What Are You Doing Right Now
-
Well, that made for an interesting Monday after a holiday weekend. Had a site down, internal network was all good but no internet. Turned out it was in the other building that's only at half-staff level this week and nobody realized any of the network was down in the other building where the internet connection is actually located.
-
@jasgot said in What Are You Doing Right Now:
Starting a complete domain migration of 1100+ workstations. New Domain, New File Servers, New Exchange Server. Gonna be pretty busy for the foreseeable future. Oh, and redesigning the whole printing infrastructure.
Done!
About 25 hours of hands-on over four days. Did not physically visit any of the 7 locations.
We are thankful for BackStage and Powershell!A few minor issues along the way.....
Of the 1100+ workstation migrations:• We had to re-install MS Office on four of them.
• We had to manually move redirected folders back to the laptop on 6 of 15 that were at remote locations and using redirected folders.
• We had to re-write one script to handle application settings for one mission critical app that exists on every PC. The script provided by the software company was unreliable.
• We missed two users during account creation in the new domain, so we handled that on the fly.
• We misspelled one user's name during account creation in the new domain, so we handled that on the fly.
• We usually use Code Two for mail migration. On this project, we had a hiccup and ended up scripting the mailbox export and import for all 1100+ users. After a successful setup and test of the Code Two software, we ran Windows updates on the new Exchange server and the updates broke Code Two. The killer part was that no matter what we tried, we could not uninstall the two updates that gave of this trouble. So, another PS script to the rescue!All in all....Piece of cake and smooth as silk!
-
At the vet hospital again, 2nd time in 4 days. Dog has started having seizures, which have returned even though she is on medication.
-
@dustinb3403 said in What Are You Doing Right Now:
At the vet hospital again, 2nd time in 4 days. Dog has started having seizures, which have returned even though she is on medication.
Sorry to hear that.
-
Wondering if I should feel bad for breaking 'security' policy to build the tool I need for Windows AutoPilot...
Mhmmmm.. Nah - not(pause)one(pause)bit.
ETA: I am following this link: Create a bootlable Win10 AutoPilot Device with Powershell
-
Trying to figure out how to deal with my Github - meaning - organization of files and such... at least one is up finally..
-
At the tone, it's to dang early Eastern Time and it's working.
(Ding)
Youtube Videos are playing, and I can get to a ManageEngine site I couldn't get to yesterday. I see I have different Certs for both pages. so - something during the day is getting pushed jacking things up and making it so that things don't work. But - I'm connected to a dock and thus not moving or changing IPs.
-
Just realized what time it is, was about to research "Twitch and YouTube live gaming streaming" ...But time to finish woop, off to move from PC onto Sofa on the other side of the room
-
End of year PTO for me. Rethinking home office layout as 2022 we will be shifting gears and i will need some bench space for working on Autopilot deployment. Our E5 licenses were approved so major security overhaul next year
-
@jt1001001 said in What Are You Doing Right Now:
End of year PTO for me. Rethinking home office layout as 2022 we will be shifting gears and i will need some bench space for working on Autopilot deployment. Our E5 licenses were approved so major security overhaul next year
Nice - We just migrated to M365 Business Premium which includes a lot of those E5 features for enterprises.
So I'm in the same boat as you - time to up our game. -
@jt1001001 said in What Are You Doing Right Now:
End of year PTO for me. Rethinking home office layout as 2022 we will be shifting gears and i will need some bench space for working on Autopilot deployment. Our E5 licenses were approved so major security overhaul next year
Autopilot - been trying to sort out a USB option to run the hardware ID… not had any success… not totall happy with the process yet.
-
@gjacobse saw your earlier post will be looking into that
-
@jt1001001 said in What Are You Doing Right Now:
@gjacobse saw your earlier post will be looking into that
Happy to share what I have learned,… and learn if there is a better way.
-
@gjacobse said in What Are You Doing Right Now:
@jt1001001 said in What Are You Doing Right Now:
End of year PTO for me. Rethinking home office layout as 2022 we will be shifting gears and i will need some bench space for working on Autopilot deployment. Our E5 licenses were approved so major security overhaul next year
Autopilot - been trying to sort out a USB option to run the hardware ID… not had any success… not totall happy with the process yet.
