What Are You Doing Right Now
-
Wondering if I should feel bad for breaking 'security' policy to build the tool I need for Windows AutoPilot...
Mhmmmm.. Nah - not(pause)one(pause)bit.
ETA: I am following this link: Create a bootlable Win10 AutoPilot Device with Powershell
-
Trying to figure out how to deal with my Github - meaning - organization of files and such... at least one is up finally..
-
At the tone, it's to dang early Eastern Time and it's working.
(Ding)
Youtube Videos are playing, and I can get to a ManageEngine site I couldn't get to yesterday. I see I have different Certs for both pages. so - something during the day is getting pushed jacking things up and making it so that things don't work. But - I'm connected to a dock and thus not moving or changing IPs.
-
Just realized what time it is, was about to research "Twitch and YouTube live gaming streaming" ...But time to finish woop, off to move from PC onto Sofa on the other side of the room
-
End of year PTO for me. Rethinking home office layout as 2022 we will be shifting gears and i will need some bench space for working on Autopilot deployment. Our E5 licenses were approved so major security overhaul next year
-
@jt1001001 said in What Are You Doing Right Now:
End of year PTO for me. Rethinking home office layout as 2022 we will be shifting gears and i will need some bench space for working on Autopilot deployment. Our E5 licenses were approved so major security overhaul next year
Nice - We just migrated to M365 Business Premium which includes a lot of those E5 features for enterprises.
So I'm in the same boat as you - time to up our game. -
@jt1001001 said in What Are You Doing Right Now:
End of year PTO for me. Rethinking home office layout as 2022 we will be shifting gears and i will need some bench space for working on Autopilot deployment. Our E5 licenses were approved so major security overhaul next year
Autopilot - been trying to sort out a USB option to run the hardware ID… not had any success… not totall happy with the process yet.
-
@gjacobse saw your earlier post will be looking into that
-
@jt1001001 said in What Are You Doing Right Now:
@gjacobse saw your earlier post will be looking into that
Happy to share what I have learned,… and learn if there is a better way.
-
@gjacobse said in What Are You Doing Right Now:
@jt1001001 said in What Are You Doing Right Now:
End of year PTO for me. Rethinking home office layout as 2022 we will be shifting gears and i will need some bench space for working on Autopilot deployment. Our E5 licenses were approved so major security overhaul next year
Autopilot - been trying to sort out a USB option to run the hardware ID… not had any success… not totall happy with the process yet.
Why not use the popular PS module? It'll grab the hash and register it in Autopilot.
Otherwise, I have a script I made somewhere made to be ran from USB that will take the hash, send it to an Azure Storage Table to await processing by an Azure Function that registers it into autopilot if you're looking for a fully automated solution other than running the script itself.
-
@obsolesce said in What Are You Doing Right Now:
@gjacobse said in What Are You Doing Right Now:
@jt1001001 said in What Are You Doing Right Now:
End of year PTO for me. Rethinking home office layout as 2022 we will be shifting gears and i will need some bench space for working on Autopilot deployment. Our E5 licenses were approved so major security overhaul next year
Autopilot - been trying to sort out a USB option to run the hardware ID… not had any success… not totall happy with the process yet.
Why not use the popular PS module? It'll grab the hash and register it in Autopilot.
Otherwise, I have a script I made somewhere made to be ran from USB that will take the hash, send it to an Azure Storage Table to await processing by an Azure Function that registers it into autopilot if you're looking for a fully automated solution other than running the script itself.
We have this wonderful security policy- we turn off powershell scripting- i have to got through a very manual process…
I found a set up, which I think I linked previous- that didn’t work… but it is possible I missed something on it. I’ll have to see if I can spin up my laptop here at the hotel and read back my comments to verify…
With scripting turned off- and literally Policed by systems being scanned a third party for script, it’s a bit frustrating.
-
@gjacobse said in What Are You Doing Right Now:
@obsolesce said in What Are You Doing Right Now:
@gjacobse said in What Are You Doing Right Now:
@jt1001001 said in What Are You Doing Right Now:
End of year PTO for me. Rethinking home office layout as 2022 we will be shifting gears and i will need some bench space for working on Autopilot deployment. Our E5 licenses were approved so major security overhaul next year
Autopilot - been trying to sort out a USB option to run the hardware ID… not had any success… not totall happy with the process yet.
