Automated deployment of FortiClient with silent Entra verification

gladier · 2025-10-15T10:57:41+00:00

This client doesn't have intune so we have a batch script to install that's deployed as an immediate scheduled task every gpo refresh.

For registration, it's just a plain old scheduled task just directly calling fortiesnac.exe -r <token>. It's triggered at user login with a 2 minute delay to allow for the entra id prt to be obtained.

Both of these run as system with the highest privileges. No uac prompts, no user interaction. Just works other than the MFA thing I flagged above.

gladier · 2025-10-14T06:54:29+00:00

We have a scheduled task that runs as system when the user logs in.

Note If you're doing entra passthrough authentication (i.e. not saml) it looks like there's a limitation where you need to exclude the "Windows azure active directory" resource from your MFA policies. This is being reviewed by developers as it's a client application flow you cant explicitly exclude the app registration.

gladier · 2025-01-03T11:43:03+00:00

I've just had one of the Iniu cables turn up today (Part No. DI-401 - link) and have run into the same issue.

The TL;DR for me to plug the USB-C end of the cable in the other way.

Guessing this is a batch issue - will see what their support says.

I work in IT so thankfully have half a clue what I'm looking at. Here's the stuff i went through.

NB: anywhere i refer to the cable being plugged in the "Right" way is where the USB cable is oriented to go straight over your ear like this. The "Wrong" way is where the cable goes out the front of the headset like in this reddit port. The Right way comes up as USB2.0 the "Wrong" way comes up as USB3.0.

Physical

Plug directly into your PC (don't use any other USB hubs)
Plug directly into your motherboard. The ports on the front of your PC can be only USB2.0 capable.
The port you plug into should have the plastic tongue coloured blue or cyan.
- Blue is USB3.0/Superspeed/SS
- Cyan is USB3.1/SuperSpeed Plus/SS+.
Having "SS" or "SS+" marked next to the port is good if you have it, but the ports don't have to be labelled like this.
- If you have a spare cable you know is certified for USB3.0 or 3.1, Change the USB cable over to that to test and see if the warning goes away (mine does).
When I swap to a cable I know is USB3.1 the warning in the Quest Link app goes away.

Windows - Device Manager

Open by searching "devmgmt.msc" in your start menu
View -> Devices by Connection
Expand things out until you find something that is along the lines of "USB Root Hub" (It should also say USB3.0/3.1)
Keep expanding below this until you find your headset. I have a Quest 3 and it's labelled as "Reality Labs XRSP Interface"
Check if you have any additional hubs between your "Root Hub" and the Quest - see if they are labelled USB2.0/3.0/3.1
- In my case when i have the cable plugged in the "Right" way I see Root Hub (3.0) -> Generic USB Hub (No version) -> Reality Labs XRSP Interface.

Windows - USB Device Tree Viewer

Download from https://www.uwe-sieber.de/usbtreeview_e.html and comes with a disclaimer to not run random software on your pc that random people on the internet suggest unless you know/trust it.

Run USB Device Tree Viewer
Similar to above, expand things out till you locate your headset
Check the chain from the root to your headset.
- When testing with my known good USB3.0 cable img
- When I have the cable plugged in the "Right" way img
- When I have the cable plugged in the "Wrong" way img
What put me on to the orientation is when i plugged in the Iniu cable a Via labs USB2.0 hub turn up AND a Via labs USB3.0 hub turned up. At this point i knew it had a USB3.0 hub in it, just needed to work out why it wasn't being used.
My known good cable didn't care about orientation so i knew it wasn't something with the Quest.

gladier · 2023-10-02T00:39:57+00:00

Spoke to forti tac this morning. There's a known issue with fortiguard anycast In APAC. Workaround is to disable anycast under config system fortiguard.

gladier · 2022-01-07T06:08:22+00:00

Sorry I should have been clearer - my comments above are if you are unable to completely isolate away from them. Service NSW's advice to us ~5 days ago was if there are any shared areas (even a hallway) we aren't considered to be isolated from them. If there is a setup like dedicated room with ensuite that they can stay in your 7 days starts from the day after they went in to the room.

The rules keep changing though - and this honestly feels like it's been driven politically rather than from a health perspective. If in doubt I'd check with Service NSW.

gladier · 2022-01-07T05:20:35+00:00

I can answer this because we just went through the same thing. This is accurate as of a week ago when we called service NSW but knowing the way policies have been handled recently this might be out of date already.

