Posts made by Romo

Romo

@dbeato exported-change-not-reimported

Romo

@dbeato Here is screenshot. I dont see a sync at all in logs at 7:59 in the sync service manager. Yet the audit logs show the disable account sync at that time.

The user principal name in the activity log is showing the sync coming from the same DC, so not sure what is going on.

Romo

@jt1001001 User was disabled on 8/11/2020 originally and enabled again on 11/12/2020. The day he got re-enabled was the issues started happening

Romo

@Obsolesce here is the info

AccountExpirationDate                :
accountExpires                       : 9223372036854775807
AccountLockoutTime                   :
AccountNotDelegated                  : False
AllowReversiblePasswordEncryption    : False
AuthenticationPolicy                 : {}
AuthenticationPolicySilo             : {}
BadLogonCount                        : 0
badPasswordTime                      : 132526283882223437
badPwdCount                          : 0
c                                    : US
CannotChangePassword                 : False
CanonicalName                        : DomainName.local/SITE - Location/Location Users/USER LASTNAME
Certificates                         : {}
City                                 : Location
CN                                   : USER LASTNAME
co                                   : United States
codePage                             : 0
Company                              :
CompoundIdentitySupported            : {False}
Country                              : US
countryCode                          : 840
Created                              : 6/29/2020 12:05:53 PM
createTimeStamp                      : 6/29/2020 12:05:53 PM
Deleted                              :
Department                           :
Description                          : FD 8/11/2020-Enabled 11/12/2020
DisplayName                          : USER LASTNAME
DistinguishedName                    : CN=USER LASTNAME,OU=Location Users,OU=SITE - Location,DC=DomainName,DC=local
Division                             :
DoesNotRequirePreAuth                : False
dSCorePropagationData                : {12/18/2020 1:19:34 PM, 12/18/2020 1:17:50 PM, 12/18/2020 1:10:57 PM,
                                       11/12/2020 2:31:00 PM...}
EmailAddress                         : [email protected]
EmployeeID                           :
EmployeeNumber                       :
Enabled                              : True
Fax                                  :
GivenName                            : USER
HomeDirectory                        :
HomedirRequired                      : False
HomeDrive                            :
HomePage                             :
HomePhone                            :
Initials                             :
instanceType                         : 4
isDeleted                            :
KerberosEncryptionType               : {None}
l                                    : Location
LastBadPasswordAttempt               : 12/16/2020 3:39:48 PM
LastKnownParent                      :
lastLogoff                           : 0
lastLogon                            : 132526894973219910
LastLogonDate                        : 12/14/2020 8:01:11 AM
lastLogonTimestamp                   : 132524280715790975
LockedOut                            : False
lockoutTime                          : 0
logonCount                           : 69
LogonWorkstations                    :
mail                                 : [email protected]
Manager                              :
MemberOf                             : {REDACTED}
MNSLogonAccount                      : False
MobilePhone                          :
Modified                             : 12/18/2020 1:19:34 PM
modifyTimeStamp                      : 12/18/2020 1:19:34 PM
mS-DS-ConsistencyGuid                : {32, 103, 80, 151...}
msDS-SupportedEncryptionTypes        : 0
msDS-User-Account-Control-Computed   : 0
msExchBypassAudit                    : False
msExchPreviousRecipientTypeDetails   : 1
msExchRecipientSoftDeletedStatus     : 0
msExchUMDtmfMap                      : {lastNameFirstName:2266666299355, firstNameLastName:6299355226666}
Name                                 : USER LASTNAME
nTSecurityDescriptor                 : System.DirectoryServices.ActiveDirectorySecurity
ObjectCategory                       : CN=Person,CN=Schema,CN=Configuration,DC=DomainName,DC=local
ObjectClass                          : user
ObjectGUID                           : 97506720-3ae7-4364-898b-e1fa734ed821
objectSid                            : S-1-5-21-2029862695-1482051392-3921772031-28167
Office                               :
OfficePhone                          :
Organization                         :
OtherName                            :
PasswordExpired                      : False
PasswordLastSet                      : 12/8/2020 4:48:43 PM
PasswordNeverExpires                 : False
PasswordNotRequired                  : False
POBox                                :
PostalCode                           :
PrimaryGroup                         : CN=Domain Users,CN=Users,DC=DomainName,DC=local
primaryGroupID                       : 513
PrincipalsAllowedToDelegateToAccount : {}
ProfilePath                          :
ProtectedFromAccidentalDeletion      : False
proxyAddresses                       : {[email protected]}
pwdLastSet                           : 132519413236813439
SamAccountName                       : mLASTNAME
sAMAccountType                       : 805306368
ScriptPath                           :
sDRightsEffective                    : 15
ServicePrincipalNames                : {}
showInAddressBook                    : {REDACTED}
SID                                  : S-1-5-21-2029862695-1482051392-3921772031-28167
SIDHistory                           : {}
SmartcardLogonRequired               : False
sn                                   : LASTNAME
st                                   : IL
State                                : IL
StreetAddress                        :
Surname                              : LASTNAME
Title                                :
TrustedForDelegation                 : False
TrustedToAuthForDelegation           : False
UseDESKeyOnly                        : False
userAccountControl                   : 512
userCertificate                      : {}
UserPrincipalName                    : [email protected]
uSNChanged                           : 62837343
uSNCreated                           : 28616664
whenChanged                          : 12/18/2020 1:19:34 PM
whenCreated                          : 6/29/2020 12:05:53 PM

Romo

You can also check out Photoprism, haven't actually used it but seems interesting.

