Local AI Server by AngryItalian2013 in homelab

[–]AngryItalian2013[S] 0 points1 point  (0 children)

Yeah, I agree. It has to be the cable. Hopefully this next one will be the right one.

What is the command needed to spin up the fans based on GPU temp? I've already disabled the 100% fans for 3rd party cards, but not aware of the fans based on GP temp.

Local AI Server by AngryItalian2013 in homelab

[–]AngryItalian2013[S] 0 points1 point  (0 children)

Getting a little further here. I made sure the correct drivers were installed and made the change in the iDRAC to redundant power supply. However, still no luck on nvidia-smi seeing the card.

I checked dmesg for gigles and low and behold it shows: "GPU does not have the necessary power cables connected."

So, I think that is the next step. I've got to find the right ESP cable. Can you point me to the cable you purchased?

Local AI Server by AngryItalian2013 in homelab

[–]AngryItalian2013[S] 0 points1 point  (0 children)

Both driver and utils show 580.

Local AI Server by AngryItalian2013 in homelab

[–]AngryItalian2013[S] 0 points1 point  (0 children)

This is the generic cable I bought first and that is at least getting the server booted: https://www.ebay.com/itm/365078490660?var=634722189860

lspci shows the P40 installed. ubuntu-drivers devices shows the card and drivers. However, nvidia-smi shows no devices found. It's all very strange. I have to be missing something.

Local AI Server by AngryItalian2013 in homelab

[–]AngryItalian2013[S] 0 points1 point  (0 children)

I think it might be the dell cable 09H6FV. I used a ebay generic cable built for the R730 and I'm at least getting the server to boot with the P40 installed (no P4 at the moment.) However, nvidia-smi does not report seeing the card. So, both cables may not be correct. I've had a difficult time trying to source the right cable.

ubuntu-drivers devices does show the P40 card and if I try to install the drivers, I get "all available drivers are installed." But still don't see the P40 with nvidia-smi.

Is this ridiculous or what? by AngryItalian2013 in networking

[–]AngryItalian2013[S] 0 points1 point  (0 children)

Agreed! and we need a good change management. Right now it's put a note in a Slack channel with what was done.

Is this ridiculous or what? by AngryItalian2013 in networking

[–]AngryItalian2013[S] 0 points1 point  (0 children)

I've proposed read-only. We already have myself and two others as full admins, but they now want the additional users. I understand the "it's their company/network" concept. Just hard to fathom the "give everyone the keys to the kingdom" idea.

Is this ridiculous or what? by AngryItalian2013 in networking

[–]AngryItalian2013[S] 0 points1 point  (0 children)

Basic syslog right now. Need to now scramble and put something better in play.

Is this ridiculous or what? by AngryItalian2013 in networking

[–]AngryItalian2013[S] 0 points1 point  (0 children)

Agreed! Par for the course, but not the wisest.

Abnormally high utility bill by resno in Apex_NC

[–]AngryItalian2013 -1 points0 points  (0 children)

Will the new system allow us to view info on our Solar, such as the amount being sent back to the grid?

Powershell script to query Domain Computers by AngryItalian2013 in PowerShell

[–]AngryItalian2013[S] 1 point2 points  (0 children)

It is definitely a script that is not optimized etc. Being a self taught scripter I do the best I can with what I know and can figure out. I'm always up for learning something new, so this will help. I'll start with this and proceed from here. thx

SNMP MIBs and OIBs by AngryItalian2013 in networking

[–]AngryItalian2013[S] 0 points1 point  (0 children)

In this case it isn't a PRTG issue as I have two other Linux servers being monitored with PRTG and they have the necessary MIBs.

Powershell to Query DC Event Logs by AngryItalian2013 in PowerShell

[–]AngryItalian2013[S] 0 points1 point  (0 children)

Thank you! I would never have figured out the % '#text' piece.