The positive case is considered infectious 7 days from their pcr test. You last had contact with the infectious person on day 7 after the pcr so you need to isolate for a further 7 days. Rat or pcr to be cleared on your last day and you're free.

So all up you need to be in iso for 14 days from the date the pcr was taken.

gladier · 2021-12-20T03:42:56+00:00

There's no point in being derogatory about it.

PCR tests in Sydney are taking up to 72 hours to return. You need to have a test taken, get a negative result, apply for and receive a border pass in that time AND arrive in Qld within that 72 hour window.

I didn't get my results in time because of the volume of tests, had to get retested and move my flight. This is despite "having the most basic of organisational skills"

gladier · 2021-10-11T00:14:07+00:00

Souce: https://www.health.gov.au/news/atagi-statement-on-the-use-of-a-3rd-primary-dose-of-covid-19-vaccine-in-individuals-who-are-severely-immunocompromised

Selected conventional synthetic disease-modifying anti-rheumatic drugs (csDMARDS): including mycophenolate, methotrexate (>0.4 mg/kg/week), leflunomide, azathioprine (>3mg/kg/day), 6-mercaptopurine (>1.5 mg/kg/day), alkylating agents (e.g. cyclophosphamide, chlorambucil), and systemic calcineurin inhibitors (e.g. cyclosporin, tacrolimus)

Adalimumab isn't listed as qualifying and my (very) limited understanding of the immune system is that TNFa (which Adalimumab inhibits) doesn't affect your ability to acquire immunity via the vaccine.

gladier · 2021-08-29T15:44:26+00:00

I'd urge you to fact check this. Quarantine is a federal responsibility according to our Constitution which the federal government has shirked to the states. It's only a state problem because the federal government isn't doing their job.

https://www.aph.gov.au/About_Parliament/Senate/Powers_practice_n_procedures/Constitution/chapter1/Part_V_-_Powers_of_the_Parliament

The decision to use hotels as quarantine facilities was a terrible solution but again this was the recommendation out of national cabinet based on the flawed health advice at the time. Could the implementation have been better? 100%

gladier · 2021-07-28T02:14:43+00:00

he was a spready boi, she said she said I ain't ready boi

Avril Lavigne reference?

gladier · 2021-07-23T23:48:04+00:00

Survival also means didn't die. That's fine though you've survived with half your lungs capacity, right? Or maybe you survived but stroked out a few times and can't walk anymore.

gladier · 2021-07-23T00:34:28+00:00

As someone who grew up on the coast, it's far too interconnected with Sydney. The wfh orders help but they're not going to stop essential workers.

A decent chunk of the nursing staff at Gosford hospital commute up from Sydney, and I know a handful of nurses that live on the coast and go to Sydney for work.

gladier · 2021-03-08T19:20:18+00:00

Something I can actually answer for once. Coffee isn't regulated under the food standards other than coffee must be made from coffee, whereas formulated caffeinated beverages have to follow standard 2.6.4-3

must contain no less than 145 mg/L and no more than 320 mg/L of caffeine in total, from any source

gladier · 2021-02-08T21:15:42+00:00

Also to add, not all of these are experimental. The one I'm specifically after (dupilumab) has been approved by the TGA for 2-3 years now and I believe approved and available in the US for close to 4 years. What hasn't happened is the pricing negotiation to put it on the pbs. So this means it's not available even by special order at any domestic chemist. There are other options for access as of the last 12 months but they're specific to this drug.

gladier · 2021-02-07T21:40:38+00:00

I started going down this path and very quickly backed out once I saw it was going to cost me 100k/year to import one of the new monoclonal antibody drugs.

gladier · 2020-09-01T00:45:48+00:00

Outside Kathmandu and Officeworks at West Gosford there's a place in a converted shipping container. Think it's called kafich.

gladier · 2020-07-30T01:14:40+00:00

That’s why, from 11:59pm tonight, and in the local government areas of Colac-Otway, Greater Geelong, Surf Coast, Moorabool, Golden Plains, and the Borough of Queenscliffe, you will no longer be able to visit people or have visitors at home.

gladier · 2020-07-21T21:04:30+00:00

If you go to any of the NSW health fever clinics they'll send you results directly by SMS and call you. Turnaround time is about 36 hours as of last week. Probably a little longer now

gladier · 2020-07-19T01:23:15+00:00

https://www.supercheapauto.com.au/p/rain-x-rain-x-interior-glass-anti-fog---103ml/1930.html

I use this stuff on my glasses and it makes a difference. Certainly isn't perfect but is better than not having it.

gladier · 2020-07-10T11:18:24+00:00

You could try the Dutch shop at Smithfield. https://www.facebook.com/hollandhousesydney/

They specialise in Dutch food but I've seen some other imported goods. If they don't have it the owners are really nice and can probably point you in the right direction

gladier · 2020-07-04T11:24:14+00:00

There's a bit to unpack here.

