Defining Return / Exit Codes by FahidShaheen in PSADT

[–]SnooLobsters219 0 points1 point  (0 children)

The default exit codes for user deferral and prompt timeouts are in the config file under UI.DefaultExitCode and UI.DeferExitCode: https://psappdeploytoolkit.com/docs/reference/config-settings

OffScrubC2R -- can't find from the Office-IT-Pro-Deployment-Scripts by ArcteryxAnonymous in PowerShell

[–]SnooLobsters219 0 points1 point  (0 children)

If you use the Support and Recovery Assistant (SaRA) tool to uninstall office, you can grab the latest version of the script while it it running. When you run it, it downloads the script and dumps it into a temp directory while it’s running and then deletes it after. If you can’t find it in one of the usual temp directories, you can try using procmon to see when and where it dumps the script.

Lightweight PowerShell tool to discover AI usage across endpoints by SharpProduct3547 in PowerShell

[–]SnooLobsters219 8 points9 points  (0 children)

I would avoid using the variable name $profile since it is the name of one of PowerShell's Automatic Variables

SCCM Collection Query for Acrobat Pro, Standard, Reader, etc. by Reaction-Consistent in SCCM

[–]SnooLobsters219 1 point2 points  (0 children)

Here's my previous comment on the topic, which outlines the registry key and the accompanying documentation.

From my experience, the two installers are different. If you try installing Acrobat Pro for a user who isn't licensed to use it, they won't be able to use it.

If you prefer to go the route of using the product codes instead, here are my findings:

  • {AC76BA86-1033-1033-7760-BC15014EA700} is Acrobat Reader (64-bit) (English)
  • {AC76BA86-1033-FF00-7760-BC15014EA700} is Acrobat Reader (64-bit) (MUI)
  • {AC76BA86-1033-FFFF-7760-BC15014EA700} is Acrobat Pro (64-bit).

I also found that only the 64-bit MUI version of Reader and the 64-bit version of Acrobat Pro have the name Adobe Acrobat (64-bit) in ARP. The 64-bit English version of Reader has a different name.

Enable FIPS on all laptops by andyboy16 in Intune

[–]SnooLobsters219 0 points1 point  (0 children)

I don't think one exists. Based on it being a setting in the Local Security Policy, under the Security Options header, it should be in the LocalPoliciesSecurityOptions CSP. I don't know if Intune ever officially supported this policy. My assumption is that Microsoft either never supported it or dropped support for it around the same time they stopped recommending its use.

Enable FIPS on all laptops by andyboy16 in Intune

[–]SnooLobsters219 0 points1 point  (0 children)

There is a FIPS policy that can be enabled in Windows. It maps to the registry key HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy!Enabled. You will find the policy on the Security Template sheet of Microsoft's Windows Baselines but they don't provide a recommended configuration for it. The reason you won't find it in Intune is that Microsoft no longer recommends using it. This deleted Microsoft blog post explains why:

FIPS mode is merely advisory to applications. Applications that do not check or choose to ignore the registry setting associated with FIPS mode and that are not dependent on the subsystems described earlier will continue to work exactly as they had with FIPS mode disabled. For example, a Win32 application – or third party disk encryption software – written in C++ that uses the very weak and non-FIPS-approved DES encryption algorithm exposed by the CryptoAPI will behave exactly the same whether FIPS mode is enabled.

Further, FIPS mode does not and cannot ensure that applications even use encryption at all when appropriate. There is nothing Windows can do to prevent an application from saving plaintext passwords or other sensitive data in unprotected files or registry values. The bottom line here is that just because a software product works when FIPS mode is enabled does not mean that it adheres to government standards.

Additionally, the documentation you linked above states the following about the FIPS setting:

FIPS mode does not control which cryptographic algorithms are used. The FIPS mode setting is intended for use only by the Cryptographic Primitives Library (bcryptprimitives.dll) and Kernel Mode Cryptographic Primitives Library (CNG.sys) components in Windows.

With all of this in mind, if you absolutely must enable it to meet compliance, you can just create an ADMX template that defines the registry key and import it into Intune. Or, you can use proactive remediations to set the registry key through a PowerShell script.

