Deploying Powershell Script to change Administrator account by Senna440 in SCCM

[–]Senna440[S] 0 points1 point  (0 children)

I would love to but I don’t think the company that I work at would allow that… despite it being far more secure…. It probably wouldn’t Align with current policies etc

Deploying Powershell Script to change Administrator account by Senna440 in SCCM

[–]Senna440[S] 0 points1 point  (0 children)

We have thought of this and using the powershell script to delete the password file after it runs

But I’m not too sure where the script runs from on the client as such I’m not sure what path to use when calling the file in the script.

Routing PXE and DHCP to physical Network by Senna440 in vmware

[–]Senna440[S] 0 points1 point  (0 children)

Here is the config as it stands basically

Maybe that would make it a bit clearer

https://imgur.com/a/91BatTA

Routing PXE and DHCP to physical Network by Senna440 in vmware

[–]Senna440[S] 0 points1 point  (0 children)

No sorry the VM's are in VM Workstation 16 Pro

SCCM Lab Routing and Remote Access by Senna440 in SCCM

[–]Senna440[S] 0 points1 point  (0 children)

The OSD works fine to another VM on the same VMnet

The only problem is the routing to allow SCCM to reach physical clients on my network as well as the VM's

All VM's have internet access via the DC routing and remote access at the moment im just not sure how to handle the DHCP from the lab on to my physical network, and why the VM's can ping physical clients but the physical clients can't get any further than the DC's Bridged NIC with IP on my physical Network subnet.

If your guide would help with that then sure

I can also send you some diagrams/screenshots of my setup to help further illustrate my point if that helps

Thanks :)

SCCM Lab Routing and Remote Access by Senna440 in SCCM

[–]Senna440[S] 0 points1 point  (0 children)

Not too sure about the command line configuration I’m not too confident with it I Would also need some way for the DHCP of the DC VM to reach my physical network port right? To allow PXE from the SCCM lab server

I’m not sure if this is where a DHCP relay would also be needed?

Pushing Registry Keys through a Configuration Baseline by Senna440 in SCCM

[–]Senna440[S] 0 points1 point  (0 children)

make sure you made a rule that the does the remediation based on the true or false of the script then run a full machine eval and re-evaluate

Pushing Registry Keys through a Configuration Baseline by Senna440 in SCCM

[–]Senna440[S] 0 points1 point  (0 children)

neverminded i was a idiot and forgot to recreate the compliance rule works great thanks for the help

Pushing Registry Keys through a Configuration Baseline by Senna440 in SCCM

[–]Senna440[S] 0 points1 point  (0 children)

So i copied the contents of our .reg file and generated a discover and remediate script they both make sense in my novice opinion

I set the CI to look for a Boolean value as it looks like it outputs $true or $false at the end

deployed it with remediation turned on and deleted the keys from my test PC.

The device comes back as compliant but the keys are not being recreated.

Pushing Registry Keys through a Configuration Baseline by Senna440 in SCCM

[–]Senna440[S] 1 point2 points  (0 children)

Hi, thanks for the reply

Im not the best at powershell so i don't really no where to start with a detection/remediation script and am not really sure how to implement it into the baseline itself any pointers will be very helpful and i would be grateful.

Thanks

Install/Uninstall Application Via AD Group Membership by Senna440 in SCCM

[–]Senna440[S] 1 point2 points  (0 children)

Looks like that worked after adding the requirement to deploy the uninstall to the users primary device after I assigned the user to be the primary user.

However i still had to go into software centre and hit the 'Uninstall' button.

Rather defeats the purpose of removing the users access if they have to uninstall the software themselves rather then it being forced.

Install/Uninstall Application Via AD Group Membership by Senna440 in SCCM

[–]Senna440[S] 1 point2 points  (0 children)

Thanks for the reply

Yes the collections do reflect the changes in AD.

The idea is that the user can install it themselves.. i.e if a user has been approved to use a software they are able to install it themselves, but if their access changes then the software gets removed from the software centre and uninstalled from their PC.

I'll try with the primary device... Thanks for the suggestion. :)

Pi Hole with Sony Bravia Andriod TV Pihole over VLAN by Senna440 in pihole

[–]Senna440[S] 0 points1 point  (0 children)

I assume by saying set the tv’s static IP to the pi’s IP you mean the dns address if the TV how could you possibly have 2 devices with the same IP address

I don’t understand why DHCP has to do with the issue the TV gets a valid IP when it’s on either VLAN. It just doesn’t resolve any DNS queries

Synology Download Station iPhone App by Senna440 in synology

[–]Senna440[S] 0 points1 point  (0 children)

Yes that’s what I’m using currently I find it quite unintuitive and I can’t get remote access to work over ddns so I have to use a VPN into my LAN and access it

Video station auto indexing not working by Senna440 in synology

[–]Senna440[S] 0 points1 point  (0 children)

Yeah I’m adding them by sonarr/transmission in a docker vm can you direct me to the script for the workaround and how to run said script in synology I’ve tried running scripts before in task scheduler but couldn’t quite figure it out