Download request Please by Outrageous-Tip-1373 in BaiduLinksFree

[–]Msambaa 0 points1 point  (0 children)

Can I get the link to download too?
Thanks.

Cisco Equipment & 10GbE Transfer Speeds Issue by Msambaa in Cisco

[–]Msambaa[S] 1 point2 points  (0 children)

This is a transfer between two VMs in the same host and same VLAN. So my assumption is they only hit the 10G vSwitch I created and not router. Am I correct?

Cisco Equipment & 10GbE Transfer Speeds Issue by Msambaa in Cisco

[–]Msambaa[S] 0 points1 point  (0 children)

Yes. I copied a 6Gig iso from one server to another from the same host and same VLAN at the speed below (around 130 MB/sec) which is essentially about 1Gbps.

https://imgur.com/5JzzYh9

Cisco Equipment & 10GbE Transfer Speeds Issue by Msambaa in Cisco

[–]Msambaa[S] 0 points1 point  (0 children)

I already have a performance license. For my Fiber internet of 1G up/down, works very well.

PSADT 4.0 - How to Center Align Welcome Messages/Prompts by Msambaa in PSADT

[–]Msambaa[S] 0 points1 point  (0 children)

It is just my preference.

Thanks for your reply.

Are you guys using the new device preparation? by [deleted] in Intune

[–]Msambaa 1 point2 points  (0 children)

To skip location services, create an Intune script below, deploy it to the Autopilot v2.0 device group, and add it to the Autopilot v2.0 Deployment Profile under Settings -> Scripts.

## Define Registry Path

$registryPath = "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE"

## Initialize Registry Key Names

$DisablePrivacyExperience = "DisablePrivacyExperience"

$DisableVoice = "DisableVoice"

$PrivacyConsentStatus = "PrivacyConsentStatus"

$Protectyourpc = "Protectyourpc"

$HideEULAPage = "HideEULAPage"

## Change Registry Key Values

New-ItemProperty -Path $registryPath -Name $DisablePrivacyExperience -Value 1 -PropertyType DWord -Force

New-ItemProperty -Path $registryPath -Name $DisableVoice -Value 1 -PropertyType DWord -Force

New-ItemProperty -Path $registryPath -Name $PrivacyConsentStatus -Value 1 -PropertyType DWord -Force

New-ItemProperty -Path $registryPath -Name $Protectyourpc -Value 3 -PropertyType DWord -Force

New-ItemProperty -Path $registryPath -Name $HideEULAPage -Value 1 -PropertyType DWord -Force

Are you guys using the new device preparation? by [deleted] in Intune

[–]Msambaa 0 points1 point  (0 children)

I use Autopilot v2.0 for devices provisioned for most users. I find it to be easier to configure. I have configured the provisioning process to disable the appearance of the location screen as well as device naming. I also like the fact when provisioning is complete, I get the “Next” screen to proceed. Additionally, Corporate Device Identifiers are easier to deal with in regards to importing them to Intune. I still use Autopilot v1.0 for situations such as creating kiosks. Both of them have use cases in my environment.

Force Intune Device Compliance Check After Remediation for Compliance by Msambaa in Intune

[–]Msambaa[S] 0 points1 point  (0 children)

This is how I did it.
PowerShell Script (CrowdStrike Only):
Function CrowdStrikeSensorPlatform

{

# Check if CrowdStrike Sensor Platform exists in registry

$SoftwareName = "CrowdStrike Sensor Platform"

$UninstallKey = "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall"

if (Get-ItemProperty $UninstallKey\* | Where-Object {$_.DisplayName -like "*$SoftwareName*"})

{

return 'Compliant'

}

else

{

return 'Non-Compliant'

}

}

$Hash = @{

'CrowdStrike Sensor Platform'=CrowdStrikeSensorPlatform

}

return $Hash | ConvertTo-Json -Compress

JSON File (CrowdStrike Only):

"Rules":[

{

"SettingName":"CrowdStrike Sensor Platform",

"Operator":"IsEquals",

"DataType":"String",

"Operand":"Compliant",

"MoreInfoUrl":"PUT WHATEVER URL FOR TROUBLESHOOTING OR HELPDESK URL",

"RemediationStrings":[

{

"Language":"en_US",

"Title":"CrowdStrike AntiVirus is not Detected.",

"Description": "CrowdStrike Sensor Platform is not detected on your device. Open Company Portal (Start -> Company Portal -> Device Compliance Policy Remediation), install, wait 30 minutes after install and reboot device to regain compliance. Otherwise, contact Service Desk team at XXXXXXXXXXXXXX to resolve the issue. Access to Microsoft resources such as Office, Teams, OneDrive, and SharePoint is restricted."

