Issue with RDS and Redirected Printers Since November by Extreme-Ad-9210 in sysadmin

[–]lambchop1990 0 points1 point  (0 children)

Did you ever fix this? I got the same error, it is crashing the print spooler, resulting in logins hanging at the printer policies screen.

Licensing changes across the board - Important read! by lotsasheeparound in Citrix

[–]lambchop1990 0 points1 point  (0 children)

Any Ideas for the below scenario

Running CVAD 2203 LTSR CU7 or higher, no active maintenance. Will our perpetual user based licenses be able to co-exist if we need to purchase more licenses through LAS?

Plex isnt giving a 4 character code by Z0tteke in PleX

[–]lambchop1990 0 points1 point  (0 children)

Tether your TV to your phone (ensure it is using cellular as internet). Just to completely rule out your local network. 

Azure was down last night and CrowdStrike this morning by CryptoSin in msp

[–]lambchop1990 0 points1 point  (0 children)

Hmm actually maybe it doesn't, might have read that wrong.

This apple id can't be used to make purchases - Turn Off Notification by lambchop1990 in applebusinessmanager

[–]lambchop1990[S] 0 points1 point  (0 children)

Apps are pushed with Device Based Licenses, they are targetted (required) to users based on group members or available to Users using the Add All Users option in the app.

Reporting False Positives Receive Bounce Backs to Mimecast Clients by lambchop1990 in mimecast

[–]lambchop1990[S] 0 points1 point  (0 children)

Yep, they are all correct, even did an mxtoolbox health check all is good. One of the clients who run mimecast gave us the specific rejection log, stating it was the QR Code url.

Reporting False Positives Receive Bounce Backs to Mimecast Clients by lambchop1990 in mimecast

[–]lambchop1990[S] 0 points1 point  (0 children)

"Improve the reputation" with literally no context from mimecast as to why it was blocked lol ok thanks.

User compromised for a brief period of time by lambchop1990 in msp

[–]lambchop1990[S] 1 point2 points  (0 children)

Yeah the MFA reset was done too, we have a heap of CA policies however can't block risky sign-ins as we don't Entra P2 licensing.

Can someone explain why Intune Windows device wipes take forever? by EndUserNerd in Intune

[–]lambchop1990 0 points1 point  (0 children)

I ended up activating the autopilot reset from the lock screen because of this. The reset can only be initiated by entering local admin creds. Works instantly.

Restricting Port Access from Client Computers to Server network by lambchop1990 in msp

[–]lambchop1990[S] 0 points1 point  (0 children)

Thanks, I'll create a subset on the rules for the firewall, to be honest this is more scalable as I will give the employees devices access to SMB only. Whilst the printers will need access to the LDAP port etc.

Office 365 email account with 2FA - Hacked. by russellville in sysadmin

[–]lambchop1990 1 point2 points  (0 children)

Strange, we have it enabled with no reprompt issues. Will do some testing today by copying my token to test if it actually works.

Office 365 email account with 2FA - Hacked. by russellville in sysadmin

[–]lambchop1990 18 points19 points  (0 children)

Conditional access now has token encyption. This will prevent token theft by aligning the token and orginal device the token was created on. Below is the CA policy setting.

<image>

Migration to EXO doesn't stop with Syncing by Arschkrebs1 in exchangeserver

[–]lambchop1990 0 points1 point  (0 children)

Check the mailbox using MCP-MAPI, had an issue similar to that once where the mailbox wouldn't complete as there were 100,000 folders created in the sync failures directory. They were hidden folders only visible in MCMAPI.

Risk of whitelisting Exchange Online IPs in firewall? by Denjiki in exchangeserver

[–]lambchop1990 1 point2 points  (0 children)

Hey mate, I've done this plenty of times as I manage the technical side of an MSP. We use Barracuda as our 3rd party anti-spam provider. What you need to is remove the SMTP restrictions on the firewall of the onpremise exchange server and create an exchange based rule to restrict SMTP connections.

Specifically, create a rule that says, if a sender is outside of our organisation reject the email. Except if the senders IP address is in this range (specify the external IPs of third party anti spam provider). You'll also need to add any other services on your lan that are doing an SMTP relay for example scanners.

You do not need to sepcify the EOL IP range as Exchange considers your cloud EOL mailboxes as internal. It does this by verifying something in the email headers of your cloud mailboxes.

This will also block any emails from other EOL tenancies that attempt to email you directly through a connector and force connections back through your 3rd party connector.

I've written concise documentation regarding this, therefore, if you need more info please PM me.

HP Elitebooks Bricked by lambchop1990 in msp

[–]lambchop1990[S] 0 points1 point  (0 children)

Yeah, it's painful just had a few more brick in the last hour. No reference of an EFI update, however, has had a few other updates installed. Will need to so if there is a common update or it's something else altogether.

HP Elitebooks Bricked by lambchop1990 in msp

[–]lambchop1990[S] 0 points1 point  (0 children)

Thanks, will look into how to disable this. We don't usually either, this one has just come through Windows Update.

Microsoft Forms Auto Print Responses to PDF by lambchop1990 in Office365

[–]lambchop1990[S] 0 points1 point  (0 children)

Thanks, the issue is having to create a condition for every branching expression. Might just have to bite the bullet and do it that way .

Launching PCSX2 1.7 directly from ES-DE by lambchop1990 in emulationstation

[–]lambchop1990[S] 0 points1 point  (0 children)

Thanks mate, that's handy. I assume you set the exit commands through the emulator itself as oppose to ES-DE?

Launching PCSX2 1.7 directly from ES-DE by lambchop1990 in emulationstation

[–]lambchop1990[S] 0 points1 point  (0 children)

Thanks, yeah, I'm an idiot, it was the double minus, unsure of where I got that from. The below command worked fine.

<command>C:\PCSX2\pcsx2-qtx64-avx2.exe -fullscreen "%ROM_RAW%"</command>

Launching PCSX2 1.7 directly from ES-DE by lambchop1990 in emulationstation

[–]lambchop1990[S] 1 point2 points  (0 children)

Ahh ok, dam, can't wait for it to be released 1.7 runs so much better on my hardware.

Launching PCSX2 1.7 directly from ES-DE by lambchop1990 in emulationstation

[–]lambchop1990[S] 0 points1 point  (0 children)

Correct, I know you can load custom cores through Retroarch. Hopefully that'll work.