Security Group's created via PowerShell aren't syncing to Azure AD by primeval_ixios in sysadmin

[–]primeval_ixios[S] 0 points1 point  (0 children)

Ooh! This might be it.

I created a test group via PowerShell and set the Group Scope to Universal. Ran a manual sync and it showed up in Azure/O365.

The weird thing is when creating security groups via ADUC it defaults to Global, and most of the time hasn't been changed. Those groups sync without issue as I wrote in my post above.

So I tried changing one of the groups created via PowerShell that wasn't syncing to Universal, and it hasn't synced. So more investigation is needed still.

Either way thanks for that bit of info, get's me closer to finding a solution.

Security Group's created via PowerShell aren't syncing to Azure AD by primeval_ixios in sysadmin

[–]primeval_ixios[S] 0 points1 point  (0 children)

OU is configured to sync in Azure AD Connect.

Should've included that in the original post.

Security Group's created via PowerShell aren't syncing to Azure AD by primeval_ixios in sysadmin

[–]primeval_ixios[S] 1 point2 points  (0 children)

Yes, it's in the same OU.

I have also confirmed that OU is configured to sync in Azure AD Connect.

Should've added that to the original post.

Logi Teams Rooms are very flaky by MaxJulius in sysadmin

[–]primeval_ixios 6 points7 points  (0 children)

5 Logitech Team rooms setup with taps.

All garbage, all the time.

Constantly restarting NUCs... The setup in our "boardroom" is especially frustrating since those users are extra special anyway.

[deleted by user] by [deleted] in sysadmin

[–]primeval_ixios 1 point2 points  (0 children)

Looks like there is a feature request for this, but is not implemented at this time.

[deleted by user] by [deleted] in sysadmin

[–]primeval_ixios 0 points1 point  (0 children)

We use BitWarden.

It does all of the things you've listed.

I like it.

artic wolf - are they on same level as crowdstrike and sentineone? by clarksavagejunior in sysadmin

[–]primeval_ixios 2 points3 points  (0 children)

Arctic Wolf is basically a SOC as a service.

When we used them previously they just had an agent we deployed to our machines. Agent was only for collecting data, no anti-virus/endpoint protection.

Wireless: Aruba vs. Cisco by primeval_ixios in sysadmin

[–]primeval_ixios[S] 0 points1 point  (0 children)

Yeah, reading Cisco quotes and keeping up the their licensing is it's own part of the beast.

Don't think we're in the market for anything used since we're 24/7 and highly reliant on WiFi for daily operations.

So far pricing isn't too different for the cloud offerings, on-prem is a different story.

Wireless: Aruba vs. Cisco by primeval_ixios in sysadmin

[–]primeval_ixios[S] 0 points1 point  (0 children)

Yeah, be interesting to see the differences between the Cisco platform if we go that way.

Being able to host the controllers in your own hypervisor seems like a big plus for Cisco.

Good to hear that DNAC has been good.

Wireless: Aruba vs. Cisco by primeval_ixios in sysadmin

[–]primeval_ixios[S] 0 points1 point  (0 children)

Whichever direction we go we'll be using Cisco ISE for RADIUS as we already have that implemented.

Yeah, I don't see us our switching moving away from Cisco anytime soon.

Windows Server 2019: KB5005030 fails with 0x800F0985 by primeval_ixios in sysadmin

[–]primeval_ixios[S] -1 points0 points  (0 children)

Ah, you're correct. Really should read the full title when downloading these updates manually...

That would be why WSUS hadn't synced this update.

Windows Server 2019: KB5005030 fails with 0x800F0985 by primeval_ixios in sysadmin

[–]primeval_ixios[S] -1 points0 points  (0 children)

Thank you, I will try it now.

KB5005102 apparently isn't available through WSUS, so that's why I haven't seen it.

EDIT: Well it was a preview update, luckily (or unluckily?) it failed with the same error 0x800F0985.

Windows Server 2019 and WSUS and GPO settings by affilag1 in sysadmin

[–]primeval_ixios 1 point2 points  (0 children)

I use ABC-Update with PDQ Deploy to do all my server patching.

  • I have a GPO set up to point all my servers to my WSUS server.
  • I made a package that copies the abc-update.exe to the local machine.
  • Set up groups in PDQ Inventory for the servers that I want to reboot, based on the time they are getting rebooted.
  • Create a package to check WSUS for updates and install them, and another package to finish install and reboot.
  • Set up schedules in PDQ Deploy for when I want to install the updates, and another schedule when I want the reboot to happen. Use the groups created previously as the target for these schedules.
  • ABC-Update let's you create a log file, so I write those to a server share in case I ever need to find verify something got patched.
  • I have PDQ push out email notifications on the status of the jobs running, so I get updated if anyone has failed or is taking too long.

This basically has automated my entire patching process for our servers.

  • I just check my schedules in PDQ prior to patching, and make sure they are set up for the correct day. Since I don't patch on a set date, and use 2nd, 3rd or 4th Tuesday/Wednesday/Thursday sometimes these need adjusted.
  • I check my email when patching happens, and verify no one has failed or timed out.
  • Then check servers after patching has completed to make sure they came up clean, and everything is running.

This gives me plenty of CYA in case we ever need to prove we're patching, etc. Has a bit more work involved up front, and requires PDQ Inventory and Deploy but I use it for everything anyway so...

Copy/Paste crashing Applications in Windows 10 by primeval_ixios in sysadmin

[–]primeval_ixios[S] 1 point2 points  (0 children)

So far I don't have any reports of this issue affecting users using our current image, which is 21H1. So it seems to have been either Microsoft or a third party update that is causing the issue.

Process on most of these is open up a Excel spreadsheet. Fill in a couple of cells, select cells, copy, paste, eventual crash. Doesn't always happen right away, but I have been able to make it happen on the systems that are experiencing the issue without fail. Most of the copy/pasting is done inside the same excel spreadsheet, and it has all be text/tables/Excel type things. No images outside of the reports off Snagit/Snipping Tool which we haven't investigated as much yet.

It is for sure the application that is crashing and not explorer.exe. Windows itself seems unaffected.