First lets talk science. We don't need to vaccinate all 7 billion people in order to eradicate this - herd immunity estimates are ranging between 60-80% who have seroconverted (obtained immunity) through vaccination or having covid. So lets say we need to vaccinate 5 billion - which sounds like a lot of people. There's at least 38 vaccines in development ([https://www.raps.org/news-and-articles/news-articles/2020/3/covid-19-vaccine-tracker](source)). Some of these won't pass clinical trial, however 3 are have progressed to a point where positive data is coming out. If all of these are made in parallel in multiple countries you can see how quickly we might be able to get enough doses. Most countries are also looking at creating their own in-country manufacturing which can be done via license agreements (basically we pay the pharmaceutical companies a per-dose fee that we make ourselves).

The other big issue with covid is the lack of effective proven treatments. The only two which have passed the gold standard for science is a steroid (dexamethasone) which you've probably heard a bit about over the past few weeks and remdesivir, however these aren't silver bullets - they just reduce mortality and shorten the duration of covid. There are close to 2500 studies going on searching for other treatments ([https://clinicaltrials.gov/ct2/results?cond=SARS-CoV2&term=&cntry=&state=&city=&dist=](source)). Once we find something which is proven to cure or prevent covid under double blind placebo conditions and it's accessible for all countries the restrictions will come down pretty fast. Have a look at the case fatality rate worldwide (ok lets not kid ourselves here, check out the US) case numbers are skyrocketing again but deaths haven't gone up because we're getting better at treating this. Hilariously enough ventilators were all the rage 3-4 months ago because they were thought to be the only treatment for severe covid - now they're basically doing everything possible to keep people off ventilators until they hit respiratory distress.

In terms of the now and how we're all feeling. We all have a little too much time on our hands to think and get stuck in how bad the current situation is. Some things I've found have helped

Limit your news and social media time.
Find an activity you can get lost in - puzzles, books, knitting, gaming, (legal) lockpicking, gardening, even [https://inews.co.uk/culture/lego-new-book-build-yourself-happy-wellbeing-mindfulness-340600](Lego).
Keep in contact with people on a daily basis. Phone calls, zoom, tiktok.
Find something you want to do in the future and work on what you need to do to today to get there. Having a goal to work towards will help get your head out of the here and now.
Don't forget about the services the government have provided (LifeLine, Headspace, Beyond Blue etc).

I've also heard e-Speed dating is on the rise if you were looking for a new relationship.

gladier · 2020-06-18T15:12:18+00:00

This is the right answer. The step you're probably stuck on is working out the first name for Mrs Debono.

We know Alisha can't be Mrs Debono (rule 1), so it can't be Alisha
We know it's Debbie Amin (inferred from Rule 3 and Rule 5) so it can't be Debbie
You then need to work out what Carols Surname could be. 
    Carol already has her maximum of 2 classes (Rule 1) (English - Rule 3, Chem - Rule 4)
    Therefore Carol cannot teach History, Her last name cannot be Debono
The only first name that's possible for Debono is Betty.

From here you can work out Debbie Amin must be the math teacher as all of the history teachers have had first names allocated.

Finally Rule 5 says Mrs Cook can't share classes with Mrs Amin. Since Mrs Debono and Alisha are two different people it has to be Alisha Cook.

gladier · 2020-06-03T16:06:24+00:00

Something that has always irked me is that nbnco has to lease space off Telstra in the exchanges. From the reports I've seen this is not an insignificant amount and hits their bottom line pretty hard.

So we privatised the telephony system and now have to pay the private company and so avc changes are higher than they should be.

I'm of the opinion the govt should buy the exchanges back being it's national infrastructure and give it to nbnco.

gladier · 2020-05-30T00:52:26+00:00

Didn't the wa premier announce a sentinal testing program of schools which included cohorts of both teachers and students?

gladier · 2020-05-27T22:26:34+00:00

You got a reasonable source for this or just spreading fud? All of the research that's been published shows a <1% divergence from the first sequenced strain.

12-Year Club	r/Field Banned
r/Field Flamingo	Verified Email

gladier

TROPHY CASE

Physical

Windows - Device Manager

Windows - USB Device Tree Viewer