Why not use the popular PS module? It'll grab the hash and register it in Autopilot.
Otherwise, I have a script I made somewhere made to be ran from USB that will take the hash, send it to an Azure Storage Table to await processing by an Azure Function that registers it into autopilot if you're looking for a fully automated solution other than running the script itself.
-
@obsolesce said in What Are You Doing Right Now:
@gjacobse said in What Are You Doing Right Now:
@jt1001001 said in What Are You Doing Right Now:
End of year PTO for me. Rethinking home office layout as 2022 we will be shifting gears and i will need some bench space for working on Autopilot deployment. Our E5 licenses were approved so major security overhaul next year
Autopilot - been trying to sort out a USB option to run the hardware ID… not had any success… not totall happy with the process yet.
Why not use the popular PS module? It'll grab the hash and register it in Autopilot.
Otherwise, I have a script I made somewhere made to be ran from USB that will take the hash, send it to an Azure Storage Table to await processing by an Azure Function that registers it into autopilot if you're looking for a fully automated solution other than running the script itself.
We have this wonderful security policy- we turn off powershell scripting- i have to got through a very manual process…
I found a set up, which I think I linked previous- that didn’t work… but it is possible I missed something on it. I’ll have to see if I can spin up my laptop here at the hotel and read back my comments to verify…
With scripting turned off- and literally Policed by systems being scanned a third party for script, it’s a bit frustrating.
-
@gjacobse said in What Are You Doing Right Now:
@obsolesce said in What Are You Doing Right Now:
@gjacobse said in What Are You Doing Right Now:
@jt1001001 said in What Are You Doing Right Now:
End of year PTO for me. Rethinking home office layout as 2022 we will be shifting gears and i will need some bench space for working on Autopilot deployment. Our E5 licenses were approved so major security overhaul next year
Autopilot - been trying to sort out a USB option to run the hardware ID… not had any success… not totall happy with the process yet.
Why not use the popular PS module? It'll grab the hash and register it in Autopilot.
Otherwise, I have a script I made somewhere made to be ran from USB that will take the hash, send it to an Azure Storage Table to await processing by an Azure Function that registers it into autopilot if you're looking for a fully automated solution other than running the script itself.
We have this wonderful security policy- we turn off powershell scripting- i have to got through a very manual process…
I found a set up, which I think I linked previous- that didn’t work… but it is possible I missed something on it. I’ll have to see if I can spin up my laptop here at the hotel and read back my comments to verify…
With scripting turned off- and literally Policed by systems being scanned a third party for script, it’s a bit frustrating.
Sadly - it seems like your job is basically to be shadow IT inside your own IT department.
You want to do things efficiently, but the powers that be don't see the value in that - for you, perhaps it really is time to move on.
-
@obsolesce said in What Are You Doing Right Now:
@gjacobse said in What Are You Doing Right Now:
@jt1001001 said in What Are You Doing Right Now:
End of year PTO for me. Rethinking home office layout as 2022 we will be shifting gears and i will need some bench space for working on Autopilot deployment. Our E5 licenses were approved so major security overhaul next year
Autopilot - been trying to sort out a USB option to run the hardware ID… not had any success… not totall happy with the process yet.
Why not use the popular PS module? It'll grab the hash and register it in Autopilot.
Otherwise, I have a script I made somewhere made to be ran from USB that will take the hash, send it to an Azure Storage Table to await processing by an Azure Function that registers it into autopilot if you're looking for a fully automated solution other than running the script itself.
Do you have or have you linked to the script? Just curious if I have missed it here. I am curious to compare / test it.
-
@gjacobse said in What Are You Doing Right Now:
@obsolesce said in What Are You Doing Right Now:
@gjacobse said in What Are You Doing Right Now:
@jt1001001 said in What Are You Doing Right Now:
End of year PTO for me. Rethinking home office layout as 2022 we will be shifting gears and i will need some bench space for working on Autopilot deployment. Our E5 licenses were approved so major security overhaul next year
Autopilot - been trying to sort out a USB option to run the hardware ID… not had any success… not totall happy with the process yet.
Why not use the popular PS module? It'll grab the hash and register it in Autopilot.
