@jaredbusch said in 365 have I been pwned script:

@kelly said in 365 have I been pwned script:

@jaredbusch said in 365 have I been pwned script:

@stuartjordan said in 365 have I been pwned script:

@jaredbusch said in 365 have I been pwned script:

The code he posted must assume something because it will not run as is for me.

Someone said their powershell wasn't updated and soon as they updated it worked?
I take it this is a single tenant your are trying it on? there was 2 scripts on that page I believe.

Windows 10 1803, with whatever powershell is default.

Yes, I was using single tenant. But it pukes on the first command.

Do you have the O365 modules loaded?

You are supposed to save the script into VSCode and execute it.

So I have no environment loaded.

It has been a little while since I've managed O365 with Powershell, and I don't have a tenant right now, so I can't test it, but when I last used it if you didn't load the Azure/O365 modules you wouldn't have access to most of the commands used in the script.

@thwr said in What Are You Doing Right Now:

Two hours of unboxing. Cute white boxes. All have funny chars printed on them: ES-16-XG, ES-48-LITE, ES-8-150W, ER-Infinity, ER-4, UAC-AP-PRO, ...

Let the fun begin!

@travisdh1 said in 365 have I been pwned script:

@kelly said in 365 have I been pwned script:

@jaredbusch said in 365 have I been pwned script:

@kelly said in 365 have I been pwned script:

@jaredbusch said in 365 have I been pwned script:

@stuartjordan said in 365 have I been pwned script:

@jaredbusch said in 365 have I been pwned script:

The code he posted must assume something because it will not run as is for me.

Someone said their powershell wasn't updated and soon as they updated it worked?
I take it this is a single tenant your are trying it on? there was 2 scripts on that page I believe.

Windows 10 1803, with whatever powershell is default.

Yes, I was using single tenant. But it pukes on the first command.

Do you have the O365 modules loaded?

You are supposed to save the script into VSCode and execute it.

So I have no environment loaded.

It has been a little while since I've managed O365 with Powershell, and I don't have a tenant right now, so I can't test it, but when I last used it if you didn't load the Azure/O365 modules you wouldn't have access to most of the commands used in the script.

The script doesn't load the module?

Unfortunately not. It may be that he is an O365 admin and can't imagine someone not loading it in their profile. I don't know.

Still stuck on Stellaris. I have never had a game rough me up so much and keep me coming back. Not even Imperialism had this much fun combined with handing my head to me.

@kris_k said in Ms licensing for a windows jump server:

@scottalanmiller The reason for having a jump server not connected to AD is to reduce the attack surface if the jump server gets compromised.

You're actually increasing the attack surface of the RDS server by having the accounts local to the server instead of on the AD server. You're increasing the attack surface of the AD server by allowing the RDS server on the edge. This might seem like a splitting of hairs, but if you have a proper DMZ and your AD server is properly isolated and secured it is a reasonable exposure. If it is AD joined the accounts are on the AD server and there is no additional access granted. However if they are local there is the potential of having additional accounts compromised aside from the one that was used for the initial access. Does that make sense?

The reality is that blockchain is not going away. It is going to fundamentally alter a significant number of technology driven industries. I doubt that cryptocurrencies are going to die either. They might be legislated into the shadows, but that cat is out of the bag.

Only 500 some odd days until Win 7 is out of support.

Valerian and the City of a Thousand Planets. Nothing amazing, but I didn't feel like my time was wasted. I don't have terribly high standards when it comes to SciFi that doesn't break its own rules.

If you qualify for non profit pricing through something like techsoup you might not have to look at the bottom of the price/performance ratio (MSRP-wise).

Just got home from celebrating passing my PMP certification.

@scottalanmiller said in Risks to Geo Blocking:

@kelly said in Risks to Geo Blocking:

Another apparent assumption (correct me if I'm wrong) is that Geo IP blocking means blocking everything that is not [my country]. I do not advocate for that at all. You take the bad actor states (which for some countries might mean blocking the US), and block them. Your average local business is not going to have to worry about an employee or customer connecting from China, Iran, Russia, etc.

I wasn't assuming that, though maybe people were. That certainly lowers the risk versus broader blocking. And as a customer, I've never been accidentally marked as being in China or Russia, but "not in the US." This has happened both accidentally (they just get it wrong, this gets me in Texas from time to time) and illogically (I'm trying to order something while traveling and can't place the order even though I'm an American, with American payment, shipping to America.)

And my expressed frustration was sourced in the fact that I stated these things above.

@nerdydad said in Non-IT News Thread:

@scottalanmiller said in Non-IT News Thread:

@kelly said in Non-IT News Thread:

Now is the time for someone to create a blockchain based social media system where the end user controls their data and how it is shared.

