{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":32421,"path":"it-service-management/digital-end-user-experience-dex/dex-diff-ra.md","title":"Digital End-User Experience remedial actions","bundle":null,"doc_type":null,"release":"australia","body":"\n# Digital End-User Experience remedial actions\n\nServiceNow® Digital End-User Experience \\(DEX\\) provides base system remedial actions to resolve issues on DEX monitored devices.\n\n\n
\n\nRemedial action\n\n\n\nInput parameters\n\n\n\nSupported OS and required privileges\n\n\n\nDescription\n\n\n\nUse cases\n\n
\n\nAdd a registry key\n\n\n\n`registry_path`, `registry_data`, `registry_type`\n\n\n\nWindows: Local System Account for registry modifications, especially HKLM keysAdmin access to the device is required.\n\n\n\nAdds a registry key to the device using a fully qualified path, value, and type.The Windows registry key stores settings or configuration data for the device operating system and Windows applications.\n\n\n\nPush specific configurations remotely without Group Policy updates or manual device access. Possible use cases may include the following:- Configure Windows OS or app settings that require new registry entries. \\(Path example: HKCU\\\\ControlPanel\\\\TestColors\\\\WindowText.\\)\n- Apply security configurations or app behavior settings at the registry level.\n- Push targeted configuration changes without a Group Policy update.\n\n
\n\nClear application cache\n\n\n\n`app_name`, `auto_close` \\(closes the application before clearing the cache to confirm all cache files are cleared\\), `process_name` \\(for example, zoom.exe\\), `cache_path`\n\n\n\nWindows: Local System AccountmacOS: Sudo permissions\n\nAdmin access to the device is required.\n\n\n\nRemoves the app cache for the configured application on the device.\n\n\n\nApply a safe first-response fix for collaboration-app performance, sync, and crash issues caused by corrupted cache. Possible use cases may include the following:- Resolve Teams or Outlook performance issues, missing content, or sync errors from corrupted cache.\n- Fix Zoom video or audio quality issues attributed to corrupted cache files.\n- Free up disk space consumed by excessive app cache.\n\n
\n\nClear browser cache\n\n\n\n`browsers`\n\n\n\nWindows: Local System AccountAdmin access to the device is required.\n\n\n\nRemoves temporary data stored on the device, such as cookies and website files.\n\n\n\nRemove temporary browser data stored in your laptop to address slow device performance issues. Possible use cases may include the following:- Automatically clear browser cache when device performance degrades due to accumulated temporary files.\n- Fix display errors, stale content, and login issues in browser-based business apps.\n- Resolve website loading issues or authentication problems caused by stale cookies and cached data.\n\n
\n\nClear DNS cache\n\n\n\nNone\n\n\n\nWindows: No elevated privileges requiredmacOS: Sudo permissions\n\nAdmin access to the device is required.\n\n\n\nRemoves temporary data stored on your laptop, such as cookies and website files.\n\n\n\nResolve display errors and login issues caused by outdated browser cache instantly, without remote desktop or user involvement. Possible use cases may include the following:- Resolve web application loading issues from outdated or corrupted browser cache.\n- Fix display errors, stale content, and login issues in browser-based business apps.\n- Clear cache across multiple browsers in a single action execution.\n\n
\n\nClear Google Chrome browsing data\n\n\n\n`Remove web data` \\(true or false\\)\n\n\n\nWindows: Local System AccountmacOS: Sudo permissions\n\n\n\nDeletes Google Chrome browsing data to enhance speed, resolve page loading issues, and safeguard user privacy.\n\n\n\nResolve authentication loops and display failures caused by corrupted cookies or stale cached data. Possible use cases may include the following:- Resolve login or SSO authentication loops caused by corrupted Chrome cookies.\n- Fix Chrome-based web application display issues caused by outdated cached content.\n- Clear browsing data for privacy or compliance requirements.\n\n
\n\nClear Recycle Bin\n\n\n\nNone\n\n\n\nWindows: Local System AccountmacOS: No elevated privileges required\n\nAdmin access to the device is required.\n\n\n\nClears the recycle bin on the device.\n\n\n\nReclaim disk space consumed by deleted files that continue to take up storage. Possible use cases may include the following:- Recover disk space on devices where deleted files are accumulating in the Recycle Bin or Trash.\n- Address low-disk-space alerts where the Recycle Bin or Trash is a significant contributor.\n- Combine with Disk Cleanup for more comprehensive storage reclamation.\n\n
