@dustinb3403 said in Checking multiple Directories to confirm all files are identical:

I know I could use a tool like Create-Synchronicity to force 1 other directory to match the source, but I would prefer to find and list the differences in the directories.
Maybe powershell can help?

Yeah, PowerShell can help with this in the same way closing the front door of a house will fix a fire inside of it.

@flaxking said in Windows Defender Application Control:

@obsolesce said in Windows Defender Application Control:

@ccwtech said in Windows Defender Application Control:

@obsolesce said in Windows Defender Application Control:

@ccwtech said in Windows Defender Application Control:

Has anyone played with Windows Defender Application Control, specifically Group Policy to turn it on for each workstation?

I have a request from a client to do this, but I am very leery of using group policy for something like this.

Are they all running Win 10 Enterprise?

For sure no... Win 10 Pro.

Then it won't work as it's a requirement.

I think specifically it's using Group Policy for WDAC that's enterprise edition only, right?

Yes, you can use it in Pro, just not enforced by a GPO

@dustinb3403 said in The Failure of Windows as a Service:

@scottalanmiller said in The Failure of Windows as a Service:

@stuartjordan said in The Failure of Windows as a Service:

Like I've said in the past, this is where it is going towards, first business then will be consumer:

https://global.techradar.com/en-ae/news/microsoft-launches-windows-365-a-new-way-to-experience-windows-10-and-windows-11

Yeah, except their main markets are like the US and Canada where Internet reliability is really low. It's like no one there has ever been on the Internet. Oh wait...

I'm sure this has been stated before, but don't conflate you're poor experiences with Internet Connectivity with everywhere across the US.

Granted many places have very crappy options but they still get places "online".

Don't conflate your good experience in one location with my sampling of thousands of sites across the US that we support and monitor all the time. The US has, and is well documented to be, some of the worst Internet in the developed world and certainly not on par with some of the undeveloped world.

@dbeato said in You Have Exceeded the Maximum Number of Computer Accounts - Windows and Active Directory:

@scottalanmiller This is for a standard user without any Domain Admin Privileges. I am assuming this is for a Technician joining computers that no one wants to have admin permissions.

That would be an example case. Yes.

Would something like crackmapexec do the trick? I've started playing around with it to validate that some of our security configs are actually doing what they're supposed to and it can be used to dump user lists from a lot of the native windows locations. Not sure that it would get everything that you're looking for but "hacking" tools might be something to consider in addition to the typical bevy of PS and Windows commands.

@dustinb3403 I even managed to make devcon.exe disable USB
but I wanted with this command you sent

The ultimate in porn surfing. 😉

@dbeato said in Exchange Mailbox Database Migration - Single Host - Indexing Time estimate:

@dustinb3403 About 1 to 4 days.

That's what I was thinking, thanks!

@black3dynamite works.

Thanks. I was looking for this article long time. Cheers.

@Dashrender said in Cannot install Windows updates Help Please!:

This has been the biggest hold for me getting anything newer than 1909 on many devices - that said, I just don't get the option to install anything newer through Windows Updates

I've seen that, too.

@Obsolesce said in Active Directory - User Attribute RFID/HID Badge:

@DustinB3403 said in Active Directory - User Attribute RFID/HID Badge:

@Dashrender I'm a 3rd party to the end customer here. Acting as the middle man as the customer's IT department wanted to engage outside support to try and vet different products.

I candidly told the customer that while this product will work, it won't work with all of the features they want without some substantial changes to their infrastructure and that the support (at least from this vendor) is pretty awful.

The simple approach here is to not integrate RFID/HID's to the system and simply use the AD Integration with the built-in QR codes that each member is assigned.

Just because something may be supported, doesn't imply that it is support.

Except in this case the vendor very clearly has stated they support you adding custom attributes within AD.

Besides a comport setting difference (which isn't relevant) I can't see a difference.

The right hand side is the one that works.

HRjfHYdZGd.png

For some reason, it would not downgrade like normal within chocolatey

So I did an uninstall, reinstall of version 1.4.6, then pinned version 1.4.6 so it will not upgrade when the daily task fires that uprgades all packages.

choco uninstall zerotier-one -y choco install zerotier-one --version=1.4.6 -y choco pin add -n=zerotier-one

Of course I did it all via ScreenConnect.

711f661b-2f41-4bd0-a83b-a297a2d09376-image.png
58f00374-e5c1-4d6f-8de9-f88b95a662d8-image.png

This is what a pin does:
2a64dc4a-d595-4f68-ac76-2faa3f55d77b-image.png

@Dashrender

Gotta love Bob-

@scottalanmiller said in Free / Cheap Unattended Remote Access Utility for Windows PCs:

@EddieJennings said in Free / Cheap Unattended Remote Access Utility for Windows PCs:

@NetworkNerd

My MeshCentral VM is in Vultr.

Same here. Way better than AWS, Azure, or GCP for standard workloads like this.

Just for home use, it could likely sit in a free AWS Lightsail instance if it is small enough.