Found it -- test-compliance.

@Pete-S said in Is certbot the best way to handle Let's Encrypt certs?:

@stacksofplates said in Is certbot the best way to handle Let's Encrypt certs?:

Lego is another good one from what I've seen. It does all 3 challenge types.

https://go-acme.github.io/lego/

Thanks, might have a look at it next time.

I went with certbot this time because it was very clear what needed to be done. Debian has a package for it's all you need to do is have a http server up and running and then:

# apt-get install certbot python-certbot-apache # certbot --apache

It will do everything for you - create & install the certificate, set up redirection from http to https, set up a job that updates the cert etc.

The site has instructions for every common OS (redhat, ubuntu etc) and http daemon (apache, nginx etc) combination.
https://certbot.eff.org/lets-encrypt/debianbuster-apache

Yeah certbot is the easiest. Lego is just more flexible and you only need the binary. Def start with the easiest for now.

EdkJFXDVoAEXM2i.png

@gjacobse said in NextCloud: Chmod user folders:

Oh - no - the syntax is incorrect for ownership.

sudo chown

Yes,

chown to change owner chmod to change mode (permission)

Remember you can always do man chown to see the syntax.

@scottalanmiller said in MeshCentral Run Commands on Multiple Computers at Once:

"Starting with MeshCentral v0.5.85, you can now select "Run Commands" in the group actions or device actions. Allows running shell commands on many devices at once."

Ecq0qLrUcAEBBek.png

Wow, this is going to really change the way we use Mesh! Awesome stuff!

That seems to have fixed the issue

@ilyas said in Reset 120 Day Grace Period for Windows RDS Server with PowerShell:

@scottalanmiller

Hi, Thanks for wonderful script that save my time.
Could You please guide me how we can run this script on multiple servers?

I tried foreach PowerShell method but it does not work.

From the ISE, load the script and then enter-pssession for each system. Once connected, run the script from the ise. Sorted.

@Texkonc said in Internet outage:

@JaredBusch said in Internet outage:

@PhlipElder said in Internet outage:

@JaredBusch said in Internet outage:

@PhlipElder said in Internet outage:

https://www.cloudflarestatus.com/incidents/46z55mdhg0t5

Hmmm ... this from a little over a year ago.

Same "problem".

Routing is not magic. Errors happen.

That may be so, but the expectation is that the same errors would not happen over and over again.

FFS It is not the same. Are you stupid?

Jesus, calm down. No one pissed in your corn flakes...

No kidding. Don't go all Boomtown Rats on me. 😛

So far the rebuild appears to be still working. It ran all night. No complaints yet.

We know this is a domain, we don't know that the user is using a Windows PC. @AshKetchum is this a Windows PC? Also why the need to do so discreetly?

You can do as Travis/Jared said or use something like scp to do this.

I ran some test on a VM and created some groups and added some top-level directories for those groups.

Changed the group on each top-level directories and files below recursively with chown -R.

Set directories to permission 2770 and files to 0660 with chmod -R.

Changed smb.conf and added create mask=0660 and directory mask=2770.

Now new files and directories created on the share have the right permission and belongs to the right group automatically, simply depending on what group the top-level directory belongs to.

If you're not a member of a group, you will not even see the directories or files that belongs to that group.

I think this is a good interim solution without too much work. Then moving to onedrive or whatever can be done in the future on a department to department basis.

Only admin required for adding users is to add them to linux/samba and make sure they become members of the right groups.

It's also very simple to make a separate share out of the top-level folders if you wanted.

@JaredBusch

Everything works fine now.

The issue was a DNS resolution for devices within the LAN. I added an A record on the router for split dns. That solved the problem.

Thank you so much for your support

@Pete-S said in What's behind the scenes of Windows network discovery?:

Just found out with some network sniffing that Win 10 is not using DNS to find the IP for hostnames. It's using multicast queries. WTF.

First something called LLMNR (Link-local Multicast Name Resolution). If you ping xyz, it will ask for xyz.