\n\nConfigure device power scheme\n\n\n\n`power_mode` \\(Low Power, Automatic, or High Power\\)\n\n\n\nmacOS: Sudo permissions\n\n\n\nConfigures the power scheme settings and optimizes the performance, energy efficiency and battery life of the device.\n\n\n\nAdjust macOS power settings remotely to match the user's context without requiring user action. Possible use cases may include the following:- Improve macOS performance by switching to High Power mode when a user reports sluggishness.\n- Extend battery life by switching to Low Power mode for remote or traveling employees.\n- Standardize power settings across macOS device fleets remotely.\n\n
\n\nDelete a file\n\n\n\n`file_name_or_path` — full filename or absolute file path.\n\n\n\nWindows: No elevated privileges required\n\n\n\nPermanently deletes the entered file \\(full file name or absolute file path\\) from the device.\n\n\n\nRemove specific files with IT-controlled precision when broader system changes aren't appropriate. Possible use cases may include the following:- Delete corrupted or blocker files preventing software installations or updates.\n- Remove files left over from failed uninstalls or incomplete cleanup operations.\n- Delete specific files as part of security incident response.\n\n
\n\nDelete network drive\n\n\n\naction \\(MAP or DELETE\\), drive\\_letter, network\\_path \\(for example, `\\\\server\\share`\\)\n\n\n\nWindows: Local System Account\n\n\n\nRemoves a mapped network drive from your system and disconnects access to the shared location.\n\n\n\nNetwork drive access issues are a common helpdesk request — mapping or removing drives remotely eliminates the need for IT remote desktop sessions or on-site visits. Possible use cases may include the following:- Re-map a disconnected network drive when a user loses access to a shared file location.\n- Provision new network drive access for new hires or team changes.\n- Remove outdated or incorrect drive mappings.\n\n
\n\nDisable startup program\n\n\n\n`startup_programs` \\(comma-separated list\\)\n\n\n\nWindows: Local System Account\n\n\n\nDisables the specified startup programs on the device.\n\n\n\nDisable startup programs categorized as non-essential with user approval to reduce boot time and improve device performance after login. Possible use cases may include the following:- Speed up device startup when it takes more than 2 minutes after power-on for the device to be ready to use.\n- Improve device performance after login when too many programs launch at once.\n- Reduce recurring startup delays caused by non-essential programs that launch automatically at startup.\n\n
\n\nDisk cleanup for low disk space\n\n\n\nNone\n\n\n\nWindows: Local System AccountmacOS: Sudo permissions\n\n\n\nPerforms disk cleanup to solve slow system performance due to insufficient disk space.\\*\n\n\n\nReclaim disk space automatically without user involvement or IT site visits. Possible use cases may include the following:- Recover disk space on devices with low storage before performance degrades.\n- Proactively address low-disk-space alerts as part of routine endpoint maintenance.\n- Reduce disk usage remotely without user involvement.\n\n
\n\nElevate temporary admin access\n\n\n\n`user_name` \\(Windows\\) or `user_id` as email \\(macOS\\)`duration` — dropdown: 1, 2, 4, or 8 hours\n\n\n\nWindows: Local System AccountmacOS: Sudo permissions\n\nAdmin access to the device is required.\n\n\n\nProvides temporary administrative privileges on the device for a period of time to perform specific tasks without compromising security.\n\n\n\nGrant just-in-time admin access that expires automatically, supporting zero-standing-privilege policies. Possible use cases may include the following:- Enable just-in-time admin access for software installations without permanent elevation.\n- Support PAM workflows with automatic, time-bound privilege expiry.\n- Reduce the risk of standing admin accounts on managed devices.\n\n
\n\nEnd process\n\n\n\n`process_name` or `pid`\n\n\n\nWindows: No elevated privileges requiredmacOS: Sudo permissions\n\n\n\nForcefully stops a running process on the device.\n\n\n\nStop a running process on your device to resolve slow computer performance issues caused by unresponsive programs or applications. Possible use cases may include the following:- Automatically end resource-intensive or background processes causing slow device performance.\n- Stop unresponsive or frozen applications.\n\n