Community Version docs - https://docs.photoprism.org/
Github repo - https://github.com/photoprism/photoprism/

Romo

@Obsolesce said in User Account getting disabled in Azure:

would cause an account to be disabled on AAD.

AD audit logs don't show the account as getting disabled at all, the only entry I see there is when I manually disabled the account today to try to get a log at 2:03:56PM

Account was enabled at 7:40:55 PM

Only after the account was enabled in AD, the sync once again properly enabled the account in Azure but something disabled it again minutes after and the cycle of enabling and disabling started again.

Currently the account is still showing as enabled in AD and no further security audit logs are shown accept the above screenshots.

Romo

@Obsolesce
In AD, I see the sync logs happening at 1:12 and 1:42, I see no AD sync log in the logs at 1:28 or 1:58 which seem to be the ones disabling the account.

The Synchronization service manager also shows the syncs occurring at 1:12 and 1:42

Azure also reports the syncs coming from the same machine, so it doesn't seem like the client has another sync running.

Romo

Trying to figure out why a user account is constantly getting disabled in Azure. The site has AD sync running, the local AD user is not disabled but the audit logs in azure shows the sync is sending the Disable Account attribute change for some reason.

Any idea what else to check to get a better understanding of why this could be happening.

Romo

@DustinB3403 Tags added

Romo

Just got access to the machine, first thing I see is the delete folder with 19k+ emails

She says she has had the folder with all those emails for a while and that trouble just started yesterday for her.

Romo

So having an issue with only one Office365 account having extreme Outlook on the Web slowness when loading emails. Sometimes clicking an email works as usual, but other times its can take more than a couple of minutes to load. Account has been tested on different computers and different locations according to the user and she reports the same issue. She has tested other outlook accounts in the machines and they are working without trouble.

I am trying to get remote access to her and check for myself, as I have only seen short clips of the time it takes to load an email. Account is using 16% of her 99GB box so the amount of emails shouldn't be the issue.

Anybody experienced something similar?

Romo

@Dashrender said in Fanvil x5u - Firmware upgrade via server download:

https://www.fanvil.com/Uploads/Temp/download/20191218/5df9dd9ce42f0.pdf

The general configuration file is helpful in automatic configuration deployment of a large number of terminals. For example, only a general configuration file F0V00X600000.cfg carrying firmware parameters needs to be placed on the automatic configuration server to automatically deploy firmware for 1000 X6 terminals.

@Dashrender thanks I had totally missed that section of the pdf. Adding the Auto Image Url option, to the F0V0X5U00000.cfg did get the phone to properly upgrade the firmware automatically.

F0V0X5U00000.cfg contents for the test.

<<VOIP CONFIG FILE>>Version:2.0000000000

<AUTOUPDATE CONFIG MODULE>
Auto Image Url     :https://URL/x5u-6906-P0.18.23.21-2.2.10-3421T2020-09-27-16.44.21.z


<<END OF FILE>>

Here are the logs of the process, phones starts with firmware 1.0.0 and properly upgrades to 2.2.10

[15/Oct/2020:09:20:42 -0500] "GET /F0V0X5U00000.cfg HTTP/1.1" 200 209 "-" "Fanvil X5U 1.0.0"
[15/Oct/2020:09:20:43 -0500] "GET /MACADDRESS.cfg HTTP/1.1" 200 93621 "-" "Fanvil X5U 1.0.0"
[15/Oct/2020:09:20:53 -0500] "GET /x5u-6906-P0.18.23.21-2.2.10-3421T2020-09-27-16.44.21.z HTTP/1.1" 200 40789888 "-" "Fanvil X5U 1.0.0"
[15/Oct/2020:09:21:44 -0500] "GET /F0V0X5U00000.cfg HTTP/1.1" 200 209 "-" "Fanvil X5U 1.0.0"
[15/Oct/2020:09:21:45 -0500] "GET /MACADDRESS.cfg HTTP/1.1" 200 93621 "-" "Fanvil X5U 1.0.0"
[15/Oct/2020:09:23:02 -0500] "GET /F0V0X5U00000.cfg HTTP/1.1" 200 209 "-" "Fanvil X5U 2.2.10"
[15/Oct/2020:09:23:02 -0500] "GET /MACADDRESS.cfg HTTP/1.1" 200 93621 "-" "Fanvil X5U 2.2.10"
[15/Oct/2020:09:23:23 -0500] "GET /F0V0X5U00000.cfg HTTP/1.1" 200 209 "-" "Fanvil X5U 2.2.10"
[15/Oct/2020:09:23:23 -0500] "GET /MACADDRESS.cfg HTTP/1.1" 200 93621 "-" "Fanvil X5U 2.2.10"
[15/Oct/2020:09:32:53 -0500] "GET /fanvil_x5u_hwv1_0.txt HTTP/1.1" 200 115 "-" "Fanvil X5U 2.2.10"

