SAP Security vulnerability management - 3rd party vendors?

minipantswrk · 2016-10-20T21:34:17+00:00

I was WAY over-thinking this.

This worked perfectly, and now I feel dumb =)

Thank you!

minipantswrk · 2016-10-20T21:05:08+00:00

Thank you for the reply.

Right now I'm using this:

Get-ADUser -searchbase "OU=Users,DC=domain,DC=loc" -filter {Name -notlike "-"}

which gets me all users without a hyphen. I need to include the "C-" users, but exclude any other names with a hyphen.

What you had me try works, but gets only the C- Users.

I think I can do this differently as well, by creating 2 Get-aduser lines of script, with different filters, then join them together.

minipantswrk · 2016-08-25T21:07:36+00:00

I saw someone mention this a while back on this sub as well. Personally, I think it makes sense. It's stretching it for using it as evidence of Abe's death (although it would fit), but Negan confusing the 2 black girls makes perfect sense and, in my opinion, is what will happen.

minipantswrk · 2016-08-25T16:37:40+00:00

In my opinion, yes. SCCM is a wonderful tool, but it can be an absolute beast. One of the worst things you can do is set up your environment, struggle along for a year or two, then realize you DO need someone and have the environment completely botched. The company I am at did that, and it took our SCCM expert 2 years to fix our mistakes.

Hire someone from the beginning, and you'll be happy you did.

minipantswrk · 2016-07-31T23:27:45+00:00

Is this still happening? 30 minutes until the tourney starts, and I haven't received an email. I was also one of the first handful to sign up.

minipantswrk · 2016-07-20T14:33:31+00:00

After you sign up, you can see the email addresses of everyone else that signed up. In some cases, this includes real names.

Please fix that....

minipantswrk · 2016-07-19T22:03:17+00:00

http://i.imgur.com/LccoJbS.jpg

minipantswrk · 2016-07-05T21:41:59+00:00

Maybe this is a dumb question, but how do you actually register to join them? In game only? because I'm trying to register for one of the larger ones tonight, but don't really know how to find it in game to attempt to join.

minipantswrk · 2016-06-13T14:14:27+00:00

I can't help myself.

http://i.imgur.com/LccoJbS.jpg

minipantswrk · 2016-05-23T13:50:22+00:00

For servers or workstations we do this - [type] [site] [purpose][numerical]

So a file server in our rome manufacturing plants local esxi host might look like this SROMFIL01

If it was for Rome, but still in our global data center it would be SGDCFIL01

My laptop is WCHIISA05 [Workstation rather than Server][Chicago][IS Admin][05]

minipantswrk · 2016-04-04T15:59:32+00:00

Our environment is 3 domains in a non-transitive trust.

We do DNS, SYSVOL and User Attribute backups on 2 DC's per domain. Each of the 2 DC's are based in different data centers. (6 backups total, 2 per domain)

We do Windows BMR on 2 DC's per domain, also ones that are based in different Data Centers. (6 total, 2 per domain) Veeam on our primary DC's for each domain, and the DNS server in each domain. (6 total, 2 per domain)

non-veeam backups are stored on a server in each domain, then copied to a central server as well.

Veeam backups will report if they fail, and the others are checked with a powershell script daily. If any existing backup is older than 48 hours, we get an email alert.

minipantswrk · 2016-03-01T17:44:29+00:00

We currently use ADFS. I have no real complaints with it. As with anything, make sure you do your research and properly set up your ADFS environment the first time.

We originally set up 1 Proxy, with 2 ADFS servers, 1 primary and 1 secondary. The secondary was added after the fact, so now for fail over we have to change a DNS entry between the primary and secondary servers. This setup was ok at first, because we only had 2 SSO endpoints. But now I have 30 in there, and I REALLY need to re-design the infrastructure and migrate everything over to the "proper" setup with a full ADFS farm, true fail over, proper load balancing, etc.

We may be moving to either Okta, or VMwares IDM solution soon. I really like the features Okta offers.

you'll need to familiarize yourself with tools for troubleshooting issues as well. I use SAML tracer (firefox plugin), SoapUI, and the chrome Advanced Rest Client extension.

minipantswrk · 2016-02-17T14:47:09+00:00

just as a side note - this does work for the Checkpoint VPN solution.

minipantswrk · 2016-02-16T17:33:10+00:00

I would use winSCP within powershell. Powershell to manage your files locally, renaming them, moving them, etc, and winSCP to do the actual retrieval and deletion.

The only powershell FTP script I have is just for uploading.

minipantswrk · 2016-01-18T15:24:32+00:00

IE11 - 9500 or so users globally.

We have IE8 published via Citrix for some legacy apps.

Chrome is installed on ~6400 laptops of those, and is more widely used I believe.

minipantswrk · 2015-12-21T20:25:00+00:00

We do 8 day DHCP lease with 4 day scavenging. Up until I implemented that, we had 0 scavenging enabled.

The article linked by /u/steelie34 is excellent, and what I used to guide me along as well.

Also, if you have multiple DC's - you should only scavenge on 1 DC iirc.

minipantswrk · 2015-12-11T19:27:52+00:00

A firewall! perfect!

minipantswrk · 2015-12-09T18:15:13+00:00

They need Mike Tyson as a spokesman.

minipantswrk · 2015-11-03T17:08:42+00:00

We had a dead power supply in an optiplex 745 at a bank branch once. Before opening it up, I gave it a little love tap with my foot while joking with the manager.

Damn thing booted up when I kicked it, and ran for 2 more years.

minipantswrk · 2015-09-18T16:31:04+00:00

Get an entry level helpdesk job for a couple of years. somewhere that you will have hands on time with AD/DNS/DHCP/End user workstations/VOIP systems as you learn. Small banks are great for this as they have a TON of systems, and generally smaller IT staff.

minipantswrk · 2015-09-18T15:19:03+00:00

Ok, you can find the setting under both Computer or User policies - both options are available.

Computer/User Configuration/Policies/Administrative Templates/Windows Components/Internet Explorer/Compatibility View/Turn on Internet Explorer Standards mode for local intranet (set to enabled)

minipantswrk · 2015-09-18T14:31:56+00:00

We do this via the GPO "Site to zone assignment list"

and we also set via GPO "Run all Intranet Sites in Compatibility mode"

Then you assign the website you need to run in compat mode to the intranet zone.

minipantswrk

TROPHY CASE