@scottalanmiller said in MeshCentral Run Commands on Multiple Computers at Once:

"Starting with MeshCentral v0.5.85, you can now select "Run Commands" in the group actions or device actions. Allows running shell commands on many devices at once."

Ecq0qLrUcAEBBek.png

Wow, this is going to really change the way we use Mesh! Awesome stuff!

That seems to have fixed the issue

@ilyas said in Reset 120 Day Grace Period for Windows RDS Server with PowerShell:

@scottalanmiller

Hi, Thanks for wonderful script that save my time.
Could You please guide me how we can run this script on multiple servers?

I tried foreach PowerShell method but it does not work.

From the ISE, load the script and then enter-pssession for each system. Once connected, run the script from the ise. Sorted.

@Texkonc said in Internet outage:

@JaredBusch said in Internet outage:

@PhlipElder said in Internet outage:

@JaredBusch said in Internet outage:

@PhlipElder said in Internet outage:

https://www.cloudflarestatus.com/incidents/46z55mdhg0t5

Hmmm ... this from a little over a year ago.

Same "problem".

Routing is not magic. Errors happen.

That may be so, but the expectation is that the same errors would not happen over and over again.

FFS It is not the same. Are you stupid?

Jesus, calm down. No one pissed in your corn flakes...

No kidding. Don't go all Boomtown Rats on me. 😛

So far the rebuild appears to be still working. It ran all night. No complaints yet.

We know this is a domain, we don't know that the user is using a Windows PC. @AshKetchum is this a Windows PC? Also why the need to do so discreetly?

You can do as Travis/Jared said or use something like scp to do this.

I ran some test on a VM and created some groups and added some top-level directories for those groups.

Changed the group on each top-level directories and files below recursively with chown -R.

Set directories to permission 2770 and files to 0660 with chmod -R.

Changed smb.conf and added create mask=0660 and directory mask=2770.

Now new files and directories created on the share have the right permission and belongs to the right group automatically, simply depending on what group the top-level directory belongs to.

If you're not a member of a group, you will not even see the directories or files that belongs to that group.

I think this is a good interim solution without too much work. Then moving to onedrive or whatever can be done in the future on a department to department basis.

Only admin required for adding users is to add them to linux/samba and make sure they become members of the right groups.

It's also very simple to make a separate share out of the top-level folders if you wanted.

@JaredBusch

Everything works fine now.

The issue was a DNS resolution for devices within the LAN. I added an A record on the router for split dns. That solved the problem.

Thank you so much for your support

@Pete-S said in What's behind the scenes of Windows network discovery?:

Just found out with some network sniffing that Win 10 is not using DNS to find the IP for hostnames. It's using multicast queries. WTF.

First something called LLMNR (Link-local Multicast Name Resolution). If you ping xyz, it will ask for xyz.

Secondly it will use mDNS (multicast DNS). If you ping xyz, it will ask for xyz.local.

Well, I found out why.

If you don't have a DNS suffix in the network settings, Win10 will use multicasting to try to resolve a hostname that doesn't have a top-level domain suffix (such as xyz).

If you have a DNS suffix in your settings, it will use standard DNS.

@Grey said in Powershell countdown on servers?:

@Pete-S said in Powershell countdown on servers?:

@Grey

If you wanted to show the progress % you could do something like this as well:

$quantity = $systems.count $i = 0 foreach ($server in $systems){ //stuff $i = $i + 1 $progress = 100 * $i / $quantity }

Another trick is to not count it at all, just print a dot (".") for each iteration.
.........

Tested and this needs a try/catch for a divide by zero. The math is also off.
9d767202-8760-4564-a5fa-0f1adc903aea-image.png

You probably had --$quantity still in there. It decreases $quantity by one each time it executes.

But use @Obsolesce example.

