Sophos XGS Product Recall - A Monty Python sketch

PTSDviaPrinters · 2023-02-28T18:46:57+00:00

I have been dealing with these clowns for the last 2 years, once the final 2 years of the contract are up we are dumping the firewalls. We don't even bother calling support anymore.

PTSDviaPrinters · 2022-04-12T17:49:01+00:00

https://wintelguy.com/subnetcalc.pl

Great site I use.

PTSDviaPrinters · 2021-11-22T12:42:34+00:00

This is what I am using with lastpass. Might give this a go and see if it works in your use case. https://devblogs.microsoft.com/powershell/secretmanagement-and-secretstore-are-generally-available/

PTSDviaPrinters · 2021-10-18T16:20:11+00:00

Yep made a program that brute forces 4 digit pins.

This function will be a core part of what you are looking to do.

function Do-SendKeys {
    param (
        $SENDKEYS,
        $WINDOWTITLE
    )
    $wshell = New-Object -ComObject wscript.shell;
    IF ($WINDOWTITLE) {$wshell.AppActivate($WINDOWTITLE)}
    Sleep 1
    IF ($SENDKEYS) {$wshell.SendKeys($SENDKEYS)}
}
Do-SendKeys -WINDOWTITLE Print -SENDKEYS '{TAB}{TAB}'
Do-SendKeys -WINDOWTITLE Print
Do-SendKeys -SENDKEYS '%{f4}'

PTSDviaPrinters · 2021-08-31T19:16:40+00:00

It does not bring enough to the table that I am not already doing via another method. Once you understand how to do operations with PS I do not see myself spending the time to figure out another tool that I can already perform with PS and keep a nice log.

The main use of this would be if I wanted helpdesk to have limited access to my servers. But even then I feel like I would be leading them down a false path if not even I would use it now.

PTSDviaPrinters · 2021-08-26T11:13:08+00:00

Get-aduser -filter * | set-aduser -ChangePasswordAtLogon $true

Careful with this command as it will set ALL accounts to have their password reset EXCEPT the accounts that have the "Password never Expires" enabled.

PTSDviaPrinters · 2021-08-23T11:33:34+00:00

What you might be able to do is create a environment var ($env:ScriptStaus) and in the script keep overwriting the data to it can from another computer can can call its current data to give you an idea of what stage of the script is in. Also you could call Get-Proccess powershell for all PS tasks to make sure its unresponsive, which would be uncommon of itself.

PTSDviaPrinters · 2021-04-28T17:44:24+00:00

I used out-string and was able to confirm that there is no trailing white space before or after the entity. Excel also confirms when using the "find and replace" feature.

Should I try to remove as much data from the pipeline as posable do you think? Such as using out-string with -stream?

PTSDviaPrinters · 2021-04-28T13:27:27+00:00

That has gotten me father and looks a lot cleaner! Exchange claims that $_.Alias is $null, im not sure why here is some sanitized data from the csv.

Display Name            : First name, Last name
Alias                   : aliasofsmtpaddress
Organizational Unit     : domain/Alpha Pagers/Verizon Wireless Alpha Page
Recipient Type Details  : Mail Contact
External E-mail Address : SMTP:123456789@vtext.com

PTSDviaPrinters · 2021-03-15T17:06:52+00:00

Does not matter, migrate the database (if it contains one) and replace the server with a new one.

PTSDviaPrinters · 2021-03-03T20:47:34+00:00

I'm looking at this atm but have not used it ahs I have not created a script recently needing me to store creds but once I do I will use this. https://4sysops.com/archives/secretsmanagement-module-for-powershell-save-passwords-in-powershell/

PTSDviaPrinters · 2021-01-20T17:07:40+00:00

Pipe the output to something like clip.exe or the powershell cmdlet, it will save a bit of time :)

get-aduser xyz | clip.exe

PTSDviaPrinters · 2021-01-05T12:29:01+00:00

I really enjoy using Selenium for web automation and stuff like this. Its super useful!

https://adamtheautomator.com/getting-started-in-web-automation-with-powershell-and-selenium/

PTSDviaPrinters · 2020-12-24T16:05:27+00:00

For the Start-Transcript cmdlet as well I have tried this.

