@dustinb3403 said in Checking multiple Directories to confirm all files are identical:

I know I could use a tool like Create-Synchronicity to force 1 other directory to match the source, but I would prefer to find and list the differences in the directories.
Maybe powershell can help?

Yeah, PowerShell can help with this in the same way closing the front door of a house will fix a fire inside of it.

@flaxking said in Windows Defender Application Control:

@obsolesce said in Windows Defender Application Control:

@ccwtech said in Windows Defender Application Control:

@obsolesce said in Windows Defender Application Control:

@ccwtech said in Windows Defender Application Control:

Has anyone played with Windows Defender Application Control, specifically Group Policy to turn it on for each workstation?

I have a request from a client to do this, but I am very leery of using group policy for something like this.

Are they all running Win 10 Enterprise?

For sure no... Win 10 Pro.

Then it won't work as it's a requirement.

I think specifically it's using Group Policy for WDAC that's enterprise edition only, right?

Yes, you can use it in Pro, just not enforced by a GPO

You still should be able to run powershell via manage engine Desktop Central. https://www.manageengine.com/products/desktop-central/powershell-script-as-a-package.html

It looks like you can run locally leveraging Desktop Central. You aren't doing powershell remoting.

@frodooftheshire said in Safely transferring sensitive information:

Hi everyone,

I have a non profit client that asked me yesterday about sending/receiving sensitive information (SS numbers for example).

Currently when they're looking for volunteers data is sent from the volunteer's email address to an employees account (in charge of finding volunteers & using Google Workplace account) and then to the director's email address (Again Google Workplace account).

They were looking to implement DocuSign to more securely handle this process but I wanted to see if anyone else had any other recommendations.

DocuSign is for e-signatures which doesn't sound like what is needed.

How about a secure form app? Sound like it would get the job done much better than email. Formstack for example seems like a good example, I'm sure there are plenty to pick from.

Non-profits often have different pricing as well.

@dashrender said in WinRM: Security Question:

@gjacobse said in WinRM: Security Question:

@stacksofplates said in WinRM: Security Question:

https://www.manageengine.com/products/desktop-central/help/computer_configuration/executing_custom_scripts.html

Thanks -
Guess it will have to do... sigh.

I wonder if you can run powershell scripts by typing powershell first?

Is there a way to copy files to the computers with ME?

Seems like it is possible.

3c712099-6a8d-4e24-8fde-67a9e53cdbf3-image.png

@jaredbusch said in sudo problems:

@pete-s said in sudo problems:

@jaredbusch said in sudo problems:

@scottalanmiller said in sudo problems:

@jaredbusch said in sudo problems:

@scottalanmiller said in sudo problems:

@pete-s said in sudo problems:

We want to move to using ssh certificates on our servers and remove all passwords.

That's what we do.

Since when? What do you use to manage and generate certificates?

Generate with ssh-keygen. Manage with a wiki. We are only so big, so it works fine.

That is not certificates. That is keys. Completely different.

I don't know what @scottalanmiller uses but ssh-keygen is used to generate ssh certificates as well.

From the man page:
ssh-keygen supports signing of keys to produce certificates that may be used for user or host authentication. Certificates consist of a public key, some identity information, zero or more principal (user or host) names and a set of options that are signed by a Certification Authority (CA) key. Clients or servers may then trust only the CA key and verify its signature on a certificate rather than trusting many user/host keys. Note that OpenSSH certificates are a different, and much simpler, format to the X.509 certificates used in ssl(8).

But if you are automating certificate generation, you need to wrap this in something.

No, ssh-keygen does not do this (ssh certificate generation).

As you highlight, it can be used as part of the certificate process. But it cannot, and never will, be the certificate authority. Thus it is not the tool for this this.

You're actually mistaken because I've done it many times now. A Certification Authority, when it comes to openssh certificates, is really just a key pair that you carefully guard.

You create certificates by using the CA keys to sign other public keys from users and hosts. The result is a certificate named *-cert.pub

And you do all of this with the ssh-keygen utility.

Similar to how you can create CA and everything else for the more complex x509 certificates with just openssl.

@dashrender said in Remotely Update environment Variables in Windows 7?:

@wrcombs said in Remotely Update environment Variables in Windows 7?:

@dashrender said in Remotely Update environment Variables in Windows 7?:

https://searchvirtualdesktop.techtarget.com/tip/Tips-for-running-PowerShell-against-remote-Windows-7-desktops

Thanks !

Looks like going on site is still required because I have no idea if IIS is already installed - my guess is it isn't.

oh well, good information to have if I ever need it in the future.

Yeah, if you're going on site - skip all this and just put on VNC.

my thoughts exactly, But I figured if there was a way to do this without having to go on site, it would make it so much easier.
guess I can mark this as solved.