Why not use the popular PS module? It'll grab the hash and register it in Autopilot.
Otherwise, I have a script I made somewhere made to be ran from USB that will take the hash, send it to an Azure Storage Table to await processing by an Azure Function that registers it into autopilot if you're looking for a fully automated solution other than running the script itself.
We have this wonderful security policy- we turn off powershell scripting- i have to got through a very manual process…
I found a set up, which I think I linked previous- that didn’t work… but it is possible I missed something on it. I’ll have to see if I can spin up my laptop here at the hotel and read back my comments to verify…
With scripting turned off- and literally Policed by systems being scanned a third party for script, it’s a bit frustrating.
Sadly - it seems like your job is basically to be shadow IT inside your own IT department.
You want to do things efficiently, but the powers that be don't see the value in that - for you, perhaps it really is time to move on.
-
@obsolesce said in What Are You Doing Right Now:
@gjacobse said in What Are You Doing Right Now:
@jt1001001 said in What Are You Doing Right Now:
End of year PTO for me. Rethinking home office layout as 2022 we will be shifting gears and i will need some bench space for working on Autopilot deployment. Our E5 licenses were approved so major security overhaul next year
Autopilot - been trying to sort out a USB option to run the hardware ID… not had any success… not totall happy with the process yet.
Why not use the popular PS module? It'll grab the hash and register it in Autopilot.
Otherwise, I have a script I made somewhere made to be ran from USB that will take the hash, send it to an Azure Storage Table to await processing by an Azure Function that registers it into autopilot if you're looking for a fully automated solution other than running the script itself.
Do you have or have you linked to the script? Just curious if I have missed it here. I am curious to compare / test it.
-
@gjacobse said in What Are You Doing Right Now:
@obsolesce said in What Are You Doing Right Now:
@gjacobse said in What Are You Doing Right Now:
@jt1001001 said in What Are You Doing Right Now:
End of year PTO for me. Rethinking home office layout as 2022 we will be shifting gears and i will need some bench space for working on Autopilot deployment. Our E5 licenses were approved so major security overhaul next year
Autopilot - been trying to sort out a USB option to run the hardware ID… not had any success… not totall happy with the process yet.
Why not use the popular PS module? It'll grab the hash and register it in Autopilot.
Otherwise, I have a script I made somewhere made to be ran from USB that will take the hash, send it to an Azure Storage Table to await processing by an Azure Function that registers it into autopilot if you're looking for a fully automated solution other than running the script itself.
We have this wonderful security policy- we turn off powershell scripting- i have to got through a very manual process…
I found a set up, which I think I linked previous- that didn’t work… but it is possible I missed something on it. I’ll have to see if I can spin up my laptop here at the hotel and read back my comments to verify…
With scripting turned off- and literally Policed by systems being scanned a third party for script, it’s a bit frustrating.
Then the only thing to do is to reimage every device using an ISO or image with the Autopilot profile baked in. Make sure the Autopilot profile is set to register devices in Autopilot. If they want bullshit policies that actually decrease security, then it's going to get inconvenient for everyone.
-
@obsolesce said in What Are You Doing Right Now:
@gjacobse said in What Are You Doing Right Now:
@obsolesce said in What Are You Doing Right Now:
@gjacobse said in What Are You Doing Right Now:
@jt1001001 said in What Are You Doing Right Now:
End of year PTO for me. Rethinking home office layout as 2022 we will be shifting gears and i will need some bench space for working on Autopilot deployment. Our E5 licenses were approved so major security overhaul next year
Autopilot - been trying to sort out a USB option to run the hardware ID… not had any success… not totall happy with the process yet.
Why not use the popular PS module? It'll grab the hash and register it in Autopilot.
Otherwise, I have a script I made somewhere made to be ran from USB that will take the hash, send it to an Azure Storage Table to await processing by an Azure Function that registers it into autopilot if you're looking for a fully automated solution other than running the script itself.
We have this wonderful security policy- we turn off powershell scripting- i have to got through a very manual process…
I found a set up, which I think I linked previous- that didn’t work… but it is possible I missed something on it. I’ll have to see if I can spin up my laptop here at the hotel and read back my comments to verify…
With scripting turned off- and literally Policed by systems being scanned a third party for script, it’s a bit frustrating.
