When local, can you run "Enable-PSRemoting -Force" to make sure something didn't inadvertently turn off remote PS execution.
Try this also, when you are local:
"Get-PSSessionConfiguration | Format-Table -Property Name, Permission -Auto"
See what it says about your permissions.
and lastly, is WinRM running? or need to be restarted?
I like this too, especially since I've had that graphic (the one they reference on their site) on the wall in our Lab for many years!
@JaredBusch said in Make Simple User Passwords:
@scottalanmiller said in Make Simple User Passwords:
Ever need to make passwords for users and, let's face it, in the real world a lot of customers demand some pretty silly simply passwords. Using password generators often results in passwords that customers will not (and maybe cannot) use. A ridiculous situation, obviously, but it is reality. Passwords are simply difficult to often pass on to someone.
When generating temporary passwords, having something super strong is rarely very important. But avoiding something too hard to be used is needed. But just making up something non-random or even non-unique is really bad.
What's a compromise?
Yup, here is reality. Sometimes children's tools just make more sense when, well, you can draw your own conclusions.
I use CHBS
http://correcthorsebatterystaple.net/
We use:
http://pwgen-win.sourceforge.net/
and set it to use four words with an upper and a special. People love it. We started using it long before the online tools came around and we still use it. I grab new word lists every so often because I can and it makes me feel good.
@JaredBusch said in Cost per user:
@JasGot said in Cost per user:
When customers ask, and want me to shoot from the hip, I give them the 1% rule. The look on their face will tell you a lot about your future relationship!
That number came from an actual formal study. I used to have a link to the source.
I've used that number many times as a minimum. If you are not looking to spend at least that on your IT infrastructure, I don't want your business.
I often wish I had the opportunity to do the same. Kudos to you for being able to. I would say most of our customer base is between .7 and .9 %
I do use that number to justify turning away business that I know will be more trouble than they are are worth. It helps me sleep at night. 
Years ago (well, not that many years ago). There was an old rule of thumb around my town for IT budgets regarding "general business". It was basically this: Companies should spend 1 percent of their annual revenue on IT (Staff, Hardware, Software, external services).
Over thirty years in this industry has shown me that if a company does not spend 1% of annual revenue, they are most certainly in the "limping SMB" arena as Scott put it.
@scottalanmiller said in Cost per user:
...that kind of thinking would keep companies from becoming big. IT isn't to "keep companies running", it's a massive component of competitive advantage. Those that see IT purely as a requirement and a cost center are pretty much relegated to being limping SMBs.
If they spend over 1%, you can guess a couple of things: they value IT, and they are trying to be competitive.
I often find myself thinking "if I ever wanted to work for someone else (and give up all the "business owner" perks like 20 hour days and no family time) , the company would have to follow the 1% rule and have an annual revenue greater than 50 mil. I could have a nice salary, hire some young gurus and meet all of their IT requirements to keep them on top of the guy down the street."
Now, I know that wouldn't work in every case, but I could show you 400 companies today that are under the 1% rule, and are "limping SMBs".
We also have a few 100 mil customers that spend 5% on IT. I have to tell you, they are a blast to work for. (Even if we only get 1/3 of that 5% !)
When customers ask, and want me to shoot from the hip, I give them the 1% rule. The look on their face will tell you a lot about your future relationship!
@JaredBusch said in Questions on UDP, Guest WiFi, LAN, and Unifi.:
You have the VLAN using the same subnet as the untagged traffic?
Not my VLAN and I haven't had a chance to look at it.
Based on the DHCP info I have seen acquired by the phones, I would have to say the VLAN-100 is on another subnet and has it's own DHCP server. The Mitel 5000 and one other Phone system device (Xarios?) have IPs on the business LAN, the phones do not. I think those two devices have IPs on my LAN because they need internet access.
I'm hopeful I can move forward is if the phones weren't there at all....... I don't think there'll be any toe stepping.