@scottalanmiller said in Network Admins: What are your daily BEST PRACTICE:

@travisdh1 said in Network Admins: What are your daily BEST PRACTICE:

@scottalanmiller said in Network Admins: What are your daily BEST PRACTICE:

@travisdh1 said in Network Admins: What are your daily BEST PRACTICE:

@irj said in Network Admins: What are your daily BEST PRACTICE:

@travisdh1 said in Network Admins: What are your daily BEST PRACTICE:

@scottalanmiller said in Network Admins: What are your daily BEST PRACTICE:

@mrwright4hire said in Network Admins: What are your daily BEST PRACTICE:

@dbeato said in Network Admins: What are your daily BEST PRACTICE:

@mrwright4hire said in Network Admins: What are your daily BEST PRACTICE:

What are some

You should always have good old WireSHark, nmap included and a great network scanner.

@dbeato what do you use for a network scanner? I use Advanced IP Scanner.

I use nmap, so much faster and easier.

Generally a full subnet scan using nmap is much slower than Advanced IP Scanner.

I'm annoyed that I even know this right now, such is the state of the documentation we have.

You aren't using Nmap properly... It's so configurable and definitely faster than any GUI scanner.

While true, I'd have to install nmap first and the boss has advanced-ip-scanner already there, sad as it is.

I bet I can install it faster than you can use Advanced IP Scanner, lol.

choco install nmap -y

It's SO fast.

Oh, I'm adding choco everywhere I can, but they haven't even deployed that!

What? That's the easiest way to deploy AIPS! What the heck are people DOING over there?

Being your typical American MSP and going after billing hours instead of good business.

@gjacobse second on Viking we use and resell them

@dashrender said in Windows images - ACHI or RAID/RST?:

@scottalanmiller said in Windows images - ACHI or RAID/RST?:

@dashrender said in Windows images - ACHI or RAID/RST?:

@dustinb3403 said in Windows images - ACHI or RAID/RST?:

@dashrender

@dashrender said in Windows images - ACHI or RAID/RST?:

then MS needs to include the RST driver in their images.

From you bringing it into the conversation. This isn't on Microsoft to include, this is on the hardware vendor to include.

Not really - MS includes most of the in use drivers these days - they started including Dell and HP RAID drivers for example.

That's really neither here nor there.

LOL- but if Intel/Dell and whatever other OEM's (I've read Asus is doing the same thing as Dell - RST by default) then they (Intel, etc) will need to get MS to include the RST driver.

It's up to the product vendor to run through the HLK certification process among a few other steps prior to Microsoft approving the driver for distirubtion from within the OS.

This is not a Microsoft thing. This is an OEM/ODM thing with Dell being the offending OEM at this time.

@jim9500 said in File Corruption on Copy Issue:

it was something mid flight. Intel drivers seems to make the most sense.

It WAS mid-flight. That's known. What is a guess is that the driver is at fault. But I'd say that it is pretty likely.

Installing MS SQL Server on Ubuntu 20.04...

Just do this, copy past and voila. So much easier than walking someone through opening a menu...

wget -qO- https://packages.microsoft.com/keys/microsoft.asc | sudo apt-key add - sudo add-apt-repository "$(wget -qO- https://packages.microsoft.com/config/ubuntu/20.04/mssql-server-2019.list)" sudo apt-get update sudo apt-get install -y mssql-server curl sudo /opt/mssql/bin/mssql-conf setup systemctl status mssql-server --no-pager

Done. With that SQL Server is installed, configured, and enabled! You can start using immediately. Try to do that on Windows!

We don’t enforce a default either, but our primary app vender only Likes Chrome.

@dashrender said in Webroot status:

I have one client (well, x-client now) that just moved away from it because the new owners used something else, but up to the beginning of June, they were on it with no issues.

Unless "paying for something that has a negative impact on them" is an issue. To a business, that is always an issue. It's a "loss event" just like any other, similar to a small outage or dataloss. It's a business mistake that causes measurable lost revenue and puts other revenue at risk. So while a hobby could classify it as "not having any issue", no actual business can.

@gjacobse Set up the Hyper-V host from scratch about 60-75 minutes up to date.

Set up the required base OS virtual machines about 45-60 minutes (count does not matter).

Greenfield Active Directory, OUs, GPOs, DNS, DHCP, Folders, and Shares about 45-60 minutes.

Import and configuration of base GPOs about 60 minutes.

Exchange on-premises about 30 minutes post Exchange install.

Script to set up users, their groups, and their mailbox about 60 minutes.

Time to run the script: 60 seconds.

Done.

User count does not matter. All in PowerShell.

And yes, all of our clients are on-premises Exchange.

EDIT: We charge a flat fee for the above.

@eleceng Pic the server setup with the cover open, the motherboard, the motherboard's make and model, and the power supply make and model.

We've been building servers for eons. We may have a compatible PSU sitting in our bin or at least be able to indicate what to get from auction site(s).

As far as activation goes, does Safe Mode work?

EDIT: Boot the VM to Server 2003 .ISO --> Recover --> CMD --> slgmr /rearm [ENTER].

@jaredbusch You are totally right, I just tested again and it only allowed me to mount the ISO. So @ElecEng ignore that one.