Appearance
Runbook Template Gallery
Junto ships with 43 ready-to-use runbook templates across seven categories. Each template includes pre-built steps, required inputs, and integration mappings — use them as-is or customize them for your environment.
Templates come in three modes:
- AI Agent Fully autonomous — the AI agent executes every step
- Hybrid AI-assisted — automated steps with human decision points
- Human Technician guide — structured procedure for manual execution
User Management & Lifecycle
Automate the most common identity workflows across Microsoft 365 and your PSA.
New User Onboarding Hybrid
Create M365 accounts, assign licenses, add to security groups, configure mailbox settings, and log everything to ConnectWise.
Required integrations: ConnectWise PSA, CIPP
User Offboarding Hybrid
Disable accounts, revoke active sessions, reset passwords, convert mailbox to shared, remove licenses, and document in ConnectWise.
Required integrations: ConnectWise PSA, CIPP
Microsoft 365 Password Reset Hybrid
Reset a user's M365 password, optionally force MFA re-registration, and notify the user with their temporary credentials.
Required integrations: ConnectWise PSA, CIPP
Inactive Account Cleanup AI Agent
Scan for accounts with no sign-in activity over a configurable period, disable them, and create a summary ticket.
Required integrations: ConnectWise PSA, CIPP
Security & Incident Response
Investigate threats, respond to phishing, and audit security posture.
Compromised Account Investigation Hybrid
Investigate a potentially breached account — check sign-in logs, review inbox rules, revoke sessions, reset credentials, and escalate if needed.
Required integrations: ConnectWise PSA, CIPP
Phishing Email Response Hybrid
Trace a reported phishing email, block the sender, check if other users received it, assess who clicked, and remediate affected accounts.
Required integrations: ConnectWise PSA, CIPP
Endpoint Isolation & Threat Response Hybrid
Isolate a compromised endpoint from the network, collect forensic data, and coordinate remediation with the technician.
Required integrations: ConnectWise PSA, SentinelOne, NinjaOne
Audit & Compliance
Run recurring audits to maintain security standards and catch configuration drift.
MFA Coverage Audit AI Agent
Identify users without MFA enabled, generate a coverage report, and create a ticket with remediation steps.
Required integrations: ConnectWise PSA, CIPP
MFA Conditional Access Audit AI Agent
Verify that conditional access policies enforce MFA correctly and flag gaps or misconfigurations.
Required integrations: ConnectWise PSA, CIPP
Admin Account Review AI Agent
Audit all accounts with administrative privileges, flag unnecessary admin access, and recommend least-privilege adjustments.
Required integrations: ConnectWise PSA, CIPP
Shared Mailbox Audit AI Agent
Inventory all shared mailboxes, review delegate access, flag mailboxes with direct login enabled, and report findings.
Required integrations: ConnectWise PSA, CIPP
Inbox Rules Scan AI Agent
Scan user mailboxes for suspicious forwarding rules or auto-delete rules that could indicate compromise.
Required integrations: ConnectWise PSA, CIPP
Conditional Access Policy Drift AI Agent
Compare current conditional access policies against a known-good baseline and flag unauthorized changes.
Required integrations: ConnectWise PSA, CIPP
Sign-in Anomaly Detection AI Agent
Detect unusual sign-in patterns — impossible travel, unfamiliar locations, legacy auth usage — and escalate findings.
Required integrations: ConnectWise PSA, CIPP
Security Awareness Review Hybrid
Review security training completion rates, phishing simulation results, and recommend follow-up actions.
Required integrations: ConnectWise PSA, usecure
Training Compliance Audit AI Agent
Audit security training enrollment and completion status across all users and flag overdue learners.
Required integrations: ConnectWise PSA, usecure
Proactive Maintenance
Catch issues before they become tickets.
Patch Compliance Sweep AI Agent
Check all managed endpoints for pending patches older than 14 days and create a summary ticket with affected devices.
Required integrations: ConnectWise PSA, NinjaOne
Server Health Check Hybrid
Inspect CPU, memory, disk usage, critical services, and network connectivity on a server. Flag any metrics outside thresholds.
Required integrations: ConnectWise PSA, NinjaOne
AV Health Audit AI Agent
Verify antivirus agent deployment, check definition currency, and flag endpoints with outdated or missing protection.