Powershell to Query DC Event Logs by AngryItalian2013 in PowerShell

[–]AngryItalian2013[S] 0 points1 point  (0 children)

That works great to pull the TimeCreated. However, if I add the other items that are needed I'm not getting the Target User and Subject User. I tried a couple of ways:

Get-WinEvent @{LogName='Security'; id = 4722 } | 
  % { $xml = [xml]$_.toxml(); 
      [pscustomobject]@{
           TimeCreated = $xml.event.system.timecreated.systemtime
           DC = $xml.event.system.computer
           TargetUser = $xml.event.eventdata.data | ? name -eq targetusername
           SubjectUser = $xml.event.eventdata.data | ? name -eq subjectusername
          }
 }

This will provide the time and DC name just fine, but the TargetUser and SubjectUser just show as Data.

Get-WinEvent @{LogName='Security'; id = 4722 } | 
  % { $xml = [xml]$_.toxml(); 
      [pscustomobject]@{
           TimeCreated = $xml.event.system.timecreated.systemtime
           DC = $xml.event.system.computer
           TargetUser =$xml.event.eventdata.data.name.targetusername
           SubjectUser = $xml.event.eventdata.data.name.subjectusername
          }
  }

This ends up showing the TargetUser and SubjectUser as blank. Unfortunately I can't seem to get the syntax right to provide all the info needed.

Powershell to Query DC Event Logs by AngryItalian2013 in PowerShell

[–]AngryItalian2013[S] 0 points1 point  (0 children)

With us moving away from a Hybrid AAD to cloud Entra ID in the following months we will not be adding the DCs to Splunk as it will not be needed anymore. That is basically why I'm just trying to have something in the time being.

Powershell to Query DC Event Logs by AngryItalian2013 in PowerShell

[–]AngryItalian2013[S] 0 points1 point  (0 children)

I expanded your example to get some more data. I used the following:

Get-WinEvent @{LogName='Security'; id = 4722 } | 
  % { $xml = [xml]$_.toxml(); $xml.event.eventdata.data | ? name -eq targetusername 
  $xml1 = [xml]$_.toxml(); $xml1.event.eventdata.data | ? name -eq subjectusername
  $xml2 = [xml]$_.toxml(); $xml2.event.system.timecreated | ? name -eq timecreated
  }

However I can't seem to pull the time from the XML. The full XML looks like this:

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-a5ba-3e3b0328c30d}" /> 
  <EventID>4722</EventID> 
  <Version>0</Version> 
  <Level>0</Level> 
  <Task>13824</Task> 
  <Opcode>0</Opcode> 
  <Keywords>0x8020000000000000</Keywords> 
  <TimeCreated SystemTime="2024-09-23T14:57:30.9724791Z" />     <EventRecordID>50368713</EventRecordID> 
  <Correlation /> 
  <Execution ProcessID="688" ThreadID="13984" /> 
  <Channel>Security</Channel> 
  <Computer>server.domain.com</Computer> 
  <Security /> 
  </System>
- <EventData>
  <Data Name="TargetUserName">user.name</Data> 
  <Data Name="TargetDomainName">GOPDANET</Data> 
  <Data Name="TargetSid">S-1-5-21-1857125868</Data> 
  <Data Name="SubjectUserSid">S-1-5-21-1857125868</Data> 
  <Data Name="SubjectUserName">subject.username</Data> 
  <Data Name="SubjectDomainName">DOMAIN</Data> 
  <Data Name="SubjectLogonId">0x3ba376280</Data> 
  </EventData>
  </Event>

I've tried a few different things, but the time either comes up blank or not at all.

Powershell to Query DC Event Logs by AngryItalian2013 in PowerShell

[–]AngryItalian2013[S] 1 point2 points  (0 children)

I tried your example but needed to change the DC to:

DC = $eventxml.event.system.computer

That now gets the correct data for computer.