Interesting idea.

Want to be the next Zukerberg?

"And, as a bonus, our videos don't auto play!"

@scottalanmiller said in Error creating project, XSRF check failed on Jira:

@kelly said in Error creating project, XSRF check failed on Jira:

Just to be clear you're trying to receive SSL traffic on 443 on the external facing connection of your proxy, and then forward it to 8080 on your JIRA server. Is that correct?

Correct. Trying to keep things as simple as possible (while still being secure.) This is not on cloud, it's hosted in colo, so that's a private network entirely that the non-SSL traffic is on, and all inside a single virtual switch on a single box.

Ok, the document you're referencing is for 80 to 8080, not 443 to 8080. I'm trying to remember how you need to set the conf files because I've done this, but it has been awhile.

@momurda said in Gaming - What's everyone playing / hosting / looking to play:

@mlnews Is Tencent supposed to be better?

I don't suppose what Ubisoft has been could be worse. Oh wait, there is EA...

@black3dynamite Has it. The key is that the file copy is a computer policy and the desktop wallpaper is a user policy. Best practices would have you put them into different policies so that you can update the computer policy without having to process everything that hasn't changed in the user policy.

@jaredbusch said in What Are You Doing Right Now:

D&D Night.

I really need to find a replacement to hangouts.

We use Discord. The video sometimes bounces the client, but it is easy, and someone built a Star Wars: Edge of the Empire dice roller bot for it. So we can do initiative tracking and dice rolling right in it. I'm guessing there is something out there that is D&D compatible.

@ccwtech said in Desktop photo for all PC's in the domain:

@kelly said in Desktop photo for all PC's in the domain:

@ccwtech said in Desktop photo for all PC's in the domain:

@kelly said in Desktop photo for all PC's in the domain:

@ccwtech said in Desktop photo for all PC's in the domain:

@dustinb3403 said in Desktop photo for all PC's in the domain:

The easiest way I've found to get a GPO to update, is to one, set it to "update" and in cases like screensavers (backgrounds etc), literally just name the anything else.

"bg.jpg" the new one gets changed to "bg1.jpg" etc.

Trying to do this without the user touching GPO. I'm still fuzzy on how to set the GPO to update?

You only change the file copy GPO. I would have a different file name in your source file like 20180907_info.jpg. That way the GPO will process because it detects a change event. You can have the same destination file.

That would require editing of the GPO that applies the wallpaper.

It depends on how you set it up. My preferred method, and I believe best practice, is that you split your policies. The User policy applies the wallpaper based on <localpath>\picture.jpg. The computer policy copies the wallpaper from <remotepath>\20180907_picture.jpg to <localpath>\picture.jpg. When you need to update the wallpaper you place 2018xxxxx_picture.jpg in <remotepath> and update the policy to the new file name. When the machine reboots or refreshes its policies it copies the file from <remotepath> to <localpath>. When the user logs in the user policy is applied which uses the same file name (because as far as it is concerned nothing changed), but the new wallpaper is loaded because it is a different image.

Does that make sense?

Yes, so I need to point the wallpaper to load it from the computer not the server?

Yes, for the user policy it is the local path on the computer.

@dafyre said in What Are You Currently Reading Outside of Tech:

@kelly said in What Are You Currently Reading Outside of Tech:

@dafyre said in What Are You Currently Reading Outside of Tech:

@kelly said in What Are You Currently Reading Outside of Tech:

I seem to be stuck in a YA fantasy rut right now. Rick Riordan, Alanna of Trebond, and the Sorcerer's Ring. Rick Riordan's is probably the worst of the lot, but I haven't finished the other two series yet.

I really enjoyed Sorcerer's Ring... the whole series is like 17 books, lol. How far in are you? Morgan Rice came up with some quotable stuff in that series.

I quit mid way through the third book. There was too much explaining, Mary-Sue-ing, and too much that stretched credulity for me. It seemed like it had some potential, but I lost interest.

It gets better, I think... I've read the thing through twice. Next time you're looking for a book to read, pick up where you left off and push on through. You can go back to hating it after the 4th book if you still don't like it.

Maybe I'll come back to it after I finish the other books I have checked out on my phone.

Exclaimer is your best bet imo. I've fought the signature fight at several orgs, and the final result each time (been a couple of years so things may have changed) has been that text is ok, but if you want anything more extravagant you need a third party.

@dustinb3403 said in Non-IT News Thread:

@mlnews said in Non-IT News Thread:

Uber leaving markets such as SE Asia as they are losing $1bn a quarter.

I can't begin to understand how a business spends 1-billion a quarter for something as simple as ride-sharing. . .

What kind of opex is occurring here?!

Bribes most likely, but written down as something else.