Required integrations: ConnectWise PSA, SentinelOne
Endpoint Health Audit AI Agent
Check RMM agent connectivity, verify device check-in status, and identify endpoints that have gone offline.
Required integrations: ConnectWise PSA, NinjaOne
Network Health Check AI Agent
Verify network device health, review active alerts, and check uplink status across monitored sites.
Required integrations: ConnectWise PSA, Auvik
Certificate & Domain Expiration AI Agent
Track SSL certificate and domain registration expiration dates, and create tickets for upcoming renewals.
Required integrations: ConnectWise PSA, CIPP
Uptime & Reboot Management AI Agent
Identify endpoints with extended uptime that need rebooting, and coordinate scheduled reboots.
Required integrations: ConnectWise PSA, NinjaOne
RMM Agent Health Check Hybrid
Audit RMM agent versions, connectivity status, and deployment coverage across managed endpoints.
Required integrations: ConnectWise PSA, NinjaOne
Change Management
Plan, execute, and verify changes with built-in safety checks.
Software Deployment Hybrid
Deploy software packages to targeted endpoints, verify installation, and document results in ConnectWise.
Required integrations: ConnectWise PSA, NinjaOne
Conditional Access Rollout Hybrid
Deploy conditional access policies to an M365 tenant with a staged rollout plan and rollback steps.
Required integrations: ConnectWise PSA, CIPP
Email Security Policy Update Hybrid
Update Microsoft 365 email security policies (anti-phishing, anti-spam, safe links) with validation and rollback plan.
Required integrations: ConnectWise PSA, CIPP
Post-Change Verification AI Agent
After a deployment or configuration change, verify that all systems are functioning as expected and flag any regressions.
Required integrations: ConnectWise PSA, CIPP, NinjaOne
Client Lifecycle
Standardize how you onboard, baseline, and review client environments.
Tenant Health Baseline Hybrid
Perform a comprehensive inventory of an M365 tenant — users, licenses, policies, security settings — to establish a configuration baseline.
Required integrations: ConnectWise PSA, CIPP
Tenant Baseline Audit AI Agent
Compare current tenant configuration against an established baseline and report drift.
Required integrations: ConnectWise PSA, CIPP
Security Scorecard AI Agent
Calculate an overall security posture score based on MFA adoption, admin accounts, conditional access, and endpoint protection.
Required integrations: ConnectWise PSA, CIPP, SentinelOne
Support & Troubleshooting
Guided diagnostics for common support scenarios.
Slow Computer Diagnosis Hybrid
Walk through performance diagnostics — CPU, memory, disk, startup programs, running processes — and recommend fixes.
Required integrations: ConnectWise PSA, NinjaOne
Outlook Sync Troubleshooting Hybrid
Diagnose Outlook synchronization issues — check connectivity, profile configuration, mailbox health, and cached mode settings.
Required integrations: ConnectWise PSA, CIPP
VPN Connectivity Troubleshooting Hybrid
Diagnose VPN connection failures — check client configuration, network connectivity, authentication, and firewall rules.
Required integrations: ConnectWise PSA, NinjaOne
Disk Space Cleanup Hybrid
Identify large files, temp folders, and old profiles consuming disk space, then clean up with technician approval.
Required integrations: ConnectWise PSA, NinjaOne
System Hygiene & Administration
Keep your managed environments clean and cost-efficient.
License Waste Audit AI Agent
Identify unused or underutilized Microsoft 365 licenses by analyzing sign-in activity against assigned licenses.
Required integrations: ConnectWise PSA, CIPP, Pax8
License True-Up Hybrid
Reconcile actual license usage against purchased quantities and recommend adjustments.
Required integrations: ConnectWise PSA, CIPP, Pax8
Stale Endpoint Cleanup AI Agent
Identify endpoints that haven't checked in within a configurable period and flag them for removal or investigation.
Required integrations: ConnectWise PSA, NinjaOne
Disk Space Audit AI Agent
Scan all managed endpoints for low disk space and create tickets for devices below threshold.
Required integrations: ConnectWise PSA, NinjaOne
RMM Coverage Audit AI Agent
Compare known endpoints against RMM-managed devices to identify gaps in monitoring coverage.
Required integrations: ConnectWise PSA, NinjaOne