concepts of BigFix Runbook AI and describes how to use the product. It provides an overview of the end-user interface and instructions to perform different tasks. This guide is intended for the BigFix Runbook AI end-users working towards resolution of IT support tickets.
- API Guide
  BigFix Runbook AI API guide provides documentation and instructions on how to use its application programming interface (API), including details on the functions, parameters, and endpoints available for developers to interact with the API.
- Fixlet Repository Guide
  This document provides detailed list of out-of-box fixlets available within BigFix Runbook AI. This information is intended for administrators and users authorized for configuring use cases / fixlets within BigFix Runbook AI, which works in conjunction with HCL Bigfix engine.
  - BigFix Runbook AI Overview
    BigFix Runbook AI is an Intelligent Runbook Automation product that uses AI, ML, and NLP to automate IT Operations tasks and provide automated remediation. It reduces costs, mitigates risks, improves efficiency, and offers quick implementation with reusable runbooks.
  - Fixlet Repository
    This section lists the out-of-the-box fixlets available in BigFix Runbook AI, categorized into Linux Server Management, Windows Server Management, Active Directory, and Database Management.
    - Linux Server Management
      This document provides a list of Linux server management tasks, including file system backup, swap space management, package installation, user management, and system configuration.
    - Windows Server Management
      Windows Server Management provides various fixlets for managing and configuring Windows server settings such as adding virtual directories, creating DNS zones, deleting event logs, enabling drive quota, and managing user accounts.
    - Active Directory
      Active Directory provides a range of fixlets for managing user accounts, groups, authentication policies, and other AD objects. These fixlets offer user-friendly methods for tasks such as adding service accounts, changing user passwords, checking administrator privileges, and more.
    - Database Management
      This document provides a list of database management tasks for various database systems including SQL, Oracle, and PostgreSQL. The tasks include checking database status, taking backups, modifying database parameters, creating and dropping databases, and granting permissions to users.
    - Network Management
      This section covers enabling DHCP tracing and DNS server diagnostics, including fetching DNS server diagnostics and enabling DNS diagnostics.
  - Onboarding of Fixlets on Bigfix Instance
    This section covers onboarding reusable and out of the box fixlets on a Bigfix instance.
  - Configuring and Managing the Fixlets on BigFix Runbook AI instance
    This section informs users on how to configure and manage fixlets on a BigFix Runbook AI instance. Users can bulk upload fixlets using an excel file provided with the BigFix Runbook AI package. Detailed steps for bulk upload are mentioned in the Configuration Guide.
- Integration Guide
  This guide provides instructions to enable integrations with various ITSM and Runbook Automation tools, while configuring BigFix Runbook AI.
- Lab Manual
  This lab manual provides infrastructure administrators, installation and configuration administrators, and end users with detailed instructions on how to install, configure, and use BigFix Runbook AI. It is divided into modules, each containing an introduction and lab exercises. The manual also references additional servers, post-installation steps, and other documents for more information.
- Troubleshooting Guide
  This guide provides instructions to troubleshoot some of the commonly occurring issues along with the resolution steps. This information is intended for administrators responsible for installing, configuring, and supporting BigFix Runbook AI product.
- Abbreviations
  A list of abbreviations and their expansions.
CISA Known Exploited Vulnerabilities (KEV): Overview
The Known Exploited Vulnerabilities (KEV) Content Pack is available as an add-on for BigFix. It is a collection of BigFix Fixlets that is derived from extensive research of the CISA KEV catalog, NVD, and Vendor Advisories. This KEV Content Pack provides BigFix operators with the ability to quickly identify endpoints with vulnerabilities that are high-risk and time-sensitive given that they are known to have been exploited or are actively being exploited.
Payment Card Industry (PCI) Add-on User Guide
The BigFix PCI DSS Add-On is a premium component that provides security configuration checklists that are based the Payment Card Industry Data Security Standard (PCI DSS). These compliance checks are designed to help ensure continuous compliance at every endpoint in your organization.
RHEL ESU Add-On User's Guide
BigFix content supporting Red Hat's Extended Update Support (EUS) and Extended LifeCycle Support (ELS) patching program is available as an add-on to the BigFix Patch, BigFix Lifecycle, and BigFix Compliance products.
Service Graph Connector Integration
The Service Graph Connector is available as an add-on for integrating BigFix Inventory with your CMDB. The connector is designed to support common use cases and requires additional customizations to meet your specific business process requirements. Successful implementation of the connector requires thorough assessment and due diligence, and could involve modifications to input fields or the implementation of specialized reconciliation processes to align with your internal workflows.
Windows ESU Patch Add-On User's Guide
BigFix content supporting the Extended Support Updates (ESU) patching program from Microsoft® is available as an add-on to BigFix Patch, BigFix Lifecycle and BigFix Compliance.
BigFix Patch Workbench Add-On
This topic provides an overview of BigFix Patch Workbench, an automated solution that streamlines patch deployment, reduces tool fragmentation, integrates with ServiceNow, and enhances compliance and productivity across ITSM processes.
Add-ons guides in PDF format
Below is a comprehensive list of links to the Add-ons user guides available in PDF format, designed to assist users in navigating and utilizing the software effectively:

