CHiLL

I've played Borderlands 1 and now I'm into Borderlands 2. Not as fun as I remember, but they did come out a while ago. Will still finish it and then play the Pre-Sequel.

Here's my finished script: <#02/05/2019 - Script to create a random password for Cover and Visitor accounts, to be scheduled daily for a 'password of the day' function. To create an encrypted password file that can be called without passing the password via plain text, use this command: Note: It appears that the hashed password only works on the machine it was generated on. If you need to run the script on another machine, a new file will need re-creating on that machine. #$Password = Read-Host "Enter Password" -AsSecureString | ConvertFrom-SecureString | Out-File -FilePath "\.txt"#> ############################################################################################################################################################################################ #Variables ############################################################################################################################################################################################ $Password = (Get-Content -Path "" | ConvertTo-SecureString) $Credentials = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList $Username, $Password $CSVFolder = 'D:\Scripts' $CSVFile = $CSVFolder + "\TemporaryPasswords.csv" $AnimalText = 'D:\Scripts\List of Animals.txt' $SpecialCharacterText = 'D:\Scripts\List of Special Characters.txt' #Specify accounts that will have their passwords reset $Users = @('Cover','Cover1','Cover2','Visitor1','Visitor2','Visitor3','Visitor4','Visitor5') #Specify expiry date $Expiry = Get-Date -Hour 16 -Minute 00 -Second 00 #Define email parameters $EmailParams = @{ To = "" From = "" Subject = "Passwords of the Day" Body = "Please find attached today's new passwords of the day. `n `n Note: These accounts will be automatically disabled at 4pm today." Attachments = $CSVFile SMTPServer = "smtp.office365.com" Port = "587" Credential = $Credential} ############################################################################################################################################################################################ #Actions ############################################################################################################################################################################################ #Create/Overwrite CSV that will be populated with the new passwords New-Item -Path $CSVFolder -ItemType File -Name 'TemporaryPasswords.csv' -Value '"Username","Password"' -Force Add-Content -Path $CSVFile -Value "`n" #Adds blank line to prevent passwords being joined to the first line of the CSV ForEach ($User in $Users) { #Obtain random sections for the password $Animal = Get-Random -InputObject (Get-Content $AnimalText) $Number = Get-Random -Minimum 100 -Maximum 999 $SpecialCharacter = Get-Random -InputObject (Get-Content $SpecialCharacterText) #Join the sections together to create one password string $RandomPasswordText = $Animal + $Number + $SpecialCharacter #Convert new password to a secure string $RandomPassword = ConvertTo-SecureString -String $RandomPasswordText -AsPlainText -Force #Add the password into the CSV file Add-Content -Path $CSVFile -Value "$User, $RandomPasswordText" #Set AD account password to newly created password Set-ADAccountPassword -Identity $User -Reset -NewPassword $RandomPassword #Set account expiry date to 4pm that day. Set-ADUser -Identity $User -AccountExpirationDate $Expiry} #Send email with password CSV as an attachment Send-MailMessage @emailParams -UseSsl -Verbose Write-Output 'Email sent.'

As soon as I posted it and read it back it was obvious! I'm now building the rest of the script to set the password in AD and email the file. This will make life easier for us.

Sorry to hijack this thread, but I've been working on my own script with inspiration from this thread, but I am struggling with the creation of the password in a ForEach loop. I have 2x source text files - One contains a list of animals and another contains a list of special characters. I use these in conjunction with a random three digit number created in Powershell to generate a new password, such as Lion265&. $Animal = Get-Random -InputObject (Get-Content 'D:\Scripts\List of Animals.txt') $Number = Get-Random -Minimum 100 -Maximum 999 $SpecialCharacter = Get-Random -InputObject (Get-Content 'D:\Scripts\List of Special Characters.txt') $Users = @('Cover1','Cover2','Cover3') ForEach ($User in $Users) { #Create random password $RandomPassword = $Animal + $Number + $SpecialCharacter New-Item -Path 'D:\Scripts' -ItemType File -Name "$User.txt" -Value $RandomPassword} This script does generate a random password and creates 3x text files for each user in the array...however the password is the same password in each file. It's as if the $RandomPassword variable isn't being changed in each pass of the ForEach loop. I'm unsure why. Edit: I'm stupid. I have declared the password variables outside of the ForEach loop, so they would be static. Putting them inside the loop would solve the issue.

Thanks for the replies. Our users aren't good with cameras, so the simpler, the better. A DLSR/Bridge camera would be used to take photos from the back of the hall towards the stage. So something that can zoom well and ideally have an auto-focus would be great. I'll take a look into the options suggested so far.

We've been asked by a deputy head to purchase 5x compact digital cameras and 1x good quality camera (probably a bridge camera). The only thing is that I know next to nothing about cameras, so I could do with some help! At present I have not been given any form of budget. I've suggested that this could cost around the £1000 mark for the total price of the six cameras. The reply was 'we'll take it to the head and see'. The only requirements for these cameras are: Photos must be good enough to be published, such as on the website or in the newsletter. The compact cameras need to be used on day trips and the likes. The 'good' camera will be used for special trips or things like awards evening, sports day and other such big school events. Ideally I'd prefer the cameras to have WiFi to transfer the photos to a specific file share on our network. So far I've found: Compact: https://www.currys.co.uk/gbuk/cameras-and-camcorders/digital-cameras/compact-and-bridge-cameras/canon-ixus-190-compact-camera-black-10158364-pdt.html Bridge: https://www.currys.co.uk/gbuk/cameras-and-camcorders/digital-cameras/compact-and-bridge-cameras/canon-powershot-sx540-hs-bridge-camera-black-10142574-pdt.html Would they be good enough, or would I need to purchase some more expensive ones?

