┌─────────────────────────────────────────────────────────────────────┐
│                    NinjaOne Platform Architecture                    │
├─────────────────────────────────────────────────────────────────────┤
│                                                                     │
│  ┌──────────────────────────────────────────────────────────────┐  │
│  │                     NinjaOne Cloud                            │  │
│  │  ┌─────────────┐ ┌─────────────┐ ┌─────────────┐             │  │
│  │  │   Tenant    │ │  Policies   │ │   Scripts   │             │  │
│  │  │   Config    │ │   Engine    │ │   Library   │             │  │
│  │  └─────────────┘ └─────────────┘ └─────────────┘             │  │
│  └──────────────────────────────────────────────────────────────┘  │
│                              │                                      │
│         ┌────────────────────┼────────────────────┐                │
│         │                    │                    │                │
│         ▼                    ▼                    ▼                │
│  ┌─────────────┐     ┌─────────────┐     ┌─────────────┐          │
│  │ Organization│     │ Organization│     │ Organization│          │
│  │  Client A   │     │  Client B   │     │  Internal   │          │
│  │             │     │             │     │     IT      │          │
│  │ ┌─────────┐ │     │ ┌─────────┐ │     │ ┌─────────┐ │          │
│  │ │Servers  │ │     │ │Servers  │ │     │ │Servers  │ │          │
│  │ │(15)     │ │     │ │(25)     │ │     │ │(50)     │ │          │
│  │ ├─────────┤ │     │ ├─────────┤ │     │ ├─────────┤ │          │
│  │ │Workstns │ │     │ │Workstns │ │     │ │Workstns │ │          │
│  │ │(75)     │ │     │ │(150)    │ │     │ │(300)    │ │          │
│  │ └─────────┘ │     │ └─────────┘ │     │ └─────────┘ │          │
│  └─────────────┘     └─────────────┘     └─────────────┘          │
│                                                                     │
└─────────────────────────────────────────────────────────────────────┘

NinjaOne Tenant
├── Organizations (Clients/Departments)
│   ├── Client A Inc
│   │   ├── Location: Headquarters
│   │   └── Location: Branch Office
│   ├── Client B Corp
│   └── Internal IT
├── Policies
│   ├── Windows-Servers
│   ├── Windows-Workstations
│   ├── macOS-Workstations
│   └── Linux-Servers
└── Scripts
    ├── Remediation
    ├── Maintenance
    └── Inventory

Policy Name: Windows-Server-Production
Applies To: Windows Servers
 
Agent Settings:
  Check-in Interval: 1 minute
  Heartbeat Timeout: 5 minutes
  Proxy Mode: Disabled
 
Monitoring:
  CPU Alert: > 90% for 15 minutes
  Memory Alert: > 95% for 10 minutes
  Disk Space Alert: < 10% free
  Service Monitoring:
    - Windows Update
    - DNS Server
    - DHCP Server
    - Active Directory Domain Services
  Event Log Monitoring:
    - Security: Failed logins (4625)
    - System: Service crashes (7034)
    - Application: Errors
 
Patch Management:
  Scan Schedule: Daily at 2 AM
  Approval: Auto-approve security patches
  Install Window: Saturday 2 AM - 6 AM
  Reboot Behavior: Prompt user (servers require approval)
 
Backup Monitoring:
  Check for: Last backup within 24 hours
  Alert on: Backup failure
 
Antivirus:
  Scan Schedule: Weekly full scan Sunday 3 AM
  Real-time Protection: Enabled

Policy Name: Windows-Workstation-Standard
Applies To: Windows Workstations
 
Agent Settings:
  Check-in Interval: 5 minutes
  Heartbeat Timeout: 15 minutes
 
Monitoring:
  CPU Alert: > 95% for 30 minutes
  Memory Alert: > 95% for 30 minutes
  Disk Space Alert: < 15% free
  Disk Health: SMART monitoring enabled
 
Patch Management:
  Scan Schedule: Daily at 12 PM
  Approval: Auto-approve all (workstations)
  Install Window: Tuesday - Friday, 12 PM - 2 PM
  Reboot Behavior: Prompt user, force after 3 days
 
Software Updates:
  Chrome: Auto-update enabled
  Firefox: Auto-update enabled
  Adobe Reader: Auto-update enabled
  Zoom: Auto-update enabled
 
Security:
  BitLocker: Alert if not enabled
  Windows Defender: Verify enabled
  Firewall: Verify enabled

Policy Name: macOS-Workstation
Applies To: macOS Devices
 
Monitoring:
  CPU Alert: > 90% for 30 minutes
  Memory Alert: > 90% for 30 minutes
  Disk Space Alert: < 15% free
 
Patch Management:
  macOS Updates: Notify and install
  App Updates: Automatic via MDM
 
