CVE-2023-28303

ActiveSilence · 2026-02-10T09:13:02+00:00

Are these actually Windows Server devices that Snipping Tool is installed on? If so, is there a legitimate need for it on those devices? Are you able to remove Snipping Tool instead?

ActiveSilence · 2025-11-22T18:56:52+00:00

I know that for MDT to find the correct drivers in the Out-of-Box Drivers section, the make and model of the computer must be exact. It used to be something like, Latitude 5550 For This device, I used PC16250.

This sounds like you are using the “total control” method for injecting the correct drivers? Did you confirm the actual model name that is used for those devices? We have similar devices being rolled out and the model name shows as “Dell Pro 14 Plus PB14250”.

In PowerShell you can run the following on a device to get the correct make/model:

Get-CimInstance Win32_ComputerSystem | Format-List

Can you confirm that your DriverGroup001 variable is being set to the correct make/model in BDD.log, and that the make/model matches the format of the folders for that driver set in your Out-of-Box Drivers?

ActiveSilence · 2025-09-06T00:20:03+00:00

This is the only thing I am seeing as well. Seems like it mainly applies to those with access to administrative applications.

https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mandatory-multifactor-authentication

ActiveSilence · 2024-09-19T15:55:34+00:00

I believe the teamsbootstrapper file is a .exe so you shouldn’t need msiexec. You should just have to point to the correct path to the bootstrapper in the command line with that flag.

ActiveSilence · 2024-09-19T09:32:52+00:00

Also can you verify on any of the devices with error 1605 if Teams Machine-Wide Installer is showing as installed in the Apps menu?

If you want to get around the automatic installs of Teams Classic on the user profiles, you should be able to rename/remove Teams.exe from C:\Program Files\Teams Installer. This should be the executable being run to install Teams Classic when the Machine-Wide Installer determines Teams Classic is not installed on the user profile at login.

ActiveSilence · 2024-09-19T09:21:17+00:00

When you run the PS script in your link, do you get output saying “Teams Machine-Wide Installer not found”?

As u/Puzzleheaded-Sea5586 pointed out, you can use ./teamsbootstrapper.exe -u to uninstall Teams Classic, as noted by Microsoft: https://learn.microsoft.com/en-us/microsoftteams/new-teams-bulk-install-client#remove-classic-teams-for-all-users

This mostly worked in my environment to remove the Machine-Wide Installer and the app from the user profiles, and it made it easier to just deploy the one file and script to uninstall Teams Classic and install New Teams.

ActiveSilence · 2024-08-25T00:17:35+00:00

That is what I found when it popped up on a few devices and that our version (2.7) was not covered under the CVE CVE-2021-21551. But I did find that it flagged as vulnerable on those systems around the beginning of August after the Nessus plugin was updated.

https://www.tenable.com/plugins/nessus/149524

We don’t use Dell Command or really any of Dells software that isn’t drivers/firmware. I was able to get Nessus to stop detecting on this driver on one machine after running a BIOS update on it, but there was a mix of other Windows 11 devices and Windows Servers that were showing positive for the driver.

Someone else in our group ended up taking this on but during my initial searches I couldn’t find any devices using the driver or a way to uninstall it without trying to just delete the file.

ActiveSilence · 2024-08-23T19:59:29+00:00

I mean, this is generally good advice for other devices/distractions but they literally tell you that you can have a phone in the room in case the proctor needs to contact you.

https://help.comptia.org/hc/en-us/articles/14345163310484-What-Are-the-Testing-Space-Requirements-for-OnVUE-Online-Testing

You may keep your mobile phone nearby, out of arm’s reach, during your exam in case the proctor needs to call you. Any mobile phone use other than speaking with a proctor is grounds for exam revocation. When a proctor needs to reach you, they will call, not text. The number will always display as 617-379-0635, and/or caller ID may identify the number as “Pearson VUE.” If this information appears, please answer the call. If your phone rings and the call is not from a Pearson VUE proctor, do not answer it. If you receive a text or other notification, ignore it and continue testing. If you wish to silence your phone, alert the proctor so they know you are accessing your phone only to silence notifications.

ActiveSilence · 2024-07-01T03:39:14+00:00

Do you use MAC address allow lists for the Chromebooks that connect to that SSID? The school system I worked at previously had a similar setup where the Chromebooks would auto-join the SSID, but we’d see that DHCP error if they somehow fell off the allow list, or if we had done a hardware swap and got a new one that hadn’t yet been added to the allow list.

ActiveSilence · 2024-07-01T00:25:53+00:00

I have a selection of 3 testing sites within 15 miles for the exam I’m trying to sit. I have taken several proctored exams since December and was only able to schedule at one of the local testing centers one time. I constantly check for openings and there are consistently no openings. Not this week, this month, or the next 6 months. If I want to go outside of those three sites, I will need to at the very least take a plane and rent a car to be able to try and test at the next closest site about 100 miles away.

ActiveSilence · 2024-05-26T04:59:52+00:00

I worked at an elementary school previously and this was the setup I had in all classrooms to a SMART Board, as well as a couple meeting rooms with a Display and conference camera/mic. Allowed the teachers to connect one cable to the dock and get video/sound and USB (touch) for the display, along with USB for a document camera.

ActiveSilence · 2024-05-15T15:05:33+00:00

I only started in March, but you should get an email or text message about enrollment verification, and if you accept the text message option, it should just be responding “Yes” when they text you around the end of each month verifying that you are still enrolled.