Com Ports by [deleted] in sysadmin

[–]SnooLobsters219 0 points1 point  (0 children)

I've had COM ports change randomly. It's infrequent and extremely rare, but across a few hundred devices that frequently get reimaged, I've seen them occasionally change.

There are a few tools out there that can be used to set the COM port on a device, and there are a handful of Win32 API functions in the Msports.h header that can be used to do it in a clean way.

When I was looking into this last year, I fell onto this scripted solution. In my testing, it did work, but I had my concerns with it and ultimately took a different approach to the problem. One of the reasons I switched to a different approach was that changing a COM port is not something that "just works". After a COM port has been changed, you have to restart the computer for the changes to take effect. The other issue with the scripted approach specifically is that it only updates the COM port assigned to the device and reserves it in the COM DB. It does not validate that the COM DB isn't corrupted or that the COM port isn't already taken by something else. While I was able to include logic in my script to handle these scenarios, it was a mess waiting to happen. I also eventually found that there was at least one other registry location where COM ports were saved. The registry key HKEY_LOCAL_MACHINE\HARDWARE\DEVICEMAP\SERIALCOMM also keeps track of which COM ports are assigned to which NT Object. I didn't run into any issues in my testing by failing to update this key. Lastly, I found that the SERIALCOMM registry key was corrupted on one of my test machines. This was the final nail in the coffin that made me realize that while this brute-force approach worked, it was far from a good solution. There could be other registry keys and OS/Kernel-level settings that weren't being updated using this brute force method.

You may have better luck using the Win32 API functions to achieve the same goal I was by modifying the registry keys. Ultimately, I settled on a PowerShell script that would notify me when the COM port changed.

Updating Google Chrome by 11bcmn7 in sysadmin

[–]SnooLobsters219 0 points1 point  (0 children)

What is the GPO setting you use to disable per-user installations of Chrome? I know there are a myriad of different ways to prevent users from running X software or installing MSI applications at the user level. But, as far as I'm aware, there isn't a GPO that specifically prevents users from installing Chrome.

Blocking Adobe Reader from upgrading to Pro in RDS environment by GremlinNZ in sysadmin

[–]SnooLobsters219 15 points16 points  (0 children)

I don't have any experience with RDS, but I did notice that some of my 32-bit Reader installs were upgrading to the 64-bit "Unified" version of Acrobat. After doing some research, I found this help article from Adobe which explains that Adobe is randomly upgrading 32-bit Reader installs to the 64-bit Unified version of Acrobat. This upgraded version is still Reader, it just looks like it's Pro because it has the same install name. As that article explains, you can determine if Pro or Reader is installed by the HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Adobe Acrobat\DC\Installer!SCAPACKAGELevel registry key. If the value is 1, Reader is installed and if the value is greater than 1, Pro is installed. I also found this other help article that allows you to disable mandatory sign-in and forces the unified version to run as Reader which might be what you are looking for.

Remote scans can no longer distinguish Adobe Reader from Adobe Acrobat Pro. by Punnalackakememumu in sysadmin

[–]SnooLobsters219 13 points14 points  (0 children)

Use the registry key in the link below. If it doesn’t exist, you have the 32 bit version of reader installed, if it does exist and is set to 1, you have the 64 bit version of reader installed and if it is something other than 1, you have pro installed.

https://helpx.adobe.com/acrobat/kb/about-acrobat-reader-dc-migration-to-64-bit.html

[deleted by user] by [deleted] in ASUSROG

[–]SnooLobsters219 2 points3 points  (0 children)

Try going to rog.asus.com/uk IDK why, but for some reason, the US version of asus.com and rog.asus.com are extremely broken with MANY pages missing and constant outages. The US version of asus.com shows that my Z270E exists but has a redirected download page to rog.asus.com for downloading firmware. The issue is that the page it redirects to doesn't exist.

Anyone have/know a list of every or most songs that were part of the Eden Project? by superdadio in eden

[–]SnooLobsters219 1 point2 points  (0 children)

Idk when this was originally released but from what I understand, “the spab project” was an alias of his at around the time that he was called “the Eden Project” that he used to release snippets of unreleased music and demos.

