@Minion-Queen said in What Are You Doing Right Now:
@wirestyle22 said in What Are You Doing Right Now:
Considering getting this adjustable desk: https://www.autonomous.ai/smartdesk-sit-to-stand-height-adjustable-standing-desk?utm_source=fb&utm_medium=click_purchasedlookalike&utm_term=bamboovideo
I have one and love it!
Although I am sure there's a desk there, one does wonder how you can tell there's a desk at all, aside from the papers being held up.
I already did this a couple months ago. It's a fun project. Getting all of the ROMs is a bit problematic.
@NerdyDad said in Creating users:
@NerdyDad said in Creating users:
@momurda said in Creating users:
I have 2 users starting next week, might have to use your script @NerdyDad
I usually just use the Copy User function in ADUC then fill out the name, make adjustments to group membership.
That looks essentially like the Copy User option from ADUC, but in PS, and it makes folders and such too.
I wonder though, are users able to answer these questions about themselves?Unfortunately not because the user running the script has to be a domain admin in order to create the new user, add to groups create mailboxes, etc.
But after thinking about it, would you really want users creating user accounts? What if that user was let go and had created themselves a rouge account that you didn't know about? We still need to be holding the keys to the kingdom, assuming that the kingdom is still safe of course.
@NerdyDad said in Creating users:
Full disclosure: It can create folders within network shares. I had to go through the drive (ex c$) in order to create the proper folder. However, I have not yet been able to add permissions to the folders via the script. I've always had to go back and add permissions later on. There is an NTFS add-on module that a third-party individual has written and put out there, but I was never able to get it to working properly.
I've used this to fix full directories of user home folders. Maybe you can cut out the parts you need for this user creation script?
#
# !! This ONLY works in PowerShell v2. !!
#
# Variables
#
# Where is the root of the home drives?
$homeDrivesDir="\\domain.com\userdir$"
# Report only? ($false = fix problems - aka dangerous mode)
$reportMode = $false
# Print all valid directories?
$verbose = $false
# What domain are your users in?
$domainName = "domain.com"
#
# #############################################
# Save the current working directory before we change it (purely for convenience)
pushd .
# Change to the location of the home drives
set-location $homeDrivesDir
# Warn the user if we will be fixing or just reporting on problems
write-host ""
if ($reportMode) {
Write-Host "Report mode is on. Not fixing problems!"
} else {
Write-Host "Report mode is off. Will fix problems!"
}
write-host ""
# Initialise a few counter variables. Only useful for multiple executions from the same session
$goodPermissions = $unfixablePermissions = $fixedPermissions = $badPermissions = 0
$failedFolders = @()
# For every folder in the $homeDrivesDir folder
foreach($homeFolder in (Get-ChildItem $homeDrivesDir | Where {$_.psIsContainer -eq $true})) {
# dump the current ACL in a variable
$Acl = Get-Acl $homeFolder
# create a permission mask in the form of DOMAIN\Username where Username=foldername
# (adjust as necessary if your home folders are not exactly your usernames)
$compareString = "*" + $domainName + "\" + $homeFolder.Name + " Allow FullControl*"
# if the permission mask is in the ACL
if ($Acl.AccessToString -like $compareString) {
# everything's good, increment the counter and move on.
if ($verbose) {Write-Host "Permissions are valid for" $homeFolder.Name -backgroundcolor green -foregroundcolor white}
$goodPermissions += 1
} else {
# Permissions are invalid, either fix or report
# increment the number of permissions needing repair
$badPermissions += 1
# if we're in report mode
if ($reportMode -eq $true) {
# reportmode is on, don't do anything
Write-Host "Permissions not valid for" $homeFolder.Name -backgroundcolor red -foregroundcolor white
} else {
# reportmode is off, fix the permissions
Write-Host "Setting permissions for" $homeFolder.Name -foregroundcolor white -backgroundcolor red
# Add the user in format DOMAIN\Username
$username = $domainName + "\" + $homeFolder.Name
# Grant the user full control
$accessLevel = "FullControl"
# Should permissions be inherited from above?
$inheritanceFlags = "ContainerInherit, ObjectInherit"
# Should permissions propagate to below?
$propagationFlags = "None"