Otherwise, I have a script I made somewhere made to be ran from USB that will take the hash, send it to an Azure Storage Table to await processing by an Azure Function that registers it into autopilot if you're looking for a fully automated solution other than running the script itself.
We have this wonderful security policy- we turn off powershell scripting- i have to got through a very manual process…
I found a set up, which I think I linked previous- that didn’t work… but it is possible I missed something on it. I’ll have to see if I can spin up my laptop here at the hotel and read back my comments to verify…
With scripting turned off- and literally Policed by systems being scanned a third party for script, it’s a bit frustrating.
Then the only thing to do is to reimage every device using an ISO or image with the Autopilot profile baked in. Make sure the Autopilot profile is set to register devices in Autopilot. If they want bullshit policies that actually decrease security, then it's going to get inconvenient for everyone.
-
@obsolesce said in What Are You Doing Right Now:
@gjacobse said in What Are You Doing Right Now:
@obsolesce said in What Are You Doing Right Now:
@gjacobse said in What Are You Doing Right Now:
@jt1001001 said in What Are You Doing Right Now:
End of year PTO for me. Rethinking home office layout as 2022 we will be shifting gears and i will need some bench space for working on Autopilot deployment. Our E5 licenses were approved so major security overhaul next year
Autopilot - been trying to sort out a USB option to run the hardware ID… not had any success… not totall happy with the process yet.
Why not use the popular PS module? It'll grab the hash and register it in Autopilot.
Otherwise, I have a script I made somewhere made to be ran from USB that will take the hash, send it to an Azure Storage Table to await processing by an Azure Function that registers it into autopilot if you're looking for a fully automated solution other than running the script itself.
We have this wonderful security policy- we turn off powershell scripting- i have to got through a very manual process…
I found a set up, which I think I linked previous- that didn’t work… but it is possible I missed something on it. I’ll have to see if I can spin up my laptop here at the hotel and read back my comments to verify…
With scripting turned off- and literally Policed by systems being scanned a third party for script, it’s a bit frustrating.
Then the only thing to do is to reimage every device using an ISO or image with the Autopilot profile baked in. Make sure the Autopilot profile is set to register devices in Autopilot. If they want bullshit policies that actually decrease security, then it's going to get inconvenient for everyone.
That’s an interesting option. Might you have details on that?
-
@gjacobse said in What Are You Doing Right Now:
@obsolesce said in What Are You Doing Right Now:
@gjacobse said in What Are You Doing Right Now:
@obsolesce said in What Are You Doing Right Now:
@gjacobse said in What Are You Doing Right Now:
@jt1001001 said in What Are You Doing Right Now:
End of year PTO for me. Rethinking home office layout as 2022 we will be shifting gears and i will need some bench space for working on Autopilot deployment. Our E5 licenses were approved so major security overhaul next year
Autopilot - been trying to sort out a USB option to run the hardware ID… not had any success… not totall happy with the process yet.
Why not use the popular PS module? It'll grab the hash and register it in Autopilot.
Otherwise, I have a script I made somewhere made to be ran from USB that will take the hash, send it to an Azure Storage Table to await processing by an Azure Function that registers it into autopilot if you're looking for a fully automated solution other than running the script itself.
We have this wonderful security policy- we turn off powershell scripting- i have to got through a very manual process…
I found a set up, which I think I linked previous- that didn’t work… but it is possible I missed something on it. I’ll have to see if I can spin up my laptop here at the hotel and read back my comments to verify…
With scripting turned off- and literally Policed by systems being scanned a third party for script, it’s a bit frustrating.
Then the only thing to do is to reimage every device using an ISO or image with the Autopilot profile baked in. Make sure the Autopilot profile is set to register devices in Autopilot. If they want bullshit policies that actually decrease security, then it's going to get inconvenient for everyone.
That’s an interesting option. Might you have details on that?
It looks like that PowerShell module you were looking into not so long ago may work. I did it manually instead of using that, I forget now why I decided to do it that way, maybe it was cleaner I forget. But essentially all you need to do is create an Windows installer ISO of an up to date Win10/11 install with the Autopilot profile xml in a specific Windows folder.
I'd share the ones I made but they are Win10/11 enterprise with activation and autopilot profile baked in. I can share the procedure I created though, but won't get a chance until later today or tomorrow... if that PS module method is of no interest to you.
