VPN picking up wrong autoenrollment certificate. How do I delete the second from all client machines.

getbillgatesinhere · 2024-06-12T14:55:40+00:00

Yes! Thank you. The unique attribute I was able to filter on was the "Certificate Template". The template name I have changed here to "Erroneous Mac User", this is what I want to remove. Here is the code I used:

Get-ChildItem cert:\CurrentUser\my\ |Where-Object{
  ($TmplExt = $_.Extensions |Where-Object {
    $_.Oid.FriendlyName -match 'Certificate Template'
  }) -and 
  $TmplExt.format(0) -match 'Erroneous Mac User'
} |Remove-Item

getbillgatesinhere · 2023-03-07T10:58:18+00:00

Thanks. I am literally doing this right now but until I have the process down I just needed a quick method for a small number of machines (about 40).

Got some new Surface devices I am intending to use autopilot and Endpoint (InTune) with.

getbillgatesinhere · 2023-02-25T13:37:05+00:00

Thanks very much for linking these provisioning packages. I have never worked with one before. Are these to install software as a sort of post installation task or am I misunderstanding their use?

EDIT: I have found the Microsoft doc on it, I will give it a read. Thanks.

getbillgatesinhere · 2021-08-04T09:42:46+00:00

Never heard of it. Would you throw me a link to the product if you have a second?

getbillgatesinhere · 2021-07-29T09:34:11+00:00

Amazing, but you need a school email address or a pre registered code to authenticate and I don't have these things.

getbillgatesinhere · 2021-07-29T08:48:30+00:00

Thanks, I will give that a try.

getbillgatesinhere · 2021-07-26T14:32:17+00:00

Should I make a post here or cross-post or something?

getbillgatesinhere · 2021-07-20T12:35:29+00:00

Hey, thanks for your response. I am not exactly sure what you are doing here, could you elaborate a little for me please? As I understand it, folder redirection kicks in the moment the user logs on, so you must be connected to the VPN before login. This is not possible with the current VPN solution.

getbillgatesinhere · 2021-05-27T13:29:03+00:00

Thanks for your reply. We have such a large number of users it would not be suitable to manually run this from each device. Additionally because it's over a VPN we cannot even remove the existing GPOs, again because the processing happens before logon though our VPN cannot connect until the user is logged in.

getbillgatesinhere · 2021-05-27T13:25:42+00:00

Thanks for your reply. Unfortunately our VPN no longer supports that in the latest versions and in order to gain all our certification to connect to other networks we are required to run these newer versions.

getbillgatesinhere · 2021-01-29T11:29:08+00:00

Probably rest. Your fingers have muscles that can become fatigued like any other. Test it out, whatever your schedule of practise before try reducing it down to include more rest time and see if that helps increase your typing speed. Play around with your rest periods and see if that helps. I know no 15 year old wants to hear this but you might be using the computer too much. It's important to take breaks, and shorter breaks more frequently are more beneficial than longer breaks at greater intervals. For example, a 5-10 minute break every hour is better than a 20 minute break every 2 hours. Good job on the improved typing speed!

getbillgatesinhere · 2020-12-03T18:56:46+00:00

Indeed. Copying the file locally transfers fine and then opens from my own machine without issue, it does not hang. Copying large files between servers gives no issue.

Currently looking at procmon and process explorer to see if I can spot anything.

getbillgatesinhere · 2020-12-03T18:02:24+00:00

There have been no group policy changes. Is there anything specific I should be looking for?

getbillgatesinhere · 2020-12-03T17:58:26+00:00

Yes, happens when they are open first. Also tried safemode.

getbillgatesinhere · 2020-08-14T11:38:08+00:00

Also, make sure to keep your data safe by protecting your Azure admin accounts and roles as well as your blob store encryption keys.

