kevin_lane

orderd the first book just before i go on holiday for the week, the sample read was very funny, really looking forward to reading this!

I'm looking at introducing a new domain controller, and to start the process of moving away from 2016, i know there have been a few issues around authentication for computer accounts and devices being bricked by the introduction of this, and before i start the process, i thought i would come on here and check with the mind hive! We already have other servers where I am running Windows Server 2022 and they are ok, but not serving any actual roles i.e DNS, CA, GC, DHCP, etc but i do have a S2D 5 node cluster running windows server 2022 Datacenter. we have been trying to migrate most of our endpoints to 25H2 however we still have a few on 24H2 and 23H2. which we are moving over. our exchange is 2019 and use entra connect which is on the latest version. Thanks

I thought i would share this script below, i cant take any credit for it as it was provided by Jamf we was in a pickle where by a lot of our pupils where saving items to the desktop from garage band and basically bad house keeping by the pupil, which caused some issues where when the macs wanted to update they couldn't due to not having storage avliable to complete the update. so jamf provided me the script below that basically deletes users from the user directory. hopefully this will help you as it has me, PROTECTED_USERS=("xxxxxxx") this part of the script excludes any admin account / user you have which you don't want the script to run against #!/bin/bash PROTECTED_USERS=("xxxxxxx") LOG_FILE="/var/log/student_cleanup.log" log() { echo "$(date '+%Y-%m-%d %H:%M:%S') - $1" | tee -a "$LOG_FILE" } is_protected() { local user="$1" for protected in "${PROTECTED_USERS[@]}"; do [[ "$user" == "$protected" ]] && return 0 done return 1 } log "========== Cleanup Started ==========" for USER_DIR in /Users/*/; do USERNAME=$(basename "$USER_DIR") if is_protected "$USERNAME"; then log "SKIPPED (protected): $USERNAME" continue fi if who | awk '{print $1}' | grep -q "^${USERNAME}$"; then log "SKIPPED (logged in): $USERNAME" continue fi log "Cleaning: $USERNAME" rm -rf "$USER_DIR/Desktop/"* rm -rf "$USER_DIR/Downloads/"* rm -rf "$USER_DIR/.Trash/"* log "Done: $USERNAME" done log "========== Cleanup Finished =========="

14 April 2003 16:04:24

@AlphamaleZed Tbf that is my next task but I feel it’s going to be some sort of scripting that needs to happen, keep me informed if you find something and vice versa

Strange we have over 30 Mac mini and 2 of our Music department solely use there Mac’s for delivering lessons Our Mac’s are enrolled in Jamf and apply our background image, which I did have to get Jamf to get as wasn’t the easy things to deploy. our smb shares are mapped via jamf Aswell if your having issues common things to look for Time DNS Computer Account in AD we had issues with the time wondering but since we got our self a Time Server, our red dot of doom has been a thing of the past. also ensuring that your AD computer accounts for the Apple device are in AD are binded ok you shouldn’t have much issues we use our Macs within our Music department, I think the only issues that does seem to be creeping in and it’s not a Mac issue as such but issue with garage band, where by you can’t save directly to a network share you have save to work to the desktop close the application and then move / copy the saved file to there home directory. but it can be done yes you will pull your hair out sometimes, as issue can appear out of nowhere and for no apparent reason. But stick with it, it’s all a learning experience as well, what breaks you makes you stronger lol

Hi all hopefully someone might be able to put me in the right direction. we brought Jamf last year maybe the year before, due to expanding our collective devices and wanting to develop more use of apple products into our network. which is going ok had a few bumps along the journey but getting the hang of *he thinks* we have just recently asked Salamander to integrate our users and classes into ASM (Apple School Manager ) and all went swimmingly well. we have recently brough 60 Ipads and i want to enable Share iPad mode in Jamf, so my next step is to bring the accounts into Jamf - what is the best way ? what have other schools done and what would the DOs and DONTs would do you say