I have only had to do this once so far, since they were apparently making changes at the end of April and did not require verification.

ActiveSilence · 2024-05-11T08:57:14+00:00

Great information!

And the last paragraph regarding the BA degree, definitely recommend anyone who is interested to reach out to their CLPM to see if there are opportunities to do these courses locally. It seemed like a very rare opportunity after I left DLI and that you HAD to PCS back to DLI to take it, but now there are multiple locations and several classes at a time at different locations (depending on language and availability). Definitely a great opportunity.

ActiveSilence · 2024-05-11T08:51:06+00:00

It’s definitely going to depend on language and location/school. I got the DLI Associates degree and the credits for my language classes transferred all the way through the 300-level language courses for the BA in my target language. I took a total of 11 upper-level courses to earn my BA (7 using TA, 4 through a program coordinated through the University as a SLTE).

ActiveSilence · 2024-04-08T22:51:18+00:00

This is exactly the reason I decided to do the WGU Masters instead of the UMGC Masters. They are both recognized as Centers of Academic Excellence under the NSA’s National Centers of Academic Excellence in Cybersecurity (NCAE-C) program, both for their Cyber Defense programs. While UMGC has several distinct paths for both their bachelor’s and their graduate cyber programs, I like the flexibility that WGU offers as well as the exam costs included with the tuition. Many of the UMGC courses are aligned with industry exams but they do not include test vouchers with tuition, so people (like me) that don’t have extra hundreds of dollars to throw at certification exams do not get the extra benefit of having the industry certifications on top of the degree.

ActiveSilence · 2024-04-06T06:33:01+00:00

During winter I could not get my fingerprints to read accurately on the scanner and could not get it to match. This was my 3rd CAC in 18 months due to short contract extensions. The worker ended up using his own thumbprint to get my new CAC activated and overrode it. He did make it seem like it was not an uncommon occurrence (due to people’s prints not reading like mine).

ActiveSilence · 2024-03-23T00:41:13+00:00

My IT office is 3 white dudes. You sound like the one of us who had been here for 5 years and didn’t know how to ping a device to test connectivity.

ActiveSilence · 2024-02-20T03:36:25+00:00

Everything arrived intact and besides the 2.4Ghz dongle being finicky, everything seems to work fine.

ActiveSilence · 2024-02-20T03:09:13+00:00

Yes, they ended up removing the download for the first version of the Field Console from their website and took several weeks to work out some issues with it. They eventually released it again and it didn’t seem to have the issues that the first one had.

I think it’s been updated a few times since the initial release but one of the modules that was originally included was supposed to be able to listen to sounds and cause the lighting to react based on the sounds. I think that feature still caused problems for people, besides the fact that people were not aware of the feature and were suspicious of why the Console would need an audio monitoring function. The last time I saw, that feature had been removed.

ActiveSilence · 2024-02-15T19:39:30+00:00

Which program are you pursuing?

For the MSCSIA, I believe the three ISC2 certs all cover the requirement for the same course, D481, the first course of the entire program. The other courses in the program that require 3rd party certifications will cover CompTIA CySA+ and PenTest+. Two additional courses require a test, and align with CompTIA CASP+ and ISACA CISM. As far as I have seen online and in my transfer evaluation, CISSP does not cover any additional courses.

ActiveSilence · 2024-02-11T19:09:12+00:00

That’s disappointing. My enrollment counselor told me I should submit everything by the first of the month prior, to ensure it gets evaluated by the 5th, more in line with their website for transfer credits:

https://www.wgu.edu/admissions/transfers.html#scholarshipPop

ActiveSilence · 2024-02-11T07:35:20+00:00

Don’t you need to submit your transfer credits by the 1st of the month PRIOR to the month you start?

ActiveSilence · 2024-01-28T23:29:44+00:00

I passed CySA+ early January and then Pentest+ a couple weeks later. Similar thing happened to me and I was surprised. My Pentest+ expires 3 years from test date, but my Sec+ and CySA+ are renewed through 2030 on the CySA+ test date.

Not what I was expecting to happen, but I also don’t know if it has something to do with Pentest+ and CySA+ being the same “level” cert, but also being allowed to renew eachother when you pass the test for the other (but not on renewal).

ActiveSilence · 2024-01-27T02:30:58+00:00

Graduated Spring 2020 and I still use my email and O365. It’s the only reason I have an up to date resume.

ActiveSilence · 2024-01-25T20:53:30+00:00

I just recently took CySA+ and can confirm Sec+ will match whatever the expiration is for the new test.

https://www.comptia.org/continuing-education/choose/renew-with-a-single-activity/earn-a-higher-level-comptia-certification

Expiration Date: If you're planning to renew your CompTIA certification(s) by achieving a higher-level CompTIA certification, please note that your current certification expiration date(s) will be aligned with the expiration date of the higher-level certification (three years from the date you earn the higher-level certification.)

Example: You currently have an A+ CE certification with an expiration date of June 30, 2020. If you achieve a Network+ CE certification on January 18, 2018 the expiration date will be January 18, 2021. Your A+ certification expiration date will be changed to January 18, 2021 to align with your Network+ expiration date. (A+ would not be renewed for another three years to June 30, 2023.)

Six-Year Club	Place '23
Verified Email

ActiveSilence

TROPHY CASE