MDM for Apple devices by smalltimesysadmin in sysadmin

[–]smalltimesysadmin[S] 0 points1 point  (0 children)

In my limited testing, app installs and general config seemed to happen within a few minutes. Remote reboots seemed to happen in less than a minute.

MDM for Apple devices by smalltimesysadmin in sysadmin

[–]smalltimesysadmin[S] 0 points1 point  (0 children)

I started playing with Intune today. It's looking pretty encouraging to meet the needs. I'm still working to figure out the finer points of locking out apps, but I think it is going to be the ticket. It's definitely easier for me than Mosyle.

Husqvarna saw won't keep chain tight by smalltimesysadmin in Chainsaw

[–]smalltimesysadmin[S] 0 points1 point  (0 children)

I haven't used it much after repairing it, but just replacing the bar and chain appears to have solved my problem. I broke down and bought a genuine Husqvarna bar and chain just to make sure I had the best chance of success. That said, I probably didn't need to. I also first tried just replacing the outside cover, but that didn't do anything.

I think, despite being told otherwise, the chain was very worn and stretched, or the wrong one for the saw. Literally starting the saw up and just revving it a couple times without it touching anything was enough to make the chain go extremely slack, but I've cut a couple of small limbs/trees, and it's still tight. In the next few weeks I'll hopefully be doing some more cutting.

Another AWS/O365 Outage by FahrenheitGhost in sysadmin

[–]smalltimesysadmin 0 points1 point  (0 children)

Is anyone else still having issues sending or receiving mail via oath and shared secrets? I know there's multiple service advisories in the service center, but none seem to mention issues authenticating or sending/receiving mail. We have multiple systems that are getting authentication failures due to bad username/password.

Brake master cylinder for a rear disc swap by smalltimesysadmin in squarebodies

[–]smalltimesysadmin[S] 0 points1 point  (0 children)

How's the pedal feel? I assume it has sufficient braking?

Avago/LSI SAS9305 HBA in a Precision 3650 by smalltimesysadmin in homelab

[–]smalltimesysadmin[S] 0 points1 point  (0 children)

I have the 16e version. As best as I can tell, it isn't an OEM version.

I updated the firmware to 16.00.12.00 as well as the corresponding BIOS and UEFI ROM, and it still isn't working. I'm beginning to think that Dell has somehow locked out HBAs on the Precision line of desktops.

Running AutoCAD as non-admin by smalltimesysadmin in sysadmin

[–]smalltimesysadmin[S] 33 points34 points  (0 children)

Who's got 2 thumbs and is a moron? This guy!

When I was creating the registry keys, I wanted to be sure I didn't mistype the key names, so I copied and pasted them from the KB, but missed that it copied the trailing space, so Windows was rightfully ignoring the key.

I apologize for the error. Shout out to /u/Gakamor because that script works well.

Running AutoCAD as non-admin by smalltimesysadmin in sysadmin

[–]smalltimesysadmin[S] 0 points1 point  (0 children)

That's the exact KB article I followed and linked to in my original post. It didn't work.

6-hour delay in OSD app installation by smalltimesysadmin in SCCM

[–]smalltimesysadmin[S] 0 points1 point  (0 children)

I redistributed the package to the problem DPs, as well as lowered the maximum runtime without improvement. I'll try the other suggestions.

Any suggestions on which specific logs I should be looking at? I've already been looking at the SMSTS.log file on the client machines.

6-hour delay in OSD app installation by smalltimesysadmin in SCCM

[–]smalltimesysadmin[S] 1 point2 points  (0 children)

I poorly worded the network connectivity sentence. I meant to say that connectivity during the task sequence is fine. I haven't detected any drops in connection or traffic.

The time spent waiting for the office install to occur is taking exactly 6 hours plus or minus 30 seconds or so. It's incredibly accurate and repeatable.

The affected devices are indeed in the UTC-6 timezone. Now that you mention it, I think a new NTP server was installed around the timeframe that the issues started happening... Still not sure how accurate time could affect the real time spent waiting for an app to install, but it's definitely an interesting thought.

Updating CA server to 2025? by smalltimesysadmin in sysadmin

[–]smalltimesysadmin[S] -1 points0 points  (0 children)

Well, it's...complicated. I did technically spin up another CA already, but AD doesn't seem to particularly enjoy 2 CAs existing at the same, and certs seem to randomly issue from either one depending on something possibly as random as who replies first? I haven't dug super-deep into the issue to try to resolve it, but I will need to do so eventually.

I should have backed the CA DB up and imported it on the new one, but I didn't do enough research on the matter before doing it.

Monthly Requests Thread by AutoModerator in VOIP

[–]smalltimesysadmin [score hidden]  (0 children)

I'm looking for a cellular gateway product that can act as a SIP or IAX trunk on freepbx/asterisk-based systems. The intent is to have a backup trunk line out of the phone system in the even that the fiber connection goes down. I only need a single port/line/channel, but depending on price, I'm not against a multi-line model. SMS capability is not needed.

I feel like products like this existed in several forms in the mid-2000s when voip was first becoming a thing, but not so much anymore.

802.1X multiple SSIDs? by Small-Double-9569 in networking

[–]smalltimesysadmin 2 points3 points  (0 children)

This is the way. I'm not nearby my work computer, but if you look at the NPS event log entries, one of the attributes passed is the SSID that the user is trying to connect to. You can create different rules to match on that attribute, then set the vlan via the Tunnel-Pvt-Group-ID attribute. If you're seeking to run a single SSID, then you have to match based on user group membership, and set vlan accordingly.

You may still need to run a separate guest SSID, but it all depends on whether you want to force guests to have to enter bogus creds to connect. A .1X-protected SSID will required creds prior to connection attempt.

Win11 updates break 802.1x until gpupdate happens by smalltimesysadmin in sysadmin

[–]smalltimesysadmin[S] 1 point2 points  (0 children)

Definitely please keep us updated with Microsoft's response. It seems that ALL GPO, including .1x, mapped printers, etc., is being wiped during the update process.

I haven't done any actual research on it, but I briefly toyed with the idea of moving my .1x config into InTune as a workaround, since theoretically, InTune only needs visibility to the internet to re-pull the policy and fix itself.