RE: [NTSysADM] RE: Persisting access to an Azure shared folder

2017-03-17 Thread Stephen Gestwicki
oup Policy with the delay set to 0, but it didn't manage to get in soon enough. However I didn't configure any of the other settings, let me give that a try. From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Ste

RE: [NTSysADM] RE: Persisting access to an Azure shared folder

2017-03-17 Thread Stephen Gestwicki
* You can use Group Policy to change the logon script delay but that only applies to Server 2012 R2+ and Windows 8.1+. o Computer Configuration > Policies > Administrative Templates > System > Group Policy > Configure Logon Script Delay = Enabled and set to 0 minutes * You

RE: [NTSysADM] Fwd: Protecting from Ransomware

2017-02-15 Thread Stephen Gestwicki
I have never tried knowbe4.com so I cannot comment on that. I just received a quote for Sophos Intercept X last month because I was interested in the ransomware protection. It does a lot more than just ransomware protection but the cost was way too high for me to justify. Sophos Central

[NTSysADM] RE: CMAK profiles without admin rights

2016-10-13 Thread Stephen Gestwicki
You should be able to use Processes Explorer to find that while running the VPN. [cid:image002.png@01D22546.20F9DCB0] https://technet.microsoft.com/en-us/sysinternals/processexplorer.aspx?f=255=-2147217396 - Stephen From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]

RE: [NTSysADM] persistent lies

2016-10-03 Thread Stephen Gestwicki
There was a Microsoft patch back in June that caused issues like this for some environments. http://www.gpanswers.com/never-a-dull-moment-with-group-policy-or-what-to-do-about-ms16-072/ - Stephen From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Micheal

[NTSysADM] RE: More PowerShell help

2016-08-31 Thread Stephen Gestwicki
The easiest way I have found without changing UAC settings was to create a small batch file that I right click on an select "Run as administrator". This is the contents of my batch file: @echo off set ScriptDirectory=%~dp0 PowerShell -ExecutionPolicy Unrestricted -Command

RE: [NTSysADM] Force sleep downside

2016-08-08 Thread Stephen Gestwicki
I think Google is giving you all those links for it just because it is much more common for people to disable sleep and hibernate then to enable it. It could be a convenience for them or it could be because CEOs around the world cannot wait the tens of seconds for their machine to wake up. As

RE: [NTSysADM] RE: PowerShell weaknesses

2016-06-27 Thread Stephen Gestwicki
Why don’t you use ADSI instead of installing RSAT on everyone’s computers? http://stackoverflow.com/questions/10184052/get-a-users-email-address-from-the-username-via-powershell-and-wmi - Stephen From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of James

[NTSysADM] RE: PowerShell weaknesses

2016-06-27 Thread Stephen Gestwicki
Another option which to me is more readable for someone that doesn't know PowerShell is: Get-ADUser -Identity jrankin | Select-Object -ExpandProperty mail - Stephen From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of James Rankin Sent: Monday, June 27,

[NTSysADM] RE: Owned by Crypz

2016-06-15 Thread Stephen Gestwicki
Crypto ransomware can still run if the user does not have administrative rights. It will stop the ransomware from messing with volume shadow copies and some other things but it will still be able to encrypt any file the user can write to. Keeping all software (particularly the internet

RE: [NTSysADM] RE: End user data - local, cloud, home directories, and OneDrive, Oh my!

2016-06-02 Thread Stephen Gestwicki
am I missing something? Thanks, Jonathan From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Stephen Gestwicki Sent: Monday, May 30, 2016 1:04 PM To: ntsysadm@lists.myitforum.com<mailto:ntsysadm@lists.myitforum.c

[NTSysADM] RE: End user data - local, cloud, home directories, and OneDrive, Oh my!

2016-05-30 Thread Stephen Gestwicki
It sounds to me like you are not using the OneDrive for Business Next Generation Sync Client that came out a couple months ago.

[NTSysADM] RE: DHCP failover

2016-05-18 Thread Stephen Gestwicki
DHCP failover is missing a very needed feature of automatic replication. I created a PowerShell script that I ran from a scheduled task to handle it. This is the main line in the script that did the work: Invoke-DhcpServerv4FailoverReplication -ComputerName $PrimaryDHCP -Force - Stephen From:

RE: [NTSysADM] RE: New script: Microsoft Active Directory Health Check PowerShell Script V2.0

2016-05-09 Thread Stephen Gestwicki
Yes, LastLogin is DC specific but LastLogonTimeStamp is not. The issue with the later one is that it isn’t updated very often because it was designed to find stale accounts which still works perfectly for this usage.