Security:
  FileVault: Alert if not enabled
  Firewall: Alert if not enabled
  Gatekeeper: Verify enabled

Policy Name: Linux-Server
Applies To: Linux Servers
 
Monitoring:
  CPU Alert: > 95% for 10 minutes
  Memory Alert: > 95% for 10 minutes
  Disk Space Alert: < 10% free
  Service Monitoring:
    - sshd
    - httpd/nginx
    - mysqld/postgresql
    - docker
 
Patch Management:
  Package Manager: Detect (apt/yum/dnf)
  Scan Schedule: Daily at 4 AM
  Install: Manual approval required

                    Patch Released
                          │
                          ▼
                  ┌───────────────┐
                  │ Auto-Approve? │
                  └───────┬───────┘
                         │
              ┌──────────┴──────────┐
              │                     │
         ┌────▼────┐          ┌─────▼────┐
         │Critical │          │  Other   │
         │Security │          │ Updates  │
         └────┬────┘          └─────┬────┘
              │                     │
              ▼                     ▼
        Auto-Approve          Review Queue
              │                     │
              └─────────┬───────────┘
                        │
                        ▼
              ┌─────────────────┐
              │ Install Window  │
              │ (Policy Based)  │
              └─────────────────┘

Name: Server-Weekly-Maintenance
Schedule: Saturday 2:00 AM - 6:00 AM
Applies To: Windows-Server-Production policy
Actions:
  - Install approved patches
  - Reboot if required
  - Run maintenance scripts

Name: Workstation-Daily-Patching
Schedule: Tuesday-Friday 12:00 PM - 2:00 PM
Applies To: Windows-Workstation-Standard policy
Actions:
  - Install approved patches
  - Prompt for reboot (defer up to 3 days)

Script Library/
├── Remediation/
│   ├── Restart-PrintSpooler.ps1
│   ├── Clear-BrowserCache.ps1
│   ├── Reset-NetworkStack.ps1
│   └── Repair-WindowsUpdate.ps1
├── Inventory/
│   ├── Get-InstalledSoftware.ps1
│   ├── Get-LocalAdmins.ps1
│   ├── Get-BitLockerStatus.ps1
│   └── Get-DiskHealth.ps1
├── Maintenance/
│   ├── Clear-TempFiles.ps1
│   ├── Optimize-Disk.ps1
│   └── Update-Defender.ps1
└── Security/
    ├── Set-PasswordPolicy.ps1
    ├── Disable-LegacyProtocols.ps1
    └── Enable-Firewall.ps1

<#
.SYNOPSIS
    Comprehensive system health check for NinjaOne custom fields.
.NOTES
    Run As: SYSTEM
    Schedule: Daily
#>
 
# Initialize results
$healthStatus = "Healthy"
$issues = @()
 
# Check disk space
$disk = Get-CimInstance Win32_LogicalDisk -Filter "DeviceID='C:'"
$freeGB = [math]::Round($disk.FreeSpace / 1GB, 2)
$freePercent = [math]::Round(($disk.FreeSpace / $disk.Size) * 100, 1)
 
if ($freePercent -lt 10) {
    $healthStatus = "Critical"
    $issues += "Low disk space: $freePercent% free"
} elseif ($freePercent -lt 20) {
    $healthStatus = "Warning"
    $issues += "Disk space warning: $freePercent% free"
}
 
Ninja-Property-Set diskFreeGB $freeGB
Ninja-Property-Set diskFreePercent $freePercent
 
# Check uptime
$os = Get-CimInstance Win32_OperatingSystem
$uptime = (Get-Date) - $os.LastBootUpTime
$uptimeDays = [math]::Round($uptime.TotalDays, 1)
 
if ($uptimeDays -gt 30) {
    if ($healthStatus -ne "Critical") { $healthStatus = "Warning" }
    $issues += "High uptime: $uptimeDays days"
}
 
Ninja-Property-Set uptimeDays $uptimeDays
Ninja-Property-Set lastReboot $os.LastBootUpTime.ToString("yyyy-MM-dd HH:mm")
 
# Check Windows Defender
$defenderStatus = Get-MpComputerStatus -ErrorAction SilentlyContinue
if ($defenderStatus) {
    if (-not $defenderStatus.RealTimeProtectionEnabled) {
        $healthStatus = "Critical"
        $issues += "Real-time protection disabled"
    }
    $signatureAge = ((Get-Date) - $defenderStatus.AntivirusSignatureLastUpdated).Days
    if ($signatureAge -gt 3) {
        if ($healthStatus -ne "Critical") { $healthStatus = "Warning" }
        $issues += "AV signatures $signatureAge days old"
    }
    Ninja-Property-Set defenderSignatureAge $signatureAge
}
 