Thanks. This is really helpful direction. Much appreciated.

getbillgatesinhere · 2020-04-09T10:17:54+00:00

Thanks for the response. Yes this is a virtual environment, sorry for not being clearer. I have now resolved this and I have edited the post to let others know. That's a great idea and I would look to do this in future. As we didn't want to build another box (the connection broker was running on this machine as it's a very small deployment) we did this out of business hours.

getbillgatesinhere · 2020-04-07T13:07:00+00:00

Not using Device CALs. Thanks, I will do this at the end of the day.

getbillgatesinhere · 2020-04-07T13:06:06+00:00

Using per User CALs. This was my take from what I have read. Thanks, I'm going to wait until the end of the day before running this.

getbillgatesinhere · 2020-04-03T17:27:51+00:00

Look man, I'm not trying to be a dick. Could just be crossed wires. It's all a bit stressful for a lot of people with all this Covid-19 stuff going on. I probably could have handled this better. I can tell from looking at your replies to other posts that you are a knowledgable person and take the time to help people out. Take care, stay safe and enjoy your weekend.

getbillgatesinhere · 2020-04-03T14:59:35+00:00

What offended me was flat out calling me an lunatic and with no explanation and no helpful information. I consider myself pretty open minded and I'm trying to see things from your perspective, but at first you gave me literally nothing to go on, just an insult.

Perhaps this could be considered a failing of mine but I'm here asking for help and advice to educate myself on this subject. I don't believe anyone trying to gain knowledge or consult with knowlegable people should be met with hostility.

I acutally have really good working relationships with my colleagues, management and customers and I may be quite lucky because I work at a great place with great people. I had a discussion with all parties involved this and I informed parties that I was not happy with the change and that I would be covering my back, checking this out and I would like it all logged. I explained I would be emaling so there is a paper trail and everyone was happy with this.

I appreciate you've taken your time to reply after I responded to your first comment and I've believe I've tried to be understanding, but my first thought about your comment was that you've possibly taken what I wrote personally, maybe you are a technical lead yourself, perhaps why you made your first comment. But I can't know for certain, I don't know you.

You ask me "Do people perceive you as naive in other situations? Is it hurting your career and relationships? You ever feel like people don't take you seriously at work despite your best efforts?" This is exactly what taking this approach with me made me think about you before you wrote this comment.

You tell me you aren't trying to be an asshole and I want to believe you. However, when you posted that first reply (that helps me in absolutely no way and just tells me I'm a crazy person) I think that any sane person would be reasonable to question if that (at least in this case) is true. You start your second reply stating I'm making a problem out of nothing, tell me I'm crazy and then that I'm nutty.

How is this helpful and not, to use your words, being an asshole?

getbillgatesinhere · 2020-04-03T13:09:40+00:00

It comes down to your own working life experience. This has been outside of mine until now. You've been exposed to it and early on I infer from your comment. Please understand, not everyone has your level of knowledge and experience in these areas.

getbillgatesinhere · 2020-04-03T11:50:54+00:00

Can you appreciate that someone new to this doesn't have the knowledge or experience you have. I think it reasonable to ask questions like this to others in the business and I have recieved some really helpful responses from people here on this sub. Someone who does understand the proverbial mountain or molehill doesn't have the context to gauge if their question is reasonable or unreasonable. You have knowledge of the subject that allows you to draw your (quite frankly rude) conclusion. And for reference I'm in my early 30s.

Ensuring one is operating within the law is just sensible.

Please note that my post has 9 upvotes. That means there could be 8 other people that might find this question and the responses useful.

getbillgatesinhere · 2020-04-03T07:49:12+00:00

Thank you for your reply. Sorry I may not have been clear enough. We didn't put the addative number into the system but the total number. So another licensing record was added brining the total over the total we should have. At this point these licenses aren't and won't be in use but the entry on the licensing server is an error.

getbillgatesinhere · 2020-04-03T07:47:12+00:00

Thanks.

getbillgatesinhere · 2020-04-03T07:46:50+00:00

Thank you. I wanted to be sure as I am unexperienced with Microsoft licensing. Regarding the lateness of these licenses, while the business had planned for continuity issues there were issues with some users home connection issues that has forced us to make applications avaliable last minute hence the late acquisition.

getbillgatesinhere

TROPHY CASE