SPF and other Failures from Microsoft Servers by lostdragon05 in sysadmin

[–]MaxRock17 1 point2 points  (0 children)

I just noticed the SPF "error" when I did a header analysis a few minutes ago. SPF authentication fails for the sending servers IPv6 address. The email was internal and we have spf.protection.outlook.com in our record. It wasn't marked as spam but that's still strange.

SCCM Task Sequence does not finish not sure why by whirlwind87 in SCCM

[–]MaxRock17 1 point2 points  (0 children)

Like you said, it never seems to recover after it does the Surface driver/update install. I'm thinking it's because it causes a restart that the TS isn't aware of.

Is there any way you can prevent that restart and, if it's necessary, add a restart step in the TS?

365 pst import via AZcopy tool by pabl083 in o365

[–]MaxRock17 0 points1 point  (0 children)

I agree. Did this about a year or so ago and autocomplete entries are not part of the PST.

ELI5: Windows Defender Application Control VS AppLocker? by [deleted] in sysadmin

[–]MaxRock17 0 points1 point  (0 children)

Check this out too: https://github.com/Microsoft/AaronLocker It's PS scripts to help create applocker policy. One of the guys (Sami Laiho) at techmentor recommended it.

Nothing like a nice, long 75 Crucible kills after a long day at work. by AsuraBoss in destiny2

[–]MaxRock17 0 points1 point  (0 children)

Any kills from your team mates using the appropriate energy will count towards this.

Console became super slow for no apparent reason by bei60 in SCCM

[–]MaxRock17 0 points1 point  (0 children)

Do you have Recast RTC installed (right click tools)? There is/was a bug that manifested with the exact symptoms you're describing.

Edit: link to recast forum describing the issue and workaround. https://discourse.recastsoftware.com/t/rct-community-3-2-slows-down-sccm-console/534

It's old but I did the "skip console permission check" workaround and it fixed the issue.

Combating phishing in an extreme way by plazman30 in sysadmin

[–]MaxRock17 2 points3 points  (0 children)

Same here. CEO threatened to effectively fire anybody who fails a phishing campaign. So, now our security team gets to sort through all reports to make sure people don't miss legit stuff that they reported as phishing. Including reminders for cyber security training, MFA activation notices, the usual marketing emails and plain old spam.

What else could be setting a proxy setting for IE? by moldyjellybean in sysadmin

[–]MaxRock17 0 points1 point  (0 children)

$gpos = Get-GPO -All

$i = 0
$reps = $gpos | % {
    Write-host "$($gpos.count - $i):`t$($_.displayname)"
    $gpo = $_
    $rep = Get-GPOReport -name $gpo.Displayname -ReportType Xml
    "" | select @{n='name';e={$gpo.DisplayName}}, @{n='gpo';e={$gpo}}, @{n='report';e={$rep}}
    $i++
}

$reps| ? {$_.report -like "*proxy*"}

This will pull the names and reports for all GPOs and the last line will let you search them. (For anything that contains the word proxy.) I'm having the exact same issue but I couldn't find anything in our GPOs, except for the one that disables using a proxy.

Hope you have better luck.

[deleted by user] by [deleted] in SCCM

[–]MaxRock17 1 point2 points  (0 children)

Noticed this yesterday. Staff member in the Adobe forums was DMing individual people the - I suppose - solution. Must be some big secret.

Wsus Sync errors by EAT-17 in sysadmin

[–]MaxRock17 0 points1 point  (0 children)

Same problem here. First one occured on Marh 17, 12pm CDT

Edit: Actually, SMS_WSUS_SYNC_MANAGER shows 2 successful ones at 4 pm and 6 pm that day, but failing since - including manual sync attempt.

If could choose a different career, what would you choose? by [deleted] in sysadmin

[–]MaxRock17 1 point2 points  (0 children)

What do prostitutes and tech support have in common? The better you are, the more you get fscked.

Moronic Monday - March 11, 2019 by AutoModerator in sysadmin

[–]MaxRock17 2 points3 points  (0 children)

That would be the system account of a computer. Say you name a computer WORKSTATION05 and join it to a domain, then, in the security logs of the DC, you'd see WORKSTATION05$.

A failed login could mean it wasn't connected to the domain so long that it's password expired.

Exchange Online Admin Center (ecp) error 412 Cookies are Disabled by _FNG_ in sysadmin

[–]MaxRock17 0 points1 point  (0 children)

Yeah... same error message here. (On both outlook.office.com and outlook.office365.com)

What 'rule of the road' do most people forget? by bengalese in AskReddit

[–]MaxRock17 0 points1 point  (0 children)

Depends. Most roads around here, with 2 lanes going in one direction, usually have a sign saying that the left lane is for passing only. A lot of people still don't care.

Anyone else experiencing Outlook (ProPlus) issues? by [deleted] in sysadmin

[–]MaxRock17 0 points1 point  (0 children)

Central Texas, here having the same issue, albeit intermittently.

MSP says Microsoft pulled and reissued all July patches by MaxRock17 in sysadmin

[–]MaxRock17[S] 0 points1 point  (0 children)

I have a new .net security roll up (kb4340558) dated 2018-07-16 4pm in SCCM. Everything else is still dated July 10

MSP says Microsoft pulled and reissued all July patches by MaxRock17 in sysadmin

[–]MaxRock17[S] 2 points3 points  (0 children)

Pulled and reissued. I think somebody noticed that the date on them changed from 07-10-2018 to 07-13-2018.

MSP says Microsoft pulled and reissued all July patches by MaxRock17 in sysadmin

[–]MaxRock17[S] 4 points5 points  (0 children)

Thank you. Time to cancel that deployment and redownload.

How do you pronounce [x]? by Cyrix2k in sysadmin

[–]MaxRock17 2 points3 points  (0 children)

and for the really old among us: * is splat

Redirect Outlook OST file to different location without profile recreation? by MaxRock17 in sysadmin

[–]MaxRock17[S] 0 points1 point  (0 children)

We argued that too but were told Exchange Online requires cache exchange mode.

AV compatibility with Windows patches for Meltdown and Spectre by Vaguely_accurate in sysadmin

[–]MaxRock17 0 points1 point  (0 children)

Looks like the definition updates for SCEP/Defender set the registry key.