We've been presented with a challenge I need to gain some more knowledge on before I can accomplish it.
I'd like to dummy up through discussion, without being berated or told something is wrong. Instead of a pessimistic discussion, I would like an optimistic discussion with the conversation leading to a solution and new knowledge, not regret.
I have been asked to prepare for another vendor to add an "audio to WiFi" media server to the open Guest WiFi on the LAN.
This is the device being added:
Listen Tech LW-100P-02 LISTEN EVERYWHERE 2 CHANNEL SERVER
and the IT info is in this document:
https://www.listentech.com/wp-content/uploads/2018/10/LTN0025-Network-Config-Guide-for-LE-compressed.pdf
I readily admit I am not a master at VLAN or Guest Isolation, but I am more than eager to reach expert levels. Which is why I agreed to handle the IT side of this project.
Existing LAN:
The Sonicwall is Providing DHCP services to the computers, printers, APs and Guests, and this can be moved to another device or server.
UniFi APs are providing 4 SSIDs and two of them can be removed.
The phones use VLAN-100 to get to their IP and to reach the Mitel 5000 Phone controller
The Listen tech devices broadcast on UDP and I was told they work with IGMPv1.
I need to get the Listentech devices visible on the guest wifi, which has guest policies applied in UniFi.
As I understand the UniFi guest policies, they isolate the client to the gateway only. I think this may prevent the wifi clients from finding and streaming from the Listen Tech device.
The Listentech equipment is not onsite yet, so I don't know if it will work as is. I do want to understand what I may be facing, so I can make sure I understand where I should look for issues if there are any.
Also, should I be dumping Guest Policies from UniFi and moving to VLANs? I'll need to ask some very pointed questions of the customer to know if this is even possible with their current method of operating.
I understand you may have questions before you have advice, so please ask away.
Thanks
We prepend our bat and cmd batch files with this code to ensure we are elevated. This code will allow a batch file to elevate itself!
Credit and a newer version here:
https://stackoverflow.com/questions/7044985/how-can-i-auto-elevate-my-batch-file-so-that-it-requests-from-uac-administrator/25238418
::::::::::::::::::::::::::::::::::::::::::::
:: Automatically check & get admin rights V2
::::::::::::::::::::::::::::::::::::::::::::
@echo off
CLS
ECHO.
ECHO =============================
ECHO Running Admin shell
ECHO =============================
:init
setlocal DisableDelayedExpansion
set "batchPath=%~0"
for %%k in (%0) do set batchName=%%~nk
set "vbsGetPrivileges=%temp%\OEgetPriv_%batchName%.vbs"
setlocal EnableDelayedExpansion
:checkPrivileges
NET FILE 1>NUL 2>NUL
if '%errorlevel%' == '0' ( goto gotPrivileges ) else ( goto getPrivileges )
:getPrivileges
if '%1'=='ELEV' (echo ELEV & shift /1 & goto gotPrivileges)
ECHO.
ECHO **************************************
ECHO Invoking UAC for Privilege Escalation
ECHO **************************************
ECHO Set UAC = CreateObject^("Shell.Application"^) > "%vbsGetPrivileges%"
ECHO args = "ELEV " >> "%vbsGetPrivileges%"
ECHO For Each strArg in WScript.Arguments >> "%vbsGetPrivileges%"
ECHO args = args ^& strArg ^& " " >> "%vbsGetPrivileges%"
ECHO Next >> "%vbsGetPrivileges%"
ECHO UAC.ShellExecute "!batchPath!", args, "", "runas", 1 >> "%vbsGetPrivileges%"
"%SystemRoot%\System32\WScript.exe" "%vbsGetPrivileges%" %*
exit /B
:gotPrivileges
setlocal & pushd .
cd /d %~dp0
if '%1'=='ELEV' (del "%vbsGetPrivileges%" 1>nul 2>nul & shift /1)
::::::::::::::::::::::::::::
::START
::::::::::::::::::::::::::::
REM Run shell as admin (example) - put here code as you like
ECHO %batchName% Arguments: %1 %2 %3 %4 %5 %6 %7 %8 %9
::::::::::::::::::::::::::::
::Begin Your Code here
::::::::::::::::::::::::::::
@Romo said in Robocopy script not running from task scheduler:
It does run without trouble when running directly though, so not sure about a syntax error.
