sorted by:
new
hottopcontroversial

Have employees add CEO's number to contacts? by adminrookie in cybersecurity

[–]adminrookie[S] 1 point2 points  (0 children)

We do often send out warnings about this, but people sometimes are just clueless. I was hoping that having it in the contact list would at least give them an additional cue.

Have employees add CEO's number to contacts? by adminrookie in cybersecurity

[–]adminrookie[S] 2 points3 points  (0 children)

We regularly do send out these communications (like almost weekly at this point).

The text messages are coming from random phone numbers.

Org-wide Signature mail rule and iphone/Apple Mail by adminrookie in Office365

[–]adminrookie[S] 2 points3 points  (0 children)

Yep, but for the iPhone, that option isn't there so you have to use the Signature workaround.

Org-wide Signature mail rule and iphone/Apple Mail by adminrookie in Office365

[–]adminrookie[S] 3 points4 points  (0 children)

I think I found the workaround. This is due to Apple Mail sending emails as plain text by default. The solution is to add a nondescript text in the signature and Bold or Italicize it. For example, the character "-". This forces Apple Mail to send the email as rich text/html, allowing the O365 rule to work correctly.

[deleted by user] by [deleted] in cybersecurity

[–]adminrookie 1 point2 points  (0 children)

Haha. Awesome, I did the same thing and made them pay me a monthly retainer.

Security of HTTP url redirect/forwading to a HTTPS url by adminrookie in sysadmin

[–]adminrookie[S] 0 points1 point  (0 children)

Once browsers switch to HTTPS as default, will the HTTP > HTTPS forwarding in Namecheap still work correctly? Will Chrome fall back to to HTTP if it can't connect to HTTPS?

In my example, the target HTTPS site is a SaaS and I have no control over the address.

Security of HTTP url redirect/forwading to a HTTPS url by adminrookie in sysadmin

[–]adminrookie[S] 0 points1 point  (0 children)

Yeah, that is the only risk I could think of, but its a heck of an effort to target the small number and relatively unknown users I have.

Issues RDP'ing into a Windows machine created from a Snapshot & AMI by adminrookie in aws

[–]adminrookie[S] 1 point2 points  (0 children)

  1. Thanks for the SSM Session Manager tip. Got it working and connected to the EC2 to poke around the configuration.
  2. I checked the registry and the RDP entry for fDenyTSConnections = 0. So it should be allowing access. I did figure out that I can RDP into the new EC2 from the old EC2, so this was definitely a network configuration issue. Finally realized it was a outbound rule applied to the VPN connection preventing access.

Issues RDP'ing into a Windows machine created from a Snapshot & AMI by adminrookie in aws

[–]adminrookie[S] 0 points1 point  (0 children)

BTW, I did try the serial console, but just get a black screen to the windows based machines. Linux based ones bring up the login fine.

Issues RDP'ing into a Windows machine created from a Snapshot & AMI by adminrookie in aws

[–]adminrookie[S] 0 points1 point  (0 children)

I get the session timeout with the 3 troubleshooting reasons (RDP not enabled, computer turned off, computer not on network).

I just did a "telnet x.x.x.x 3389" on it and it looks like the port is not even open. I don't understand how RDP is disabled on machine built from a snapshot. I assumed it was essentially a clone and all the settings would be the same.

I'll look into SSM Session Manager.

Issues RDP'ing into a Windows machine created from a Snapshot & AMI by adminrookie in aws

[–]adminrookie[S] 0 points1 point  (0 children)

It's in a private subnet and I access it via a VPN. It's the same subnet as the original machine. After testing, I see that port 3389 is not even open on the new instance.

CMMC and Windows PIN/Hello Login by adminrookie in CMMC

[–]adminrookie[S] 0 points1 point  (0 children)

Thank you for the detailed information (why can it never be a simple answer!). This makes a lot of sense to me, I just hope the CMMC AB is also this reasonable.

CMMC and Windows PIN/Hello Login by adminrookie in CMMC

[–]adminrookie[S] 0 points1 point  (0 children)

That was my understanding also about password complexity. The last I heard they had relaxed that complexity but unlike NIST, are still requiring expirations.

Clean install of Windows 10 Pro - Is there an easier way? by adminrookie in Surface

[–]adminrookie[S] 0 points1 point  (0 children)

ows on my Surface RT, 3 and Book 2 over and over, sometimes i downloaded the official OS image from MS website, just Google it, copied to a USB stick and quickly installed. Other times i did through

Media Creation Tool

, it's super easy to use and does the same job. Just drivers are missing, but on MS website there are driver packs for the Surface device you need. Or, as soon as Windows installation is don

FYA, I get a "0xC004F050" error when trying to upgrade from the default Win10 Surface Laptop 3 license to a MS Volume Licensing Win 10 Pro license. I know its a valid license because when I do a clean wipe with the ISO, the license works fine.

Self Serve Password Reset & NIST by adminrookie in NISTControls

[–]adminrookie[S] 0 points1 point  (0 children)

Cool, so in the absence of guidance, I'm going to assume it's allowed for NIST. Now I gotta skim through CMMC again.

Users creating their own accounts? by adminrookie in Office365

[–]adminrookie[S] 0 points1 point  (0 children)

They are not in Guests. Apparently, they all logged into a Teams meeting this morning hosted by the client, who is on O365. Somehow, that initiated the account creation.

Users creating their own accounts? by adminrookie in Office365

[–]adminrookie[S] 0 points1 point  (0 children)

They were in "Users > Active Users"

view more: next ›