@dbeato said in Outlook failing to open from multiple customers...:

@Dashrender said in Outlook failing to open from multiple customers...:

@WLS-ITGuy said in Outlook failing to open from multiple customers...:

@Dashrender said in Outlook failing to open from multiple customers...:

@dbeato said in Outlook failing to open from multiple customers...:

Fix for this is to revert to an earlier version of Microsoft. I have a .bat file here

https://github.com/dbeato/scripts/blob/master/Office 365/Fix-Outlook-Restart.bat

Do you know - does this only affect O365 Office users?

So far Windows O365 users are the only ones that are chirping to me. I do have two users who aren't on O365 who aren't complaining...yet.

Right - I'm 100% non O365, and no chirps yet - WSUS is used here, and those office updates are approved to push.

What Office version? Office Click-to-Run would be affected, Office 2013 and up would have been affected.

I have zero click 2 run - I'm all office 2016

@Dashrender said in Force Microsoft Store apps to update:

@Obsolesce said in Force Microsoft Store apps to update:

@JaredBusch said in Force Microsoft Store apps to update:

I've been hitting a bunch of machines lately that need updated and one thing I noted was that the Store apps were seeming to never update by themselves while I had the device.

I could manually log in and open the Store app, and then click through to the updates and then tell it to update. But man that is a pain..

A little searching and I found this gem. Execute this, it takes a while to return, and then the Store apps begin to update in the background immediately.

Get-CimInstance -Namespace "Root\cimv2\mdm\dmmap" -ClassName "MDM_EnterpriseModernAppManagement_AppManagement01" | Invoke-CimMethod -MethodName UpdateScanMethod

Why don't you just turn on the update apps automatically option?

There's also a policy setting.

I thought that was ON by default?

I assume it is. Because systems do eventually update. The key there is eventually....

Sec+ is good to have. But important to note unlike a CISSP, it will do essentially nothing for a career. but it's a nice to have.

@dbeato said in Patch all your Windows DNS servers - CVE-2020-1350 - CVSS score of 10:

@pmoncho said in Patch all your Windows DNS servers - CVE-2020-1350 - CVSS score of 10:

Just wondering - Is anyone seeing a patch for 2019 with a reference to the KB article?
Checked yesterday, last night and this morning. No update that I can see.

Currently performing the workaround.

c46cc947-cad4-4bfc-877c-dbd1c1ddfd16-image.png

https://www.catalog.update.microsoft.com/Search.aspx?q=KB4558998

Thanks. Forgot about the update catalog.

@coliver said in How to download Win 10 Enterprise ISO.:

@JaredBusch said in How to download Win 10 Enterprise ISO.:

@Dashrender said in How to download Win 10 Enterprise ISO.:

or you could just download it from VLSC.

But the gets around having to deal with signing in to VLSC which sucks balls most days.

If it even works in a modern browser.

If it even works. Full stop.

I have the 2nd and 3rd one along with some other models. They work as advertised. I really like how Samsung and HPE have made some excellent chromebooks without breaking the bank.

Online tuition takes place via a programme called Zoom. it is very quick and is much more stable than Skype. I use a variety of online whiteboards, including Bitpaper, Openboard and Zoom's own whiteboard. I also use a document camera to demonstrate the use of manipulatives during the lesson. To enable the student to write more easily on the whiteboard, you may wish to use a graphics tablet such as those produced by Wacom or XP-Pen. I am more than happy to give a 15 minute demonstration to parents/students who are thinking about taking up the online option.

Here is an example of a relatively inexpensive XP-Pen Star G430 graphics tablet:

https://www.xp-pen.com/product/46.html

I would do it, it never hurts. Hey it might be positive and negative. Someone can learn how great a job someone did or how poorly a job was done. The point is to make sure it is documented.

https://github.com/ElasticHQ/elasticsearch-HQ

So I don't believe it handles snapshots yet, but it still looks like a pretty useful tool that I have been meaning to try out for people who don't want to manage through the API.

I wanted to make sure I followed up and let you all know that we confirmed that there was no bug. There was a propagation delay that impacted @JasGot which caused it to appear that the 10 digit vs 11 digit input mattered.