\n\nExecute Jamf policy\n\n\n\n`policy_id` — the ID of the Jamf policy to execute\n\n\n\nmacOS: Sudo permissions\n\n\n\nExecutes the Jamf policy either with a policy ID or with a predefined action.Predefined actions, configured by DEX admins in dex\\_jamf\\_policy\\_table, can be selected and executed by service desk agents, who don't have access to the policy IDs.\n\n\n\nBring macOS MDM actions directly into DEX alert-driven automation without switching between platforms. Possible use cases may include the following:- Deploy or remove applications on Jamf-managed macOS devices directly from ServiceNow workflows.\n- Trigger any Jamf-managed policy without requiring the user to open Jamf Self Service.\n- Enforce software configurations or security policies through existing Jamf policies.\n\n
\n\nKill zombie/orphan processes\n\n\n\n`app_name`\n\n\n\nWindows: No elevated privileges requiredmacOS: Sudo permissions\n\nAdmin access to the device is required.\n\n\n\nResolves app hangs and frees the device resources.\n\n\n\nPossible use cases may include the following:- Resolve application unresponsive behavior caused by zombie \\(macOS\\) or orphan processes \\(Windows\\) consuming system resources.\n- Free up CPU and memory held by defunct or parentless processes identified via top processes diagnostics or DEX alerts.\n\n
\n\nMap network drive\n\n\n\n`drive_letter` \\(drive letter to which the network location is mapped\\)`network_path` \\(path of the shared network location to be mapped\\)\n\n\n\nWindows: No elevated privileges required\n\n\n\nMaps or removes a network drive using a specified drive letter and network path. These actions enable you to connect to shared resources on the network or help in cleaning up unused or outdated network connections.\n\n\n\nConnect to shared resources on the network or remove outdated mappings without IT remote desktop sessions or on-site visits. Possible use cases may include the following:- Re-map a disconnected network drive when a user loses access to a shared file location.\n- Provision new network drive access for new hires or team changes.\n- Remove outdated or incorrect drive mappings.\n\n
\n\nModify a registry key value\n\n\n\n`registry_path`, `registry_data`, `registry_type`\n\n\n\nWindows: Local System AccountAdmin access to the device is required.\n\n\n\nUpdates a registry key value using a fully qualified path, value \\(for example, `2222`\\), and type \\(for example, String, DWord\\).\n\n\n\nCorrect specific registry entries remotely without disruptive system-wide changes. Possible use cases may include the following:- Correct misconfigured registry values causing application or OS behavior issues.\n- Apply registry-level changes as part of automated remediation for known configuration drift.\n- Update application behavior through existing registry settings without manual device access.\n\n
\n\nModify device battery power plan\n\n\n\n`power_mode`\n\n\n\nWindows: Local System Account\n\n\n\nAdjusts device power plan settings using PowerShell scripts to optimize performance, energy efficiency, and battery life.\n\n\n\nAdjust device power plan settings to extend battery life and optimize energy efficiency and device performance. Possible use cases may include the following:- Automatically switch to balanced or power-saving modes to improve battery life on low-battery devices.\n- Address poor battery performance by enabling appropriate power modes based on device usage patterns.\n- Improve overall device performance and battery longevity by managing power consumption remotely.\n\n
\n\nModify USB storage access \\(Execute, Write, Read\\)\n\n\n\n`access` \\(Read, Write, or Execute\\), `value` \\(Allow or Deny\\)\n\n\n\nWindows: Local System Account\n\n\n\nAdjusts the following permissions:- Execute: controls whether programs or scripts can run directly from a removable USB storage device.\n- Read: allows or blocks the ability to read data from a removable USB storage device.\n- Write: allows or blocks the ability to write data to a removable USB storage device.\n\n\n\nLock down or restore USB access at the permission level instantly, without endpoint management console access. Possible use cases may include the following:- Lock down USB write access to prevent data exfiltration during a security investigation.\n- Restore specific USB permissions for an authorized use case after a temporary restriction.\n- Enforce DLP policies by restricting USB Execute access to prevent running unauthorized code.\n- Prevent unauthorized execution of files from USB devices.\n- Prevent data leakage or unauthorized file transfers to USB devices.\n\n