Is the server it is running on a DC?
Does it fail to run if logged in or not logged in?
@Romo said in Robocopy script not running from task scheduler:
@JasGot Same account currently as the user running the script manually. Also forgot to mention it had been working before without adding net use and the UNC until someone else tried to make a modification.
Ah! A helper!
Must be a syntax error early in the file.
@Romo said in Robocopy script not running from task scheduler:
Arguments: -Execution Policy Unrestricted -File "C:\folder\script.ps1"
Is the path to the remote server available to the account the script is running under? ie; the system account or another? You may have to net use the path with credentials in the script. Just my first guess.....
@scottalanmiller said in Anyone ever use Univerge Blue by NEC for SIP:
Kickbacks, I bet.
Yes. He was very up front about it too. I don't care if the price and service is solid.
@scottalanmiller said in Anyone ever use Univerge Blue by NEC for SIP:
Is there a specific feature of the Blue that you felt made it stand out
No. First time going straight SIP. Didn't know Univerge was UC. Hardware vendor suggested Univerge.
I wanted Twillio, but they were unable to talk to me at my level. We've done a lot of VoIP, but always UC. I have a new customer that just needs 6 inbound with 6 more DIDs. Small place.
Thanks for the input. I'll pass on them. Do you feel the same way about their phone PBX hardware?
I am being offered Univerge Blue as an option to offer my customers. Anyone have any experience with them?
We use ghost adapters to allow EDID hi res with no head attached, I wonder if there is one that forces 640x480? I'll search around...
@m4rtin-j4mes said in What should I consider, while I am planning to hire Website Developer?:
I know only some points, likewise developer experienced, cost of development and others.
What kind of website do you want/need? do you have any content management needs? Electronic Data Interchange (EDI) needs? E-commerce needs? Do you want the look and feel of a blog or a store or a completely unique interface?
I'm sure there are more questions that will help us... help you, but this will get the conversation on the right road.
@JasGot said in Script to Clean up Windows 10 Start Menu:
Only if you want to play, else I'll do that this weekend. I was just hoping someone would say they have already experimented with it.
I'll report back with my findings.....
I'm reporting back. I spent the day upgrading from Windows 7 Pro to Windows 10 Pro, testing with Win10crAPPRemover.ps1 in a variety of ways. Rinse, Repeat, many times with many different variations of approach.
I can say definitively that the Start Menu items and Tiles come with the first Windows 10 login even if you have an already existing profile. Meaning, I can now reliably achieve my goal of a clean Windows 10 interface with an existing profile.
Here are my reproducible steps to achieve my goal:
Log in as another existing (but not yet logged in under windows 10) account and you will see your DeCrapped GUI.
This means I can do an in-place upgrade from Win7 Pro to Win10 Pro and de appify the existing user accounts as long as I de appify the computer before those already existing accounts log in to the Window 10 Pro install.
I did not test with any version other than Pro. I don't care about Home and Enterprise is de-appified from the OOBE.
If you feel the need to argue about what I have done, please ask for clarification before doing so, I'm sure I have left room in my words for misunderstanding.
This experiment is a success and it allows me to achieve my goal with great reliability.
@Dashrender said in Script to Clean up Windows 10 Start Menu:
I can probably spin up a machine tomorrow and test it - skip audit mode, make the normal first user, run the script.. make another local user.. reboot log in as that new user and see.
Only if you want to play, else I'll do that this weekend. I was just hoping someone would say they have already experimented with it.
I'll report back with my findings.....