Active Directory

Active Directory provides a range of fixlets for managing user accounts, groups, authentication policies, and other AD objects. These fixlets offer user-friendly methods for tasks such as adding service accounts, changing user passwords, checking administrator privileges, and more.

Account Non Expiring Password


Fixlet User Friendly Name	AD_Account_Non_Expiring_Password
Description	Fetches and displays the AD accounts which have non-expiring password.

Add Service Account


Fixlet User Friendly Name	AD_Add_Service_Account
Description	Allows user to add service account to AD. Service account needs to be added in AD computer.

Add User to Domain Admins


Fixlet User Friendly Name	AD_Add_User_To_Domain_Admins
Description	Adds user to admin group.

Add User to Group


Fixlet User Friendly Name	AD_Add_User_To_Group
Description	Adds an AD user to Given AD group.

Change User Surname


Fixlet User Friendly Name	AD_Change_Surname_User
Description	Changes Surname of the existing AD user.

Change User Password


Fixlet User Friendly Name	AD_Change_User_Password
Description	Allows for the change, updating, and setting up new, password of an Active Directory user.

Check Administrator Privilege


Fixlet User Friendly Name	AD_Check_Administrator_Privilege
Description	Checks the admin privileges of the current user.

Create AD Sites


Fixlet User Friendly Name	AD_Create_AD_Sites
Description	Creates and generates AD sites.

Create Domain User


Fixlet User Friendly Name	AD_Create_Domain_User
Description	Creates and adds a user within the machine domain.

AD_Create_Group


Fixlet User Friendly Name	AD_Create_Group
Description	Create a new AD group.

Create New Authentication Policy


Fixlet User Friendly Name	AD_Create_New_Authentication_Policy
Description	Creates a new authentication policy in AD.

Create Organizational Unit


Fixlet User Friendly Name	AD_Create_Organizational_Unit
Description	Create an organizational unit in an AD server.

Create User & Mirror Existing User Property


Fixlet User Friendly Name	AD_Create_User_&_Mirror_Existing_User_Property
Description	Copies the properties of existing user to new user. Also creates user and copies existing properties.

Disable User


Fixlet User Friendly Name	AD_Disable_User
Description	Disables an AD user.

Enable User


Fixlet User Friendly Name	AD_Enable_User
Description	Enables/Activates AD User account.

Get Authentication Policy Details


Fixlet User Friendly Name	AD_Get_Authentication_Policy_Details
Description	Checks the configured Authentication Policy in AD.

Get Inactive Computer


Fixlet User Friendly Name	AD_Get_Inactive_Computer
Description	Fetches the list of inactive computers.

Link GPO to OU


Fixlet User Friendly Name	AD_Get_Inactive_Computer
Description	Links Group Policy to Organisational Units (OUs).

List Expired Accounts


Fixlet User Friendly Name	AD_List_Expired_Accounts
Description	Fetches the details of all expired AD Accounts and displays all the properties of the respective user accounts.

Remove AD Sites


Fixlet User Friendly Name	AD_Remove_AD_Sites
Description	Removes/deletes AD sites.

Remove Group


Fixlet User Friendly Name	AD_Remove_Group
Description	Removes/deletes AD Groups specified by the user.

Remove Service Account


Fixlet User Friendly Name	AD_Remove_Service_Account
Description	Removes AD computer Service Accounts specified by the user.

Remove User


Fixlet User Friendly Name	AD_Remove_User
Description	Removes/Deletes a user from the AD.

Set User Email Attribute


Fixlet User Friendly Name	AD_Set_User_Email_Attribute
Description	Sets up the email & its attributes of an AD user.

Set User Phone Attribute


Fixlet User Friendly Name	AD_Set_User_Phone_Attribute
Description	Sets up phone numbers for an Active Directory User. Executed when user wants to set phone tab attribute for AD user. Phone number needs to be added to the User profile.

Update Group Policy


Fixlet User Friendly Name	AD_Update_Group_Policy
Description	Updates the group policy.

