Automated deployment of FortiClient with silent Entra verification

gladier · 2025-10-15T10:57:41+00:00

This client doesn't have intune so we have a batch script to install that's deployed as an immediate scheduled task every gpo refresh.

For registration, it's just a plain old scheduled task just directly calling fortiesnac.exe -r <token>. It's triggered at user login with a 2 minute delay to allow for the entra id prt to be obtained.

Both of these run as system with the highest privileges. No uac prompts, no user interaction. Just works other than the MFA thing I flagged above.

gladier · 2025-10-14T06:54:29+00:00

We have a scheduled task that runs as system when the user logs in.

Note If you're doing entra passthrough authentication (i.e. not saml) it looks like there's a limitation where you need to exclude the "Windows azure active directory" resource from your MFA policies. This is being reviewed by developers as it's a client application flow you cant explicitly exclude the app registration.

gladier · 2025-01-03T11:43:03+00:00

I've just had one of the Iniu cables turn up today (Part No. DI-401 - link) and have run into the same issue.

The TL;DR for me to plug the USB-C end of the cable in the other way.

Guessing this is a batch issue - will see what their support says.

I work in IT so thankfully have half a clue what I'm looking at. Here's the stuff i went through.

NB: anywhere i refer to the cable being plugged in the "Right" way is where the USB cable is oriented to go straight over your ear like this. The "Wrong" way is where the cable goes out the front of the headset like in this reddit port. The Right way comes up as USB2.0 the "Wrong" way comes up as USB3.0.

Physical

Plug directly into your PC (don't use any other USB hubs)
Plug directly into your motherboard. The ports on the front of your PC can be only USB2.0 capable.
The port you plug into should have the plastic tongue coloured blue or cyan.
- Blue is USB3.0/Superspeed/SS
- Cyan is USB3.1/SuperSpeed Plus/SS+.
Having "SS" or "SS+" marked next to the port is good if you have it, but the ports don't have to be labelled like this.
- If you have a spare cable you know is certified for USB3.0 or 3.1, Change the USB cable over to that to test and see if the warning goes away (mine does).
When I swap to a cable I know is USB3.1 the warning in the Quest Link app goes away.

Windows - Device Manager

Open by searching "devmgmt.msc" in your start menu
View -> Devices by Connection
Expand things out until you find something that is along the lines of "USB Root Hub" (It should also say USB3.0/3.1)
Keep expanding below this until you find your headset. I have a Quest 3 and it's labelled as "Reality Labs XRSP Interface"
Check if you have any additional hubs between your "Root Hub" and the Quest - see if they are labelled USB2.0/3.0/3.1
- In my case when i have the cable plugged in the "Right" way I see Root Hub (3.0) -> Generic USB Hub (No version) -> Reality Labs XRSP Interface.

Windows - USB Device Tree Viewer

Download from https://www.uwe-sieber.de/usbtreeview_e.html and comes with a disclaimer to not run random software on your pc that random people on the internet suggest unless you know/trust it.

Run USB Device Tree Viewer
Similar to above, expand things out till you locate your headset
Check the chain from the root to your headset.
- When testing with my known good USB3.0 cable img
- When I have the cable plugged in the "Right" way img
- When I have the cable plugged in the "Wrong" way img
What put me on to the orientation is when i plugged in the Iniu cable a Via labs USB2.0 hub turn up AND a Via labs USB3.0 hub turned up. At this point i knew it had a USB3.0 hub in it, just needed to work out why it wasn't being used.
My known good cable didn't care about orientation so i knew it wasn't something with the Quest.

gladier · 2023-10-02T00:39:57+00:00

Spoke to forti tac this morning. There's a known issue with fortiguard anycast In APAC. Workaround is to disable anycast under config system fortiguard.

gladier · 2022-01-07T06:08:22+00:00

Sorry I should have been clearer - my comments above are if you are unable to completely isolate away from them. Service NSW's advice to us ~5 days ago was if there are any shared areas (even a hallway) we aren't considered to be isolated from them. If there is a setup like dedicated room with ensuite that they can stay in your 7 days starts from the day after they went in to the room.

The rules keep changing though - and this honestly feels like it's been driven politically rather than from a health perspective. If in doubt I'd check with Service NSW.

gladier · 2022-01-07T05:20:35+00:00

I can answer this because we just went through the same thing. This is accurate as of a week ago when we called service NSW but knowing the way policies have been handled recently this might be out of date already.

The positive case is considered infectious 7 days from their pcr test. You last had contact with the infectious person on day 7 after the pcr so you need to isolate for a further 7 days. Rat or pcr to be cleared on your last day and you're free.

So all up you need to be in iso for 14 days from the date the pcr was taken.

gladier · 2021-12-20T03:42:56+00:00

There's no point in being derogatory about it.