\n\nRemediate Zscaler connectivity\n\n\n\nNone\n\n\n\nWindows: Local System AccountmacOS: Sudo permissions\n\n\n\nFixes connectivity issues with Zscaler Private Access on the device.\n\n\n\nAutomate a fix for ZPA connection drops that leave remote employees cut off from internal applications. Possible use cases may include the following:- Resolve ZPA connectivity issues remotely without IT remote desktop access.\n- Fix ZPA connections stuck in a disconnected or failed state.\n- Enable automated remediation when Zscaler monitoring detects a failure.\n\n
\n\nRepair corrupt Outlook files\n\n\n\nNone\n\n\n\nWindows: Local System AccountYou require permissions for the folders where OST/PST files reside:\n\n- List folder/read data\n- Write attributes\n- Modify or delete subfolders and files\n\n\n\nDetects and repairs both OST and PST file types in Microsoft Classic Outlook on end-user devices.\n\n\n\nEnhance Microsoft Outlook performance and synchronization on end-user devices.The `SCANPST.exe` tool is used to fix files up to 2 GB in size. For larger files, the following behavior applies:\n\n- 2-20 GB: Performance degrades, success depends on the corruption severity.\n- 20-50 GB: Significantly reduced effectiveness, frequent failures are reported.\n- Over 50 GB: Very low success rate, tool struggles or fails completely.\n\n
\n\nReset Google Chrome browser settings\n\n\n\nNone\n\n\n\nWindows: Local System AccountmacOS: Sudo permissions\n\n\n\nResets the Google Chrome browser settings to default on all profiles of the current logged-in user.\n\n\n\nResolve corrupted Chrome settings and problematic extensions without reinstalling Chrome. Possible use cases may include the following:- Resolve browser issues from misconfigured or corrupted Chrome settings.\n- Remove conflicting or malicious Chrome extensions affecting browser behavior or security.\n- Restore Chrome stability when it is crashing or behaving unexpectedly.\n\n
\n\nReset network adapter\n\n\n\nNone\n\n\n\nWindows: Local System AccountmacOS: Sudo permissions\n\n\n\nResets the WiFi network adapter by turning it off and back on.\n\n\n\nResolve connectivity issues where the device shows a strong WiFi signal but experiences poor network performance or application timeouts. Possible use cases may include the following:- Speed up applications and web pages when network connectivity is degraded despite showing a strong WiFi signal.\n- Help identify if poor performance is caused by network issues rather than a slow device.\n- Restore WiFi connection with user approval when the adapter stops responding.\n\n
\n\nRestart Audio Services\n\n\n\n`service_name`\n\n\n\nWindows: Local System Account\n\n\n\nRestarts audio services to restore sound and microphone functionality.\n\n\n\nRestart audio services to restore sound and microphone functionality and resolve playback and recording issues on the device. Possible use cases may include the following:- Automatically restart audio services when sound or microphone functionality fails or becomes unresponsive.\n- Resolve microphone issues affecting communication applications like Zoom by restarting audio services.\n\nUse **AudioEndpointBuilder** and **Audiosrv** to restore sound and microphone functionality. This fixes common playback and recording issues on the device.\n\n
\n\nRestart Microsoft OneDrive\n\n\n\nNone\n\n\n\nWindows: Local System AccountmacOS: Sudo permissions\n\n\n\nRestarts Microsoft OneDrive on the device to resolve sync issues and update all recent changes, as long as the user is signed in to Microsoft OneDrive.\n\n\n\nResolve Microsoft OneDrive sync failures that block access to cloud-stored files, without user involvement or a reboot. Possible use cases may include the following:- Resolve Microsoft OneDrive sync failures or stuck uploads and downloads.\n- Fix Microsoft OneDrive showing as disconnected, paused, or stuck on \"syncing\".\n- Address OneDrive performance issues caused by a hung or unresponsive process.\n\n
\n\nRestart Microsoft Outlook\n\n\n\n`process_name`, `app_name`\n\n\n\nWindows: No elevated privileges required\n\n\n\nRestarts Microsoft Outlook on the device.\n\n\n\nRestart Microsoft Outlook on end-user devices to resolve application performance issues. Possible use cases may include the following:- Automatically restart Microsoft Outlook to resolve email synchronization delays or connection issues.\n- Resolve frozen or unresponsive Outlook windows by forcefully restarting the application.\n- Restore Microsoft Outlook functionality and stability.\n\n