# Check BitLocker
try {
    $bitlocker = Get-BitLockerVolume -MountPoint "C:" -ErrorAction Stop
    $blStatus = if ($bitlocker.VolumeStatus -eq "FullyEncrypted") { "Enabled" } else { "Disabled" }
    Ninja-Property-Set bitlockerStatus $blStatus
    if ($blStatus -ne "Enabled") {
        $issues += "BitLocker not enabled"
    }
} catch {
    Ninja-Property-Set bitlockerStatus "NotSupported"
}
 
# Check pending updates
try {
    $updateSession = New-Object -ComObject Microsoft.Update.Session
    $searcher = $updateSession.CreateUpdateSearcher()
    $results = $searcher.Search("IsInstalled=0 AND IsHidden=0")
    $pendingCount = $results.Updates.Count
    Ninja-Property-Set pendingUpdates $pendingCount
    if ($pendingCount -gt 10) {
        if ($healthStatus -ne "Critical") { $healthStatus = "Warning" }
        $issues += "$pendingCount pending updates"
    }
} catch {
    Ninja-Property-Set pendingUpdates -1
}
 
# Set overall health status
Ninja-Property-Set healthStatus $healthStatus
Ninja-Property-Set healthIssues ($issues -join "; ")
 
# Output summary
Write-Output "Health Status: $healthStatus"
Write-Output "Issues: $($issues.Count)"
foreach ($issue in $issues) {
    Write-Output "  - $issue"
}

<#
.SYNOPSIS
    Collect installed software inventory.
.NOTES
    Run As: SYSTEM
    Schedule: Weekly
#>
 
$software = @()
 
# Get installed software from registry
$paths = @(
    "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\*",
    "HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\*"
)
 
foreach ($path in $paths) {
    $software += Get-ItemProperty $path -ErrorAction SilentlyContinue |
        Where-Object { $_.DisplayName } |
        Select-Object @{N='Name'; E={$_.DisplayName}},
                      @{N='Version'; E={$_.DisplayVersion}},
                      @{N='Publisher'; E={$_.Publisher}},
                      @{N='InstallDate'; E={$_.InstallDate}}
}
 
# Remove duplicates
$software = $software | Sort-Object Name -Unique
 
# Format for custom field (limited size)
$topSoftware = $software | Select-Object -First 50 | ForEach-Object {
    "$($_.Name) v$($_.Version)"
}
 
Ninja-Property-Set softwareCount $software.Count
Ninja-Property-Set softwareList ($topSoftware -join "`n")
 
Write-Output "Installed Software: $($software.Count) items"
$software | Format-Table Name, Version, Publisher -AutoSize

Condition Name: Low-Disk-Space-Remediation
Trigger: Custom Field "diskFreePercent" < 15
Action: Run Script "Clear-TempFiles.ps1"
Notification: Email IT Team

Condition Name: Critical-Service-Down
Trigger: Service "Spooler" not running
Action: Run Script "Restart-Service.ps1" -ServiceName Spooler
Notification: Create ticket (if integrated)

Channel Name: IT-Team-Email
Type: Email
Recipients:
  - it-team@company.com
  - oncall@company.com

Channel Name: IT-Alerts-Slack
Type: Webhook
URL: https://hooks.slack.com/services/XXX/YYY/ZZZ
Format: JSON

Alert Name: Server-Critical-Alerts
Applies To: Windows-Server-Production
Conditions:
  - CPU > 95% for 10 minutes
  - Memory > 98% for 5 minutes
  - Disk < 5% free
  - Service down (critical services)
  - Device offline > 10 minutes
Priority: Critical
Channels: IT-Team-Email, IT-Alerts-Slack

Alert Name: Workstation-Alerts
Applies To: Windows-Workstation-Standard
Conditions:
  - Disk < 10% free
  - Device offline > 4 hours
  - Security software disabled
Priority: Warning
Channels: IT-Team-Email

Sync Settings:
  Organizations: Bi-directional
  Devices:
    - Sync to IT Glue/Hudu: Yes
    - Fields: Name, OS, IP, MAC, Serial, User
    - Update Frequency: Daily
  Credentials:
    - Sync passwords: Yes (local admin, etc.)

Report Name: Monthly-Executive-Summary
Schedule: 1st of month at 8 AM
Recipients: executives@company.com
Content:
  - Device count by organization
  - Alert summary
  - Patch compliance percentage
  - Uptime statistics
  - Ticket summary (if PSA connected)

Report Name: Weekly-Operations
Schedule: Monday 7 AM
Recipients: it-team@company.com
Content:
  - Devices with issues
  - Patch status by organization
  - Failed scripts
  - Offline devices
  - Upcoming maintenance