I'm trying to understand how to deploy a simple wallpaper to our fleet of macOS using Jamf School I've managed to deploy a wallpaper to our iPad perfectly fine, however it seems that it's not the case when it comes to the MacOS devices, jamf's documentation is saying i need to build a package etc ! for someone can just manage to get around Macs is difficult. within Jamf if i go to Profiles > Overview > select my profile ( Music Wallpaper Settings ) > MacOS Payload > Restrictions >Functionality and look for the Lock Desktop picture - However, when I tick the box it's asking for a Desktop picture path. and under Documents > inventory, I've uploaded the wallpaper i'm just not sure how i deliver this to the Macs any help would be great

Ouch !

yea we have very limited intermitting service, currently on hold

https://www.westpark.derby.sch.uk/information/school/vacancies.php West Park is an 11 – 16 school based in Spondon with 1451 pupils currently on roll. The school prides itself on exceptional pupil achievement, dynamic teaching and learning and excellent behavior and engagement. We are looking for an individual who has both IT Technician experience and website development skills to support our current external website whilst providing various IT support to pupils and staff. Experience working in a school environment is preferable but is not essential. The IT Support department consists of 1 Network Manager and 2 Technicians that look after a wide range of equipment within the school supporting over 180 staff members and 1451 pupils. Within the role you will be expected to have experience using the following:  HTML  CCS  JavaScript  PHP  FileZilla / WinSCP  Azure Web Applications & App Services  Hardware troubleshooting  Basic Networking You will also be responsible for supporting the ICT Systems Network Manager as well as updating social media channels. Further information about the school and the post is available on the school’s website at: https://www.westpark.derby.sch.uk/information/school/vacancies.php Application forms should be completed and submitted online together with a supporting letter. The school is committed to safeguarding and promoting the welfare of children and young people and this position is subject to an Enhanced Disclosure check under the Rehabilitation of Offenders Act 1974. All applicants must be able to provide documentation to prove their right to work in the UK. We currently undertake social media backgrounds as part of the recruitment process, please opt out if you wish to do so. Closing date for applications: Thursday 11th September at 9am

We use peasoup and have used them for about 4 years + really good support in regards to your file back up if you have guest file support turned on you can mount the backed up vm and browse the guest files which gives you access to files you might need. is this the sort of thing your looking for ?

@PrimaryNetMan yea I've just downloaded the client and installed it in one of our ICT Rooms, just to test, I'm looking also looking at it from a path management solution. the detail on the patching / cve and the auto healing etc I've yet to try the LAN scanner, I've use ping castle and I like it but I feel its a bit clunky - great product though would you say you use roboshaow often? how far are you try using it as like you main soc for example ?

@mdking thanks for the reply, how long have you been using the product for ? what systems have you integrated with it? do you have any costings

Yea….well we had a meeting with there ceo Tim and was explaining about the products. He was saying basically that they have alot of customers in the states and have been shifting the focus to the UK they have been going I think he said 5/6 years and they are trying to now align with ncsc and cyber essential plus, he was saying that they working on producing reports to help indicate where this has been met within there product, which i thought was quite good. And they are on the ncsc list for new tech companies I know there are alot of companies out there but from what he was saying and what other companies I have seen over the year i think these could be pretty good again just my opinion. He has quoted me around 20 pence per Device. Interface is pretty slick esp from a high level overview

Just wondering if anyone has heard of roboshadow https://www.roboshadow.com/ And any thoughts if any good and bad

has one heard of or used Roboshadow for the security vulnerability assessment / scanner / internal pen test etc

Due to this not being in production i decided to run the powershell script just to give you some back ground its a 5 node S2D cluster that is on a 3 mirror, the nodes (host) evicted the vms as predicted, and then when brought back online the cluster then moved them back whilst vm was moving back and forth access was to the vms was maintained and no errors occurred.

Without going and powering yanking the server to test, I was wondering if there was another way of testing my S2D cluster, if i did this Suspend-ClusterNode -Name "NodeName" -Drain and then Resume-ClusterNode -Name "NodeName" -Failback Immediate would you say this is a safe option

Yea it does get a bit messy when restoring but aslong as you can access the vhds then could be worth a go

Can’t say I have might be worth exporting them / move to a different host and then nuking the server and rebuild and try again is it part of a cluster ?

Whipped (ice cream)

Polish

We have a 5 node hyper v S2D cluster in a mirror setup with no hardware raid feels risky seems to be ok for now slowly moving vms over but I also have ssd disks on standby should something happen down the line The OS are hardware raid obviously

Toxic