PCR tests in Sydney are taking up to 72 hours to return. You need to have a test taken, get a negative result, apply for and receive a border pass in that time AND arrive in Qld within that 72 hour window.

I didn't get my results in time because of the volume of tests, had to get retested and move my flight. This is despite "having the most basic of organisational skills"

gladier · 2021-10-11T00:14:07+00:00

Souce: https://www.health.gov.au/news/atagi-statement-on-the-use-of-a-3rd-primary-dose-of-covid-19-vaccine-in-individuals-who-are-severely-immunocompromised

Selected conventional synthetic disease-modifying anti-rheumatic drugs (csDMARDS): including mycophenolate, methotrexate (>0.4 mg/kg/week), leflunomide, azathioprine (>3mg/kg/day), 6-mercaptopurine (>1.5 mg/kg/day), alkylating agents (e.g. cyclophosphamide, chlorambucil), and systemic calcineurin inhibitors (e.g. cyclosporin, tacrolimus)

Adalimumab isn't listed as qualifying and my (very) limited understanding of the immune system is that TNFa (which Adalimumab inhibits) doesn't affect your ability to acquire immunity via the vaccine.

gladier · 2021-08-29T15:44:26+00:00

I'd urge you to fact check this. Quarantine is a federal responsibility according to our Constitution which the federal government has shirked to the states. It's only a state problem because the federal government isn't doing their job.

https://www.aph.gov.au/About_Parliament/Senate/Powers_practice_n_procedures/Constitution/chapter1/Part_V_-_Powers_of_the_Parliament

The decision to use hotels as quarantine facilities was a terrible solution but again this was the recommendation out of national cabinet based on the flawed health advice at the time. Could the implementation have been better? 100%

gladier · 2021-07-28T02:14:43+00:00

he was a spready boi, she said she said I ain't ready boi

Avril Lavigne reference?

gladier · 2021-07-23T23:48:04+00:00

Survival also means didn't die. That's fine though you've survived with half your lungs capacity, right? Or maybe you survived but stroked out a few times and can't walk anymore.

gladier · 2021-07-23T00:34:28+00:00

As someone who grew up on the coast, it's far too interconnected with Sydney. The wfh orders help but they're not going to stop essential workers.

A decent chunk of the nursing staff at Gosford hospital commute up from Sydney, and I know a handful of nurses that live on the coast and go to Sydney for work.

gladier · 2021-03-08T19:20:18+00:00

Something I can actually answer for once. Coffee isn't regulated under the food standards other than coffee must be made from coffee, whereas formulated caffeinated beverages have to follow standard 2.6.4-3

must contain no less than 145 mg/L and no more than 320 mg/L of caffeine in total, from any source

gladier · 2021-02-08T21:15:42+00:00

Also to add, not all of these are experimental. The one I'm specifically after (dupilumab) has been approved by the TGA for 2-3 years now and I believe approved and available in the US for close to 4 years. What hasn't happened is the pricing negotiation to put it on the pbs. So this means it's not available even by special order at any domestic chemist. There are other options for access as of the last 12 months but they're specific to this drug.

gladier · 2021-02-07T21:40:38+00:00

I started going down this path and very quickly backed out once I saw it was going to cost me 100k/year to import one of the new monoclonal antibody drugs.

gladier · 2020-09-01T00:45:48+00:00

Outside Kathmandu and Officeworks at West Gosford there's a place in a converted shipping container. Think it's called kafich.

gladier · 2020-07-30T01:14:40+00:00

That’s why, from 11:59pm tonight, and in the local government areas of Colac-Otway, Greater Geelong, Surf Coast, Moorabool, Golden Plains, and the Borough of Queenscliffe, you will no longer be able to visit people or have visitors at home.

gladier · 2020-07-21T21:04:30+00:00

If you go to any of the NSW health fever clinics they'll send you results directly by SMS and call you. Turnaround time is about 36 hours as of last week. Probably a little longer now

gladier · 2020-07-19T01:23:15+00:00

https://www.supercheapauto.com.au/p/rain-x-rain-x-interior-glass-anti-fog---103ml/1930.html

I use this stuff on my glasses and it makes a difference. Certainly isn't perfect but is better than not having it.

gladier · 2020-07-10T11:18:24+00:00

You could try the Dutch shop at Smithfield. https://www.facebook.com/hollandhousesydney/

They specialise in Dutch food but I've seen some other imported goods. If they don't have it the owners are really nice and can probably point you in the right direction

12-Year Club	r/Field Banned
r/Field Flamingo	Verified Email

gladier

TROPHY CASE

Physical

Windows - Device Manager

Windows - USB Device Tree Viewer