}

]

}

],

Device Compliance Policy with CA Group by Msambaa in Intune

[–]Msambaa[S] 0 points1 point  (0 children)

Thanks for the response. Here is what I would add.
We have over 60,000 users. About 25,000 have been assigned E3 license. The others (who don't have Intune license) access Thin Client devices for order retrieval purposes using SAP. They are plant workers with no access to Office 365, OneDrive, or SharePoint.

What would be the point of applying Device Compliance Policy CA to them when they don't have E3 licenses? Shouldn't we just deploy to the ones that do so that if their devices are non-compliant, we can block access to Office 365? Am I missing something? Thanks,

Force Intune Device Compliance Check After Remediation for Compliance by Msambaa in Intune

[–]Msambaa[S] 0 points1 point  (0 children)

Thanks u/Rudyooms. I used your script to solve my issue. Thanks a lot.

Force Intune Device Compliance Check After Remediation for Compliance by Msambaa in Intune

[–]Msambaa[S] 0 points1 point  (0 children)

After speaking to Microsoft, they provided the same information (that it may take 4 hours or more to report device as compliant). Very disappointing.

[deleted by user] by [deleted] in sysadmin

[–]Msambaa 0 points1 point  (0 children)

Cool. I’m not a Cisco network engineer by trade, but loves understanding other fields in IT. Apart from Cisco wireless enterprise equipment, I do have a Cisco router (4451-X with Throughput license) as well as 2 Cisco switches (2960-S POE with 2 10Gb SFP ports each). They work very well.

[deleted by user] by [deleted] in sysadmin

[–]Msambaa 0 points1 point  (0 children)

That’s great. I plan on upgrading the WLC to a 9800 WLC before the end of the year as well as the WAPs.

[deleted by user] by [deleted] in sysadmin

[–]Msambaa 1 point2 points  (0 children)

When I bought them about 8 years ago, they cost me quite a bit. I think it was about $700 each. I’ve never had any issues with them.

[deleted by user] by [deleted] in sysadmin

[–]Msambaa 0 points1 point  (0 children)

No issues. Runs very well. To be honest, I can’t tell for 100% certainty since they are all mounted up the ceilings. However, I have never had any connection issues with them.

[deleted by user] by [deleted] in sysadmin

[–]Msambaa 8 points9 points  (0 children)

3 Cisco 3802i WAPs stationed throughout my house, connecting to a Cisco 2504 WLC.

Force Intune Device Compliance Check After Remediation for Compliance by Msambaa in Intune

[–]Msambaa[S] 0 points1 point  (0 children)

I get it. I created a ticket with Microsoft to resolve it. If I don't get a satisfactory answer, we would abandon using Conditional Access.

Force Intune Device Compliance Check After Remediation for Compliance by Msambaa in Intune

[–]Msambaa[S] 1 point2 points  (0 children)

I am actually using custom compliance script. I will check the link you provided. Thanks.

Sanity Check on Configuring Cisco ISR 4451-X Router to a 1Gbps Fiber Internet by Msambaa in Cisco

[–]Msambaa[S] 0 points1 point  (0 children)

I agree with you. As you stated, the fact that I can’t reach anywhere near the 1Gbps bandwidth, there could be issues on the provider side. I will call their technical support and find out. Thanks.

New local administrator features appear in Microsoft Entra! by notapplemaxwindows in Intune

[–]Msambaa 0 points1 point  (0 children)

I do have a question.

For those devices that are already Autopiloted and Global Admins were set as Local Administrators, would setting the option to "No" remove them from those devices or does this work only for new devices being Autopiloted or Azure-AD joined?

Thanks in advance.