\n\nRestart service\n\n\n\n`service_name` \\(for example, Spooler or \\)\n\n\n\nWindows: Local System AccountmacOS: Sudo permissions\n\nAdmin access to the device is required.\n\n\n\nRestarts the service or application running on the device.\n\n\n\nRestore failed or hung services without rebooting the device, minimizing user disruption. Possible use cases may include the following:- Restore a failed or hung service without rebooting the device.\n- Fix services that stopped after software updates \\(print spooler, VPN client, security agents\\).\n- Recover managed monitoring or security agents that have stopped responding.\n\n
\n\nUninstall an application\n\n\n\n`app_name` \\(selected from a pre-configured dropdown in the UI\\)\n\n\n\nWindows: Local System AccountAdmin access to the device is required.\n\n\n\nUninstalls a selected application from the action library on the device.\n\n\n\nEnforce software compliance remotely at scale by removing unauthorized or redundant applications. Possible use cases may include the following:- Remove unauthorized or prohibited software from managed devices without user action.\n- Enforce software compliance policies during audits or security reviews.\n- Support license reclamation by removing software from specific devices.\n\n
\n\nClear System Cache\n\n\n\nNone\n\n\n\nWindows: Local System Account\n\n\n\nRemoves temporary files and cache data from multiple system locations. It targets the- current logged-in user's profile temp directory- \\(%USERPROFILE%\\\\AppData\\\\Local\\\\Temp\\),\n- Windows system temp directory - \\(C:\\\\Windows\\\\Temp\\)\n- clears Windows Explorer thumbnail cache databases - \\(%USERPROFILE%\\\\AppData\\\\Local\\\\Microsoft\\\\Windows\\\\Explorer\\) to free up disk space and resolve performance degradation.\n\n\n\nReclaim disk space and resolve performance issues caused by accumulated temporary files and corrupted cache. Possible use cases may include the following:- Recover disk space on devices where temporary files are accumulating.\n- Fix broken file previews and thumbnail display errors by clearing Explorer cache databases.\n- Address system performance alerts as part of automated remediation workflows.\n\n
\n\nReset Printer Spooler\n\n\n\nNone\n\n\n\nWindows: Local System Account\n\n\n\nReset's the print spooler service by stopping the service, clearing queued print jobs, and restarting the service. This resolves common printing issues such as stuck or failed print jobs.\n\n\n\n- Remediate printer connectivity issues.\n- Resolve stuck print jobs, print queue corruption, or printer not responding without requiring device restart.\n\n
\n\nStart service\n\n\n\n`service_name`\n\n\n\nWindows: Local System Account\n\n\n\nStarts a Windows service that is currently not running. If the service has dependent child services, those are started as well. If one of several dependent services fails to start, the action reports a partial result and includes the error for the failed child service.\n\n\n\nRemediate Windows services that stop unexpectedly.\n\n
\n\nStop service\n\n\n\n`service_name`\n\n\n\nWindows: Local System Account\n\n\n\nStops a Windows service that is currently running, including dependent services \\(multi-level dependencies\\).\n\n\n\nGive admins/agents an explicit way to stop a Windows service and its dependents, distinct from the existing Restart service action, which assumes the service is already running.\n\n
**Note:** \\* For the Disk cleanup for low disk space action, temporary files are deleted from the following device locations.\n\n- Windows:\n - `C:\\Windows\"=\"*.dmp`\n - `\"C:\\Windows\\Downloaded Program Files\"=\"*.*\"`\n - `\"$env:UserProfile\\Appdata\\Local\\Microsoft\\Windows\\Temporary Internet Files\"=\"*.*\"`\n - `\"C:\\Windows\\Temp\"=\"*.*\"`\n - `\"C:\\Windows\\System32\\LogFiles\"=\"*.*\"`\n - `\"C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportQueue\"= \"*.*\"`\n- macOS:\n - $HOME/Library/Caches/\\*/ = cache files older than 7 days \\(excluding Homebrew\\)\n - $HOME/Library/Developer/Xcode/DerivedData/\\*/ = Xcode build artifacts \\(if Xcode is installed\\)\n - $HOME/Library/Caches/Homebrew/ = Homebrew package download cache \\(if Homebrew is installed\\)\n - $HOME/Library/Caches/Homebrew/\\*/ = Homebrew package download cache in subdirectories \\(if Homebrew is installed\\)\n - /tmp/\\*/ = temporary files older than 3 days\n\n**Parent Topic:**[DEX Application and Device Health reference](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-service-management/digital-end-user-experience-dex/dex-console-reference.md)\n\n"}}