@EddieJennings said in Use PowerShell to Disable UAC on Windows 10:

@Obsolesce said in Use PowerShell to Disable UAC on Windows 10:

What special case needs UAC completely off?

I'm curious about this as well.

Installing malware 🙂

@scottalanmiller said in Automated NextCloud Backup to Wasabi or Amazon S3:

@VoIP_n00b said in Automated NextCloud Backup to Wasabi or Amazon S3:

@scottalanmiller said in Automated NextCloud Backup to Wasabi or Amazon S3:

It is indeed. It's running now.

How much data? How long is it taking?

Note: Use the -P/--progress flag to view real-time transfer statistics 🙂

260GB or so, nothing crazy. Not sure, ran it overnight.

Also, WTF... Who watches backups real time?

Ok HP clarifies and said USB A is not powerful enough to deliver a meaningful charge.

https://store.hp.com/us/en/tech-takes/3-different-ways-to-charge-laptop-without-charger

@JasGot said in Skyetel Postcards Redirect Issue:

I believe ./run.sh restarts all services, and I suspect that includes Nginx.

Yes, Nginx is inside a Docker container. But there are three.

All you need is...

systemctl start docker systemctl enable docker

And you are good to go. It's just a process that needs to be started like any other. There's nothing to know about Docker in this instance. Think of it as the server itself, it just needs to be turned on.

Found it -- test-compliance.

@Pete-S said in Is certbot the best way to handle Let's Encrypt certs?:

@stacksofplates said in Is certbot the best way to handle Let's Encrypt certs?:

Lego is another good one from what I've seen. It does all 3 challenge types.

https://go-acme.github.io/lego/

Thanks, might have a look at it next time.

I went with certbot this time because it was very clear what needed to be done. Debian has a package for it's all you need to do is have a http server up and running and then:

# apt-get install certbot python-certbot-apache # certbot --apache

It will do everything for you - create & install the certificate, set up redirection from http to https, set up a job that updates the cert etc.

The site has instructions for every common OS (redhat, ubuntu etc) and http daemon (apache, nginx etc) combination.
https://certbot.eff.org/lets-encrypt/debianbuster-apache

Yeah certbot is the easiest. Lego is just more flexible and you only need the binary. Def start with the easiest for now.

EdkJFXDVoAEXM2i.png

@gjacobse said in NextCloud: Chmod user folders:

Oh - no - the syntax is incorrect for ownership.

sudo chown

Yes,

chown to change owner chmod to change mode (permission)

Remember you can always do man chown to see the syntax.

@scottalanmiller said in MeshCentral Run Commands on Multiple Computers at Once:

"Starting with MeshCentral v0.5.85, you can now select "Run Commands" in the group actions or device actions. Allows running shell commands on many devices at once."

Ecq0qLrUcAEBBek.png

Wow, this is going to really change the way we use Mesh! Awesome stuff!

That seems to have fixed the issue

@ilyas said in Reset 120 Day Grace Period for Windows RDS Server with PowerShell:

@scottalanmiller

Hi, Thanks for wonderful script that save my time.
Could You please guide me how we can run this script on multiple servers?

I tried foreach PowerShell method but it does not work.

From the ISE, load the script and then enter-pssession for each system. Once connected, run the script from the ise. Sorted.

@Texkonc said in Internet outage:

@JaredBusch said in Internet outage:

@PhlipElder said in Internet outage:

@JaredBusch said in Internet outage:

@PhlipElder said in Internet outage:

https://www.cloudflarestatus.com/incidents/46z55mdhg0t5

Hmmm ... this from a little over a year ago.

Same "problem".

Routing is not magic. Errors happen.

That may be so, but the expectation is that the same errors would not happen over and over again.

FFS It is not the same. Are you stupid?

Jesus, calm down. No one pissed in your corn flakes...

No kidding. Don't go all Boomtown Rats on me. 😛

So far the rebuild appears to be still working. It ran all night. No complaints yet.

We know this is a domain, we don't know that the user is using a Windows PC. @AshKetchum is this a Windows PC? Also why the need to do so discreetly?

You can do as Travis/Jared said or use something like scp to do this.

I ran some test on a VM and created some groups and added some top-level directories for those groups.

Changed the group on each top-level directories and files below recursively with chown -R.

Set directories to permission 2770 and files to 0660 with chmod -R.

Changed smb.conf and added create mask=0660 and directory mask=2770.

Now new files and directories created on the share have the right permission and belongs to the right group automatically, simply depending on what group the top-level directory belongs to.

If you're not a member of a group, you will not even see the directories or files that belongs to that group.

I think this is a good interim solution without too much work. Then moving to onedrive or whatever can be done in the future on a department to department basis.

Only admin required for adding users is to add them to linux/samba and make sure they become members of the right groups.

It's also very simple to make a separate share out of the top-level folders if you wanted.

@JaredBusch

Everything works fine now.

The issue was a DNS resolution for devices within the LAN. I added an A record on the router for split dns. That solved the problem.

Thank you so much for your support

@Pete-S said in What's behind the scenes of Windows network discovery?:

Just found out with some network sniffing that Win 10 is not using DNS to find the IP for hostnames. It's using multicast queries. WTF.

First something called LLMNR (Link-local Multicast Name Resolution). If you ping xyz, it will ask for xyz.

Secondly it will use mDNS (multicast DNS). If you ping xyz, it will ask for xyz.local.

Well, I found out why.

If you don't have a DNS suffix in the network settings, Win10 will use multicasting to try to resolve a hostname that doesn't have a top-level domain suffix (such as xyz).

If you have a DNS suffix in your settings, it will use standard DNS.

@Grey said in Powershell countdown on servers?:

@Pete-S said in Powershell countdown on servers?:

@Grey

If you wanted to show the progress % you could do something like this as well:

$quantity = $systems.count $i = 0 foreach ($server in $systems){ //stuff $i = $i + 1 $progress = 100 * $i / $quantity }

Another trick is to not count it at all, just print a dot (".") for each iteration.
.........

Tested and this needs a try/catch for a divide by zero. The math is also off.
9d767202-8760-4564-a5fa-0f1adc903aea-image.png

You probably had --$quantity still in there. It decreases $quantity by one each time it executes.

But use @Obsolesce example.

@dbeato said in Outlook failing to open from multiple customers...:

@Dashrender said in Outlook failing to open from multiple customers...:

@WLS-ITGuy said in Outlook failing to open from multiple customers...:

@Dashrender said in Outlook failing to open from multiple customers...:

@dbeato said in Outlook failing to open from multiple customers...:

Fix for this is to revert to an earlier version of Microsoft. I have a .bat file here

https://github.com/dbeato/scripts/blob/master/Office 365/Fix-Outlook-Restart.bat

Do you know - does this only affect O365 Office users?

So far Windows O365 users are the only ones that are chirping to me. I do have two users who aren't on O365 who aren't complaining...yet.

Right - I'm 100% non O365, and no chirps yet - WSUS is used here, and those office updates are approved to push.

What Office version? Office Click-to-Run would be affected, Office 2013 and up would have been affected.

I have zero click 2 run - I'm all office 2016