Didn't realise that, though our DL360 Gen9 servers aren't supported, so I'm stuck with .NET or Java.

We are using iLO and haven't purchased any licensing for it, we're using the free version. To access the remote console, you need to log into the iLO's web interface and then select Remote Console from the left menu. (Note: I find it best to use Internet Explorer when wanting to use the remote console - IE uses .NET to run the console - Chrome requires Java)

They never changed the ADMX names, but those 2016 ones include all the settings for 2019, 365 and 2016.

Only by removing the associated Appx package from the OS.

This is how we do it: User Configuration > Policies > Administrative Templates > Control Panel > Personalisation Enable screen saver: Enabled Password protect the screen saver: Enabled Screen saver timeout: Enabled - 600 seconds.

The Powershell cmdlets can be used as a new script that can be used during the OSD or as a computer startup script.

The one's posted by @Arthur can be ran against the ISO to create a new modified WIM with the selected items removed. The new WIM can then be deployed via MDT/SCCM.

I have left the store in on my images, it's never caused us problems. It's allowed me to deploy store apps and if required, I can block access to the store app to specific user groups using AppLocker.

We're using VEEAM and VSS, both covering the last ~30 days. We copy our backups to the cloud each term for DR. We could do it more frequently, but the sheer amount of time is takes to upload multiple TBs, it makes it impractical. So our DR plan is that in a worst case scenario that we recover to up to 3/4 months prior. Not ideal, but it's better than nothing. We have just upgraded our Internet connection to 200/200, so I'll be reevaluating this to see if it's more feasible to do it monthly over a weekend.

Is that the merge processing option? Would't that cause the laptop to hang before displaying the login screen? Or is that something else? Ah, thanks for clarifying that. I thought I'd pressed the option for the OS when I created the thread. Maybe not. The client is Windows 10 Education 1709 x64 and the server is 2019.

Unfortunately I don't have the disk space on our laptops for that. We replaced the HDDs in our staff laptops with 120GB SSDs last year to increase performance and improve BitLocker encryption times.

It connects without issue every time on-site. It is an issue only when connecting through the VPN. I have just tested applying a GPP to map the H: drive...and it worked! (Though with an approximate 60 second delay AFTER they get to their desktop, so about 90 seconds after they press login) Now...why is this working, but the AD property mapping isn't?

Cheers. I did see that, but that looks like for those that are having complete issues with DNS. Mine is working - mostly. I can access most DNS stuff via FQDN (including the home folder itself). It's just not mapping, whereas the others are. Just as a test, I applied those settings anyway, but unfortunately it yielded the same results.

So after a while of testing, I've finally got Always-On VPN to work. Connecting my testing laptop to a home Wi-Fi and logging on with the domain user allows me to access other mapped drives, such as our staff share. However, our home folder mapping and folder redirection for Documents, Pictures, etc aren't working. We are mapping our home folder via the user's Active Directory account Properties > Profile > Home folder > Connect H: to \\\staffhome$\%username%. A user policy fairly high up in the AD structure redirects the user's Documents, Pictures, Downloads, etc to the same path defined above. After looking at the event logs - there's only one related entry in the Application log: Warning - Event ID 510 - Folder Redirection - The folder redirection policy hasn't been applied. It's been delayed until the next sign-in because the group policy sign-in optimisation is in effect. I have disabled sign-in optimisation for this laptop, but it doesn't fix the issues. When I checked the System logs, I saw a whole bunch of stuff, mainly related to DNS issues. I have saved a custom event log with the selected events in, should anyone want me to send it to them. I'm presuming a lot of those are generated at system boot whilst the VPN is not established. Edit: My gut thinking is that because the user's profile is cached on the laptop...the cached profile is attempting to apply the H:\ drive before the VPN has fully initialised. Though that doesn't explain why Documents, Pictures, etc aren't redirecting, because they're pointed to the FQDN, not the mapped drive.

After spending 5 years on a Dell XPS with decent specs at the time (3rd Gen i7/8GB RAM) - it kept crashing frequently. We managed to wangle a deal with our bursar to let us purchase the components separately and build the machine ourselves to save cash (it was the only way we could get new machines!). Now we're rocking: CPU: AMD Ryzen 7 2700X RAM: 16GB Corsair DDR4 Motherboard: Gigabyte B450M DS3H-CF SSD: Samsung 970 EVO M.2 NVMe 250GB HDD: WD 1TB Went down the AMD route as in general workloads, it out-performs it's more expensive Intel counterparts.

I believe solutions like NetSupport, Impero, etc have a Browser that you install, and as long as the pupil uses that browser, it will log what they do. However if they use another browser, or any other app for that matter, you will not have a track of that activity. Unfortunately that's a limitation of Apple's completely locked down approach to iOS. Companies like NetSupport/Impero simply are not able to have that heavier OS tie in to monitor the system like they can with Windows.

I've been using Papercut for years now. I cannot imagine going back to a non-Papercut solution!

We have OAS disabled on the servers, with a scheduled scan every night. Our clients have OAS enabled and specifically excluded network shares from the scheduled scan.

Our domain administrator account is already specified. If I look at a normal forward DNS record, the owner is set as MACHINENAME$. The Forward and Reverse lookup folders' owner is SYSTEM and inheritance is enabled.