# Is this an Allow/Deny entry?
$accessControlType = "Allow"
try {
# Create the Access Rule
$accessRule = New-Object System.Security.AccessControl.FileSystemAccessRule($username,$accessLevel,$inheritanceFlags,$propagationFlags,$accessControlType)
# Attempt to apply the access rule to the ACL
$Acl.SetAccessRule($accessRule)
Set-Acl $homeFolder $Acl
# vvvvvvv Possible PS v3+ fix vvvvvvvvv
# Set-Acl --path $homeFolder -AclObject $Acl
# ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
# if it hasn't errored out by now, increment the counter
$fixedPermissions += 1
} catch {
# It failed!
# Increment the fail count
$unfixablePermissions += 1
# and add the folder to the list of failed folders
$failedFolders += $homeFolder
}
} #/if
} #/if
} #/foreach
# Print out a summary
Write-Host ""
Write-Host $goodPermissions "valid permissions"
Write-Host $badPermissions "permissions needing repair"
if ($reportMode -eq $false) {Write-Host $fixedPermissions "permissions fixed"}
if ($unfixablePermissions -gt 0) {
Write-Host $unfixablePermissions "ACLs could not be repaired."
foreach ($folder in $failedFolders) {Write-Host " -" $folder}
}
# Cleanup
popd
@NerdyDad said in Creating users:
Try this out. It pops up with a command prompt to ask you a few questions to get started. Once the questions are answered, it takes care of most everything else. When it is done, it should spit out a piece of paper for you to give to the new employee with the information that they need.
I sterilized it so that you could use it in your company.
#Imports the AD & NTFS Modules (Module 1.02) Import-Module activedirectory Import-Module MSOnline #Sets Variables (Module 1.03) $fn #First Name $ln #Last Name $title $dep #Department $loc #Location $man #Manager $un #Username $officePhone $streetAdd $city $ZIP $fi #First Name Initial, will be used to figure out Username #Getting information (Module 1.04) Write-Host "I need some information from you first. Answer the following questions to get started." $fn = read-host "First Name?" $ln = Read-Host "Last Name?" $title = Read-Host "Title?" $dep = Read-Host "Department?" $man = Read-Host "Manager (Username)?" $loc = Read-Host "<location>?" #Finding out the Username (Module 1.05) $fi = $fn.Substring(0,1) $un = -join ($ln, $fi) #Sets Location information (Module 1.06) if ($loc -eq "Loc1") { #If the user is in Loc1 (Module 1.07) $officePhone = "(999) 999-9999"; $streetAdd = "123 Anywhere Drive"; $city = "YourTown"; $ZIP = "12345"; } Else { #If the user is in Loc2 (Module 1.08) $officePhone = "(987) 654-3210"; $streetAdd = "987 Nothere Blvd"; $city = "Somewhere Else"; $ZIP = "98765"; } #Sets Password (Module 1.09) $passwd = (Read-Host -AsSecureString "Account Password") $password = ConvertFrom-SecureString -SecureString $passwd $userParams = @{ #(Module 1.10) 'Name' = $un; 'Enabled' = $true; 'AccountPassword' = $passwd; 'UserPrincipalName' = -join ($un, "@mycompany.com"); 'SamAccountName' = $un; 'ChangePasswordAtLogon' = $false; 'GivenName' = $fn; 'Surname' = $ln; 'DisplayName' = -join ($fn, " ", $ln); 'Description' = $title; 'OfficePhone' = $officePhone; 'StreetAddress' = $streetAdd; 'City' = $city; 'State' = "Texas"; 'PostalCode' = $ZIP; 'Title' = $title; 'Department' = $dep; 'Company' = 'MyCompany'; 'Manager' = $man; } #Creates the user in AD (Module 1.11) New-ADUser @userParams #Wait for the account to be created before doing anything else (Module 1.12) Start-Sleep -Seconds 10 #Makes the user's network drive, scan folder, and sets the permissions to their folders and files (Module 1.13) if ($loc -eq "Loc1") { #If the user is in Loc1 (Module 1.14) New-Item -Name $un -ItemType directory -Path "\\server\folder\" #Creates users network drive New-Item -Name scans -ItemType directory -Path "\\server\folder\$un\" #Creates users scan folder } Else { #If the user is in Loc2 (Module 1.15) New-Item -Name $un -ItemType directory -Path "\\server\folder\" #Creates users network drive New-Item -Name scans -ItemType directory -Path "\\server\folder\$un" #Creates users scan folder } #Adds the user to the correct Security Group for permissions and other network drives if ($dep -eq "Accounting"){ #(Module 1.16) Add-ADGroupMember -Identity 'Accounting' -Members $un #(Module 1.17) } #Adds the user to the Accounting Group Elseif ($dep -eq "Customer Service") { #(Module 1.18) Add-ADGroupMember -Identity 'Customer Service' -Members $un #(Module 1.19) } #Adds the user to the Customer Service Group Elseif ($dep -eq "Executives") { #(Module 1.20) Add-ADGroupMember -Identity 'Executives' -Members $un #(Module 1.21) } #Adds the user to the Executives Group Elseif ($dep -eq "HR") { #(Module 1.22) Add-ADGroupMember -Identity 'Human Resources' -Members $un #(Module 1.23) } #Adds the user to the Human Resources Group Elseif ($dep -eq "Human Resources") { #(Module 1.24) Add-ADGroupMember -Identity 'Human Resources' -Members $un #(Module 1.25) } #Adds the user to the Human Resources Group Elseif ($dep -eq "IT") { #(Module 1.26) Add-ADGroupMember -Identity 'Domain Admins' -Members $un #(Module 1.27) } #Adds the user to the Domain Admins Group for IT Elseif ($dep -eq "Maintenance") { #(Module 1.28) Add-ADGroupMember -Identity 'MaintGroup' -Members $un #(Module 1.29) } #Adds the user to the Maintenance Group Elseif ($dep -eq "Production") { #(Module 1.30) Add-ADGroupMember -Identity 'Production' -Members $un #(Module 1.31) } #Adds the user to the Production GroupHR Elseif ($dep -eq "QA") { #(Module 1.32) Add-ADGroupMember -Identity 'QA Group' -Members $un #(Module 1.33) } #Adds the user to the QA Group Elseif ($dep -eq "Quality Assurance") { #(Module 1.34) Add-ADGroupMember -Identity 'QA Group' -Members $un #(Module 1.35) } #Adds the user to the QA Group Elseif ($dep -eq "Shipping") { #(Module 1.36) Add-ADGroupMember -Identity 'SHIP' -Members $un #(Module 1.37) } #Adds the user to the Shipping Group Else { #(Module 1.38) Add-ADGroupMember -Identity 'Domain Users' -Members $un #(Module 1.39) } #Dumps the user to the Domain Users Group $manfn = Get-ADUser $man -Properties Name | select Name #Gets the manager's name (Module 1.40) #Creates a report of the User's information $report = "Hello $fn $ln, From the IT Department, welcome to <MyCompany>. We are here to help you connect to the resources that you need for your job. If you need assistance with technology, please feel free to contact us at either the help page, which is set as your home page in Internet Explorer, email us at helpdesk@<MyCompany>.com, or call us at extension 4357. Below you will find your information so that you can login to the network and get started: Your username is domain\$un Your password is Your email address is $fn$ln@<MyCompany>.com Your phone number is $officePhone Ext. It is suggested that you change your password to something that you can remember but difficult enough that somebody else cannot figure out. The requirement is only 6 characters, but we do advise on making it longer, throw some numbers and special characters in there as well to make it stronger. Best advice would be to use a pass-PHRASE instead of a pass-WORD. Your computer should already be setup with your email loaded and your network drives. At <MyCompany>, we use Microsoft Outlook as the email client. Depending on what department you are in will depend on what drives you have available. Generally, everybody will have an F: drive and a G: drive. The F: drive is your network folder. Place in there the documents that you feel you cannot do your job without. In the F: drive will be a scan folder. When you go to the Xerox to scan in documents, then you will find them in your scan folder. The G: drive is a company-wide shared folder. As for your department drives, it would be best to talk with $($manfn.name), your supervisor/manager, about the nature and uses of these drives. The use of the equipment and resources provided are a privilege to you for use and should not be taken advantage of. There are measures set in place that allows us to manage the network. Do not assume that there is any personal privacy on this network. The only privacy that you can assume is for the nature of your work. All information (including emails, documents, spreadsheets, pictures, etc.) contained on the equipment provided and on the network is the sole property of Standard Meat Company. If you have problems with your