@PhlipElder said in MS Edge and pop-ups:

@gjacobse Sorry I wasn't clear. At some point the user was looking for something and clicked on a link in the results that then inserted something into Edge that causes the pop-ups.

We've seen it often enough that we've added search training to our Train the Human regimen.

That - I can see.

@Skyetel said in Skyetel billing error:

Believe it or not, it was caused by a rouge "%" in a SQL query.

Since % is a wildcard, yeah I can see that.

@Pete-S said in ProxMox: Set VM to AutoStart from Command Line CLI Start:

Nice but it's even easier with pure kvm as you don't have to go the roundabout way of using VMid.

virsh autostart somevm

Personally I find the number quite a bit easier.

@Pete-S using your little snippet did not clean up the pinned start menu of the initial admin user that ran it, nor the non admin user account that I subsequently created.

f2e6d053-0b72-4407-9ba8-b1d9dd3d75c8-image.png

It xbox was still in the start menu, but the rest looked gone.
da69b05a-32c4-40e7-ba6d-03ae78e2b092-image.png

@PhlipElder said in Rack LCD Console with Digital KVM:

SIP = Server endpoint?

Server Interface Pod

Taking over a location from an MSP and I found that there were two accounts that were created in 2019 with only one login on that date in 2019, and the password was listed in the account description field..... Luckily this domain will only exist for about a week under our control before we move them to our domain.

Drafted an email for my management to review before I email the CEO of that MSP. Just to make sure it doesn't backfire on me. CYA since I am about to call out an MSP at horrible security.

@NashBrydges Did you try switching the positions of existing CPUs?

@Pete-S said in Force password change on first login over RDP:

Great, so it works if you use RDWeb.

But if you RDP directly to any Windows server or workstation it won't.

Nope. It won't. There's no way around that.

We also have Exchange on-premises so OWA works for that password change.

@PhlipElder 67f0f91e-9123-4f6d-b388-cac7b787e704-image.png
Don't forget to ground that sucker.

...

@Pete-S said in Bookstack - Line break instead of Paragraph:

@dafyre said in Bookstack - Line break instead of Paragraph:

@pmoncho Does SHIFT+ENTER work?

Ctrl+Enter is otherwise the usual key combo.

Thanks. This is to used to save the page.

@Dashrender said in PS to download latest microsip version:

@JaredBusch said in PS to download latest microsip version:

@Dashrender said in PS to download latest microsip version:

I just installed it on a test machine with chocolatey - it installed it into the local admin profile - so any normal non admin user can't use it.

You can run chocolatey without admin rights just fine.

It warns you, but that is because most software is designed to be installed with admin rights in the windows world.

It seems that Microsip does not require that, so run chocolatey as the user itself.

interesting - something else to test then.

will the choco update scripts catch both admin and non admin installed items?

It depends on whether or not it was installed with elevated privileges and whether or not a given software is installed to a location that requires elevated privileges to modify.

@JaredBusch I have a file that exports the username and password in the script, so I am using a password. Sadly this error just fixed itself with no changes and everything is working as intended now so I won't know what the root cause of this was. Thanks for replying though.

Examples in known open source worlds...

If you run ProxMox with DRBD on the Debian (host) layer, it's RLS assuming ProxMox has local disks.

If you then make that block storage available over the network, it becomes a SAN (a traditional / physical SAN.) A SAN with replication for resiliency.

If you run ProxMox and make a VM of Ubuntu and in that VM install DRBD it may or may not be RLS depending on where the host is getting its storage from for that VM. To the VM it will appear as if it is RLS, but we really don't know unless we check the stack. It's just the replication piece here.

If you then make that DRBD block layer in the VM available over the network, it becomes a vSAN.

@scottalanmiller said in ZeroTier rules to limit freelancer access:

@Pete-S said in ZeroTier rules to limit freelancer access:

Or you can just rely on authentication and authorization for every service and have no network segmentation. More risky but less work.

To me this is what makes more sense. I get the value is DOUBLE protection. But at a minimum this should be there first, ZT only as a completely additional layer of protection.

I agree. Network access control and segmentation is just to make it freakishly hard to traverse for malicious actors and software.

@dagors said in Configure ZTE F670L for NAT on LAN Ethernet Ports:

This was it. What a dumb way to have that worded!!

Sorry, google translate.
But it's good that it was fixed.

I mean dumb way that ZTE worded it.

We find that if we rename the PC, then allow more than a day to go by before restarting, this can happen.

Also, if we rename a PC, then the user allows the PC to go into Lock mode (screen saver timeout with login required to return) they will encounter this upon wake up/re-logon.

In the above two cases a reboot usually resolves it, when it doesn't, we go in as local admin and disjoin then rejoin the domain to resolve it.

Also, in the above two cases, we did not lose the computer in active directory, so after the disjoin/rejoin you'd want to remove the orphan computer from AD.

There's an article online somewhere about why you should NOT disjoin and rejoin the domain in this case, but we have always done it this way and have never experienced ill effects.