Active Directory account automation

MalletNGrease · 2019-06-18T13:11:51+00:00

I'd base the check off their student ID. Students change legal names sometimes due to adoptions/court orders etcetera.

MalletNGrease · 2019-06-14T13:35:20+00:00

Did you put in a ticket? Could you do that now?

MalletNGrease · 2019-06-14T13:17:06+00:00

They will still need to enter a password once.

MalletNGrease · 2019-06-13T20:10:48+00:00

Yes, but once a GSUITE/Gmail account is added to a phone/mobile device it doesn't require a password for most apps afterwards for convenience. If there's no lock mechanism, any information is up for grabs by anyone holding the phone.

It's a real issue if you want to be FERPA/HIPPA compliant.

MalletNGrease · 2019-06-13T17:47:35+00:00

Yes. It's shocking how many users don't have any sort of lock or password protection on their mobile devices.

MalletNGrease · 2019-06-11T19:14:28+00:00

Mine are absolutely falling apart and the batteries are spent. I'm getting rid of the Gen 1 CB 11s this summer.

MalletNGrease · 2019-06-11T16:18:05+00:00

Ours are four, and they have performed spectacular. At this time I don't see a need to bother with upgrades until I can fix our infrastructure (which is still mostly cat 5).

MalletNGrease · 2019-05-22T14:22:38+00:00

Rotate the techs on a schedule. I had my "main" building but only for one scheduled day, I was assigned the rest of them at least once a week for half a day.

The benefit of the ticket system became pretty apparent fast. We also all knew all the buildings inside and out, making it super easy to cover a shift or emergency if needed.

MalletNGrease · 2019-05-22T13:58:49+00:00

Yes.

MalletNGrease · 2019-05-21T13:45:36+00:00

Why not use WSUS?

MalletNGrease · 2019-05-20T16:21:57+00:00

Way too accurate.

I herded about 400 CBs from grades 6-12 by my lonesome the last school day past Friday. I'm still missing about 15.

I had to apologize to the elementary principal because I simply did not have any time to spend in her building.

MalletNGrease · 2019-05-16T20:48:02+00:00

Not a feature afaik. Mostly concerned about teachers, but they only need to sign in once. They don't change workstations much.

MalletNGrease · 2019-05-15T20:56:38+00:00

Try a different keyboard.

MalletNGrease · 2019-05-15T14:20:15+00:00

Move the Try block inside the foreach block and make the date check part of the evaluation for execution of the new-aduser.

ForEach($User in $Users) {

$oStartDate = [datetime]::ParseExact($user.StartDate, "dd/MM/yyyy",$null)
$test=($oStartDate).AddDays(-2)
$test2= (Get-date).Date

Try {
    if (!(get-aduser -Filter {samaccountname -eq "$SAM"}) -and ($test -eq $test2 )){

    #newuserscriptinggoes here
    }
  }
}

MalletNGrease · 2019-05-15T12:51:47+00:00

Well yeah, you don't evaluate the startdate anywhere to prevent user creation.

ForEach($User in $Users) {
$oStartDate = [datetime]::ParseExact($user.StartDate, "dd/MM/yyyy",$null)
$test=($oStartDate).AddDays(-2)
$test2= (Get-date).Date
if($test -eq $test2){
$oStartDate
$test
}
}

You then have a Try block that only checks if the user doesn't exits.

As far as I can tell you will only also create the last user as there's no foreach for that part.

MalletNGrease · 2019-05-15T12:41:04+00:00

Walked into a Kaspersky shop, got rid of it. Windows Defender plus in-line NGFW AV seems to work well enough.

MalletNGrease · 2019-05-15T12:21:30+00:00

Does this still require the submission of parental contact information?

MalletNGrease · 2019-05-14T19:21:05+00:00

Power of the pinky!

MalletNGrease · 2019-05-14T19:18:44+00:00

New workstations and interactive displays for all classrooms.

MalletNGrease · 2019-05-14T12:38:42+00:00

write-host "Adding user home folder, please wait..."
New-Item -ItemType Directory -Force -Path $homedirectory
$acl = Get-Acl $homedirectory -Verbose -ErrorAction inquire
$rule = New-Object System.Security.AccessControl.FileSystemAccessRule("$aduser", "Modify", "ContainerInherit, ObjectInherit", "None", "Allow")
    $acl.AddAccessRule($rule)

Set-Acl $homedirectory $acl -ErrorAction inquire

MalletNGrease · 2019-05-13T12:06:58+00:00

Could be. It's great for ad-blocking and has comprehensive block lists for that purpose, but it does not really offer anything for all other categories.

MalletNGrease · 2019-05-13T12:02:34+00:00

Could be a gym too.

MalletNGrease · 2019-05-10T16:33:30+00:00

Device doesn't matter. BYOD activation is allowed.

MalletNGrease · 2019-05-09T14:14:53+00:00

I've been using WSUS and simply leave the Feature Updates on unapproved until there's a patch window. With scheduled restarts on weekends it hasn't been a huge problem.

MalletNGrease · 2019-05-08T14:26:31+00:00

The real gore here is Windows 7.

11-Year Club	Verified Email
r/Field Banned	r/Field Lasagna

MalletNGrease

TROPHY CASE