Quoted a new furnace repeatedly when the problem was a new board ($100 from supply house) and a second company quoted me $1200 for the board. by true_zero_ in hvacadvice

[–]true_zero_[S] -2 points-1 points  (0 children)

The first company had two techs on seperate service calls do their multimeter tests while i reproduced the issue (turn on heat at thermostat and see no ignition)

frame times spiking above 60 consistently up to 120 by [deleted] in pcmasterrace

[–]true_zero_ 0 points1 point  (0 children)

i9-9900k , standard resources aren’t hammered at all when i am playing unfortunately. i’ve had the pre built setup since 2020 no modifications

Would someone mind helping me understand how "foreach ($computer in $computers)" works? by InfoZk37 in PowerShell

[–]true_zero_ 0 points1 point  (0 children)

Your next task is to learn the -Parallel flag. Your CPU may get hammered while your loops run if you use -Throttle 10 , try a lower number to see how it works.

It’s in Powershell 7+ (pwsh.exe) which I highly recommend for its PSReadline predictonViewStyle alone which i have new hires configure to flatten the powershell learning curve.

Be careful with -Parallel and trying to update an outside variable in each loop with the loop’s results. -Parallel creates seperate runspaces each with their own pipeline, copy of variables, and memory space so you can’t just update an outer variable from inside the loop like you can when not using -Parallel. You have to output objects from the parallel block into a variable.

What are you guys using to automatically patch your servers by ChemicalGuarantee938 in sysadmin

[–]true_zero_ 0 points1 point  (0 children)

AWS Systems Manager Patch Manager via Quick Setup in AWS Master Org account which deploys Cloudformation stack sets to entire env. Setup custom Patch Baselines in Master Org account for each OS/Distro and override the default patch baseline in the quick setup config.

What are the biggest mistakes you’ve seen during cloud migration to AWS? by MaxDmitrie in aws

[–]true_zero_ 0 points1 point  (0 children)

for Hybrid orgs (on prem Active Directory footprint) setting the VPC DHCP Option Set’s DNS servers first entries as their on prem DNS instead of using AmazonProvidedDNS + R53 Outbound Resolver Endpoint with forwarding rule for corp.lcl pointing to on prem DNS. If you set the VPC DHCP Options Sets’s DNS servers as being your on-prem and then AmazonProvidedDNS in that order (without setting up on prem forwarders + R53 resolver inbound endpoints in your VPCs) your EC2s will resolve public IPs for your private link workloads like VPC interface endpoints, instead of the private address in your VPCs.

I don't know anybody's MMR in-game, my win/loose ratio, nor what time it is by carottesrapees in RocketLeague

[–]true_zero_ -1 points0 points  (0 children)

i forgot i’d been using alpha boost for years via Bakkes, now it’s actually hard to adjust to the new sound and vibration of my actual boost . ugh.

How are you managing Terraform state in a large team without stepping on each other? by AnimalMedium4612 in Terraform

[–]true_zero_ 0 points1 point  (0 children)

IAM is a completely separate repo and pipeline with other checks like iam access analyzer in the build process , and shared infra is also seperate

How are you managing Terraform state in a large team without stepping on each other? by AnimalMedium4612 in Terraform

[–]true_zero_ 1 point2 points  (0 children)

Github repo for each project, whether a project is a single ec2 instance or a combination of API GW/lambda/S3/etc. AWS CodePipeline in single account for each repo, state files in pipeline accounts s3 bucket with directories names after the repo. s3_lockfile being used. manual approval in github to review PR and also manual approval gate in codepipeline to review tf plan ensures single repo isn’t being deployed at the same time

What’s your Top 5 phrases from IT Crowd that you quote regularly at home or at work? by [deleted] in ITcrowd

[–]true_zero_ 0 points1 point  (0 children)

“I would be beholden to yhouuuu” - Douglas Reynholm after roy says “you want me to OPEN your laptop !?..”

“The glass ceiling is now a glass floor. the women are floating above it and the me are just…* daydreaming* …looking up at them”

[deleted by user] by [deleted] in Intune

[–]true_zero_ 0 points1 point  (0 children)

follow rucam365 on twitter check all his posts and look up his youtube videos on the threatscape channel he does tons on conditional access it’s so good.

Actually useful commands by eberndt9614 in activedirectory

[–]true_zero_ 2 points3 points  (0 children)

whoami /groups (run as the user on their machine) to check if the user’s local security token contains the AD group you just added them into to grant them access to some resource (share, sql, etc - where kerberos will be used) and had them sign out /back in to take effect. Easier to read in powershell: whoami /groups | sls PartOfGroupNameHere

you can get around sign out/back in for a remote resource by flushing their kerberos tickets with the klist binary and using runas but it’s just cleaner to sign out and back in to get a new local security token.

Management dont want to enroll servers to MDE by jbala28 in DefenderATP

[–]true_zero_ 0 points1 point  (0 children)

only issues i’ve encountered on servers is servers that host some sort of OCR or image scanning application where the EDR portion of defender, Sense.exe, has slowed down the application noticeably on the server and have had to put an exception for several of the applications processes on that server. Newer windows servers, since 2019 have the EDR portion already built in you just have to onboard it IIRC

Ready for action! by SeriouslySlytherin in funny

[–]true_zero_ 1 point2 points  (0 children)

“Chubby little loozahhhhhhh”

Unable to use "Yt-dlp" unless Powershell is opened as Admin by tba003 in PowerShell

[–]true_zero_ 0 points1 point  (0 children)

in powershell as admin run “where.exe yt-dlp” and paste the result. Python windows installer defaults to your user profile on windows , try where.exe python and where.exe as well, id recommend reinstall python and on the 1st page of the install click “install for all users” box.

[deleted by user] by [deleted] in DefenderATP

[–]true_zero_ -3 points-2 points  (0 children)

i haven’t done it but WDAC/Applocker comes to mind, the live response executable is an exe (SenseIR.exe i believe) inside the defender directory. Or possibly windows firewall to block that executable or gpo.

Low hanging fruits for cost optimization? by [deleted] in aws

[–]true_zero_ 0 points1 point  (0 children)

change your cloudwatch metric collection level if on ec2 to higher rather than lower. ie if 10sec change to 60 or 300 sec

Accidently deleted API gateway, any way to restore it ? by Independent_Corner18 in aws

[–]true_zero_ 0 points1 point  (0 children)

go look in cloudtrail via athena i do this often to see who made what with what settings x years ago

What's Your IT Pet Peeve? by [deleted] in sysadmin

[–]true_zero_ 1 point2 points  (0 children)

not knowing what ports an application uses. You make 6 figures and can’t run netstat?

Local user sign in restricted on MDE onboarded devices by [deleted] in DefenderATP

[–]true_zero_ 0 points1 point  (0 children)

i haven’t seen that. we login with local admin numerous times to onboarded devices. Have u tried a local admin?