Topics created by JaredBusch

@JaredBusch said in Chromebook and ScreenConnect:

@scottalanmiller said in Chromebook and ScreenConnect:

@JaredBusch said in Chromebook and ScreenConnect:

Heard more from the user.

Would prefer 15" screen and a numeric keypad... /sigh..

Found this one. https://www.amazon.com/Acer-CB715-1W-P4Y6-Chromebook-4417U-Chrome/dp/B07W996BQ5

Anyone have a comment on it?

Only 32GB, but it is supposed to be only for browsing and ScreenConnect.

32GB is PLENTY. I don't even need the 16GB that I have. And 8GB of RAM, that's a monster of a Chromebook. Should be way, way fast enough. Just really expensive is all.

Mostly it is the form factor, I think, 15” with the numeric keypad

True, the extra size brings up the price quite quickly.

Still expensive, but not bad. $25 I'm happy with, $40 feels high.

@Reid-Cooper said in VR for Christmas:

Now filing paperwork for adoption. 😉

That seems like an extreme reaction to justify playing VR 😁

That will return from the default index. To specify an index add it in the URL:

curl 192.168.1.100:9200/index/_search?pretty'

@JaredBusch

There is a current issue with the SSL let's encrypt that I just submitted to them to resolve (they are using an outdated version with Acme 1 instead of the newer Acme 2):

FYI - we've resolved the issue, and I can only assume anyone else that has installed Postcards should have the same issue.

The problem is indeed an issue with Let's Encrypt, and specifically:

docker: jrcs/letsencrypt-nginx-proxy-companion

To fix this issue, please update the docker-compose.override.yml file during builds.

Row 35 should read: image: jrcs/letsencrypt-nginx-proxy-companion:latest

This will insure that the current version for the let's encrypt proxy is called and eliminate the issue.

So no idea what the exact fail combo is, but I am fully updated, and working, on a clean install.

Installed Fedora 31 Cinnamon from USB. Rebooted, I have only kernel 5.3.7-301 Removed dnf dragora GUI sudo dnf remove dnfdragora* -y Rebooted. Upgraded all but grub2 sudo dnf upgrade --refresh -y --exclude grub2* Rebooted, not I now have kernel 5.3.13-300 available and default. Upgraded grub2 sudo dnf upgrade --refresh -y, I did receive the above SELinux errors again, they may be normal? Rebooted, system working normally.

@StuartJordan NTG and CCWTech both run on VitalPBX primarily.

@JaredBusch said in Updating plex on Fedora:

@black3dynamite said in Updating plex on Fedora:

Got the script part done. Just need to create schedule for it.
https://gitlab.com/black3dynamite/scripts/blob/master/Plex/Upgrade-Plex.sh

I assume you could expand this to other systems. But I never checked.

Right now its set up for Fedora and maybe CentOS 8.

Congrats 🐶

Interesting, I have never liked OpenText (Last time I used them was with Fax Machines).

Thanks

I've seen issues with search for the last week or so. A few people here have been unable to search public folders or their inboxes on and off. Supposedly resolved. We'll see...

@Dashrender said in Remove-Item cannot remove crap in Documents folder:

@Obsolesce said in Remove-Item cannot remove crap in Documents folder:

@Dashrender said in Remove-Item cannot remove crap in Documents folder:

@Obsolesce said in Remove-Item cannot remove crap in Documents folder:

@JaredBusch
I had a little bit of fun... whether useful to you or not.

You can run this script as a regular user that has permissions to create and run scheduled tasks and create a file in specified directory.

This will create a powershell script, and a scheduled tasks to run the script as the SYSTEM account. Then it will delete the script and the scheduled task.

I could test most of it, but not some of it for obvious reasons.