Then the only thing to do is to reimage every device using an ISO or image with the Autopilot profile baked in. Make sure the Autopilot profile is set to register devices in Autopilot. If they want bullshit policies that actually decrease security, then it's going to get inconvenient for everyone.
That’s an interesting option. Might you have details on that?
-
@gjacobse said in What Are You Doing Right Now:
@obsolesce said in What Are You Doing Right Now:
@gjacobse said in What Are You Doing Right Now:
@obsolesce said in What Are You Doing Right Now:
@gjacobse said in What Are You Doing Right Now:
@jt1001001 said in What Are You Doing Right Now:
End of year PTO for me. Rethinking home office layout as 2022 we will be shifting gears and i will need some bench space for working on Autopilot deployment. Our E5 licenses were approved so major security overhaul next year
Autopilot - been trying to sort out a USB option to run the hardware ID… not had any success… not totall happy with the process yet.
Why not use the popular PS module? It'll grab the hash and register it in Autopilot.
Otherwise, I have a script I made somewhere made to be ran from USB that will take the hash, send it to an Azure Storage Table to await processing by an Azure Function that registers it into autopilot if you're looking for a fully automated solution other than running the script itself.
We have this wonderful security policy- we turn off powershell scripting- i have to got through a very manual process…
I found a set up, which I think I linked previous- that didn’t work… but it is possible I missed something on it. I’ll have to see if I can spin up my laptop here at the hotel and read back my comments to verify…
With scripting turned off- and literally Policed by systems being scanned a third party for script, it’s a bit frustrating.
Then the only thing to do is to reimage every device using an ISO or image with the Autopilot profile baked in. Make sure the Autopilot profile is set to register devices in Autopilot. If they want bullshit policies that actually decrease security, then it's going to get inconvenient for everyone.
That’s an interesting option. Might you have details on that?
It looks like that PowerShell module you were looking into not so long ago may work. I did it manually instead of using that, I forget now why I decided to do it that way, maybe it was cleaner I forget. But essentially all you need to do is create an Windows installer ISO of an up to date Win10/11 install with the Autopilot profile xml in a specific Windows folder.
I'd share the ones I made but they are Win10/11 enterprise with activation and autopilot profile baked in. I can share the procedure I created though, but won't get a chance until later today or tomorrow... if that PS module method is of no interest to you.
-
Finally a clear night, but late and cold outside (8c), no prep done. So I'm sitting inside with the telescope pointing out the window, tracking a binary star (Alpheratz) I can see with the Fuji camera attached.
The tracking is a little bit off because I'm very limited to the stars I could use for the auto 2 star alignment. I also can't get great focus going through glass, but when I open the door for a sec, it's good then. No big deal, other than that it's working perfectly in KStars / Ekos on the R-Pi!
-
Happy New Year -
Yes, I am interested in your procedure when you get time. Looks like we are using Windows Business - but I don't expect the procedure building being different.I'm also curious how you built the ISO with XML profile.
TIA
-
@gjacobse said in What Are You Doing Right Now:
Happy New Year -
Yes, I am interested in your procedure when you get time. Looks like we are using Windows Business - but I don't expect the procedure building being different.I'm also curious how you built the ISO with XML profile.
TIA
You can inject an XML into the ISO before you burn it - use it...
or if using USB media - it's just another file on the stick. -
@dashrender said in What Are You Doing Right Now:
@gjacobse said in What Are You Doing Right Now:
Happy New Year -
Yes, I am interested in your procedure when you get time. Looks like we are using Windows Business - but I don't expect the procedure building being different.I'm also curious how you built the ISO with XML profile.
TIA
You can inject an XML into the ISO before you burn it - use it...
or if using USB media - it's just another file on the stick.Okay - It may be to much of a Monday for me today.. Tired from travel and tired of the WTabsoluteF (the two knuckle heads are having a VR-Minecraft and Pikachu conversation in the other room that is annoying.
I think injecting the XML into the ISO is one thing - and yea do-able - I'll go back to read that later. It maybe a case of crossing thoughts between the ISO (image) and the IMAGE process used to built / rebuilt a device. Which is a totally different IMAGE process / object.
On a new device - we will OEM install Win10 (and Chrome, Updates, MitelConnect, VPN client, etc) and then IMAGE it with Macrium Reflect. Once that is done - I don't know that you can inject the needed XML file as it in a different 'state'.