equipment or network resources, please feel free to ask. We do not mind helping, but we cannot help if we do not know, so please ask! Sincerely, Your IT Department" if ($loc -eq "Loc1") { #(Module 1.43) Write-Output $report | Out-Printer } Else { #(Module 1.44) Write-Output $report | Out-Printer \\server\'Xerox WorkCentre 4260' } #Waiting for AD & Azure to Synchronize, which synchronizes every 30 minutes (Module 1.45) Write-host "Waiting..." Start-Sleep -Seconds 1800 #Connect to O365 and licenses the user Connect-MsolService #(Module 1.46) Set-MsolUserLicense -UserPrincipalName (-join($un,'@<MyCompany>.com')) -AddLicenses #(Module 1.47) #Connects to the Exchange box, creates the users email account, then disconnects from the Exchange box $mail = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/powershell-liveid/ -AllowRedirection -Authentication Basic -Credential $cred #(Module 1.48-Part 1) Import-PSSession $mail -WarningAction SilentlyContinue | Out-Null #(Module 1.48-Part 2) enable-Mailbox -Identity $un -Alias $un -DisplayName (-join($fn,$ln)) #Creates the users mailbox (Module 1.49) IF ($dep -eq "Executives") { #(Module 1.50) Set-Mailbox (-join($un,'@<MyCompany>.com')) -ProhibitSendQuota 19.5GB -ProhibitSendReceiveQuota 20GB -IssueWarningQuota 19GB #Sets the mailbox size in Exchange Online so that the user isn't using all 50 GB of storage (Module 1.51) } #If they are an executive, then they get 20 GB of mailbox space elseif ($dep -eq "IT") { #(Module 1.52) Set-Mailbox (-join($un,'@<MyCompany>.com')) #(Module 1.53) } #IT gets the full mailbox, of course else { #(Module 1.54) Set-Mailbox (-join($un,'@<MyCompany>.com')) -ProhibitSendQuota 9.5GB -ProhibitSendReceiveQuota 10GB -IssueWarningQuota 9GB #Sets the mailbox size in Exchange Online so that the user isn't using all 50 GB of storage (Module 1.55) } #Otherwise, everybody else gets 10 GB of mailbox space Remove-PSSession -Session $mail #Disconnects from the Exchange box (Module 1.56)
This looks amazing and I can't wait to get it edited and try it out.
@Tim_G said in Creating users:
You could probably waste a bunch of time creating an .hta with dropdowns and all kinds of things.
Or you could get HR to fill out a .csv with required fields and import that to create a user.
Easiest to keep things how they are. There's no harm in a user template in AD. It's fast and simple.
And it sucks to have a whole bunch of template users. It's not efficient, in my view.
@RojoLoco said in What Are You Doing Right Now:
I just verbally beat up the meraki/cisco sales rep that tried to get me to renew the contract on the free AP I got from them. Laid out all the reasons that their yearly renewals suck, then admonished him for spelling my name wrong in the email, saying I'd never give him a penny because of the misspelling. Promptly got a response, still trying to sell me stuff.... I unleashed hell on him. Damn, it feels good to be a gangster.
@jt1001001 said in What Are You Doing Right Now:
Sister in law came back from a trip to Scotland.
Is this any good I'm not a scotch drinker
It is good.
No, wait. Horrible. Yes, absolutely vile. Best that you let me dispose of it for you. I'll PM you my address.
@MattSpeller said in Disk Errors - Would this concern you?:
@Harry-Lui said in Disk Errors - Would this concern you?:
I'd call Synology and see what they say.
I will thank you
Schlotzky's mac & cheese with chicken noodle soup.
Setting up a new Spiceworks server. Management requested it. I advised them not to. The original request was for Lansweeper, but the org is too big for that. I'm going to install the version of Spiceworks that I kept prior to their community integration.
So, if anyone has an idea on free 500 node network scanners, I'd love to hear it. 
I was hoping to get away from heaving 'dead' user accounts that serve no other purpose than being a template. Surely there is a better way?
The current process in the organization is to take a template (literally just a user with a special name, settings and group memberships) and copy that to create a user. I'm thinking there has to be a better way. Is anyone out there using something that works as well or better?