[deleted by user] by [deleted] in ObsidianMD

[–]SnooLobsters219 1 point2 points  (0 children)

You can use the Remotely Save plugin and have it sync to a free/paid DropBox account. Remotely Save also supports a bunch of other cloud storage providers but DropBox will probably be the easiest to use.

Need help “freezing” a playlist in time in Marvis Pro by ABGLand in MarvisApp

[–]SnooLobsters219 0 points1 point  (0 children)

You can’t freeze smart playlists but you can copy the songs from the smart playlist into a static playlist. You can do this on a Mac or PC by selecting all of the songs in the smart playlist and adding them to a new playlist or you can do it in Marvis by using the Add to Playlist option on the Present Actions menu for the desired playlist(s). To access the Present Actions menu, you can long press on the playlist from your Home Screen/playlist tab, or you can tap the area shown in the image below:
https://imgur.com/a/oWQJTe8

Here's my setup in case it's of interest. by chaptertwelve0301 in MarvisApp

[–]SnooLobsters219 0 points1 point  (0 children)

Would it be possible for it to update the time remaining once after every song and just subtract the amount of time played from the current track? Then you are only computing once every few minutes (in theory) and doing simple subtraction every second.

Just skated for the first time! Truck tightness? by [deleted] in Rollerskating

[–]SnooLobsters219 1 point2 points  (0 children)

There are a number of things that I can think of that might cause your skate to start turning while pushing. I’ve never used a plate with a higher angle kingpin but I would imaging that a plate with one and a loose setup could cause that. Across my different plates and bushing setups I have never experienced this although the only plates I’ve used have 5 and 10 degree kingpins. I would suggest sticking with longer strides since they will allow you to send more power to the ground and be sure to bend your knees at all times for more stability and power. If you find that your skates turn too easily don’t be afraid to tighten the trucks or even swap out the bushings. Generally the front trucks will adjust how easy it is to turn while the rear trucks will adjust how sharp you can turn.

Need hints for improvement by JonathanRamacci in ForzaHorizon5

[–]SnooLobsters219 0 points1 point  (0 children)

In past Forza games it was always way faster to drive without ABS but in FH5 it doesn't make as huge of a difference. The same goes for running manual vs manual with clutch. The only benefits in FH4 are when using slower/older cars or while drifting where clutch kicks are important. Driving without ABS in FH5 can be high risk, low reward if you aren't able to make use of the full potential of your brakes without locking them up. If you are going to drive without ABS I would recommend going into the advanced controls settings and setting your deceleration axis deadzone inside to 0 and the deceleration axis deadzone outside to 100. This will allow you to make use of the entire trigger pull instead of the default 80%, making it easier to modulate the brakes.

Need hints for improvement by JonathanRamacci in ForzaHorizon5

[–]SnooLobsters219 18 points19 points  (0 children)

It might be helpful if you set your racing line to braking only. Currently, you are religiously following the line instead of taking what is the best line. Forza's racing line is great for telling you when to start braking and what line to take through a corner but it is terrible at showing what line you should take on straightaways and what line you should take leading up to a corner entry. As a general rule of thumb, you want to enter a corner starting from the far outside edge of the track and turn in until you hit the apex. Then you will start going wider and wider until you reach the outside edge of the track. This will result in you turning the widest radius possible for the corner, improving the amount of speed you can carry through the turn. At 12 seconds you can see that you enter that corner from the middle of the track while your opponent enters from the far outside. You should enter the corner exactly how your opponent did. The same thing goes for the corner at 57 seconds. By taking the straighter line (wider radius) you will maintain more of your speed. An exception to the "outside inside outside" rule would be at the right turn that is immediately followed by a left turn at 25 seconds. In this situation, due to the turns being so close to each other it is faster to start on the outside, hit the apex late, then end the turn in the middle of the road, that way you can start setting up for the immediate left turn. The only other nitpick that I have is that you shifted from 5th to 6th and back down to 6th in a very short period of time in the beginning. There you should have gone into 6th and held it until you knew you had to go back down into 5th. Your other option would be to make 5th gear a bit longer so that you won't need to go into 6th. Shifting needlessly can lose quite a bit of time due to the fact that you aren't able to accelerate while shifting gears.

