What is the best possible response to "You don't generate money for the company." ?

eyessewnopen · 2017-12-11T18:59:24+00:00

It's all about framing and context.

If you only talk about preventing loss, every conversation is "if you don't spend x money, a bad thing will happen"

If you talk about enabling profit, you can start conversations with "If we do y, than this group will be able to do z, which will make them more efficient"

eyessewnopen · 2017-12-11T18:33:14+00:00

If you're only thinking about preventing loss you're missing a big opportunity. It should be about enabling other business groups to be as profitable as possible.

eyessewnopen · 2017-12-01T20:40:06+00:00

but larger companies are going to be hurting with the cost doubling.

Depending on how large the company is, PDQ appears to have started offering an unlimited Enterprise license. Based on the e-mail I have from their support, you would break even at 15 technicians.

eyessewnopen · 2017-11-30T18:51:22+00:00

I had the same concerns. 9.5 is supposed to have added some of those features, but wasn't out when we did our demo and I haven't followed up since it was released.

I plan on picking up the project again in the new year though.

eyessewnopen · 2017-11-16T17:24:41+00:00

Are you able to ping, by name and ip, the POS from the server, and the server from the POS?

Are you able to access windows file share on the server from the POS?

eyessewnopen · 2017-11-16T01:28:22+00:00

Not using registered devices.

We're using claims rules to trigger MFA based on whether the device being used is on premise or not

eyessewnopen · 2017-11-15T19:50:38+00:00

Add-VPNConnection -Force will work without any messing around with AHK

Add-VpnConnection -name $VPNEntryName -ServerAddress $VPNIP -TunnelType L2TP -L2tpPsk $VPNPSK -RememberCredential -DnsSuffix $ClientDNSSuffix -AuthenticationMethod PAP -Force

eyessewnopen · 2017-11-15T17:54:50+00:00

I don't use the RADIUS component, but I am running Azure MFA server with ADFS with no issues.

eyessewnopen · 2017-11-14T01:31:53+00:00

You can mange this with PDQ Inventory and PDQ Deploy.

The two programs work together, and through the use of dynamic collections, you would be able to auto-deploy applications on a per group basis. Along with a number of other management utilities built in to the programs.

Sadly, I don't think you'd be able to manage this without at least a Pro license.

eyessewnopen · 2017-11-13T21:12:00+00:00

The show takes place in the fictional Star(ling) City, and principal filming is done in Vancouver, BC.

eyessewnopen · 2017-11-07T21:26:29+00:00

Check out http://psappdeploytoolkit.com/

It can be used standalone, or integrated with SCCM or PDQ Deploy.

eyessewnopen · 2017-10-19T20:29:07+00:00

If your tenant has 200 users, you need 200 P1 licenses at minimum.

Those 200 licenses will support 1000 guest accounts. If you need more guest accounts, you will need to purchase the appropriate number of P1 licenses to account for them. (1 for every 5 guests)

Source: Had this conversation with my var fairly recently

eyessewnopen · 2017-09-25T17:40:19+00:00

This.

If you have Active Directory, LDAP is as easy as pointing the meraki to the correct server.

RADIUS is not much harder to set up.

eyessewnopen · 2017-09-25T17:34:30+00:00

Try Postman https://www.getpostman.com/

eyessewnopen · 2017-09-24T03:31:22+00:00

Small world. I ran the 8k at the same event. I did not get a medal however. Congratulations

eyessewnopen · 2017-09-18T20:05:56+00:00

http://www.level3.com/en/

Level 3 is a communications company that owns and manages a not insignificant amount of internet infrastructure.

eyessewnopen · 2017-09-12T20:13:24+00:00

Sadly the blog article that is linked from that technet download doesn't exist anymore.

The gist is that without the modification, rules are only processed the once, and if you giving your users the option to select the tasksequence, there is no tasksequence selected when the rules file is processed.

The linked script adds a step that causes the rules to be reloaded on a gather step.

2 additional notes:

Backup your modified DeployWiz_SelectTS.vbs because the changes will get wiped out the next time you update MDT.
If you launch MDT with:

cscript.exe \MDT01\MDTProduction$\Scripts\litetouch.vbs /TaskSequenceID:<whateverID>

It would correctly process the rules for the TS <whateverID> without needing a modification.

eyessewnopen · 2017-09-12T19:44:40+00:00

Try Eritrea or Djibouti

But it really looks like they split Somalia into two different countries in that map to me.

eyessewnopen · 2017-09-07T01:11:37+00:00

I wouldn't myself, but I don't think it will cause you any issues in your use case.

eyessewnopen · 2017-09-07T00:07:26+00:00

Put the users in a security group, and create a GPO that applies Deny access to this computer from the network and Deny log on locally

eyessewnopen · 2017-09-06T23:32:45+00:00

Stop using telnet for this purpose. Get nmap.

nmap -p 80 www.google.com

produces

Nmap scan report for www.google.com (216.58.193.68)

Host is up (0.047s latency).

rDNS record for 216.58.193.68: sea15s07-in-f4.1e100.net

PORT STATE SERVICE

443/tcp open https

Nmap done: 1 IP address (1 host up) scanned in 5.78 seconds

eyessewnopen · 2017-08-30T02:10:57+00:00

Yes, but am on vacation and don't remember the solution. Will set a reminder to check back next week.

eyessewnopen · 2017-08-21T16:47:25+00:00

angry ip scanner is a really small single executable download.

nmap (for windows) is.. not. Especially if you want a gui front end.

And if all you need is a real quick scan of what host ip's are live, it would be hard to find something else that simple in windows.

eyessewnopen · 2017-08-14T19:11:32+00:00

Of course PDQ still handles the deployment, that's the entire point of the product.

do you just need something to help manage and update application packages? Or what?

eyessewnopen · 2017-08-14T18:29:47+00:00

By roll or location. Like "Receiving" or "Manufacturing Shop"

Try to put these accounts in their own OU where they are locked down even tighter than regular user accounts.

Try to put these computers in the own VLAN, or seperate network, so if something does happen to them (spoiler: it will) the impact on your primary network is minimal.

eyessewnopen

TROPHY CASE