@DustinB3403 said in Random Thread - Anything Goes:
This has to be the most insane process to get help desk tickets created.
You know, I don't miss reading the Spiceworks community. Thank you for reminding why I don't miss it.
@scottalanmiller said in What Are You Doing Right Now:
@Grey said in What Are You Doing Right Now:
@scottalanmiller said in What Are You Doing Right Now:
@Grey said in What Are You Doing Right Now:
@Reid-Cooper said in What Are You Doing Right Now:
@Grey said in What Are You Doing Right Now:
@Reid-Cooper said in What Are You Doing Right Now:
And then the Volt didn't even end up being electric. Volt, Spark, they tried really had to make people think that they were electric.
To be fair, the engine and drivetrain are electric. There's a serialized gas engine that runs to supply electricity to the engine when the batteries run dry. It's more electric than a Prius, which is one of the worst cars on the road.
Kind of but the engine turns on for basically all driving. Anything over 25 mph or something crazy like that it is on gas all of the time.
I think that's more about the amp draw. If you're a lead-foot, then it needs more juice to meet demand. If you try to hypermile it, then I bet you'd be able to commute without ever touching your gas tank. Conversely, a prius will always use fuel in every commute. Do you have a Volt? Maybe Turo has one to rent?
I spent a lot of time researching them and was close to getting one except that I already have a sedan and don't need another, though I did need a truck with 4wd for winter commuting and I did buy that in November. Once my motorcycle is out of the shop (annual maintenance), I'll be back on that for my primary commute.
We looked at the Volt when I lived in Texas. And what we found was that because they had hard speed limits like @Reid-Cooper mentioned, no matter how light on the "gas" you are (and I'm insanely light, I beat the fuel economy rating on any car I drive, by huge amounts) it goes to the gas engine at a speed so low that basically you hit it the second you are out of the driveway. It might be pure electric while you are parking, but no actual driving activity will it be electric. We were quite serious about getting one and realized that the electric nature of it was a total farce.
The gas mileage on the thing might be really great. But it was anything but an electric car.
https://www.voltstats.net/
Data is pulled from OnStar. I have no idea how people are driving to be 100% EV on the leaderboard, but it seems to be possible!Might be fake data. They wouldn't sell us a car that would ever drive electric no matter what we did.
@scottalanmiller said in What Are You Doing Right Now:
@Grey said in What Are You Doing Right Now:
@Reid-Cooper said in What Are You Doing Right Now:
@Grey said in What Are You Doing Right Now:
@Reid-Cooper said in What Are You Doing Right Now:
And then the Volt didn't even end up being electric. Volt, Spark, they tried really had to make people think that they were electric.
To be fair, the engine and drivetrain are electric. There's a serialized gas engine that runs to supply electricity to the engine when the batteries run dry. It's more electric than a Prius, which is one of the worst cars on the road.
Kind of but the engine turns on for basically all driving. Anything over 25 mph or something crazy like that it is on gas all of the time.
I think that's more about the amp draw. If you're a lead-foot, then it needs more juice to meet demand. If you try to hypermile it, then I bet you'd be able to commute without ever touching your gas tank. Conversely, a prius will always use fuel in every commute. Do you have a Volt? Maybe Turo has one to rent?
I spent a lot of time researching them and was close to getting one except that I already have a sedan and don't need another, though I did need a truck with 4wd for winter commuting and I did buy that in November. Once my motorcycle is out of the shop (annual maintenance), I'll be back on that for my primary commute.
We looked at the Volt when I lived in Texas. And what we found was that because they had hard speed limits like @Reid-Cooper mentioned, no matter how light on the "gas" you are (and I'm insanely light, I beat the fuel economy rating on any car I drive, by huge amounts) it goes to the gas engine at a speed so low that basically you hit it the second you are out of the driveway. It might be pure electric while you are parking, but no actual driving activity will it be electric. We were quite serious about getting one and realized that the electric nature of it was a total farce.
The gas mileage on the thing might be really great. But it was anything but an electric car.
https://www.voltstats.net/
Data is pulled from OnStar. I have no idea how people are driving to be 100% EV on the leaderboard, but it seems to be possible!