<#---- CHANGE THESE VARS: ----#> # Users to exclude from profile manipulation script, separated by pipe: $excludedKnownUsers = "Administrator|SpecialUser1" # New Script: $newLocalScriptPath = "$ENV:SystemDrive\scripts" $newLocalScriptFile = "testScript.ps1" # SID ending: (likely 21 if domain users) $sidEnd = 21 # Scheduled Task Name: $TaskName = "_Test Task 1" # Scheduled Task Description: $Description = "This is a test scheduled task that runs as the SYSTEM account and will be ran and then deleted at the end of this script." <#-------- END CHANGE --------#> # New Script: $newLocalScript = "$newLocalScriptPath\$newLocalScriptFile" # Gethers list of user profile paths: $userPaths = Get-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\*" -ErrorAction SilentlyContinue | Where-Object {($_.PSChildName -split '-')[3] -eq $sidEnd -and ($_.ProfileImagePath -split "\\")[2] -notmatch $excludedKnownUsers} # Creates a 'script in memory': $testScript = $null foreach ($userPath in $userPaths.ProfileImagePath) { $testScript += "Remove-Item -Path "$userPath\Documents" -Force -Recurse`n" $testScript += "New-Item -ItemType Junction -Path $userPath -Name 'Documents' -Target '$userPath\Nextcloud\Documents' -Force`n" } # Create a PowerShell script and save it as specified in vars: if (-not(Test-Path $newLocalScript)) {New-Item -Force $newLocalScript} $testScript | Out-File $newLocalScript -NoNewline -Force # Task Action: $Action = New-ScheduledTaskAction -Execute "powershell.exe" -Argument "-ExecutionPolicy Bypass -File $newLocalScript" # Task Trigger: (task will be manually run immediately and then deleted, so keep 1 year out) $Trigger = New-ScheduledTaskTrigger -Once -At (Get-Date).AddYears(1) # Task Compatibility: $Compatibility = "Win8" # 'Win8' is 'Windows 10' in the GUI # Task Settings: $Settings = New-ScheduledTaskSettingsSet -Compatibility $Compatibility -StartWhenAvailable -AllowStartIfOnBatteries # Run task as local SYSTEM account with highest privileges: $Principal = New-ScheduledTaskPrincipal -UserId 'S-1-5-18' -RunLevel Highest # Create the scheduled task: Register-ScheduledTask -TaskName $TaskName -Description $Description -Action $Action -Trigger $Trigger -Settings $Settings -Principal $Principal -Force <#--------------------------#> # Run the scheduled task: Get-ScheduledTask -TaskName $TaskName | Start-ScheduledTask # Remove the created script: Remove-Item $newLocalScript -Force # Delete the scheduled task: Get-ScheduledTask -TaskName $TaskName | Unregister-ScheduledTask -Confirm:$false

This seems like a HUGE security problem - normal users can schedule a task to run as SYSTEM? Then any virus could do the same thing. So what am I missing?

I assume regular user would need elevated privileges at least... But I didn't test as a non-local admin, which is different than elevated privileges. But either way, that script can be automated and run as a user in the local admin group too with successful results.

I think your script affects every user on the machine - assuming that's Ok for the envivronment - yep, have the local admin run it - and done.

Yeah I designed it like that on purpose, because if users are using the device, whether it's one or 10 (unlikely), IMO they should all be redirected. But that can be changed no problem. But at least if it's one main person using it, it'll hit that one. If others do, they can be excluded. But you can always get the current signed on user and use that as in JB's original script, or in an automated way using other means I could add in if needed.

@marcinozga said in Firefox security issues:

@Emad-R and @Dashrender lol rookies, I've been using FF since it was called Phoenix. And Mozilla Suite before that.

We're showing our age 😞

In theory, you could even update the firmware on the UAP, in the future, by pre-downloading it on a device that presents it via a URL and then join that device to the aloha network.

But that would be excessive amounts of work.

Possibly the app could do it on an iPhone/Android device with LTE that is also joined to the aloha wifi.

@JaredBusch said in Automatically running chocolatey upgrades:

How do various people do this?

Re: Next steps with SaltStack

@marcinozga said in Next steps with SaltStack:

Not salt, but I used https://chocolatey.org/packages/choco-upgrade-all-at which creates the same task, that runs choco upgrade all -y. If salt is using windows task scheduler, then it should just work.

Does that run as the admin account? Users have no rights to run this.

Running the choco install command requires local admin rights - so I assumed either - it ran as system OR it would ask for the creds of the current admin user being used to run the installer.

Clearly you found that it runs as system.

@JaredBusch said in MS SQL Express cannot create compressed backups:

@scottalanmiller said in MS SQL Express cannot create compressed backups:

Would not have expected that.

It is not a game breaker. The DB is only 1.2GB, but out of habit, i always compress backups with the native tools.

This time I have to compress it after the fact. not a huge deal. Just annoying.

Yeah, it's Express. Just seems like an odd feature to remove there. Definitely not a big deal, you can compress manually later.

@Skyetel said in Skyetel sign up working better:

Maybe this?
https://mangolassi.it/topic/20290/ad-blockers-advice

I thought I had posted in your thread because I know that you posted that after my issue.

So yup, going with I slacked and didn't post.

@scottalanmiller said in Ask as question does not work on new topic creation:

I just noticed that like yesterday but thought that it was me.

been broke for months. i never got around to reporting it