Scripts
Automation scripts for Threat Prevention agent management are provided in the following Knowledge Base articles as example reference implementations only.
Agent Connection Lost After Upgrading
After upgrading or patching to a new build, the Netwrix Threat Prevention Agent may show as Lost Connection in the Threat Prevention Console due to duplicate host entries in the NVMonitorConfig database. This article explains how to identify and resolve the issue.
Automating Custom-Managed Certificate Signing and Deployment for Netwrix Threat Prevention Windows Agents
Learn how to automate custom-managed certificate signing and deployment for Netwrix Threat Prevention Windows Agents using PowerShell Remoting and Microsoft AD CS. This article provides an example reference automation workflow.
Duplicate Threat Prevention Windows agent entries
Use these steps to remove duplicate Netwrix Threat Prevention Windows agent entries from the Netwrix Threat Prevention Admin Console. The procedure covers stopping services, inspecting the `nvmonitorconfig` server table, removing duplicate records, and restarting services.
How To Configure Mixed Version Mode in Threat Prev
Learn how to configure Mixed Version Mode in Netwrix Threat Prevention Enterprise Manager, including how the Pre735Port key and root.dat certificate control mixed mode and how to enable or disable it.
Remote Deployment of Threat Prevention Agent in Custom-Managed Certificate Mode
Learn how to remotely stage Netwrix Threat Prevention Windows Agents in custom-managed certificate mode using PowerShell Remoting. This article provides an example reference deployment workflow.
SIAgent Hotfix Summary
This article details the changes and behaviors associated with the SIAgent versions 7.3.6.331 to 7.3.9.7, including fixes for specific issues related to Microsoft updates and debug file management.
Threat Prevention Agents in "Unknown" State Follow
After upgrading Netwrix Threat Prevention to 7.3.5, agents may appear in an unknown state. This article explains the root cause and provides step-by-step remediation to restore agent status.