I have a recurring #BigFix fixlet that is reapplied 1/day if the last #gpupdate was more than 24 hours ago. This helps mitigate off-site devices that may only have brief VPN connections. Failures help identify devices having issues.

BigFix #RelevanceLanguage: `( ( maximum of (time generated of it) of records whose (source of it contains "SceCli") of application event log < now - 24*hour ) OR ( not exists ( records whose (source of it contains "SceCli") of application event log ) ) )`

Note: If you do not have #DirectAccess or a similar solution, I would advise adding a relevance phrase to make sure the endpoint has a secure connection to a #DomainController... perhaps by IP range or subnet.

BigFix #ActionLanguage: `waithidden gpupdate /force`

#endpointManagement

Wrote #BigFix #RelevanceLanguage to return the #WakeOnLAN #BIOS settings for a #Lenovo. Next up #Dell. I am a little concerned about the calculation time. However, it should be okay since the cadence can be infrequent. BIOS settings shouldn't be changing that often. #Windows relevance included for scale. #EndpointManagement

```
Q: following text of last "," of (string values of selects "CurrentSetting from Lenovo_BiosSetting WHERE InstanceName = 'ACPI\\PNP0C14\\1_0'" of wmi "root\wmi:Lenovo_BiosSetting")
A: Enable
T: 331.812 ms

Q: ( name of operating system as lowercase contains "win" )
A: True
T: 0.380 ms
```