Secondly it will use mDNS (multicast DNS). If you ping xyz, it will ask for xyz.local.

Well, I found out why.

If you don't have a DNS suffix in the network settings, Win10 will use multicasting to try to resolve a hostname that doesn't have a top-level domain suffix (such as xyz).

If you have a DNS suffix in your settings, it will use standard DNS.

@Grey said in Powershell countdown on servers?:

@Pete-S said in Powershell countdown on servers?:

@Grey

If you wanted to show the progress % you could do something like this as well:

$quantity = $systems.count $i = 0 foreach ($server in $systems){ //stuff $i = $i + 1 $progress = 100 * $i / $quantity }

Another trick is to not count it at all, just print a dot (".") for each iteration.
.........

Tested and this needs a try/catch for a divide by zero. The math is also off.
9d767202-8760-4564-a5fa-0f1adc903aea-image.png

You probably had --$quantity still in there. It decreases $quantity by one each time it executes.

But use @Obsolesce example.

@dbeato said in Outlook failing to open from multiple customers...:

@Dashrender said in Outlook failing to open from multiple customers...:

@WLS-ITGuy said in Outlook failing to open from multiple customers...:

@Dashrender said in Outlook failing to open from multiple customers...:

@dbeato said in Outlook failing to open from multiple customers...:

Fix for this is to revert to an earlier version of Microsoft. I have a .bat file here

https://github.com/dbeato/scripts/blob/master/Office 365/Fix-Outlook-Restart.bat

Do you know - does this only affect O365 Office users?

So far Windows O365 users are the only ones that are chirping to me. I do have two users who aren't on O365 who aren't complaining...yet.

Right - I'm 100% non O365, and no chirps yet - WSUS is used here, and those office updates are approved to push.

What Office version? Office Click-to-Run would be affected, Office 2013 and up would have been affected.

I have zero click 2 run - I'm all office 2016

@Dashrender said in Force Microsoft Store apps to update:

@Obsolesce said in Force Microsoft Store apps to update:

@JaredBusch said in Force Microsoft Store apps to update:

I've been hitting a bunch of machines lately that need updated and one thing I noted was that the Store apps were seeming to never update by themselves while I had the device.

I could manually log in and open the Store app, and then click through to the updates and then tell it to update. But man that is a pain..

A little searching and I found this gem. Execute this, it takes a while to return, and then the Store apps begin to update in the background immediately.

Get-CimInstance -Namespace "Root\cimv2\mdm\dmmap" -ClassName "MDM_EnterpriseModernAppManagement_AppManagement01" | Invoke-CimMethod -MethodName UpdateScanMethod

Why don't you just turn on the update apps automatically option?

There's also a policy setting.

I thought that was ON by default?

I assume it is. Because systems do eventually update. The key there is eventually....

Sec+ is good to have. But important to note unlike a CISSP, it will do essentially nothing for a career. but it's a nice to have.

@dbeato said in Patch all your Windows DNS servers - CVE-2020-1350 - CVSS score of 10:

@pmoncho said in Patch all your Windows DNS servers - CVE-2020-1350 - CVSS score of 10:

Just wondering - Is anyone seeing a patch for 2019 with a reference to the KB article?
Checked yesterday, last night and this morning. No update that I can see.

Currently performing the workaround.

c46cc947-cad4-4bfc-877c-dbd1c1ddfd16-image.png

https://www.catalog.update.microsoft.com/Search.aspx?q=KB4558998

Thanks. Forgot about the update catalog.

@coliver said in How to download Win 10 Enterprise ISO.:

@JaredBusch said in How to download Win 10 Enterprise ISO.:

@Dashrender said in How to download Win 10 Enterprise ISO.:

or you could just download it from VLSC.

But the gets around having to deal with signing in to VLSC which sucks balls most days.

If it even works in a modern browser.

If it even works. Full stop.

I have the 2nd and 3rd one along with some other models. They work as advertised. I really like how Samsung and HPE have made some excellent chromebooks without breaking the bank.