Check User Direct Membership


Fixlet User Friendly Name	AD_Check_User_Direct_Membership
Description	Checks if the user is a direct member of the AD group. Fetches the properties of user membership in AD.

Create & Add User to Group


Fixlet User Friendly Name	AD_Create_&_Add_User_To_Group
Description	Creates a new AD Group and adds a user into it.

Fetch Group Details


Fixlet User Friendly Name	AD_Fetch_Group_Details
Description	Fetches the details of a group by its SAM account name. Also shows the members groups.

Get User Details


Fixlet User Friendly Name	AD_Get_User_Details
Description	Checks if a user is present in AD and will give all its details.

Change Group Owner


Fixlet User Friendly Name	AD_Change_Group_Owner
Description	Changes, modifies, and updates the group owner of a group on a Windows server.

Check Installed Updates


Fixlet User Friendly Name	AD_Check_Installed_Updates
Description	Checks for, fetches, verifies, and validates the installed updates.

Clean Computer Object


Fixlet User Friendly Name	AD_Clean_Computer_Object
Description	Cleans and clears the AD computer objects.

Empty Group


Fixlet User Friendly Name	AD_Empty_Group
Description	Empties a given AD group if the user wants to remove all the users inside given group. Clears all group members in an AD.

Export Users Report


Fixlet User Friendly Name	AD_Export_Users_Report
Description	Fetches all groups and corresponding group members of AD server and saves it in a csv format. Also generates a report of all the groups and their members in AD.

Fetch Object Count


Fixlet User Friendly Name	AD_Fetch_Object_Count
Description	Counts the number of objects available in Active directory. Gets the count of AD objects in the active directory.

List Disabled Accounts


Fixlet User Friendly Name	AD_List_Disabled_Accounts
Description	Fetches the details of all the AD Accounts that are disabled. Also displays all the properties of the respective user accounts.

List Locked Out Accounts


Fixlet User Friendly Name	AD_List_Locked_Out_Accounts
Description	Lists all locked out accounts in Active Directory.

List Users Expiry Date


Fixlet User Friendly Name	AD_List_Users_Expiry_Date
Description	Displays the expiry date of the AD users.

List Users Profiles


Fixlet User Friendly Name	AD_List_Users_Profiles
Description	Lists user profiles on the current server that are configured.

List Users With Admin Rights


Fixlet User Friendly Name	AD_List_Users_With_Admin_Rights
Description	Lists all the users with admin access on AD server.

Max Domain Password Age


Fixlet User Friendly Name	AD_Max_Domain_Pswd_Age
Description	Finds out the maximum password age.

Modify Min Password Length Policy


Fixlet User Friendly Name	AD_Modify_Min_Password_Length_Policy
Description	Modifies the minimum length required for an account password in Active Directory.

Set Domain Mode


Fixlet User Friendly Name	AD_Set_Domain_Mode
Description	Allows the user to set the AD domain modes.

Show GroupMember Details


Fixlet User Friendly Name	AD_Show_GroupMember_Details
Description	Displays the details of all the members of a given AD group.

Total Enabled Accounts in OU


Fixlet User Friendly Name	AD_Total_Enabled_Accounts_In_OU
Description	Counts all the Enabled accounts in an AD server.

User Expire Date


Fixlet User Friendly Name	AD_User_Expire_Date
Description	Sets the expiration date for an Active Directory account.

User’s Last Logon Time


Fixlet User Friendly Name	AD_Users_Last_Logon_Time
Description	Fetches the last logon time of users.

Verify if User can Change Password


Fixlet User Friendly Name	AD_Verify_If_User_Can_Change_Password
Description	Verifies and confirms if the user can change password or not.

Update Computer Object with Name Time


Fixlet User Friendly Name	AD_Update_Computer_Object_With_Name_Time
Description	Updates AD Computer Objects description fields with user ID and time.

Delete Empty Group


Fixlet User Friendly Name	AD_Delete_Empty_Group
Description	Deletes/Removes empty AD groups.

Export Groups Report


Fixlet User Friendly Name	AD_Export_Groups_Report
Description	Fetches all groups and corresponding group members of AD server and saves it in csv format. Also generates reports of all the groups and their members in AD.

Group Membership


Fixlet User Friendly Name	AD_Group_Membership
Description	Lists Group Membership in AD.

Permission Object


Fixlet User Friendly Name	AD_Permission_Object
Description	Fetches AD permissions on an object.

Set User Expiry Date


Fixlet User Friendly Name	AD_Set_User_Expiry_Date
Description	Sets Expiry policy for AD user.

Update Manager


Fixlet User Friendly Name	AD_Update_Manager
Description	Updates the Update Manager in AD.