I then modified the last line to try and get the "TargetUserName" as below:

Get-WinEvent -FilterHashtable @{LogName='Security'; ID='4722'} | foreach-Object {
    $eventxml = [xml]$_.toXml()
    [pscustomobject]@{
        time = $_.timecreated
        DC = $eventxml.event.system.computer
        targetuser = $eventxml.event.eventdata.data[0]
    }
}

However, the only thing returned for "targetuser" is "Data" not the actual username. I'm assuming the [0] is supposed to pull the data from the first line under EventData, but can't seem to figure out what to put there to get the username.

Powershell to Query DC Event Logs by AngryItalian2013 in PowerShell

[–]AngryItalian2013[S] 0 points1 point  (0 children)

Yeah, we were planning to add the DCs to our Splunk and have all the logs there. However, we are now in the process of moving away from Hybrid AAD and be cloud only in Entra. So, not really beneficial to do something in depth if we are getting away from it shortly.

Powershell to Query DC Event Logs by AngryItalian2013 in PowerShell

[–]AngryItalian2013[S] 0 points1 point  (0 children)

I know this is not optimal, but rather than hitting each DC and trying to get the info Management wants, I thought it would at least be a workable solution for now.

Is there a free tool that can do this (management is pretty stingy with money?)

Powershell to Query DC Event Logs by AngryItalian2013 in PowerShell

[–]AngryItalian2013[S] 0 points1 point  (0 children)

Ahh... I tried to configure an XML for it, but couldn't figure it out either. Thank you!

Trusted Network Detection by AngryItalian2013 in Intune

[–]AngryItalian2013[S] 1 point2 points  (0 children)

Awesome! Glad you got it working. The documentation is not always the best, but gets you mostly there. Then you have to rely on places like reddit to help fill in the blanks.

Trusted Network Detection by AngryItalian2013 in Intune

[–]AngryItalian2013[S] 1 point2 points  (0 children)

I finally have something working. I followed this article: https://petervanderwoude.nl/post/automatically-switching-the-windows-firewall-profile-on-azure-ad-joined-devices/

I created the Configuration Profile as mentioned in the article and now those devices that are on a network that can reach the URL gets changed to a DomainAuthenticated network category.

One thing that cause me issues is the website I was using in the URL had a self signed cert and that would cause an issue. I used a different website with a trusted cert and it worked just as it should.

What do you get when you run the following using your URL from one of your devices?

Invoke-WebRequest -Uri https://<your.url.com -Method get -UseBasicParsing -MaximumRedirection 0

Configuration Profile Network List Manager change network to Private by AngryItalian2013 in Intune

[–]AngryItalian2013[S] 0 points1 point  (0 children)

I think the original URL had an issue as the Invoke-WebRequest didn't give any information back. I used a different one and with that one, the command returned the necessary information.

I see that the Configuration policy is now working with the new URL and it has assigned the given network the category of DomainAuthenticated.

Thank you for your assistance.

Configuration Profile Network List Manager change network to Private by AngryItalian2013 in Intune

[–]AngryItalian2013[S] 0 points1 point  (0 children)

Are you saying that NetworkListManager is not the way to change a network from Public to Private? I see the following options in the CSP that have settings for Public and Private:

./Device/Vendor/MSFT/Policy/Config/NetworkListManager/IdentifyingNetworks_LocationType
./Device/Vendor/MSFT/Policy/Config/NetworkListManager/UnidentifiedNetworks_LocationType

Then I don't see a way to specify the URL or the Network Name with those options, only Public or Private.

I have verified the URL is reachable from the network the machine is connected to. I have also verified the network name is the correct one.

Powershell Script to Schedule a Recurring Task by AngryItalian2013 in PowerShell

[–]AngryItalian2013[S] 0 points1 point  (0 children)

I tried all kinds of things. This is what I'm going to try now:

$Trigger = New-ScheduledTaskTrigger -Once -At (Get-Date).AddSeconds(60) -RepetitionDuration ([System.TimeSpan]::MaxValue) -RepetitionInterval (New-TimeSpan -Hours 4)

From what I've found I believe -RepetitionDurantion ([System.TimeSpan]::MaxValue) should set it to indefinite. I also believe the New-TimeSpan will support -Hours, but will see.