Romo

Had a personal issue this afternoon and I couldn't keep testing further, but in the logs, it does look for that specific file. No matter what I put in the server url it always looked for that file appending the name to the server URL.

[14/Oct/2020:19:26:40 -0500] "GET ../F0V0X5U00000.cfg HTTP/1.1" 404 229 "-" "Fanvil X5U 2.2.10 "
[14/Oct/2020:19:26:41 -0500] "GET ../MAC_ADDRESS.cfg HTTP/1.1" 200 146743 "-" "Fanvil X5U 2.2.10"
[14/Oct/2020:19:15:57 -0500] "GET ../../fanvil_x5u_hwv1_0.txt HTTP/1.1" 200 115 "-" "Fanvil X5U 2.2.10"

Romo

@scottalanmiller said in Opinions: Ansible vs. SaltStack:

@AdamF said in Opinions: Ansible vs. SaltStack:

@scottalanmiller

What is it called?

I have no memory of it, lol, but there's a thread around here about it. It's focused as an RMM, but Salt under the hood. Very cool idea. It's a lot of where SodiumSuite was going.

Tactical RMM - Targetted as an RMM for Windows, includes Mesh Central, saltstack, a custom python agent, Django backend, Vue frontend.

UYUNI - OpenSuse Leap 15.2 based, but manages SUSE Linux Enterprise, openSUSE, Red Hat Enterprise Linux, CentOS, Oracle Linux and Ubuntu client systems. This is since 2018 the upstream project for SUSE Manager.

Romo

@Dashrender I actually started also tested from 2.0.2 and couldn't get it to autoupgrade either, it kept just showing the popup. Trying to get access to more documentation to see if this can be really done automatically as other brands do.

Romo

EDIT:
Adding the Auto Image Url entry to the model.cfg file actually made the autoprovisioning able to be able to download the new firmware and install it directly from the server without any other intervention.
F0V0X5U00000.cfg contents for the test.

<<VOIP CONFIG FILE>>Version:2.0000000000

<AUTOUPDATE CONFIG MODULE>
Auto Image Url     :https://URL/x5u-6906-P0.18.23.21-2.2.10-3421T2020-09-27-16.44.21.z


<<END OF FILE>>

END EDIT

In order to get the phone to see there is a new firmware in the server for autoprovisioning, a specific txt file must be added as this is the file where the phone gets the actual firmware details. In this case the x5u was looking for a file named fanvil_x5u_hwv1_0.txt.

Syntax for the file should be the following:

Version=2.2.10 #Firmware version you are making available
Firmware=x5u-6906-P0.18.23.21-2.2.10-3421T2020-09-27-16.44.21.z #Path to the firmware file
BuildTime=2020.09.27 16:44 # Just got this from within the firmware file name
Info=TXT

Once the phones reads this txt file, it is able to see the new firmware upgrade.

Upgrade pop up is shown in the phone screen (if popups are enabled which is the default) or it can be triggered from the admin web gui by clicking the Upgrade button.

I am not liking that I can't seem to actually trigger the upgrade without user intervention/web gui access. There is an enable autoupgrade option with an update interval but in the initial tests it just shows the upgrade option but doesn't auto-upgrade actually.

Romo

@JaredBusch And you want to check this just from the console? Dashboard says the version:

Romo

Creating an ADR for windows updates but getting 0X87d20417 error, we have tried recreating the rules and restarting the different services, but no matter what we still see that error.

Here is the search criteria for the updates

PatchDownloader.log is showing:

DownloadUpdateContent() failed with hr=0x80041013

Anyone seen this happening before?

Romo

Here it is

This is the error:

Check if the error is present by by visiting Help-> About Avimark.

If you confirm the error is showing follow the steps:

Close Avimark
Find the Avimark shortcut in the desktop, right click and open its properties.
In the target section add /regserver to the Avimark link and click ok to save the change.
Right click on the Avimark shortcut and run it as an ADMINISTRATOR
Let it run for a bit (1-2 min), nothing will appear to be happening but it really is.
Right click the shortcut again, go into properties and remove the added /regserver to the target field (returning the shortcut to the original state).
Open up Avimark again and the error should be gone and the machine will be printing again.

Romo

Happy Birthday Dominica!