@dafyre said in AD/AAD and VPN integration:

I can't quote much on the VPN side of things, but we use MFA here for nearly everything now.

Duo Security (duo.com) is great. You can use hardware keys or the app on your phone, and it's quick and easy enough to manage.

Edit: Even our VPN now requires MFA, lol.

Not everything supports Duo, though, such as WHfB unless you go through another IDP that does support it.

@pete-s said in What am I doing wrong with ffmpeg:

Can you have both ass and srt in the same container and have it working?

Yes, it works perfectly.

Edit: To be more precise, using the "working" multi-step process above, the mux that adds the ass files shows this. So it seems to be converting it. But I can also force it to srt, and various examples from search results show people mixing srt and ass with no issues.
22ae3aa3-bb02-4ce3-adf5-69ce98c14049-image.png

found and am starting here:
https://techwizard.cloud/2020/11/10/powershell-tip-office-365-invoke-re-register-mfa/

@obsolesce said in Is it authentication?? Slow response.:

@siringo watch resource monitor, resmon.exe, when during the delay of opening an app seemingly caused solely by connecting to the wifi network.

For paint.exe to open instantly prior to wifi connection, then slowly after, and instantly off wifi... seems like you'll notice something in resmon somewhere. Maybe A/V or something. Look at everything even the network and possible new tcp connections when you open paint.

I've got some time to look at this today, thanks.

@wrcombs said in How to view .TGZ files?:

I can view all the files from the tgz file after extracting to tar files. but can't actually open or read the files inside of there.. The issue with this is when they send me logs, the logs are also in TGZ files..

I figured it out -
I have to open the archive in 7zip -after extracting, then use notepad++ to open the file, and it is readable in English to me.

@wrcombs - Or drag and drop the PDF file to the local computer and print it locally.

@gjacobse said in Does a script imply Automation?:

@stacksofplates said in Does a script imply Automation?:

What reasons are cited when they fight you on this? This should have been scripted years ago.

Can I buy you a beer, or case,.. or....

There is such a push for 'security' over anything else that it's Not allowed to the point of when onboarding someone, things are missed (or worse; added and not needed) so you have to retouch an account more than once.

I've mentioned it since day one, made suggestions, and even found one that would cover most anything needed... It would only need to be adjusted to this environment...

It's always 'blocked' or ignored or what ever. Powershell Remote execution - even if signed - is turned off. To perform a task needed by a process we are starting (MS AutoPilot) PS is needed - by design.... So, I have to run it - one damn line at a time,.. and circumvent policies and such just to do the tasks needed. It's so seriously ridiculous to need and be told to perform a task - and can't because of the aire of security.....

Find somewhere where you want to work. Life is too short to put up with places like that.

K3B was my go-to app back in the day and it looks like it's still somewhat actively maintained

@stuartjordan I seem to recall this being one of the reasons I got away from KDE a while back. Some quick google work shows that it might be solved by using kio-fuse but YMMV.

@eleceng said in CAL Counting:

These will be device RDS CAL's and pretty much the same account logging in all the time. But we may have technicians from time to time login and open an additional session so we may need extras to cover that.

Will they be using the same systems thin clients as the non-tech users?

@jaredbusch said in script to download and extract MicroSip portable:

@dashrender chocolatey can easily run as non-admin. The question is whether or not the application installs can handle that. Of course your centralized scrips for keeping things up-to-date would not get that use your space one you have to have a script to keep the user space chocolatey package up-to-date also

Yeah, I'll have to look at it - but only after someone else actually picks ownership of the package back up. The current maintainer has stated he's no longer maintaining it.

@scottalanmiller said in Milestone VMS Hardware:

@garak0410 said in Milestone VMS Hardware:

I'm following this as I almost feel like the only Milestone user in the world sometimes...

So for you this thread is a ....

wait for it....

milestone?

Youtube Video

If it does not work then yes just deal with clonezilla. It is not too hard to make ELI5 instructions.

@eleceng said in GPO's for System Hardening:

@jaredbusch That is the correct way and the way it's done in most manufacturing plants in the U.S. and International. That has been best practice for the last 25-30 years. I am in 8-10 different manufacturing plants [per week as a consultant and that's how it done.

That's awesome that the plants you work for do it that way - but I agree with JB - it's likely not that common in reality.

Hell - the sure number of SCADA systems on the internet in mind boggling.

@scottalanmiller said in ESXI VM Backup:

This is the solution that my customer went in blindly with and got burned because it didn't have an agent to talk to their applications and their systems were corrupted in a totally predictable way. It's an amazing product, but no product can bypass the system admin's need to know their workloads.

So what your saying is even though they had something backing up blindly on the Hypervisor level (i.e backs up the whole VM), and no agent. Their application kind of corrupted it, so when the VM restored the application just crapped out 😁

As already mentioned this is why you need to test and restore 😁.

We're bad at this at the moment, but in the process of planning a DR exercise.

@viki said in angularjs:

also angularjs login code anyone can help me please

https://www.tutorialspoint.com/angularjs/angularjs_login_application.htm

@obsolesce

That is pretty cool. I will give that a try this morning.

@braswelljay said in Ubiquiti Edgeswitch console cable ...:

Will this usb to rj45 console cable work with the Ubiquiti edgeswitch?

Ubiquiti uses standard RS232 communication on a standard EIA-232 port. So this should work fine.