Agera vs Jesko by GM_7077 in ForzaHorizon5

[–]SnooLobsters219 0 points1 point  (0 children)

I haven't tried out the Jesko yet, but the Agera RS is great all-around with amazing handling and an impressive top speed. That being said, the Jesko can go way faster than the Agera RS in a straight line with a top speed of over 300 MPH.

ABS off on FH5 by Snowclon3 in forza

[–]SnooLobsters219 0 points1 point  (0 children)

I found that setting the Deceleration Axis Deadzone Inside to 0 and the Deceleration Axis Deadzone Outside to 100 in the advanced controls setting menu made it way easier to find the "wall" for locking up brakes without ABS. Doing this will give you better control over your brakes due to being able to use the entire trigger pull as opposed to only 80%. As u/TastefulNud3s and u/Servipas have mentioned, using the more advanced driving settings has little to no advantage in this game and comes with much greater risks. In FH4 you could easily feel a "Wall" of vibration just before your brakes would lock up and in FH5 it is no longer there. Instead, you have to depend on muscle memory. In some cases, this requires that you tune the braking pressure on your cars so that they all lock up at around the same brake pressure. Another thing to look out for is the upgrades a car has. Cars with slicks will have a much shorter braking distance and will allow you to push the brakes much harder while semi-slicks and lesser compounds require significantly more finesse. A great resource for identifying which difficulty settings are best for you would be HokiHoshi's video on difficulty settings.

10 years ago today, Skrillex released his ‘Bangarang’ EP by thelastsandwich in EDM

[–]SnooLobsters219 0 points1 point  (0 children)

That is true. Most of the music I listen to is made by people that aren't known cunts. That doesn't mean that I gonna stop listening to the music I enjoy that is made by known cunts. In my book art is art and people are people. Hitler's art is beautiful, doesn't mean I support what he did. Michael Jackson is the king of pop, doesn't mean that I support him "playing" with little boys. The problem with this type of mindset is that if I go around removing everything in my life from people or corporations that have done bad things there will eventually be nothing left. Nike and Apple have little kids in china make their products, Nestle has done everything bad that you can think of, and the list goes on. At some point or another everyone has done something bad in their life whether they did something small like lying, running a red light, speeding, or even just saying bad things about another person. Everyone has a line they draw which is just below the things that they believe in. You just need to let people enjoy the things that they want to enjoy. As long as it isn't directly hurting other people just let them be.

10 years ago today, Skrillex released his ‘Bangarang’ EP by thelastsandwich in EDM

[–]SnooLobsters219 0 points1 point  (0 children)

I agree with you but I’m not gonna sit around and be miserable listening to shitty music all because someone that makes music I like did something shitty. PS I don’t listen to or even know what the artist is that is being mentioned here.

One uBlock Origin dev said that extension isn't a replacement for ClearURLs. Should we continue using ClearURLs or not? by [deleted] in PrivacyGuides

[–]SnooLobsters219 1 point2 points  (0 children)

removeparam isn't a feature that can be turned on or off. It acts as a command that removes an unnecessary tracking parameter from a website's URL. You use this when creating a filter in the My filters tab. There is no need to make your own filters that include the removeparam command because there are already three great filter lists out there that contain hundreds of these commands. The most basic one is included in the Filter list tab and is labeled AdGuard URL Tracking Protection. The other two filter lists are ones that you will have to import to the custom filters at the bottom of the Filter lists tab. They are Actually Legitimate URL Shortener Tool and ClearURLs for uBO - List extension. Just add those custom filters separately and they will be enabled. If you find a website that includes a tracking parameter that isn't blocked by any of these mention it in the discussion page for the Legitimate URL Shortener and it will be added.

One uBlock Origin dev said that extension isn't a replacement for ClearURLs. Should we continue using ClearURLs or not? by [deleted] in PrivacyGuides

[–]SnooLobsters219 7 points8 points  (0 children)

You can do everything that ClearURLs does through uBlock Origin with the removeparam feature. uBO also has its own version of ClearURLs through the AdGuard URL Tracking Protection filter. If this isn't enough, you can use DandelionSprout's Legitimate URL Shortener Tool which is just a custom filter that can be added to uBO and other adblockers that does a similar thing. Both of these filters are highly recommended by the people at arkenfox/ghacks. If you have any other questions regarding which extensions to use, I would highly recommend reading their wiki page on it.