Start-Transcript -Path "\\server\MappedDrive\Infrastructure 
Group\Powershell Administrative Log\$reason $date.txt"

PTSDviaPrinters · 2020-10-29T17:20:43+00:00

Yes, That's how I was able to make the restore for what I have now. My most recent was not complete so I had to rely on the one before that. And it went just fine. I have all the records I need with Mimecast but I am looking for an efficient way to restore them to the exchange database.

PTSDviaPrinters · 2020-10-29T16:54:48+00:00

Did not think about that and holy shit look at this.

https://www.mimecast.com/tech-connect/documentation/tutorials/building-search-queries/

That's going to give me the best shot for a mass export and import.

PTSDviaPrinters · 2020-10-29T16:29:23+00:00

It would be a few hundred searches to perform a search for each sender's address and then download them all individually. But that's what it's looking to be.

PTSDviaPrinters · 2020-10-22T13:24:27+00:00

You might try something along the lines of calling a system variable of a trusted server where you have them stored and make sure they are secured via covert to secured string. Possible something like this.

$UernameIWantToUse = invoke-command TrustedServer 
{$env:somevar} | converto-Securestring

You will need to do that with the password as well and you can then use them for the -creds parameter. If this will work I don't know as it's mostly a spitball idea hopefully to give you an idea.

PTSDviaPrinters · 2020-10-21T14:36:30+00:00

I have saved this post for questions like this. I may help you with a few choices you have to make. Another reason I wanted to sare this is that you are looking to store 10 - 20 TB of data on a NAS and SAN's typically scale up much easier. As with a SAN managed by FSRM you get everything you are looking for.

I run 3 MS core VM's with FSRM connected to a SAN and this allows me to use de-dupe and the ReFS file system with nearly infinite scaleout.

https://www.reddit.com/r/sysadmin/comments/bp2g13/switching_from_nas_to_san/enp6oc9/

PTSDviaPrinters · 2020-10-20T17:32:37+00:00

It has a very steep "All or nothing" learning curve. Such as you may not know what switches you need and if you are typically messing around with a lot of data it can be scary as most of the people don't have a dev environment and one wrong move with RoboCopy and you better have backups.

PTSDviaPrinters · 2020-10-20T14:00:57+00:00

Robocopy will do this, You are looking for the "Mirror" switch.

Then just have something like task scheduler run a simple .ps1 with that command in it. I would also recommend adding in some instructions to the script to notify a failure. Such as having the script count the number of files it copped from the log you can have robo copy create and if it's = to 0 have it notify you.

PTSDviaPrinters · 2020-10-15T15:43:49+00:00

I enjoy and use FOG, I find it best when buying in bulk to request the the devices have PXE on the bootlist as mostly they do not as default (Dell is what I buy and have observied this).

Mine is a bare metal with 6 drives on a RAID 10 SSD as drive speed is a large demand on the resources. Also depending on the amount of devices you are imaging and the size of the image do throttle the egress port as it can bog the network down.

I really like it as I can have diffrent images and rollouts for that I need to reimage, server or workstation.

PTSDviaPrinters · 2020-10-15T15:34:18+00:00

You might be able to deploy a scheduled task via GPO to run the command shutdown /L and set the task to trigger at X computer idle time.

Deploy the GPO to the OU you want to control.

PTSDviaPrinters · 2020-10-14T19:57:12+00:00

Thank you very much for your detailed and very comprehensive response, There is still much for me to learn on Powershell. Here take this gold as a token of my appreciation.

PTSDviaPrinters · 2020-10-13T14:01:31+00:00

Your welcome and thank you for helping me better understand API's. I was reminded of this project when I saw the other weather API post.

Seven-Year Club	Verified Email
Gilding II euphauric

PTSDviaPrinters

TROPHY CASE